$ rpki-client -vvvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: gUvZ+muD5jREyK6I4n8v2CajAu+dR/FVa170JlZOXBo= Subject key identifier: 68:E3:C1:20:63:78:40:86:E3:E6:F2:F9:EA:EC:22:97:AC:79:35:E6 Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 225A Signing time: Tue 22 Sep 2026 15:48:55 +0000 Manifest this update: Tue 22 Sep 2026 15:48:55 +0000 Manifest next update: Tue 29 Sep 2026 15:48:55 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: 0SLaqk/+MJ5aWJm5GlnAIA36oxLCyZP1E+yvN0LpsQ8=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: rHC43FVwk8ATnBb6I6PL5ONQ1jxQI6Zs5uXakToizww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8805 (0x2265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Sep 22 15:48:55 2026 GMT Not After : Sep 29 15:48:55 2026 GMT Subject: CN=6ab2a367-9b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:11:7c:dd:66:3f:40:ed:bb:ba:3e:bc:42: 20:65:ed:40:91:56:e4:f7:c8:ed:1b:47:71:5e:8f: 3e:29:c9:3b:9f:fd:5b:a4:12:30:93:0f:f3:f4:49: 31:c5:45:83:ec:8b:0c:3d:ba:7a:bd:b8:a9:69:5e: bf:b9:50:99:25:2f:4b:6a:0e:f2:6e:dd:92:db:b6: 62:50:ae:1a:68:36:37:29:8e:ee:4c:16:60:d9:13: f1:cc:d2:48:68:16:fb:f3:55:e3:07:39:07:c4:7b: c2:bf:0c:02:de:e8:ae:e6:32:94:83:95:72:2c:69: bd:bd:48:f8:28:16:0d:31:de:a4:1d:4e:4c:a9:6e: 74:2e:d9:94:10:97:31:d0:51:ba:5d:44:c8:77:3a: 76:74:c7:af:98:fe:fb:57:02:f0:79:b0:45:8d:ca: c7:72:ad:7f:6b:86:f4:43:2f:93:43:03:e7:77:cf: e7:89:31:db:0a:dd:b0:3f:a2:ed:d5:45:03:aa:31: e4:51:d2:b7:c1:5e:15:6a:a5:cd:c5:35:2d:31:c2: ff:d0:77:3c:cb:db:68:41:ca:0f:a5:3b:b2:dd:fa: 5a:1d:26:6c:50:27:68:f9:a4:00:17:b2:50:37:c7: 21:ee:63:71:95:e2:05:df:c0:5b:88:c6:d7:ac:0c: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:C1:20:63:78:40:86:E3:E6:F2:F9:EA:EC:22:97:AC:79:35:E6 X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:00:ad:15:0c:75:0c:da:02:e3:1f:bf:f8:16:c5:94:4c:6c: 68:14:81:ee:1e:bb:86:45:1c:d1:20:4e:ac:d9:77:2f:cc:1b: 92:90:08:16:aa:3d:e3:80:97:5c:7b:54:27:da:43:b8:3d:85: bb:0e:c1:0f:d8:0c:30:b5:67:0a:64:74:6e:8c:df:ec:54:f2: f8:df:90:c2:66:e2:1e:05:41:e7:63:7e:7d:02:32:c6:d4:80: a6:3a:e4:ab:40:e2:fd:49:da:43:d0:c4:40:db:c6:ff:f7:03: 87:15:0f:79:9a:19:2b:7c:36:0f:d3:7e:aa:3f:25:9b:5b:96: 31:29:2c:05:b9:73:eb:01:60:67:17:9d:a9:21:a3:a7:f1:2d: 66:f4:38:7e:f5:c2:f2:1d:bf:98:4d:2b:9a:fa:5e:e6:2f:be: ac:5c:2e:6c:d6:68:8a:d4:60:17:e9:dd:f7:c7:a0:c2:6d:d9: 94:ac:15:6b:85:17:44:03:9f:eb:bd:e3:d7:e3:4f:ed:f4:dc: 8a:f8:ce:01:44:9c:5e:72:bf:ee:f5:83:cb:64:57:c1:30:bd: f8:2f:67:ba:d1:0e:7b:4f:32:df:4c:0e:97:8b:d2:a3:bc:a1: fe:bc:d4:d6:3f:34:85:be:9f:3e:0d:ec:1b:a1:a5:50:e8:3d: be:4e:84:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICImUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjYwOTIyMTU0ODU1WhcNMjYwOTI5MTU0ODU1WjAYMRYwFAYD VQQDEw02YWIyYTM2Ny05YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPwRfN1mP0Dtu7o+vEIgZe1AkVbk98jtG0dxXo8+Kck7n/1bpBIwkw/z9Ekx xUWD7IsMPbp6vbipaV6/uVCZJS9Lag7ybt2S27ZiUK4aaDY3KY7uTBZg2RPxzNJI aBb781XjBzkHxHvCvwwC3uiu5jKUg5VyLGm9vUj4KBYNMd6kHU5MqW50LtmUEJcx 0FG6XUTIdzp2dMevmP77VwLwebBFjcrHcq1/a4b0Qy+TQwPnd8/niTHbCt2wP6Lt 1UUDqjHkUdK3wV4VaqXNxTUtMcL/0Hc8y9toQcoPpTuy3fpaHSZsUCdo+aQAF7JQ N8ch7mNxleIF38BbiMbXrAwSEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjjwSBj eECG4+by+ersIpeseTXmMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJACtFQx1DNoC4x+/+BbFlExsaBSB7h67hkUc0SBOrNl3L8wbkpAIFqo944CX XHtUJ9pDuD2Fuw7BD9gMMLVnCmR0bozf7FTy+N+QwmbiHgVB52N+fQIyxtSApjrk q0Di/UnaQ9DEQNvG//cDhxUPeZoZK3w2D9N+qj8lm1uWMSksBblz6wFgZxedqSGj p/EtZvQ4fvXC8h2/mE0rmvpe5i++rFwubNZoitRgF+nd98egwm3ZlKwVa4UXRAOf 673j1+NP7fTcivjOAUScXnK/7vWDy2RXwTC9+C9nutEOe08y30wOl4vSo7yh/rzU 1j80hb6fPg3sG6GlUOg9vk6EjQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:33:35 2026 by rpki-client