$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: XHxqCnsi9ZQte2TycdmDnuzvLWI9SuKnoJhT7Kge86Q= Subject key identifier: 1C:4A:3A:5F:6C:CD:58:10:64:F1:C6:4E:14:77:82:FF:B5:93:D7:CF Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 088E Signing time: Tue 22 Sep 2026 22:41:49 +0000 Manifest this update: Tue 22 Sep 2026 22:41:48 +0000 Manifest next update: Tue 29 Sep 2026 22:41:48 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: Zvbm5N0ei2Qt+aS1OiAW9i5850UUlaOnNPHBF8hH+qg=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Sep 22 22:41:48 2026 GMT Not After : Sep 29 22:41:48 2026 GMT Subject: CN=6ab3042d-8b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:20:4e:0b:dd:50:fc:87:f8:db:fd:f1:26: 71:d4:bd:d7:cf:43:42:20:28:69:ba:22:a4:3d:56: 12:ec:cd:ca:b6:cc:75:2a:41:1f:41:7e:ac:e7:4c: d8:41:1f:02:ed:00:20:ee:f7:44:78:89:57:3a:a9: a4:1f:11:86:62:2d:08:47:51:b0:68:5d:00:27:94: cf:c7:90:d6:65:d9:d9:5b:d2:db:44:79:f6:ea:0f: 77:26:da:2a:bc:4d:29:76:b1:a4:92:ea:31:e2:e8: 1e:d7:00:f5:36:ad:e0:cc:06:ef:48:9a:28:b7:b9: e9:79:91:f6:69:51:0b:42:1a:18:78:4e:65:97:25: b7:fd:c6:b0:d7:bf:2d:d9:d3:1c:3c:cf:b4:fd:59: 62:12:96:9d:8e:98:62:db:77:37:1b:3e:28:fc:92: 3f:a7:c4:c8:37:fe:c3:d3:2b:e7:fa:05:83:d9:c9: 90:5b:f7:c0:01:55:44:fa:38:cd:5d:8b:88:9c:97: 65:35:af:5a:cd:5f:be:64:5a:b7:44:b2:0d:bc:e7: b2:da:a4:a7:89:62:79:6b:9d:d6:98:c1:1a:e0:18: d2:82:20:2f:6b:f2:74:d7:91:5a:6b:d6:4a:c8:fe: d6:1f:77:35:1a:fe:a3:56:23:08:0d:4c:90:df:dc: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4A:3A:5F:6C:CD:58:10:64:F1:C6:4E:14:77:82:FF:B5:93:D7:CF X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:b2:4b:0a:5b:19:f2:7b:d8:d4:1e:7d:50:b1:35:8b:da:b8: 3c:00:f4:97:6c:73:c2:cc:ff:4f:86:37:95:b9:99:93:c0:86: cf:88:41:92:b7:de:fe:a1:6f:f6:db:be:b8:9c:a4:69:16:9a: 90:ac:6b:90:e9:59:7f:81:02:99:66:6a:10:e2:bd:58:53:12: c7:e6:f5:e9:9b:84:f6:44:37:82:76:c1:4f:07:88:1d:6d:20: a7:8d:fe:a2:13:45:65:4c:4c:82:03:ee:8a:84:38:f2:c3:85: c6:12:79:5f:a0:db:91:f3:32:6a:f2:8f:9c:74:c7:46:4e:d8: d0:49:4e:bc:1a:06:96:e1:3d:c8:c4:2b:cb:19:52:c7:66:b1: 40:a3:e9:41:b1:56:e1:5d:e0:d3:0c:43:3c:d7:01:15:01:70: 3b:b7:09:eb:50:81:1f:0c:02:cc:b7:c7:8d:4e:5b:0e:bc:31: 1e:ca:be:c9:f8:f1:91:95:42:ec:87:a3:4a:91:5b:b0:87:42: b7:f1:b5:6c:ad:37:fe:ac:78:e0:15:c1:29:14:3e:f8:54:c9: 70:7e:63:18:99:93:e6:8c:90:d7:a8:cc:39:34:3c:7b:40:b2: dc:2b:72:25:ef:83:0e:6e:c6:71:60:32:b7:44:af:37:94:8d: 0a:e1:4a:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjYwOTIyMjI0MTQ4WhcNMjYwOTI5MjI0MTQ4WjAYMRYwFAYD VQQDEw02YWIzMDQyZC04YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSUgTgvdUPyH+Nv98SZx1L3Xz0NCIChpuiKkPVYS7M3Ktsx1KkEfQX6s50zY QR8C7QAg7vdEeIlXOqmkHxGGYi0IR1GwaF0AJ5TPx5DWZdnZW9LbRHn26g93Jtoq vE0pdrGkkuox4uge1wD1Nq3gzAbvSJoot7npeZH2aVELQhoYeE5llyW3/caw178t 2dMcPM+0/VliEpadjphi23c3Gz4o/JI/p8TIN/7D0yvn+gWD2cmQW/fAAVVE+jjN XYuInJdlNa9azV++ZFq3RLINvOey2qSniWJ5a53WmMEa4BjSgiAva/J015Faa9ZK yP7WH3c1Gv6jViMIDUyQ39zsxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxKOl9s zVgQZPHGThR3gv+1k9fPMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArbJLClsZ8nvY1B59ULE1i9q4PAD0l2xzwsz/T4Y3lbmZk8CGz4hBkrfe/qFv 9tu+uJykaRaakKxrkOlZf4ECmWZqEOK9WFMSx+b16ZuE9kQ3gnbBTweIHW0gp43+ ohNFZUxMggPuioQ48sOFxhJ5X6DbkfMyavKPnHTHRk7Y0ElOvBoGluE9yMQryxlS x2axQKPpQbFW4V3g0wxDPNcBFQFwO7cJ61CBHwwCzLfHjU5bDrwxHsq+yfjxkZVC 7IejSpFbsIdCt/G1bK03/qx44BXBKRQ++FTJcH5jGJmT5oyQ16jMOTQ8e0Cy3Cty Je+DDm7GcWAyt0SvN5SNCuFKFg== -----END CERTIFICATE-----Generated at Wed Sep 23 08:29:10 2026 by rpki-client