$ rpki-client -vvvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: CAwWyBdOMffrgQQ88cVuO9GgQUC/GOdjXqAd6zH4Xgw= Subject key identifier: 83:0B:1D:0D:41:87:BC:BE:11:74:4D:C5:2E:B0:BE:88:A0:1F:EB:FB Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: F5 Signing time: Fri 25 Sep 2026 06:25:15 +0000 Manifest this update: Fri 25 Sep 2026 06:25:14 +0000 Manifest next update: Fri 02 Oct 2026 06:25:14 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: rOTPZMbYnQ/0pRPdo5D7ofsI6rOUt7+tpb3+Swad4a0=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Sep 25 06:25:14 2026 GMT Not After : Oct 2 06:25:14 2026 GMT Subject: CN=6ab613ca-0c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:f2:0a:e2:16:c8:03:5b:1e:0f:6c:d8:c9: e7:f7:74:a7:b9:68:f5:03:ca:ce:d1:c1:c8:96:97: 81:02:fc:5b:2f:ac:6c:dd:11:18:9c:9e:02:3f:7c: d6:40:4d:64:16:60:57:f7:fc:58:3a:ec:26:21:62: 4a:12:ec:47:0c:3d:aa:5d:50:c7:57:96:3c:37:de: 35:f4:bb:2f:20:fc:cc:61:bc:c2:78:6a:4b:52:df: c5:bd:eb:6f:e8:b5:79:d8:86:26:84:73:37:cf:65: 36:cb:89:2c:43:4d:e5:64:ff:b6:21:12:c6:d1:37: 99:e6:6a:e9:aa:5c:ba:93:f9:0a:76:ce:7a:23:81: c0:5a:0e:72:7d:68:69:90:7a:be:b9:17:46:1f:18: 06:52:fa:1d:0f:91:1b:41:0e:63:84:8a:50:53:33: ed:86:6a:b7:09:07:1b:25:85:87:36:f2:b1:12:55: 35:da:02:b0:eb:3f:64:1f:ef:ac:f8:86:dd:87:86: b1:cc:07:13:59:5b:25:9d:50:1a:d8:4b:16:fb:ff: 25:50:08:b8:72:46:ee:82:42:4e:48:9f:7c:ac:80: e3:ca:0a:16:ba:15:be:9f:dc:b1:b1:bf:55:83:e9: 6f:de:d0:e1:eb:28:af:e2:d2:3f:f0:b0:1f:c1:14: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0B:1D:0D:41:87:BC:BE:11:74:4D:C5:2E:B0:BE:88:A0:1F:EB:FB X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cd:a9:ab:03:6d:40:cf:c7:02:ec:c9:5f:bd:88:b5:ba:75: 5d:ee:90:2d:5b:49:78:f8:77:03:f5:9b:08:bf:de:01:21:c0: 28:29:8a:06:88:df:fd:c2:2c:5b:e9:a3:e0:55:61:6d:ad:ee: 45:17:c6:95:ad:db:96:0c:7b:67:c9:a3:74:06:e6:66:35:4e: 6d:46:f8:25:68:cf:1a:87:1c:17:66:5b:88:b8:ad:11:e1:f1: 20:4d:87:b1:68:cb:4d:06:a9:ab:89:5a:d1:33:00:6b:7a:8b: 15:0f:12:87:18:4a:ce:06:bf:b0:ed:d5:f3:f1:25:e0:95:93: 64:96:65:99:ca:ec:fc:94:73:ea:8f:e1:49:1d:1e:99:7d:31: 0e:f2:c0:d3:b1:28:bc:1e:39:0d:3d:a1:fc:ea:6d:6a:39:27: f2:a7:87:69:3a:1d:fb:9d:ff:29:34:d1:f0:5c:b2:d3:1f:e6: 04:a8:cb:6e:1f:55:92:dc:6e:59:29:eb:9c:18:f1:cb:67:df: 9c:98:98:65:46:cf:49:f4:da:99:9c:5d:63:80:70:9d:0b:02: 31:c7:08:af:20:25:99:32:66:60:e8:9d:0b:ae:13:fa:89:33: 2c:42:74:b3:94:a2:6e:e4:b7:4d:7e:ef:94:10:28:96:4a:d0: bd:96:3a:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5QzIxMTAvBgNVBAUTKDc0RENFQUE4NTA2QTJCMzI3Rjg3QTQyRDA3NDFBQzM2 RUVERUVCNDkwHhcNMjYwOTI1MDYyNTE0WhcNMjYxMDAyMDYyNTE0WjAYMRYwFAYD VQQDEw02YWI2MTNjYS0wYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hryCuIWyANbHg9s2Mnn93SnuWj1A8rO0cHIlpeBAvxbL6xs3REYnJ4CP3zW QE1kFmBX9/xYOuwmIWJKEuxHDD2qXVDHV5Y8N9419LsvIPzMYbzCeGpLUt/Fvetv 6LV52IYmhHM3z2U2y4ksQ03lZP+2IRLG0TeZ5mrpqly6k/kKds56I4HAWg5yfWhp kHq+uRdGHxgGUvodD5EbQQ5jhIpQUzPthmq3CQcbJYWHNvKxElU12gKw6z9kH++s +Ibdh4axzAcTWVslnVAa2EsW+/8lUAi4ckbugkJOSJ98rIDjygoWuhW+n9yxsb9V g+lv3tDh6yiv4tI/8LAfwRRT1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMLHQ1B h7y+EXRNxS6wvoigH+v7MB8GA1UdIwQYMBaAFHTc6qhQaisyf4ekLQdBrDbu3utJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDlDMi9FM0EzREVFNjQ4 QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6Sl9oNlF0QjBHc051N2U2 MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDlDMi9FM0EzREVFNjQ4QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6 Sl9oNlF0QjBHc051N2U2MGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhs2pqwNtQM/HAuzJX72Itbp1Xe6QLVtJePh3A/WbCL/eASHAKCmKBojf/cIs W+mj4FVhba3uRRfGla3blgx7Z8mjdAbmZjVObUb4JWjPGoccF2ZbiLitEeHxIE2H sWjLTQapq4la0TMAa3qLFQ8ShxhKzga/sO3V8/El4JWTZJZlmcrs/JRz6o/hSR0e mX0xDvLA07EovB45DT2h/Optajkn8qeHaTod+53/KTTR8Fyy0x/mBKjLbh9Vktxu WSnrnBjxy2ffnJiYZUbPSfTamZxdY4BwnQsCMccIryAlmTJmYOidC64T+okzLEJ0 s5SibuS3TX7vlBAolkrQvZY6Nw== -----END CERTIFICATE-----Generated at Sat Sep 26 14:37:53 2026 by rpki-client