$ rpki-client -vvvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: +9S6tBi74Z+s7ihOkmzR9bE4/k5YiUFs0dtsK27bckI= Subject key identifier: 58:A4:20:1E:8E:F2:77:B7:3D:FA:6C:BA:C0:90:EB:AE:B4:7F:AA:68 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0231 Signing time: Fri 25 Sep 2026 02:47:50 +0000 Manifest this update: Fri 25 Sep 2026 02:47:49 +0000 Manifest next update: Fri 02 Oct 2026 02:47:49 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: vcf4Jr0MmaRDg95xDAm9hSxUKenlR5LaTcjH5rfVHcs=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=) 3: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: vugsK16sJjvSr8OK0LSYKyoQkwn8bb1O/z7sIhYr5Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Sep 25 02:47:49 2026 GMT Not After : Oct 2 02:47:49 2026 GMT Subject: CN=6ab5e0d5-0484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:49:b7:e9:14:eb:7e:4f:ce:87:5f:9d:a4: e3:5c:ae:12:2f:44:94:aa:bd:74:40:91:ed:ba:81: b0:7a:41:20:50:f0:f6:76:be:1f:5d:fc:d9:21:01: 82:31:18:4d:df:d2:79:cb:26:16:fd:f8:20:21:a1: d2:32:99:fb:9d:22:96:83:52:2f:65:de:93:c4:60: c5:ae:bd:9c:41:41:24:0e:e9:af:b1:78:98:18:07: de:8a:ae:cb:49:e0:a6:f3:93:f6:57:b1:db:16:4b: f9:34:28:22:40:87:71:c2:3f:aa:b1:ec:ec:dc:d7: fd:06:bb:c6:3f:66:09:eb:2d:cd:49:0d:fe:25:63: 27:5d:3a:5c:eb:86:69:59:a3:22:f8:08:c6:03:c9: 10:e3:06:4a:a4:c3:37:81:69:8a:d0:7e:92:b9:e7: 7b:4a:1f:36:79:ea:7c:8d:97:47:7d:f4:5a:69:33: b3:59:14:ea:29:a2:86:c4:b1:28:85:d8:c5:e0:11: b6:34:19:c3:dc:c4:b4:49:ff:d5:e4:a4:49:df:b5: b6:f0:ad:21:58:b7:8b:9b:53:fa:4b:ef:08:24:bb: 17:8f:e8:e9:db:e0:95:a1:9b:7d:29:42:40:64:57: dd:94:cd:d5:fb:fb:f8:79:c1:91:d7:a6:c3:db:ad: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A4:20:1E:8E:F2:77:B7:3D:FA:6C:BA:C0:90:EB:AE:B4:7F:AA:68 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:59:48:98:9e:56:96:3e:8a:64:e9:73:13:3b:92:3d:b5:b1: 3f:2d:62:21:d3:75:67:7d:56:fb:1c:81:f4:fa:03:50:fd:e7: f9:99:7b:ec:a4:e1:dd:a1:e7:c8:f6:9c:2c:24:1b:fa:6c:b3: bb:5b:2e:18:31:4b:43:78:88:8c:ba:59:4e:a6:46:60:b5:25: 82:4e:fd:e8:34:1c:81:ec:0c:5a:d8:f9:84:9e:4c:2f:03:d4: 21:38:4c:33:f7:80:e7:f0:31:3d:a7:2e:e4:f3:ff:6f:c7:a4: d1:55:25:08:f1:87:16:dc:80:0d:3a:ac:9c:f8:e1:12:9c:9a: 12:d6:2f:fd:b9:b7:75:a5:71:d4:f8:68:9b:b2:e5:98:19:3c: e7:63:5a:bc:e5:16:60:80:24:44:ab:37:6f:35:d7:3b:47:12: 39:5a:52:62:07:6d:ca:ed:d0:ea:25:38:70:8f:a9:61:0d:74: 30:82:6b:01:2f:37:b9:c2:99:dd:d4:03:0e:54:ec:4f:3f:e8: 1f:e2:c0:18:75:94:0b:da:9c:d0:4a:50:8e:df:cf:1d:e1:4c: 29:9c:b6:32:07:0c:c3:5f:38:de:63:0d:d5:e9:58:2d:ec:2f: f9:da:01:41:2c:47:8f:1a:19:0c:f1:63:21:9c:cc:4a:ab:ea: 76:df:29:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYwOTI1MDI0NzQ5WhcNMjYxMDAyMDI0NzQ5WjAYMRYwFAYD VQQDEw02YWI1ZTBkNS0wNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqRJt+kU635PzodfnaTjXK4SL0SUqr10QJHtuoGwekEgUPD2dr4fXfzZIQGC MRhN39J5yyYW/fggIaHSMpn7nSKWg1IvZd6TxGDFrr2cQUEkDumvsXiYGAfeiq7L SeCm85P2V7HbFkv5NCgiQIdxwj+qsezs3Nf9BrvGP2YJ6y3NSQ3+JWMnXTpc64Zp WaMi+AjGA8kQ4wZKpMM3gWmK0H6Sued7Sh82eep8jZdHffRaaTOzWRTqKaKGxLEo hdjF4BG2NBnD3MS0Sf/V5KRJ37W28K0hWLeLm1P6S+8IJLsXj+jp2+CVoZt9KUJA ZFfdlM3V+/v4ecGR16bD263mWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFikIB6O 8ne3PfpsusCQ6660f6poMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJVlImJ5Wlj6KZOlzEzuSPbWxPy1iIdN1Z31W+xyB9PoDUP3n+Zl77KTh3aHn yPacLCQb+myzu1suGDFLQ3iIjLpZTqZGYLUlgk796DQcgewMWtj5hJ5MLwPUIThM M/eA5/AxPacu5PP/b8ek0VUlCPGHFtyADTqsnPjhEpyaEtYv/bm3daVx1Phom7Ll mBk852NavOUWYIAkRKs3bzXXO0cSOVpSYgdtyu3Q6iU4cI+pYQ10MIJrAS83ucKZ 3dQDDlTsTz/oH+LAGHWUC9qc0EpQjt/PHeFMKZy2MgcMw1843mMN1elYLewv+doB QSxHjxoZDPFjIZzMSqvqdt8pPg== -----END CERTIFICATE-----Generated at Sat Sep 26 03:26:58 2026 by rpki-client