$ rpki-client -vvvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: QRqS95oAqg9LHXNeuMkt9otN/Yv8BfbJsc27HtEgVV8= Subject key identifier: FF:67:2B:85:C2:3B:49:5C:8A:9F:C3:EF:DA:8C:AD:AF:E0:44:DF:49 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0719 Signing time: Tue 22 Sep 2026 21:52:25 +0000 Manifest this update: Tue 22 Sep 2026 21:52:24 +0000 Manifest next update: Tue 29 Sep 2026 21:52:24 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: 9yPHS77csLbyrvv6Rk/Tx+TmGQhQPkOZd/VH3dnUofY=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: Wf0tkeHPs4IB8mfGOri8fMJK0QaqR5URQJU73Sfpr+E=) 3: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: S0fZW2dgUJeGAm9ytfhirRt94xu3NkvG3zNOfvuS6tg=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: w3+aZlQ2RBmGjxz4SlkYvG+q8BQVGDzpFhvPTfzKDVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Sep 22 21:52:24 2026 GMT Not After : Sep 29 21:52:24 2026 GMT Subject: CN=6ab2f898-4f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:51:33:91:ce:b7:ad:6e:86:80:e0:db:52: 56:7a:de:5e:7f:02:a5:33:b4:a9:91:aa:00:ef:3e: 93:00:9b:6b:17:81:b1:cf:ba:b6:5e:ae:6b:7c:1d: cc:a2:3f:99:65:03:28:f6:70:82:db:7f:bd:7c:8b: 9a:0e:d7:82:74:f7:66:84:22:95:ac:3a:52:c0:14: fe:e8:8a:34:2f:40:86:ed:88:91:27:50:99:83:a0: 35:29:98:18:52:c9:12:de:12:24:b5:7b:9d:08:a7: 78:2a:66:fd:8a:8e:1a:81:ca:85:f2:cc:c4:47:25: 65:2b:08:ed:8e:30:ba:89:aa:71:cb:9a:51:e0:99: 55:89:60:c5:db:a6:06:b6:d9:1b:d7:df:91:64:4a: 1d:7b:b6:08:99:11:9a:af:3a:8f:01:a4:a0:a2:3a: 7a:87:57:27:35:07:40:a4:7d:59:17:f8:3d:ad:55: 99:54:81:d3:f9:4d:2d:67:04:19:e0:49:c1:e0:d8: d9:d3:dd:95:7f:eb:5f:b1:0a:5b:14:88:65:7b:f5: 58:80:24:3e:34:c4:d1:61:2a:bd:7e:9b:b5:43:a5: e4:ce:b2:9d:af:80:d9:5e:18:7b:40:9b:23:4a:09: 1c:9e:92:f3:d5:b5:dc:cd:de:ae:91:db:bb:50:27: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:2B:85:C2:3B:49:5C:8A:9F:C3:EF:DA:8C:AD:AF:E0:44:DF:49 X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d4:c5:39:db:3e:3c:a4:6d:af:5d:54:3a:bf:72:dc:dd:2f: e8:62:c1:d5:c4:47:d0:2f:51:b1:77:74:96:78:45:c3:af:f5: ed:9d:6c:ed:75:14:0f:cf:38:0a:4f:0c:c3:61:95:af:37:20: f9:78:94:cb:06:38:ee:16:d0:24:1b:68:d9:91:f9:78:28:0f: b5:07:9d:c1:90:3d:c0:dc:71:ac:75:a6:01:24:11:e1:4b:30: 91:98:b1:59:23:19:09:a2:6c:67:19:92:d8:7d:ec:cf:e1:d2: e8:33:98:ab:ce:28:22:3d:02:f6:c4:4a:39:db:fe:28:23:23: ea:1e:3c:21:94:33:29:95:6b:e9:2a:54:91:e7:55:c5:71:2d: b5:cd:0b:eb:a9:27:bc:c2:d6:0f:45:0c:2b:87:02:5e:86:15: 69:ee:24:82:af:d5:65:02:c1:41:e1:c1:ef:1f:a6:ea:02:2e: 30:1f:aa:f7:b6:cd:1a:2e:cf:40:b8:17:be:93:cc:19:e7:df: 33:f7:8d:27:6e:5e:da:67:19:61:9d:c8:21:3d:79:c6:14:a5: 63:74:01:0d:a7:e9:aa:2b:ff:0c:5f:2b:07:11:67:c0:0f:a2: 41:50:f2:33:fa:3d:62:75:55:e3:d8:e6:f6:a8:0f:e8:23:08: d2:55:ae:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjYwOTIyMjE1MjI0WhcNMjYwOTI5MjE1MjI0WjAYMRYwFAYD VQQDEw02YWIyZjg5OC00ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykFRM5HOt61uhoDg21JWet5efwKlM7SpkaoA7z6TAJtrF4Gxz7q2Xq5rfB3M oj+ZZQMo9nCC23+9fIuaDteCdPdmhCKVrDpSwBT+6Io0L0CG7YiRJ1CZg6A1KZgY UskS3hIktXudCKd4Kmb9io4agcqF8szERyVlKwjtjjC6iapxy5pR4JlViWDF26YG ttkb19+RZEode7YImRGarzqPAaSgojp6h1cnNQdApH1ZF/g9rVWZVIHT+U0tZwQZ 4EnB4NjZ092Vf+tfsQpbFIhle/VYgCQ+NMTRYSq9fpu1Q6XkzrKdr4DZXhh7QJsj SgkcnpLz1bXczd6ukdu7UCeT7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9nK4XC O0lcip/D79qMra/gRN9JMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuNTFOds+PKRtr11UOr9y3N0v6GLB1cRH0C9RsXd0lnhFw6/17Z1s7XUUD884 Ck8Mw2GVrzcg+XiUywY47hbQJBto2ZH5eCgPtQedwZA9wNxxrHWmASQR4UswkZix WSMZCaJsZxmS2H3sz+HS6DOYq84oIj0C9sRKOdv+KCMj6h48IZQzKZVr6SpUkedV xXEttc0L66knvMLWD0UMK4cCXoYVae4kgq/VZQLBQeHB7x+m6gIuMB+q97bNGi7P QLgXvpPMGeffM/eNJ25e2mcZYZ3IIT15xhSlY3QBDafpqiv/DF8rBxFnwA+iQVDy M/o9YnVV49jm9qgP6CMI0lWu+A== -----END CERTIFICATE-----Generated at Thu Sep 24 11:34:22 2026 by rpki-client