$ rpki-client -vvvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: 8km0QBptWUZHcHPY+lKQXG0raAfd0VLs047ehywfHEY= Subject key identifier: 94:1F:98:37:03:D9:FA:4A:C2:B7:0F:AD:CC:56:37:F4:E1:62:28:0E Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 027A Signing time: Fri 25 Sep 2026 01:59:11 +0000 Manifest this update: Fri 25 Sep 2026 01:59:11 +0000 Manifest next update: Fri 02 Oct 2026 01:59:11 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: wq4oEq0AWuG1c5irIaoR+dnVf5WhB21N44EbwZOSF1s=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: XrKHKQzHMa1y0uVAA7/pa5YvcBRJFX+HV140KMXuEWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: Sep 25 01:59:11 2026 GMT Not After : Oct 2 01:59:11 2026 GMT Subject: CN=6ab5d56f-a85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:1b:d5:bd:1a:de:74:04:0e:dd:5d:14:8b: 8d:90:d3:fd:4b:2a:c5:1b:cc:3f:59:8e:4f:7b:aa: c6:a9:f0:ac:7e:83:81:25:4d:98:79:64:36:96:b1: eb:3f:0e:df:1d:2e:b4:ea:15:4d:43:02:73:74:da: ca:e6:0d:fd:ae:98:60:e3:34:ed:26:f3:cc:67:4d: 06:e8:2f:67:05:fe:be:5e:1b:59:11:9a:08:d0:f3: 7c:da:2c:b4:d5:9d:81:f2:f5:20:53:c6:86:c5:96: 59:8b:3d:20:bc:10:28:a8:62:eb:a8:c7:17:13:80: 98:3e:4c:16:cf:1d:4a:6a:69:01:3f:49:f5:fe:3b: fc:d8:12:80:f6:11:cc:97:79:93:9b:9b:45:15:43: 56:4e:0e:02:5d:ee:3d:84:04:69:40:c7:98:b4:a5: 57:59:10:80:42:11:c0:f7:c8:d9:7c:3f:bb:9e:1b: 10:d7:93:db:25:b4:06:11:f9:45:3b:f9:27:bc:b0: 1f:49:10:2d:a9:9c:08:fc:a2:5e:3a:67:52:50:8d: f3:6f:70:3d:a8:cc:87:d2:be:e3:7c:71:0d:e7:9a: d7:a0:11:77:3e:fe:6d:fe:3a:bb:5e:70:80:e8:b1: 5a:7d:34:23:b3:5f:dc:9f:e9:22:64:80:a9:34:e6: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:98:37:03:D9:FA:4A:C2:B7:0F:AD:CC:56:37:F4:E1:62:28:0E X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:f3:58:74:4d:4c:b0:9f:e8:ff:7d:2d:80:c1:2f:dc:84:03: 70:10:e1:bc:7f:d6:20:1c:cb:41:40:a9:8a:4d:57:24:dd:c0: 32:d8:d5:5d:cf:72:8e:cd:6d:44:92:5b:39:c3:fa:50:f9:76: 50:25:2d:fd:d2:30:e7:6c:2a:5e:29:80:b9:08:06:49:ea:a2: b3:10:aa:ac:dd:cf:48:f5:92:e1:9b:5e:f1:e6:26:40:11:8a: d1:21:87:af:99:42:86:41:e8:c9:76:b6:c6:76:72:26:64:ce: a6:6f:e8:b6:71:ff:1b:af:73:b1:65:34:ae:b0:c5:ab:2f:b6: 92:06:6d:5d:d6:fb:cf:18:c2:4a:92:d8:35:16:d3:1b:d5:78: c7:68:ab:71:92:6a:33:0c:72:ab:f4:62:cd:81:30:0c:89:ed: 5d:12:34:df:4a:1e:fe:2e:1a:ff:56:80:d8:67:65:14:22:55: 32:dd:ec:b4:a6:ef:9c:3f:24:dc:fe:57:94:e5:52:47:3e:c9: 85:e8:86:72:1a:4a:7e:4e:b2:75:56:bf:29:db:33:3e:f5:6a: dc:5c:d9:a1:c4:85:f4:7d:52:0a:a0:49:88:76:b4:93:ff:93: 4a:1e:31:5c:9f:b4:74:dc:2a:8f:fe:cb:56:ec:69:e2:4c:70: 67:16:b3:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjYwOTI1MDE1OTExWhcNMjYxMDAyMDE1OTExWjAYMRYwFAYD VQQDEw02YWI1ZDU2Zi1hODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Eb1b0a3nQEDt1dFIuNkNP9SyrFG8w/WY5Pe6rGqfCsfoOBJU2YeWQ2lrHr Pw7fHS606hVNQwJzdNrK5g39rphg4zTtJvPMZ00G6C9nBf6+XhtZEZoI0PN82iy0 1Z2B8vUgU8aGxZZZiz0gvBAoqGLrqMcXE4CYPkwWzx1KamkBP0n1/jv82BKA9hHM l3mTm5tFFUNWTg4CXe49hARpQMeYtKVXWRCAQhHA98jZfD+7nhsQ15PbJbQGEflF O/knvLAfSRAtqZwI/KJeOmdSUI3zb3A9qMyH0r7jfHEN55rXoBF3Pv5t/jq7XnCA 6LFafTQjs1/cn+kiZICpNOYVfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQfmDcD 2fpKwrcPrcxWN/ThYigOMB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy/NYdE1MsJ/o/30tgMEv3IQDcBDhvH/WIBzLQUCpik1XJN3AMtjVXc9yjs1t RJJbOcP6UPl2UCUt/dIw52wqXimAuQgGSeqisxCqrN3PSPWS4Zte8eYmQBGK0SGH r5lChkHoyXa2xnZyJmTOpm/otnH/G69zsWU0rrDFqy+2kgZtXdb7zxjCSpLYNRbT G9V4x2ircZJqMwxyq/RizYEwDIntXRI030oe/i4a/1aA2GdlFCJVMt3stKbvnD8k 3P5XlOVSRz7JheiGchpKfk6ydVa/KdszPvVq3FzZocSF9H1SCqBJiHa0k/+TSh4x XJ+0dNwqj/7LVuxp4kxwZxaz4Q== -----END CERTIFICATE-----Generated at Sat Sep 26 01:23:10 2026 by rpki-client