$ rpki-client -vvvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: dqaT7Ac13XbEu5dZtcSmvxxdkdvzufOAFq4pMeOAscA= Subject key identifier: 24:A0:F3:93:D9:AD:9E:2F:5B:24:9B:5E:38:5D:A0:63:65:A6:DA:A4 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0DA1 Signing time: Sat 26 Sep 2026 17:58:43 +0000 Manifest this update: Sat 26 Sep 2026 17:58:42 +0000 Manifest next update: Sat 03 Oct 2026 17:58:42 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: Q4x0TOSwpvmJ0YCKIgdlHzU7vEY9SyD7OV3k2ioJlZI=) 2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=) 3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=) 4: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Sep 26 17:58:42 2026 GMT Not After : Oct 3 17:58:42 2026 GMT Subject: CN=6ab807d3-f2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:b2:fb:89:ba:6d:7b:c0:3c:48:90:59:34: 6c:b4:26:51:36:a5:3c:fc:6d:25:ec:fe:ac:cf:44: b5:b5:f3:bb:dc:58:c6:14:8a:8d:25:9a:b3:b0:ca: 95:9a:52:61:e2:64:0e:80:e9:d2:0c:5f:3c:1c:5b: 12:40:f1:7a:88:f3:75:6f:2c:17:42:e5:ae:f9:ad: 51:bc:4e:03:57:a4:a9:47:a6:62:e7:cf:41:69:31: bc:94:91:56:ba:fc:bb:58:7c:22:d7:66:dd:fe:49: 3f:a5:4a:da:28:03:e4:a5:93:dc:eb:60:9d:5b:2b: b9:54:4f:cb:ea:8d:e2:88:c3:d9:d3:af:0a:c6:c8: c6:18:15:7d:21:e0:e6:5b:aa:77:ea:14:3a:56:22: f6:5e:c0:44:f2:a5:7c:78:d8:39:52:0d:25:c7:4d: f0:f0:9b:ad:e5:86:a8:55:ba:3f:34:dd:1a:1c:43: 6f:ab:9e:42:7d:1b:8a:ac:78:bd:e6:b1:b2:2e:7b: 60:b0:93:70:b6:28:a7:35:fe:51:2c:19:bb:e6:95: c7:ff:37:39:b6:d7:b6:28:a9:9c:04:88:f7:25:bc: ec:9b:54:3d:76:af:bc:1b:9c:4c:f3:9c:c2:4f:6f: d3:d6:fd:d1:39:7a:bb:f0:fa:36:0d:76:c1:78:9b: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:F3:93:D9:AD:9E:2F:5B:24:9B:5E:38:5D:A0:63:65:A6:DA:A4 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d7:96:e3:9d:49:9d:d8:b9:37:09:9f:18:b1:d4:7d:55:88: d8:0d:86:48:6b:47:dd:cf:52:44:59:06:3a:7e:b2:46:f5:b3: 48:5c:3f:98:53:f1:d5:7a:7c:a3:61:2a:8b:03:36:c6:ac:b8: e6:9e:07:4a:1e:7e:06:88:b7:d0:3a:58:5b:ed:56:a1:ae:fd: 03:3d:69:e5:b3:4c:be:8c:23:9c:1f:e6:e9:6d:63:3c:1c:1d: 3d:a8:2b:54:bc:2a:54:9e:e1:9f:69:bd:3a:4d:03:af:01:28: 1f:61:02:15:82:5c:ef:ab:26:92:ec:4d:25:37:ba:25:66:71: 61:08:bf:6c:93:5d:05:db:91:ff:a9:be:c7:c6:54:1a:0a:2b: aa:dd:9d:22:b7:77:91:7f:51:0b:b0:43:a2:21:e0:81:22:76: 15:2b:0e:a0:7d:88:c8:a0:d4:a8:67:9a:74:94:b3:63:24:f3: 31:28:72:10:0f:ad:a1:76:29:aa:f4:ab:c0:ac:8f:ca:2f:dd: 45:94:2f:37:50:b9:f0:b4:d0:6d:5d:94:6f:45:1c:e2:15:90: c7:b6:7c:2c:c0:d8:29:a9:45:d5:e9:c0:4e:92:00:fe:f0:fb: 22:a6:e6:4a:c0:bd:bc:15:c6:b4:08:f9:67:0a:4d:f4:69:61: f1:7a:dd:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjYwOTI2MTc1ODQyWhcNMjYxMDAzMTc1ODQyWjAYMRYwFAYD VQQDEw02YWI4MDdkMy1mMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3P2y+4m6bXvAPEiQWTRstCZRNqU8/G0l7P6sz0S1tfO73FjGFIqNJZqzsMqV mlJh4mQOgOnSDF88HFsSQPF6iPN1bywXQuWu+a1RvE4DV6SpR6Zi589BaTG8lJFW uvy7WHwi12bd/kk/pUraKAPkpZPc62CdWyu5VE/L6o3iiMPZ068KxsjGGBV9IeDm W6p36hQ6ViL2XsBE8qV8eNg5Ug0lx03w8Jut5YaoVbo/NN0aHENvq55CfRuKrHi9 5rGyLntgsJNwtiinNf5RLBm75pXH/zc5tte2KKmcBIj3Jbzsm1Q9dq+8G5xM85zC T2/T1v3ROXq78Po2DXbBeJt2PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSg85PZ rZ4vWySbXjhdoGNlptqkMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN9eW451Jndi5NwmfGLHUfVWI2A2GSGtH3c9SRFkGOn6yRvWzSFw/mFPx1Xp8 o2EqiwM2xqy45p4HSh5+Boi30DpYW+1Woa79Az1p5bNMvowjnB/m6W1jPBwdPagr VLwqVJ7hn2m9Ok0DrwEoH2ECFYJc76smkuxNJTe6JWZxYQi/bJNdBduR/6m+x8ZU Ggorqt2dIrd3kX9RC7BDoiHggSJ2FSsOoH2IyKDUqGeadJSzYyTzMShyEA+toXYp qvSrwKyPyi/dRZQvN1C58LTQbV2Ub0Uc4hWQx7Z8LMDYKalF1enATpIA/vD7Iqbm SsC9vBXGtAj5ZwpN9Glh8XrdXw== -----END CERTIFICATE-----Generated at Mon Sep 28 19:22:48 2026 by rpki-client