$ rpki-client -vvvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: KKYLXfm3OHyQxNX6CGplzJndy6vpxvyjk5yrm+/Ch5c= Subject key identifier: BC:F9:77:0B:8D:81:D7:E4:33:4A:81:8C:84:1D:3C:79:AB:74:68:E9 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: BD Signing time: Wed 23 Sep 2026 06:42:41 +0000 Manifest this update: Wed 23 Sep 2026 06:42:41 +0000 Manifest next update: Wed 30 Sep 2026 06:42:41 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: 4FOqdx8yv+WFssQn9eNxDS3wciKunGJ5dvsekKPxjDY=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: tljjskEzluOLyfM+jOhLD+OSuutF6Ym7Br+LWf9TkKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Sep 23 06:42:41 2026 GMT Not After : Sep 30 06:42:41 2026 GMT Subject: CN=6ab374e1-c712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:8d:34:34:f1:9d:9d:57:67:d6:f0:fa:80: 6a:6f:de:d8:fe:db:13:8a:5f:89:44:3f:c1:b3:fb: 89:5a:70:55:75:03:1f:a0:b4:4b:55:af:26:61:b3: 4d:e7:92:ff:23:6e:d8:16:10:53:25:f4:45:26:51: 3a:08:04:cc:8b:ff:a0:31:6a:14:b9:11:f4:05:93: 6b:51:b0:84:96:de:82:30:17:9f:6e:98:a5:51:d2: c9:10:3b:b2:28:ee:68:48:6b:6d:ad:b6:98:b9:be: f9:25:ef:a9:a3:45:f5:da:71:61:6e:33:93:5b:72: 04:0f:d5:89:ac:c3:b7:50:0f:56:da:fc:b8:0f:92: 41:0d:42:4d:99:2e:c8:6e:62:a1:1f:aa:d2:11:13: 8b:8e:d4:1e:60:e7:44:3a:d9:d0:cf:89:4d:30:2f: b1:b4:72:e5:d0:19:72:89:6e:29:12:ed:e5:0c:d1: 73:83:36:b8:d5:14:e5:cc:9d:3d:a1:be:32:f4:fe: 76:39:68:50:f9:d2:8d:cc:6f:e1:92:4a:54:63:cb: 59:01:dd:12:cc:26:37:cf:47:0e:27:d8:44:79:74: 09:51:d5:3c:b4:d4:b1:34:78:5e:7f:e7:92:fd:7c: bb:0e:af:23:12:10:de:29:0f:aa:ce:23:fa:d6:39: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F9:77:0B:8D:81:D7:E4:33:4A:81:8C:84:1D:3C:79:AB:74:68:E9 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a5:a7:cd:7b:82:35:27:b3:ec:0a:7b:54:6b:da:58:ff:16: 89:0f:d6:43:c2:15:ea:85:1c:b3:d9:91:e0:70:32:fa:bf:f9: 19:cb:a1:82:3b:af:93:3d:66:6f:9f:b3:fa:9f:88:10:18:01: 62:74:28:16:1f:4d:32:f1:7c:d4:fd:21:ad:d6:b0:2c:10:7a: b7:78:85:bb:d7:30:cf:aa:cf:8d:7e:24:55:fb:a8:df:07:d1: b7:2d:a7:f0:fc:ff:1c:59:6a:02:40:15:8b:62:b4:7e:b5:46: 34:eb:87:15:dd:e0:c0:2d:4c:ca:c6:df:0b:fc:9e:cb:a2:b0: bf:31:d2:a9:5c:ce:27:00:65:f3:66:3f:00:42:20:b5:25:66: 3e:26:b6:a5:48:9f:1f:aa:e4:e7:b5:40:37:4f:52:7e:c1:99: 5b:15:4f:a0:ae:42:0a:ef:1c:88:ee:36:a7:b7:e7:fe:da:83: bf:0c:dd:91:c4:47:a5:bd:57:72:09:b2:3a:43:53:a0:e2:4e: bb:1b:ce:9b:de:20:cb:29:ad:88:ce:19:b6:cd:9b:e3:00:fc: 5e:12:8d:95:35:4b:4b:55:04:62:4b:82:67:dc:11:d0:92:67: b8:50:17:72:e7:3c:80:17:4d:31:1a:9a:e6:fc:cf:e9:bd:cb: 52:ef:44:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxQ0MxMTAvBgNVBAUTKDlDMUU0NUE4MDg0QzMxMURENTAwNDRBMTczNjA1RThF RTNDNENDOTUwHhcNMjYwOTIzMDY0MjQxWhcNMjYwOTMwMDY0MjQxWjAYMRYwFAYD VQQDEw02YWIzNzRlMS1jNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuACNNDTxnZ1XZ9bw+oBqb97Y/tsTil+JRD/Bs/uJWnBVdQMfoLRLVa8mYbNN 55L/I27YFhBTJfRFJlE6CATMi/+gMWoUuRH0BZNrUbCElt6CMBefbpilUdLJEDuy KO5oSGttrbaYub75Je+po0X12nFhbjOTW3IED9WJrMO3UA9W2vy4D5JBDUJNmS7I bmKhH6rSEROLjtQeYOdEOtnQz4lNMC+xtHLl0BlyiW4pEu3lDNFzgza41RTlzJ09 ob4y9P52OWhQ+dKNzG/hkkpUY8tZAd0SzCY3z0cOJ9hEeXQJUdU8tNSxNHhef+eS /Xy7Dq8jEhDeKQ+qziP61jm1SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLz5dwuN gdfkM0qBjIQdPHmrdGjpMB8GA1UdIwQYMBaAFJweRagITDEd1QBEoXNgXo7jxMyV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTFDQy85REYwN0U0NDlB MEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1SM1ZBRVNoYzJCZWp1UEV6 SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTFDQy85REYwN0U0NDlBMEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1S M1ZBRVNoYzJCZWp1UEV6SlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXqWnzXuCNSez7Ap7VGvaWP8WiQ/WQ8IV6oUcs9mR4HAy+r/5Gcuhgjuvkz1m b5+z+p+IEBgBYnQoFh9NMvF81P0hrdawLBB6t3iFu9cwz6rPjX4kVfuo3wfRty2n 8Pz/HFlqAkAVi2K0frVGNOuHFd3gwC1MysbfC/yey6KwvzHSqVzOJwBl82Y/AEIg tSVmPia2pUifH6rk57VAN09SfsGZWxVPoK5CCu8ciO42p7fn/tqDvwzdkcRHpb1X cgmyOkNToOJOuxvOm94gyymtiM4Zts2b4wD8XhKNlTVLS1UEYkuCZ9wR0JJnuFAX cuc8gBdNMRqa5vzP6b3LUu9EbQ== -----END CERTIFICATE-----Generated at Wed Sep 23 16:55:19 2026 by rpki-client