$ rpki-client -vvvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: Fcu2f+HbElQhDcuMtlx85EK0nLsLVjqkmXN65JBgkMI= Subject key identifier: 5A:F7:4E:8D:42:18:ED:EA:76:F9:9D:43:C7:7A:0E:1E:65:8A:7D:C8 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: C7 Signing time: Fri 25 Sep 2026 06:54:52 +0000 Manifest this update: Fri 25 Sep 2026 06:54:51 +0000 Manifest next update: Fri 02 Oct 2026 06:54:51 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: usFMKc1sE12MOJtsxu+BXfl3JvFLll1pO7qYKJ0XEXQ=) 2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=) 3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Sep 25 06:54:51 2026 GMT Not After : Oct 2 06:54:51 2026 GMT Subject: CN=6ab61abc-9275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:e7:17:07:db:73:e7:7e:1c:d8:e0:ac:3e: 75:bd:f8:75:17:17:e7:95:2f:64:f7:6b:46:61:99: 6c:33:d0:c9:2c:15:30:f7:ea:a8:7a:fb:7c:97:f9: 93:aa:e2:9d:1a:4e:33:70:1d:eb:ce:3d:18:56:a1: f0:9f:f5:df:5e:49:94:e5:81:7a:1b:9e:4c:23:6e: 7e:dc:bd:88:ef:5b:c8:a0:bd:a0:28:2b:22:d9:01: 43:2f:64:45:57:d7:23:64:5a:0a:37:78:75:ac:2d: c8:bc:46:cf:94:cb:cd:3b:22:fc:c0:87:03:7c:56: 86:6d:79:aa:42:67:20:1e:ec:38:ed:89:01:4f:56: 4f:a6:cb:de:92:f9:11:6d:97:64:70:d9:0a:18:89: 50:80:d1:a4:d9:92:44:18:36:c0:8e:eb:49:bd:af: dd:21:1e:58:07:73:a7:e4:c1:cd:54:f7:8f:75:77: d0:b3:0d:ed:75:35:24:6f:c4:a8:00:1c:fa:ef:fd: 96:f8:28:6c:54:1d:1f:d6:f7:21:6c:84:f1:0d:d1: b7:90:17:a0:9d:61:a8:d0:b3:dd:99:a7:76:0e:99: db:a9:fa:00:47:5f:65:20:b7:3e:54:a0:5f:16:49: 1c:f5:d3:c9:d3:52:f3:44:c5:7d:82:67:91:f7:58: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F7:4E:8D:42:18:ED:EA:76:F9:9D:43:C7:7A:0E:1E:65:8A:7D:C8 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a9:01:00:e4:6b:f9:4d:18:fc:22:d5:c3:41:ab:6a:f8:75: 08:d7:92:96:6b:aa:b3:bc:01:29:c0:cf:fa:a4:95:29:81:6e: d7:f2:47:e9:5b:e5:a6:b2:b1:5c:23:e2:62:e2:0e:84:8d:a9: da:42:9a:85:5c:ea:0c:39:de:9d:22:58:6a:32:ea:1f:05:38: 13:3d:6a:c2:82:ff:9d:6e:81:c7:02:6c:48:8d:45:87:23:4a: 95:6d:e0:2c:2c:02:ca:c1:6e:b5:3d:52:18:64:06:fe:85:ce: fb:6e:08:90:6c:36:ab:d9:a7:85:bf:45:cb:8c:b4:c3:26:6f: 1d:75:14:72:ff:c8:dd:0b:99:80:c3:d7:ff:ec:79:b9:68:58: 21:49:6c:dd:2a:56:54:8c:eb:b2:c7:47:98:c0:34:6e:0b:6b: 04:ac:30:07:77:57:91:8f:cb:99:b0:93:e2:69:f7:3e:7b:44: b7:1e:20:7a:f3:46:d4:b6:ff:ef:ec:20:2b:52:7c:6c:e1:34: 44:ac:df:8f:36:2d:97:d6:d7:3d:9c:96:bb:b5:be:18:ab:ac: 41:16:d0:6e:1f:80:3a:63:2f:a5:e3:8b:ff:37:a9:2a:5f:90: e9:1f:9b:ce:7c:2f:57:11:16:80:18:ea:61:cc:3a:de:af:44: d6:9c:10:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1QjhDN0NENEJB ODFBNTdBNDAwHhcNMjYwOTI1MDY1NDUxWhcNMjYxMDAyMDY1NDUxWjAYMRYwFAYD VQQDEw02YWI2MWFiYy05Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFfnFwfbc+d+HNjgrD51vfh1FxfnlS9k92tGYZlsM9DJLBUw9+qoevt8l/mT quKdGk4zcB3rzj0YVqHwn/XfXkmU5YF6G55MI25+3L2I71vIoL2gKCsi2QFDL2RF V9cjZFoKN3h1rC3IvEbPlMvNOyL8wIcDfFaGbXmqQmcgHuw47YkBT1ZPpsvekvkR bZdkcNkKGIlQgNGk2ZJEGDbAjutJva/dIR5YB3On5MHNVPePdXfQsw3tdTUkb8So ABz67/2W+ChsVB0f1vchbITxDdG3kBegnWGo0LPdmad2DpnbqfoAR19lILc+VKBf Fkkc9dPJ01LzRMV9gmeR91gAvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFr3To1C GO3qdvmdQ8d6Dh5lin3IMB8GA1UdIwQYMBaAFK+6oVFunhfyTPkUW4x81LqBpXpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhBMC9CMjA2OENGODhF MjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZfSk0tUlJiakh6VXVvR2xl a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZf Sk0tUlJiakh6VXVvR2xla0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASakBAORr+U0Y/CLVw0Gravh1CNeSlmuqs7wBKcDP+qSVKYFu1/JH6VvlprKx XCPiYuIOhI2p2kKahVzqDDnenSJYajLqHwU4Ez1qwoL/nW6BxwJsSI1FhyNKlW3g LCwCysFutT1SGGQG/oXO+24IkGw2q9mnhb9Fy4y0wyZvHXUUcv/I3QuZgMPX/+x5 uWhYIUls3SpWVIzrssdHmMA0bgtrBKwwB3dXkY/LmbCT4mn3PntEtx4gevNG1Lb/ 7+wgK1J8bOE0RKzfjzYtl9bXPZyWu7W+GKusQRbQbh+AOmMvpeOL/zepKl+Q6R+b znwvVxEWgBjqYcw63q9E1pwQxw== -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:51 2026 by rpki-client