$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft File: 30WmAWUG35sQS3TILTbV_9LVbK0.mft (raw, json) Hash identifier: TYFia/H6vxROF9OTZbKf1x+uUalkjk97wXjt/sOaUjM= Subject key identifier: BE:01:41:C5:17:38:A9:87:1C:9D:35:E4:09:26:AA:62:65:16:D3:EB Authority key identifier: DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD Certificate issuer: /CN=A91597B7/serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft Manifest number: 0B Signing time: Fri 25 Sep 2026 09:24:06 +0000 Manifest this update: Fri 25 Sep 2026 09:24:05 +0000 Manifest next update: Fri 02 Oct 2026 09:24:05 +0000 Files and hashes: 1: 30WmAWUG35sQS3TILTbV_9LVbK0.crl (hash: maHb3XzkkiDyQuifFkO65V5yh26Rd3cvfF2DEtZite8=) 2: 6AC1F2CCADE611F1A742C8804111F970.roa (hash: pOX2bB7h73TmS7wQA5JOgBkRmL6STMduq4kjixO0aqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597B7, serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD Validity Not Before: Sep 25 09:24:05 2026 GMT Not After : Oct 2 09:24:05 2026 GMT Subject: CN=6ab63db6-6fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:6d:65:c4:97:9a:eb:a3:ef:61:e7:f3:b8: e3:67:c9:42:71:d9:ac:78:62:55:1c:a4:59:9e:f1: 5b:f5:ca:f6:57:60:d5:0c:19:41:49:99:25:62:51: 31:f0:b7:03:37:fc:ff:0c:d7:13:81:9d:7f:54:73: a0:48:40:c7:23:4e:a6:36:4e:94:14:2d:bb:ee:b1: 49:d0:63:2e:72:d3:98:ad:ac:c4:de:4e:79:0c:21: d6:4b:cb:95:02:19:5a:de:09:73:d4:d7:71:06:35: a7:15:2f:b2:85:16:cc:b4:d9:32:44:44:cb:b2:dc: f3:e6:df:46:91:e2:bf:b6:7d:24:bf:ae:6a:0e:da: 0a:40:45:72:78:0f:cf:21:03:57:c0:b9:af:ad:a9: a5:31:fd:ea:fd:40:03:7b:d2:45:00:11:18:33:2f: e9:6d:bf:4f:2c:75:56:37:bb:4c:60:22:f3:f3:82: ff:10:a8:bf:27:b0:43:a9:26:10:7f:fb:d0:90:60: c8:c7:b4:0c:27:a0:99:9f:d8:e7:13:71:4d:af:20: fc:3e:61:7e:9a:8d:3e:a3:be:ab:69:7f:4f:11:8f: 94:28:10:72:19:aa:71:52:a7:92:4e:18:40:5e:43: b9:70:1a:ad:49:d3:6b:18:d2:fd:eb:89:3a:57:72: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:41:C5:17:38:A9:87:1C:9D:35:E4:09:26:AA:62:65:16:D3:EB X509v3 Authority Key Identifier: keyid:DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:22:59:d1:df:2f:95:e2:30:35:63:dc:c4:dd:fd:ed:1c:7b: 93:69:ed:8b:50:ca:90:73:2d:a8:ed:e3:f4:65:76:d3:ad:e2: 96:10:34:f0:7b:5a:03:0d:b6:c1:17:7f:d8:24:81:07:0b:7e: c8:01:d7:eb:b3:61:d2:82:83:6f:2e:e7:09:5c:bd:0e:e5:61: a1:93:7a:a1:c4:11:f8:a9:68:c8:24:11:df:c3:0e:c0:58:ec: 9b:12:0e:0c:7c:b2:7c:03:1d:83:e0:0e:43:ea:e2:a9:30:d4: d2:d6:1a:25:fb:40:fa:35:32:92:28:d4:f1:ae:d2:81:18:75: 92:64:06:82:ef:7f:91:1c:d7:b1:63:de:66:f7:47:8a:33:09: 18:52:1f:69:7b:98:7c:4f:6d:65:6b:ad:0c:84:03:85:5f:6a: ac:a0:25:ea:b8:8f:e1:9f:c7:90:14:68:d2:80:6f:72:fb:be: 45:f5:df:9d:70:29:76:5b:da:a0:ba:24:5f:9f:da:c3:0c:cc: 10:46:8b:92:5f:f1:c6:1b:59:c1:a8:67:4b:a2:b8:3f:af:16: 86:a0:53:1b:f0:35:cc:f4:5d:94:dc:f3:5e:b3:d5:f9:94:93: fa:8f:da:75:3a:ec:b6:99:fe:cc:97:13:02:43:c4:60:b3:d5: de:fe:56:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdCNzExMC8GA1UEBRMoREY0NUE2MDE2NTA2REY5QjEwNEI3NEM4MkQzNkQ1RkZE MkQ1NkNBRDAeFw0yNjA5MjUwOTI0MDVaFw0yNjEwMDIwOTI0MDVaMBgxFjAUBgNV BAMTDTZhYjYzZGI2LTZmYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCX21lxJea66PvYefzuONnyUJx2ax4YlUcpFme8Vv1yvZXYNUMGUFJmSViUTHw twM3/P8M1xOBnX9Uc6BIQMcjTqY2TpQULbvusUnQYy5y05itrMTeTnkMIdZLy5UC GVreCXPU13EGNacVL7KFFsy02TJERMuy3PPm30aR4r+2fSS/rmoO2gpARXJ4D88h A1fAua+tqaUx/er9QAN70kUAERgzL+ltv08sdVY3u0xgIvPzgv8QqL8nsEOpJhB/ +9CQYMjHtAwnoJmf2OcTcU2vIPw+YX6ajT6jvqtpf08Rj5QoEHIZqnFSp5JOGEBe Q7lwGq1J02sY0v3riTpXci6DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvgFBxRc4 qYccnTXkCSaqYmUW0+swHwYDVR0jBBgwFoAU30WmAWUG35sQS3TILTbV/9LVbK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0I3LzEyQzIxNUFDQURF NjExRjFCQkE4NzkzRjQxMTFGOTcwLzMwV21BV1VHMzVzUVMzVElMVGJWXzlMVmJL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzBXbUFXVUczNXNRUzNUSUxUYlZfOUxWYkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0I3LzEyQzIxNUFDQURFNjExRjFCQkE4NzkzRjQxMTFGOTcwLzMwV21BV1VHMzVz UVMzVElMVGJWXzlMVmJLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBmIlnR3y+V4jA1Y9zE3f3tHHuTae2LUMqQcy2o7eP0ZXbTreKWEDTwe1oDDbbB F3/YJIEHC37IAdfrs2HSgoNvLucJXL0O5WGhk3qhxBH4qWjIJBHfww7AWOybEg4M fLJ8Ax2D4A5D6uKpMNTS1hol+0D6NTKSKNTxrtKBGHWSZAaC73+RHNexY95m90eK MwkYUh9pe5h8T21la60MhAOFX2qsoCXquI/hn8eQFGjSgG9y+75F9d+dcCl2W9qg uiRfn9rDDMwQRouSX/HGG1nBqGdLorg/rxaGoFMb8DXM9F2U3PNes9X5lJP6j9p1 Ouy2mf7MlxMCQ8Rgs9Xe/lZe -----END CERTIFICATE-----Generated at Fri Sep 25 17:30:53 2026 by rpki-client