$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json) Hash identifier: w3xrLTRxbUH+2phalVB5s2rU8iY30We/PkEVOdRdFlY= Subject key identifier: AA:AF:22:62:F8:20:39:EC:EF:16:3B:6D:A3:F3:2C:A8:D8:91:1F:0B Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft Manifest number: A5 Signing time: Wed 23 Sep 2026 07:06:21 +0000 Manifest this update: Wed 23 Sep 2026 07:06:20 +0000 Manifest next update: Wed 30 Sep 2026 07:06:20 +0000 Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: BqUBYWhztDRgXdqOVY9gx3asgNR6jHJKIBDm+J43vlw=) 2: F3D0F394A9E811F1B4B821653A11F970.roa (hash: Ke4nsI9PbT1sUSAw9ynvVPd9L5zGagRzSrYV1iiyUT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Validity Not Before: Sep 23 07:06:20 2026 GMT Not After : Sep 30 07:06:20 2026 GMT Subject: CN=6ab37a6c-89a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:b5:97:22:d0:f5:79:f3:43:82:39:5c:12: b4:dd:e2:62:3d:7f:be:e6:c4:11:8c:12:42:9c:8f: f9:a8:f0:8c:1a:c2:c5:e0:78:4f:40:17:81:28:5a: d2:7e:1d:5a:d7:8d:13:e9:21:ef:81:a8:75:61:73: 03:e2:ec:71:2e:cf:e4:2c:38:cd:8e:06:4c:65:3b: ff:ad:04:33:4e:d8:0f:3f:f5:3d:76:a7:db:b8:e5: 94:4e:15:66:b7:fe:12:8f:b5:47:d7:0a:14:16:f0: d4:59:c0:fb:b2:5e:fb:bc:22:f7:5a:0d:68:6a:77: f2:9c:db:f4:7d:dd:26:c7:06:d7:25:37:52:92:f3: 0f:88:0d:d8:91:57:e3:8d:50:ea:f4:3a:88:6c:e2: 8e:a9:28:8a:bf:a8:83:52:af:b0:dd:32:2c:43:39: c0:9c:13:80:ac:d1:fd:63:75:22:b5:11:f9:b4:cb: 94:45:cf:e1:dd:26:55:b6:15:34:a6:86:11:5c:5d: 36:a7:b5:c4:88:45:94:a2:30:1f:b1:49:be:4d:3c: 2a:a5:f9:fa:ca:e5:9c:1d:6d:4f:14:77:c3:64:79: d7:ad:bf:e3:ac:e9:2d:5f:bf:35:50:cd:bf:e8:ed: 3e:77:a9:42:74:4f:10:0a:18:1f:75:a3:32:c4:38: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AF:22:62:F8:20:39:EC:EF:16:3B:6D:A3:F3:2C:A8:D8:91:1F:0B X509v3 Authority Key Identifier: keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d2:0c:9c:3d:1e:f0:8b:dc:5e:87:ac:68:99:e1:fd:de:97: 96:d0:d6:bb:50:7d:07:e7:00:20:d5:be:c3:3a:23:d4:35:a2: 46:82:6b:37:9c:bd:13:ed:b5:d6:fe:2d:53:3e:ab:c1:45:5d: 7e:f2:1b:67:a7:cc:e6:52:d4:77:ae:2a:3e:4e:a9:af:b4:f1: 5c:9f:39:00:bb:99:d0:72:91:e0:04:16:9b:01:a8:6f:2d:cc: c3:43:6f:2d:67:be:9e:fd:71:74:07:aa:09:69:9b:5d:2f:3c: 7a:99:1d:d9:a6:a8:ce:44:df:5e:2a:d5:49:5f:47:c7:b4:4b: ff:5f:55:a5:6e:0c:b2:6f:34:01:89:a3:60:4a:cd:b1:43:77: 59:49:d4:1a:37:44:1c:15:b7:56:24:3a:b6:30:ca:4d:f9:3d: 84:6d:7e:ef:6d:c6:d7:0c:29:c5:87:f1:a2:80:c8:d6:89:79: 3d:61:63:48:d6:f6:9a:18:07:08:23:4f:0b:6c:2f:f3:6f:37: 47:f4:23:45:28:88:09:76:7b:cf:f3:70:66:f3:2b:4a:bf:76: 79:64:97:f5:d8:09:e1:da:e4:a2:e4:bc:a5:49:b2:ca:11:73: be:09:e3:d9:14:fa:ce:15:f3:ac:e7:64:ab:9c:fe:dc:be:25: 08:91:d8:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3RUQxMTAvBgNVBAUTKEQ1RDBEOEUxRjAzRDUxMDA4ODlGNDE4MEE2NUY1NTBB MEQ1ODBCODUwHhcNMjYwOTIzMDcwNjIwWhcNMjYwOTMwMDcwNjIwWjAYMRYwFAYD VQQDEw02YWIzN2E2Yy04OWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlma1lyLQ9XnzQ4I5XBK03eJiPX++5sQRjBJCnI/5qPCMGsLF4HhPQBeBKFrS fh1a140T6SHvgah1YXMD4uxxLs/kLDjNjgZMZTv/rQQzTtgPP/U9dqfbuOWUThVm t/4Sj7VH1woUFvDUWcD7sl77vCL3Wg1oanfynNv0fd0mxwbXJTdSkvMPiA3YkVfj jVDq9DqIbOKOqSiKv6iDUq+w3TIsQznAnBOArNH9Y3UitRH5tMuURc/h3SZVthU0 poYRXF02p7XEiEWUojAfsUm+TTwqpfn6yuWcHW1PFHfDZHnXrb/jrOktX781UM2/ 6O0+d6lCdE8QChgfdaMyxDiKYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqvImL4 IDns7xY7baPzLKjYkR8LMB8GA1UdIwQYMBaAFNXQ2OHwPVEAiJ9BgKZfVQoNWAuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDdFRC9DOUM2MkRBNENC ODAxMUYwQTY4RTU0MUNDNEY5QUUwMi8xZERZNGZBOVVRQ0luMEdBcGw5VkNnMVlD NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDdFRC9DOUM2MkRBNENCODAxMUYwQTY4RTU0MUNDNEY5QUUwMi8xZERZNGZBOVVR Q0luMEdBcGw5VkNnMVlDNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9IMnD0e8IvcXoesaJnh/d6XltDWu1B9B+cAINW+wzoj1DWiRoJrN5y9E+21 1v4tUz6rwUVdfvIbZ6fM5lLUd64qPk6pr7TxXJ85ALuZ0HKR4AQWmwGoby3Mw0Nv LWe+nv1xdAeqCWmbXS88epkd2aaozkTfXirVSV9Hx7RL/19VpW4Msm80AYmjYErN sUN3WUnUGjdEHBW3ViQ6tjDKTfk9hG1+723G1wwpxYfxooDI1ol5PWFjSNb2mhgH CCNPC2wv8283R/QjRSiICXZ7z/NwZvMrSr92eWSX9dgJ4drkouS8pUmyyhFzvgnj 2RT6zhXzrOdkq5z+3L4lCJHYhg== -----END CERTIFICATE-----Generated at Thu Sep 24 07:09:20 2026 by rpki-client