$ rpki-client -vvvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: 71YDP13zvhN4Q6uV7jhV2JuonE43W3S2KuSB2/7YKo4= Subject key identifier: F9:31:A1:AA:74:7D:30:9C:61:01:92:6E:F3:90:AE:E5:CE:25:79:17 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 02C3 Signing time: Fri 25 Sep 2026 01:22:43 +0000 Manifest this update: Fri 25 Sep 2026 01:22:42 +0000 Manifest next update: Fri 02 Oct 2026 01:22:42 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: PKXbJLJuzGMXDdrOXQhesZ9ylqIUvRW/g8Ac+XqIOUY=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: jXby300bLqk6OmsYVLmwjByJkTyNtDhvbMpxkEk+1XE=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: kjANU+m8NGi3/h3kcs2+JMjQaSUpPN4ROitBH9ohYXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Sep 25 01:22:42 2026 GMT Not After : Oct 2 01:22:42 2026 GMT Subject: CN=6ab5cce2-a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:91:67:6e:0a:9c:6d:d5:4c:ec:e4:e5:59: f9:c9:41:2d:1e:07:1b:16:50:7f:46:24:f7:07:45: 0b:71:be:93:b8:6c:eb:df:4b:4d:2b:b5:9a:91:00: 74:aa:0b:de:b6:bc:b9:69:59:0b:dd:0d:a3:8d:45: 4c:00:9c:3b:44:50:22:42:fd:34:0b:ec:64:da:04: 62:84:69:8e:96:e1:47:85:b3:61:c6:06:68:e6:3d: 5f:39:8b:57:e4:b7:10:ee:8f:9c:26:40:df:48:c9: 6b:85:ac:8f:fe:12:8d:f5:2c:5b:07:42:dd:03:79: f5:09:78:53:e1:42:ce:55:ee:84:9c:42:2b:8a:77: 34:95:08:0f:38:7d:a2:48:c5:0b:8e:78:c9:6a:21: 03:2c:92:fc:70:54:32:ef:aa:3b:ad:f0:04:b1:5a: 5d:96:f8:1c:a0:30:0c:9c:98:68:ff:c3:88:39:c7: 76:13:41:de:06:9e:68:a4:a8:f4:c7:56:df:29:42: e5:f0:1b:b2:a5:0c:0a:25:d1:c2:04:6e:a5:92:0d: f6:cf:31:ce:99:fc:93:cc:68:26:fd:8e:35:a8:ec: 12:fc:48:29:6b:f0:17:5e:58:7d:cd:ef:da:03:2b: 8e:3b:0b:0c:07:49:9f:66:5b:a4:cd:bc:9c:17:a0: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:A1:AA:74:7D:30:9C:61:01:92:6E:F3:90:AE:E5:CE:25:79:17 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4e:cd:22:5a:b1:a3:33:5c:4b:3d:c4:a4:35:74:73:f0:81: 84:67:37:17:bf:b7:5f:17:bb:61:e7:b6:a0:64:ad:ed:e1:d2: 22:a9:82:43:6f:f6:23:27:79:17:4f:a1:8f:2f:69:a4:5e:25: 6f:03:b3:73:96:0d:ed:eb:82:33:43:e2:ae:74:e2:3c:fa:26: 14:43:00:c2:a4:24:5e:0f:d9:fd:30:29:2d:ad:e8:10:73:05: d1:54:4e:69:1b:81:e3:fa:fc:b1:dc:62:15:9e:e2:4b:55:a0: ed:00:c7:b6:c0:55:5e:70:b4:2b:d8:34:00:0b:96:3d:1e:ac: 82:43:e8:67:8a:ea:6d:34:a0:76:bc:40:d3:d9:4b:e0:92:07: 12:32:4f:a7:a8:80:b9:13:60:76:b8:fb:1c:05:70:c8:cf:2a: b2:98:7d:04:09:21:bf:f9:1a:43:03:16:d2:a2:b3:0f:71:e5: 01:82:a5:f1:b7:64:63:a9:20:9d:3e:50:64:86:60:3a:e9:57: 7b:17:ab:95:05:8d:55:9e:11:04:4d:f7:4d:e1:08:4d:b0:69: 39:3c:27:f8:aa:95:09:93:81:4d:85:d1:eb:9b:03:6c:c8:9e: 3b:18:34:78:36:26:b8:1e:ae:be:33:6c:eb:37:e7:0a:a5:15: ad:08:b9:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjYwOTI1MDEyMjQyWhcNMjYxMDAyMDEyMjQyWjAYMRYwFAYD VQQDEw02YWI1Y2NlMi1hODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovORZ24KnG3VTOzk5Vn5yUEtHgcbFlB/RiT3B0ULcb6TuGzr30tNK7WakQB0 qgvetry5aVkL3Q2jjUVMAJw7RFAiQv00C+xk2gRihGmOluFHhbNhxgZo5j1fOYtX 5LcQ7o+cJkDfSMlrhayP/hKN9SxbB0LdA3n1CXhT4ULOVe6EnEIrinc0lQgPOH2i SMULjnjJaiEDLJL8cFQy76o7rfAEsVpdlvgcoDAMnJho/8OIOcd2E0HeBp5opKj0 x1bfKULl8BuypQwKJdHCBG6lkg32zzHOmfyTzGgm/Y41qOwS/Egpa/AXXlh9ze/a AyuOOwsMB0mfZlukzbycF6A2cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkxoap0 fTCcYQGSbvOQruXOJXkXMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn07NIlqxozNcSz3EpDV0c/CBhGc3F7+3Xxe7Yee2oGSt7eHSIqmCQ2/2Iyd5 F0+hjy9ppF4lbwOzc5YN7euCM0PirnTiPPomFEMAwqQkXg/Z/TApLa3oEHMF0VRO aRuB4/r8sdxiFZ7iS1Wg7QDHtsBVXnC0K9g0AAuWPR6sgkPoZ4rqbTSgdrxA09lL 4JIHEjJPp6iAuRNgdrj7HAVwyM8qsph9BAkhv/kaQwMW0qKzD3HlAYKl8bdkY6kg nT5QZIZgOulXexerlQWNVZ4RBE33TeEITbBpOTwn+KqVCZOBTYXR65sDbMieOxg0 eDYmuB6uvjNs6zfnCqUVrQi5EQ== -----END CERTIFICATE-----Generated at Fri Sep 25 08:36:01 2026 by rpki-client