$ rpki-client -vvvf rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft File: 40OUNNCvshlJ60kGLwBsphEvOoQ.mft (raw, json) Hash identifier: 2tI0/sy8G1fd/vsZl6HCbj+Thl7TzQaisZ4UH+X67pg= Subject key identifier: 19:05:56:76:49:94:B0:95:B9:F3:A3:29:00:B7:7B:46:7B:DA:11:1E Authority key identifier: E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 Certificate issuer: /CN=A91784CD/serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft Manifest number: 34 Signing time: Sun 27 Sep 2026 09:15:11 +0000 Manifest this update: Sun 27 Sep 2026 09:15:10 +0000 Manifest next update: Sun 04 Oct 2026 09:15:10 +0000 Files and hashes: 1: 40OUNNCvshlJ60kGLwBsphEvOoQ.crl (hash: 6mxEo+y9CqLCwsJC7D180PQCNn5UYAjxq6oT2+9RnSU=) 2: lE7_4HoZ7tf2LQA7qUu8FNcWCOY.asa (hash: 8IY1eCsxleP2Da/Kk/zuY7DssggWmOgbxdL5nuxKTmc=) 3: 7CE8E4446F9111F1A8C39A2C6CA30FBC.roa (hash: wEYk8+b/zlouMRDVVaad91i65oh9NEMZk+zI9rvUNyY=) 4: 38504AE86F9111F19A5C332C6CA30FBC.roa (hash: ctFJMNlLmb24KK/hUvuG9PeuIx9ZmlcOLpD5Hrci6io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91784CD, serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Validity Not Before: Sep 27 09:15:10 2026 GMT Not After : Oct 4 09:15:10 2026 GMT Subject: CN=6ab8de9f-89bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:91:85:37:4a:70:b7:23:79:44:bd:7a:1f: c5:ab:25:2a:74:d2:e5:3b:26:84:17:0a:5a:6f:f5: fa:84:60:21:08:9e:63:2a:19:b2:b8:ef:ed:f7:f2: 93:3a:99:8f:6f:f8:4a:25:65:36:98:64:33:74:89: 08:bc:dd:e5:0c:2e:80:46:a1:a2:c7:49:97:7f:14: bd:be:63:78:0e:3b:0b:ba:ee:d2:24:ab:98:20:66: 5a:37:89:89:88:7c:e9:e6:b9:1c:63:b6:c7:3b:60: 21:cd:0c:8a:07:00:a1:9b:ca:35:14:c2:b6:2e:d5: ca:7e:c4:09:69:a9:41:ec:bd:09:ac:63:03:4f:55: 12:7e:3d:25:c5:2d:1b:d6:e4:88:5a:e6:a5:95:32: 57:59:d3:8f:53:53:2c:dd:4b:00:33:cd:66:31:f6: 1d:fb:00:ea:74:0d:95:30:3c:d6:da:0e:7a:f7:10: de:65:76:ba:67:f4:7b:eb:b7:09:7d:05:ab:64:fc: 38:22:e1:29:ef:36:49:a1:c7:4c:58:37:df:3a:2b: b3:14:50:35:2e:5b:4c:3d:ca:65:33:00:26:d5:6f: 47:b9:d7:e6:ce:fd:31:ea:f7:a3:d0:0d:55:49:5b: d9:a5:ca:c2:ff:ae:68:06:3d:dc:25:49:55:9e:7c: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:05:56:76:49:94:B0:95:B9:F3:A3:29:00:B7:7B:46:7B:DA:11:1E X509v3 Authority Key Identifier: keyid:E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:33:08:db:58:6f:ff:b2:65:4a:6a:96:2d:bf:71:ce:8d: a5:ba:b9:d5:09:27:51:c6:7a:6d:b9:78:97:5c:7c:dd:df:41: 50:d5:c3:bd:96:f1:13:c4:63:c4:d7:45:3d:95:7d:45:dd:dd: 8e:b2:96:a9:85:b8:9f:1a:3d:0c:06:3f:7a:13:13:e2:c9:2c: f0:0a:e6:65:a1:c8:d7:23:3d:71:0f:49:ba:14:94:4a:21:9e: d7:be:63:1e:1b:f2:7e:44:06:73:ec:ea:df:21:dd:de:f1:6c: af:53:8d:96:68:39:47:5f:a5:15:ab:8e:6a:70:d6:bd:a5:28: 59:61:f1:f8:4d:a0:72:fc:4a:90:c5:d6:13:3c:00:1c:4e:a1: 83:cd:e0:6c:85:32:be:b9:67:e6:c0:6e:c8:50:a8:46:a2:98: 80:04:ba:81:b5:89:03:03:45:a8:db:a1:37:f8:df:40:41:1c: 38:c6:48:7d:54:e3:68:19:e2:f0:e4:13:4a:f9:c8:78:03:de: a9:37:d0:ef:ab:68:99:fc:7e:16:aa:2c:37:48:a6:e7:c3:58: 22:ed:72:af:a8:08:62:d6:e2:6d:00:d8:86:37:bd:b3:30:bd: 5d:31:18:25:e7:b4:10:29:bc:06:15:6c:7b:d3:76:4e:df:de: ff:be:05:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODRDRDExMC8GA1UEBRMoRTM0Mzk0MzREMEFGQjIxOTQ5RUI0OTA2MkYwMDZDQTYx MTJGM0E4NDAeFw0yNjA5MjcwOTE1MTBaFw0yNjEwMDQwOTE1MTBaMBgxFjAUBgNV BAMTDTZhYjhkZTlmLTg5YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8ZJGFN0pwtyN5RL16H8WrJSp00uU7JoQXClpv9fqEYCEInmMqGbK47+338pM6 mY9v+EolZTaYZDN0iQi83eUMLoBGoaLHSZd/FL2+Y3gOOwu67tIkq5ggZlo3iYmI fOnmuRxjtsc7YCHNDIoHAKGbyjUUwrYu1cp+xAlpqUHsvQmsYwNPVRJ+PSXFLRvW 5Iha5qWVMldZ049TUyzdSwAzzWYx9h37AOp0DZUwPNbaDnr3EN5ldrpn9Hvrtwl9 Batk/Dgi4SnvNkmhx0xYN986K7MUUDUuW0w9ymUzACbVb0e51+bO/THq96PQDVVJ W9mlysL/rmgGPdwlSVWefF+BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGQVWdkmU sJW586MpALd7RnvaER4wHwYDVR0jBBgwFoAU40OUNNCvshlJ60kGLwBsphEvOoQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NENEL0NDRERBOTg2NkY5 MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hsSjYwa0dMd0JzcGhFdk9v US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDBPVU5OQ3ZzaGxKNjBrR0x3QnNwaEV2T29RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NENEL0NDRERBOTg2NkY5MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hs SjYwa0dMd0JzcGhFdk9vUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOwjMI21hv/7JlSmqWLb9xzo2lurnVCSdRxnptuXiXXHzd30FQ1cO9lvETxGPE 10U9lX1F3d2OspaphbifGj0MBj96ExPiySzwCuZlocjXIz1xD0m6FJRKIZ7XvmMe G/J+RAZz7OrfId3e8WyvU42WaDlHX6UVq45qcNa9pShZYfH4TaBy/EqQxdYTPAAc TqGDzeBshTK+uWfmwG7IUKhGopiABLqBtYkDA0Wo26E3+N9AQRw4xkh9VONoGeLw 5BNK+ch4A96pN9Dvq2iZ/H4Wqiw3SKbnw1gi7XKvqAhi1uJtANiGN72zML1dMRgl 57QQKbwGFWx703ZO397/vgWw -----END CERTIFICATE-----Generated at Sun Sep 27 18:45:53 2026 by rpki-client