$ rpki-client -vvvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: UZmpeJSfx9ZWTlryjGY82UkWwtXZ1cjvF39itjkp91I= Subject key identifier: 9B:1E:63:20:4B:81:41:8A:E0:2F:65:10:1E:4C:3C:D4:13:14:42:27 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 019E Signing time: Fri 25 Sep 2026 04:22:37 +0000 Manifest this update: Fri 25 Sep 2026 04:22:36 +0000 Manifest next update: Fri 02 Oct 2026 04:22:36 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: PmMMWmiEBuln15zTSWP1yj8GTVZEPkfGBkzcF4aSgSA=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: YmYTcwhgDvKWuwVdE5g0+SEXv17ijbphmsKcmV8ZajM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Sep 25 04:22:36 2026 GMT Not After : Oct 2 04:22:36 2026 GMT Subject: CN=6ab5f70d-63bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:25:b9:7b:26:72:3a:f9:8a:1d:f1:f7:18: 03:30:b0:6b:59:a8:f3:e7:09:68:fb:9f:96:a4:f5: 24:fe:2f:a5:98:52:ef:95:cd:24:3c:ee:d8:2c:7a: 00:3a:d4:a5:36:7d:7b:91:f9:d8:13:6d:0a:02:12: 40:54:e9:63:00:b5:6a:12:09:9b:ab:61:db:36:bb: e8:e4:7e:c1:e3:1a:76:15:9c:3d:e4:3d:ef:d7:2a: 59:9a:53:d1:c7:09:45:c5:c2:91:9d:1a:1b:48:06: 65:01:49:65:2a:0e:7f:b8:7e:14:25:7d:34:cf:66: 2e:ef:aa:67:0d:0a:80:f3:34:34:f3:5d:e9:9d:b0: eb:94:ac:8c:6d:a9:54:72:8d:6a:b3:ac:89:7d:15: 74:97:42:f7:ab:16:d5:f9:41:28:7a:e5:d7:f0:42: a9:12:c3:2c:1c:a5:58:53:b5:bb:d1:85:2d:25:62: 1b:64:73:ad:12:0b:32:f8:86:22:85:f4:1f:ee:23: af:e2:7c:86:ed:22:6d:b5:ef:60:75:b0:e2:c2:55: 6b:be:2f:46:7f:d2:f9:89:34:09:b9:5d:39:fe:6a: f6:b4:4e:a6:4c:a4:e2:c3:50:e2:68:8a:e8:93:3d: b1:b4:4e:66:ff:24:2f:69:5b:36:57:9d:de:87:58: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1E:63:20:4B:81:41:8A:E0:2F:65:10:1E:4C:3C:D4:13:14:42:27 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:2e:f3:80:34:ea:cb:87:1a:4b:4c:81:5a:f1:70:b1:45:50: 67:a2:a8:fe:b5:67:59:ee:2b:d8:9f:99:64:b8:68:fb:39:43: c3:f6:f9:ea:f4:c2:b6:27:6d:a5:1c:0a:ab:70:f9:9a:11:3d: c6:72:09:8d:9f:a3:0b:c1:3c:b7:e7:82:47:ed:dd:e5:6a:3d: 63:c9:ba:86:8b:a7:c0:19:04:6f:30:e9:26:13:4f:82:a0:e2: c4:a6:f5:a4:2a:a1:9b:e6:09:81:a5:30:6d:a0:b1:82:f3:9c: 1d:16:0b:b1:2a:52:f6:1a:72:de:ed:f1:56:d8:c4:23:26:b0: ad:3f:88:d9:d3:6f:97:e3:09:b7:e2:d0:9c:bd:54:73:8a:a6: 5f:f6:26:9c:a1:32:55:a2:c1:70:94:c2:86:98:f6:e9:d5:69: 63:b2:ba:35:65:9f:26:fd:61:8e:84:a2:ce:54:7a:2e:5f:db: cc:89:ab:4f:c5:c7:13:3d:b7:53:bd:d4:1e:06:30:4b:77:a0: c5:76:35:8e:55:5e:0b:eb:3e:b5:7c:0b:b6:0c:b6:5b:62:78: 6b:04:ab:70:f1:b3:29:d3:4c:68:2b:24:de:15:cc:0e:b4:4f: 4f:a5:6e:40:48:e6:ed:52:57:a4:b2:59:39:5e:2e:11:69:81: 85:3f:93:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYwOTI1MDQyMjM2WhcNMjYxMDAyMDQyMjM2WjAYMRYwFAYD VQQDEw02YWI1ZjcwZC02M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1sluXsmcjr5ih3x9xgDMLBrWajz5wlo+5+WpPUk/i+lmFLvlc0kPO7YLHoA OtSlNn17kfnYE20KAhJAVOljALVqEgmbq2HbNrvo5H7B4xp2FZw95D3v1ypZmlPR xwlFxcKRnRobSAZlAUllKg5/uH4UJX00z2Yu76pnDQqA8zQ0813pnbDrlKyMbalU co1qs6yJfRV0l0L3qxbV+UEoeuXX8EKpEsMsHKVYU7W70YUtJWIbZHOtEgsy+IYi hfQf7iOv4nyG7SJtte9gdbDiwlVrvi9Gf9L5iTQJuV05/mr2tE6mTKTiw1DiaIro kz2xtE5m/yQvaVs2V53eh1jkLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJseYyBL gUGK4C9lEB5MPNQTFEInMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoy7zgDTqy4caS0yBWvFwsUVQZ6Ko/rVnWe4r2J+ZZLho+zlDw/b56vTCtidt pRwKq3D5mhE9xnIJjZ+jC8E8t+eCR+3d5Wo9Y8m6hounwBkEbzDpJhNPgqDixKb1 pCqhm+YJgaUwbaCxgvOcHRYLsSpS9hpy3u3xVtjEIyawrT+I2dNvl+MJt+LQnL1U c4qmX/YmnKEyVaLBcJTChpj26dVpY7K6NWWfJv1hjoSizlR6Ll/bzImrT8XHEz23 U73UHgYwS3egxXY1jlVeC+s+tXwLtgy2W2J4awSrcPGzKdNMaCsk3hXMDrRPT6Vu QEjm7VJXpLJZOV4uEWmBhT+Txg== -----END CERTIFICATE-----Generated at Sun Sep 27 05:58:01 2026 by rpki-client