$ rpki-client -vvvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json) Hash identifier: ajSdzQvDPIkqQ/2lrCaHI/Y0rZxSD45TBEVtTr/qWf8= Subject key identifier: 3C:DB:44:29:92:43:45:BD:41:50:F2:AE:A0:71:07:7A:2D:C6:FD:1D Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 Certificate issuer: /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft Manifest number: 95 Signing time: Wed 23 Sep 2026 07:11:09 +0000 Manifest this update: Wed 23 Sep 2026 07:11:09 +0000 Manifest next update: Wed 30 Sep 2026 07:11:09 +0000 Files and hashes: 1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: B6vivgZnenwpvWgHLlijTq68SUG+0lipk4muinKEhxE=) 2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: yvWe793LFDv60yfRRzGNrVWi5via5iRanXNLPGkIsZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Validity Not Before: Sep 23 07:11:09 2026 GMT Not After : Sep 30 07:11:09 2026 GMT Subject: CN=6ab37b8d-18b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:bc:45:f3:ca:26:19:be:c0:2b:be:10:fa: 4d:74:82:06:6b:82:f7:56:8c:24:8c:51:46:03:c5: af:61:b5:de:21:9b:82:3c:66:09:24:25:a0:9c:f1: 49:8d:46:e1:b2:86:da:98:ae:73:40:8d:ef:d9:31: 34:ce:36:7f:c6:f1:5d:9b:a0:cf:58:c7:9d:bd:31: c9:a7:f4:29:7a:15:05:89:b6:cb:55:d3:cb:71:3d: b7:08:8e:75:ca:da:6f:8e:63:6d:85:f9:c9:f2:17: 4f:64:d4:7a:4d:14:f9:45:3e:ee:2d:f8:63:2f:94: 5b:8c:ac:4c:ae:39:c8:ae:c8:13:44:28:5c:64:e7: 1b:0f:8e:46:23:45:39:3c:4d:c5:d1:d6:ea:68:87: cc:0f:5c:e2:69:97:67:67:3f:b7:7c:3b:8b:17:78: 9a:bf:67:a6:0d:74:6b:81:46:c3:4a:71:7d:6c:9e: da:2c:86:fe:12:30:fe:91:e8:91:f3:c1:c3:fe:5c: be:05:94:38:28:dc:2c:97:6a:7c:3b:d1:a8:99:f9: d4:f7:8f:a1:42:3a:07:e2:2e:55:26:d0:a3:89:6c: 45:f6:5f:3c:75:1d:af:76:b1:0c:2a:84:26:7c:a8: b7:43:93:03:c1:ff:eb:8c:fd:af:be:32:48:54:3a: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DB:44:29:92:43:45:BD:41:50:F2:AE:A0:71:07:7A:2D:C6:FD:1D X509v3 Authority Key Identifier: keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:30:48:b3:ea:94:ff:cf:f4:ce:1c:24:d6:ea:08:8e:53:13: b7:ff:6d:96:6f:cc:07:03:34:ad:f8:03:43:47:42:69:f3:aa: 37:f0:79:a6:38:41:84:5e:4b:d2:21:d6:74:d6:35:a5:eb:04: 4d:ae:c5:15:1c:5e:8b:c4:6c:69:b8:84:3c:01:df:57:da:8f: a3:f2:48:49:9a:fc:71:82:da:3e:c3:a2:4c:32:c4:9e:ba:92: 78:b2:cf:36:54:e5:e7:e2:a5:34:b8:6d:60:3f:9b:ff:69:24: 23:87:35:53:4c:56:bc:d4:77:b7:82:24:f1:70:bb:d4:5a:0c: e0:e9:a6:ad:6f:dc:51:02:12:30:bc:d7:ec:12:17:13:7c:bc: 06:d7:9e:4e:7c:36:69:bb:3b:48:76:ac:bd:aa:be:91:a7:ff: e9:b6:d5:83:f5:2e:4a:86:40:cd:2e:90:59:94:df:5f:58:a6: 0e:23:1a:37:3c:33:c4:eb:d1:f2:50:41:87:59:02:4d:fa:78: 55:8c:99:f7:d6:d6:7e:c2:ea:89:4c:73:fb:d8:64:35:aa:6c: 30:c2:65:8d:81:c9:89:9c:0b:80:62:38:47:8b:fe:ce:ad:2b: 41:25:2b:93:fb:de:a5:3d:b2:19:b5:67:af:0e:29:5e:69:55: 49:60:75:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjMxMTAvBgNVBAUTKEE2MjE2RkIxRDhCQzc4NTVGNzcwNzM1RDQ1MTI4QTg3 QzcxM0FGQzQwHhcNMjYwOTIzMDcxMTA5WhcNMjYwOTMwMDcxMTA5WjAYMRYwFAYD VQQDEw02YWIzN2I4ZC0xOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz768RfPKJhm+wCu+EPpNdIIGa4L3VowkjFFGA8WvYbXeIZuCPGYJJCWgnPFJ jUbhsobamK5zQI3v2TE0zjZ/xvFdm6DPWMedvTHJp/QpehUFibbLVdPLcT23CI51 ytpvjmNthfnJ8hdPZNR6TRT5RT7uLfhjL5RbjKxMrjnIrsgTRChcZOcbD45GI0U5 PE3F0dbqaIfMD1ziaZdnZz+3fDuLF3iav2emDXRrgUbDSnF9bJ7aLIb+EjD+keiR 88HD/ly+BZQ4KNwsl2p8O9GomfnU94+hQjoH4i5VJtCjiWxF9l88dR2vdrEMKoQm fKi3Q5MDwf/rjP2vvjJIVDpH+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzbRCmS Q0W9QVDyrqBxB3otxv0dMB8GA1UdIwQYMBaAFKYhb7HYvHhV93BzXUUSiofHE6/E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMy8xRTUzMEZDQ0Q0 QkUxMUYwQkY5RkUyMTZDNEY5QUUwMi9waUZ2c2RpOGVGWDNjSE5kUlJLS2g4Y1Ry OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BpRnZzZGk4ZUZYM2NITmRSUktLaDhjVHI4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMy8xRTUzMEZDQ0Q0QkUxMUYwQkY5RkUyMTZDNEY5QUUwMi9waUZ2c2RpOGVG WDNjSE5kUlJLS2g4Y1RyOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVzBIs+qU/8/0zhwk1uoIjlMTt/9tlm/MBwM0rfgDQ0dCafOqN/B5pjhBhF5L 0iHWdNY1pesETa7FFRxei8RsabiEPAHfV9qPo/JISZr8cYLaPsOiTDLEnrqSeLLP NlTl5+KlNLhtYD+b/2kkI4c1U0xWvNR3t4Ik8XC71FoM4OmmrW/cUQISMLzX7BIX E3y8BteeTnw2abs7SHasvaq+kaf/6bbVg/UuSoZAzS6QWZTfX1imDiMaNzwzxOvR 8lBBh1kCTfp4VYyZ99bWfsLqiUxz+9hkNapsMMJljYHJiZwLgGI4R4v+zq0rQSUr k/vepT2yGbVnrw4pXmlVSWB1ZQ== -----END CERTIFICATE-----Generated at Wed Sep 23 16:45:53 2026 by rpki-client