$ rpki-client -vvvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: cBa/q/RxiIbZIYwZIV/Oq8HnUXo7nqG5YCth+C8FgOU= Subject key identifier: AB:2A:7C:F6:89:82:1B:ED:F6:A5:4F:84:92:66:89:23:80:00:88:04 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1140 Signing time: Tue 22 Sep 2026 17:10:11 +0000 Manifest this update: Tue 22 Sep 2026 17:10:11 +0000 Manifest next update: Tue 29 Sep 2026 17:10:11 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: qtUNh5dKiIPDFwq+gvYX7QXIOCUnoZYItlYVrK3RjcU=) 2: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=) 3: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4436 (0x1154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Sep 22 17:10:11 2026 GMT Not After : Sep 29 17:10:11 2026 GMT Subject: CN=6ab2b673-9e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:e7:9e:87:42:ca:1f:a6:ff:82:60:11:41: e3:08:43:07:06:b6:b1:30:c1:f6:e7:27:d0:18:f1: 8b:b0:85:d7:cd:ba:65:3c:11:4e:5d:51:47:7c:a8: 7c:d2:a9:36:f5:b2:98:97:b5:fb:28:b8:68:86:ae: ea:cc:43:82:eb:cf:0f:09:73:79:90:f7:5e:a1:36: 79:c1:bd:e9:62:12:3f:81:c3:49:33:e7:59:1c:2f: 55:84:d4:6c:f2:53:8e:b1:d0:94:7b:91:79:b4:8e: 73:54:f6:73:a3:8d:2c:dc:b7:11:00:27:3a:46:02: 4e:20:10:d2:97:49:42:30:dc:c8:3f:02:2b:0d:d5: e0:06:53:6f:84:fa:bc:73:89:44:00:11:cb:38:29: af:93:cf:2b:86:73:8d:34:48:76:f5:8d:cd:8b:33: 7c:59:32:0b:06:37:2d:a2:b5:32:02:c8:20:38:19: cf:65:d0:2f:b1:08:55:bc:c6:0f:68:38:0e:56:70: 1a:06:a7:2d:85:cf:8c:b7:cf:21:e2:e0:8f:1a:64: 54:00:c8:9d:e4:b2:3e:55:e1:56:8c:0a:a0:f3:84: 98:b1:8e:86:42:a2:c1:73:c9:40:44:d4:10:ea:c5: 58:41:2b:fa:94:3d:6a:96:40:48:94:ab:75:80:93: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:7C:F6:89:82:1B:ED:F6:A5:4F:84:92:66:89:23:80:00:88:04 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:e0:63:ab:6a:48:6a:a3:80:a7:10:4f:9b:ad:fb:17:96: 44:ee:4f:5c:3c:55:3b:c5:63:b4:41:41:df:bb:7a:e3:4a:16: 6a:6b:6e:47:b0:5d:64:08:b4:16:ae:27:97:58:ce:95:3f:2f: 9a:54:0b:fc:3b:fe:1f:f9:6d:c6:43:ca:45:59:81:c5:0e:36: 15:6e:fc:f0:67:ea:73:98:06:96:8a:30:ac:dc:e8:fd:84:6f: 37:19:15:3c:c7:b1:20:48:20:48:f5:73:d3:87:bf:bd:41:00: 8b:ff:28:d9:01:c0:8a:a8:9a:a6:e5:1a:fc:7b:8f:3d:62:13: 35:88:70:af:3a:da:c5:1e:8f:43:5a:b5:2f:75:82:fd:24:6f: 9e:79:3f:c4:c8:53:4d:1c:e6:f7:9f:40:74:5d:fb:9e:9e:29: a1:2c:e9:d6:56:80:b4:6b:ef:b9:2c:0f:cd:29:39:09:70:90: 36:bf:ea:55:6e:42:a9:40:6d:c7:1a:9b:6e:9b:d3:c3:73:15: df:7f:51:d9:d7:07:04:5a:8a:e4:61:23:d4:24:e5:87:ad:e6: ca:1a:6f:66:f5:86:d0:4a:6e:2d:de:75:9c:37:48:87:21:19: ea:dc:05:0b:36:4a:39:cc:f7:0d:8c:44:19:f1:bd:08:6f:a0: 65:40:d7:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjYwOTIyMTcxMDExWhcNMjYwOTI5MTcxMDExWjAYMRYwFAYD VQQDEw02YWIyYjY3My05ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiDnnodCyh+m/4JgEUHjCEMHBraxMMH25yfQGPGLsIXXzbplPBFOXVFHfKh8 0qk29bKYl7X7KLhohq7qzEOC688PCXN5kPdeoTZ5wb3pYhI/gcNJM+dZHC9VhNRs 8lOOsdCUe5F5tI5zVPZzo40s3LcRACc6RgJOIBDSl0lCMNzIPwIrDdXgBlNvhPq8 c4lEABHLOCmvk88rhnONNEh29Y3NizN8WTILBjctorUyAsggOBnPZdAvsQhVvMYP aDgOVnAaBqcthc+Mt88h4uCPGmRUAMid5LI+VeFWjAqg84SYsY6GQqLBc8lARNQQ 6sVYQSv6lD1qlkBIlKt1gJMyuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsqfPaJ ghvt9qVPhJJmiSOAAIgEMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATtPgY6tqSGqjgKcQT5ut+xeWRO5PXDxVO8VjtEFB37t640oWamtuR7BdZAi0 Fq4nl1jOlT8vmlQL/Dv+H/ltxkPKRVmBxQ42FW788Gfqc5gGloowrNzo/YRvNxkV PMexIEggSPVz04e/vUEAi/8o2QHAiqiapuUa/HuPPWITNYhwrzraxR6PQ1q1L3WC /SRvnnk/xMhTTRzm959AdF37np4poSzp1laAtGvvuSwPzSk5CXCQNr/qVW5CqUBt xxqbbpvTw3MV339R2dcHBFqK5GEj1CTlh63myhpvZvWG0EpuLd51nDdIhyEZ6twF CzZKOcz3DYxEGfG9CG+gZUDXDw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:43:13 2026 by rpki-client