$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft File: aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json) Hash identifier: 8VC31ueX9HvZgftfc1/F7M8WVBY1HmBkPequo5EbDpo= Subject key identifier: 20:E8:1C:FA:89:96:B8:2C:6E:A7:EE:80:3A:4B:7F:CC:E3:D1:FF:42 Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD Certificate issuer: /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft Manifest number: 0187 Signing time: Tue 29 Sep 2026 05:10:29 +0000 Manifest this update: Tue 29 Sep 2026 05:10:28 +0000 Manifest next update: Tue 06 Oct 2026 05:10:28 +0000 Files and hashes: 1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: TLMT0VdYJL3/Vo7lvGRn4AYNvsuZT0ae0RfG2GePgJ8=) 2: 0A20CDCE897611F1B13B2D5A6E11F970.roa (hash: itZhOw4IJP4VlWCLHvYfZz4HzXyu8gSXQoJ+qtlr4OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 05:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Validity Not Before: Sep 29 05:10:28 2026 GMT Not After : Oct 6 05:10:28 2026 GMT Subject: CN=6abb4845-48bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:e6:53:3a:e5:b0:8a:3a:4c:99:e5:30:c0: 0a:e7:96:ab:0e:be:11:93:8c:d7:54:0d:80:f6:47: 14:08:d5:a7:a7:21:8d:57:82:8f:59:37:1e:04:13: a5:7b:30:66:d2:23:73:e1:c2:6e:47:64:93:f1:39: 54:35:1a:52:e8:35:45:e0:55:94:6a:17:df:81:19: aa:bc:f5:5d:b4:2f:b0:46:da:54:65:58:83:03:e4: 7e:b2:d1:75:a7:fa:d5:be:71:4b:f8:a1:d0:89:e9: 6a:55:31:ec:10:6d:27:eb:55:d3:2c:6b:84:8e:76: 77:ed:a1:f7:5a:0b:53:17:35:f5:14:b0:5a:a2:f4: 77:c5:60:31:ca:05:69:84:53:af:0b:2a:d8:d7:d9: ae:a9:3f:27:5b:93:d4:58:ff:67:8f:c4:6e:8b:47: 20:f7:8c:df:2e:4f:a3:03:47:58:13:3a:04:74:e7: 46:06:43:cf:dc:84:26:0b:79:40:2f:e9:e5:4b:b2: 46:83:06:2a:ea:7c:ab:cc:e4:35:2c:2f:b3:8b:61: 11:1b:54:df:a0:6a:f8:84:45:c9:b9:d8:b0:97:2c: e6:14:c9:bb:b8:84:45:c4:6a:ea:1a:41:32:26:59: 37:2c:1e:63:e3:86:db:49:0d:76:fa:47:cb:53:a2: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E8:1C:FA:89:96:B8:2C:6E:A7:EE:80:3A:4B:7F:CC:E3:D1:FF:42 X509v3 Authority Key Identifier: keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fa:11:46:45:44:6b:83:31:90:d8:f5:41:2c:6d:79:e8:de: 49:ff:22:bd:89:98:99:cc:68:e4:0c:32:63:57:77:c8:18:cf: e2:6a:d5:22:5f:17:db:b1:f9:85:6c:1d:3b:eb:d5:5e:99:85: b7:69:ae:34:53:df:ce:56:cf:53:08:0e:66:08:34:04:07:82: 55:b2:d7:14:33:5f:fd:b1:20:e9:fb:d7:30:3d:7f:b4:85:e2: 42:8d:3a:4d:1d:13:4d:e0:db:03:d3:09:fa:ed:b4:31:19:81: de:0e:d7:96:ef:fa:73:49:6c:99:25:d8:2a:da:27:b9:dd:cd: 7d:c7:34:69:32:94:bd:65:b3:32:25:a6:4e:4c:92:45:b5:a2: c9:33:3c:68:be:aa:9b:96:2b:59:be:a1:32:8b:5d:86:9e:e1: 93:19:36:ce:52:23:4d:61:47:a0:72:39:3c:ee:fe:1c:97:f1: 45:ff:fb:61:98:6a:b0:a5:eb:3c:a2:ab:25:83:bd:32:97:2e: 33:45:f2:6a:6e:30:21:2f:11:bf:7f:ff:6b:20:e3:51:49:70: d8:8e:ae:fa:8b:b5:8a:ab:44:cb:72:3a:b0:e8:3b:ba:6e:f0: b6:7f:69:36:d8:d3:7d:3a:39:6d:06:1a:a4:31:e4:2b:e5:4a: 7b:d2:a6:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2REE4N0FCQUZB OUZBRjg1QkQwHhcNMjYwOTI5MDUxMDI4WhcNMjYxMDA2MDUxMDI4WjAYMRYwFAYD VQQDEw02YWJiNDg0NS00OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyDmUzrlsIo6TJnlMMAK55arDr4Rk4zXVA2A9kcUCNWnpyGNV4KPWTceBBOl ezBm0iNz4cJuR2ST8TlUNRpS6DVF4FWUahffgRmqvPVdtC+wRtpUZViDA+R+stF1 p/rVvnFL+KHQielqVTHsEG0n61XTLGuEjnZ37aH3WgtTFzX1FLBaovR3xWAxygVp hFOvCyrY19muqT8nW5PUWP9nj8Rui0cg94zfLk+jA0dYEzoEdOdGBkPP3IQmC3lA L+nlS7JGgwYq6nyrzOQ1LC+zi2ERG1TfoGr4hEXJudiwlyzmFMm7uIRFxGrqGkEy Jlk3LB5j44bbSQ12+kfLU6KrrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDoHPqJ lrgsbqfugDpLf8zj0f9CMB8GA1UdIwQYMBaAFGgUd7XeVmo42bAVbah6uvqfr4W9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi9DQzc4Qjc2MjdD MEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2FqalpzQlZ0cUhxNi1wLXZo YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2Fq alpzQlZ0cUhxNi1wLXZoYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ/oRRkVEa4MxkNj1QSxteejeSf8ivYmYmcxo5AwyY1d3yBjP4mrVIl8X27H5 hWwdO+vVXpmFt2muNFPfzlbPUwgOZgg0BAeCVbLXFDNf/bEg6fvXMD1/tIXiQo06 TR0TTeDbA9MJ+u20MRmB3g7Xlu/6c0lsmSXYKtonud3Nfcc0aTKUvWWzMiWmTkyS RbWiyTM8aL6qm5YrWb6hMotdhp7hkxk2zlIjTWFHoHI5PO7+HJfxRf/7YZhqsKXr PKKrJYO9MpcuM0Xyam4wIS8Rv3//ayDjUUlw2I6u+ou1iqtEy3I6sOg7um7wtn9p NtjTfTo5bQYapDHkK+VKe9KmCw== -----END CERTIFICATE-----Generated at Tue Sep 29 20:01:46 2026 by rpki-client