$ rpki-client -vvvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft File: 0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json) Hash identifier: WKXoqxgHjzGuRraqUcU61Keho9nFFu7DHhfKw6bunD0= Subject key identifier: 81:54:42:15:B9:F4:D5:05:D7:CB:D7:13:F5:DF:32:F9:30:22:71:7D Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft Manifest number: 095A Signing time: Thu 24 Sep 2026 20:08:09 +0000 Manifest this update: Thu 24 Sep 2026 20:08:08 +0000 Manifest next update: Thu 01 Oct 2026 20:08:08 +0000 Files and hashes: 1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: xsaISilbysXjsN+pak+nS56Wkvy9uaFVfLIJo158Zck=) 2: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=) 3: 530A6E26721711F1A345157A7BA30FBC.roa (hash: q5oiasmtw4zs+gP72ndK+9apIt6id57zzQstMwGY0i4=) 4: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (hash: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=) 5: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Sep 24 20:08:08 2026 GMT Not After : Oct 1 20:08:08 2026 GMT Subject: CN=6ab58329-8d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:fb:3a:71:e2:b1:c4:8a:67:92:71:87:6b: 6b:cb:02:cc:21:dc:d5:1a:2c:5f:69:02:fe:a5:e8: 5f:ae:e7:d0:ee:8f:60:15:4d:86:b1:93:55:0e:48: c9:0b:15:0c:20:50:32:54:9e:39:c0:46:b6:35:f1: ad:de:b1:fc:86:30:d2:f8:c4:cc:30:80:4a:d4:3f: 0a:bb:4c:18:66:ba:a4:2a:15:69:68:c4:18:e7:f6: b3:64:09:12:71:e2:08:8e:bc:46:d0:be:69:69:61: 27:69:94:2a:49:91:0f:52:7c:18:ef:8c:0c:4a:aa: c7:c2:84:2d:a2:ef:80:b6:8c:f3:f9:20:78:bc:08: 8e:15:cd:6a:5a:db:e7:53:71:2e:4b:14:51:33:0a: 80:32:bc:a3:17:1c:18:0f:e6:1e:3b:f5:93:83:db: 18:94:7a:10:1f:6b:b5:87:f7:19:16:f9:4f:76:a7: bc:a5:56:bb:2a:37:ee:79:f4:cb:7a:6e:24:7b:73: f1:d5:e5:a3:7c:04:b4:19:43:68:17:08:b7:e9:93: f4:7c:22:c5:96:d5:54:db:9f:e6:2d:4c:d6:61:63: 8d:49:02:b5:61:5a:04:ce:b3:38:3e:fd:47:be:43: 61:01:5c:cd:f9:b1:fb:d5:b5:f8:f1:67:56:0d:8d: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:54:42:15:B9:F4:D5:05:D7:CB:D7:13:F5:DF:32:F9:30:22:71:7D X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:22:c4:78:7e:ec:af:c5:10:8c:b1:23:b5:94:44:62:1f: 1e:22:0d:08:da:f6:0e:96:1a:b8:5f:e2:69:7e:b4:3e:8b:b2: 55:39:b3:d5:22:19:71:da:86:f0:c9:dd:05:d6:b4:0a:40:7f: c9:b3:98:91:be:66:14:a7:8c:f6:ab:02:54:0f:15:c0:a1:4c: 07:78:02:76:ef:51:b8:19:dc:cc:2c:36:1e:ec:d9:12:86:6a: 14:f8:d8:a9:6e:f2:86:ad:bb:21:52:5a:bf:d9:8c:89:85:db: af:a0:dc:20:4d:64:17:d6:f9:a4:1f:2b:47:ea:52:1c:58:e2: c4:1e:74:a5:4a:d3:ee:61:83:1e:0f:85:7c:c0:1f:e7:88:3f: 8d:15:fa:9b:0c:41:4f:b1:80:15:b1:e7:3c:06:45:18:40:29: 4d:8a:ee:62:7d:56:85:b4:dc:61:55:ef:1c:9e:15:02:e3:a8: 6e:49:4b:c4:d7:ff:13:c4:09:2e:f4:a3:d3:a4:06:95:a8:4f: e3:48:55:2d:58:62:59:4c:12:73:90:2d:d4:8c:d1:e5:86:2c: a5:59:d0:50:e4:a1:04:7f:e9:ec:be:fc:84:d5:82:a6:2d:84: 87:1a:81:5d:4c:2a:30:be:90:de:4b:ff:65:84:77:bd:dc:43: c6:6f:6a:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjYwOTI0MjAwODA4WhcNMjYxMDAxMjAwODA4WjAYMRYwFAYD VQQDEw02YWI1ODMyOS04ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukb7OnHiscSKZ5Jxh2trywLMIdzVGixfaQL+pehfrufQ7o9gFU2GsZNVDkjJ CxUMIFAyVJ45wEa2NfGt3rH8hjDS+MTMMIBK1D8Ku0wYZrqkKhVpaMQY5/azZAkS ceIIjrxG0L5paWEnaZQqSZEPUnwY74wMSqrHwoQtou+Atozz+SB4vAiOFc1qWtvn U3EuSxRRMwqAMryjFxwYD+YeO/WTg9sYlHoQH2u1h/cZFvlPdqe8pVa7KjfuefTL em4ke3Px1eWjfAS0GUNoFwi36ZP0fCLFltVU25/mLUzWYWONSQK1YVoEzrM4Pv1H vkNhAVzN+bH71bX48WdWDY1sNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFUQhW5 9NUF18vXE/XfMvkwInF9MB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OThCRS8xNTBFNTdDNkNGNDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0RE aDRPNzY0UWJFUzBGWUJkS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZoEixHh+7K/FEIyxI7WURGIfHiINCNr2DpYauF/iaX60PouyVTmz1SIZcdqG 8MndBda0CkB/ybOYkb5mFKeM9qsCVA8VwKFMB3gCdu9RuBnczCw2HuzZEoZqFPjY qW7yhq27IVJav9mMiYXbr6DcIE1kF9b5pB8rR+pSHFjixB50pUrT7mGDHg+FfMAf 54g/jRX6mwxBT7GAFbHnPAZFGEApTYruYn1WhbTcYVXvHJ4VAuOobklLxNf/E8QJ LvSj06QGlahP40hVLVhiWUwSc5At1IzR5YYspVnQUOShBH/p7L78hNWCpi2EhxqB XUwqML6Q3kv/ZYR3vdxDxm9qUQ== -----END CERTIFICATE-----Generated at Sat Sep 26 17:59:22 2026 by rpki-client