$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: yMKFo6OjigPb7UBF1vdRCOIyBrQ3xEjt5nfXsZiHfdI= Subject key identifier: 78:AF:89:A9:71:00:AD:36:C9:4F:D8:59:BB:E2:6A:05:71:09:95:68 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0621 Signing time: Tue 22 Sep 2026 22:35:21 +0000 Manifest this update: Tue 22 Sep 2026 22:35:21 +0000 Manifest next update: Tue 29 Sep 2026 22:35:21 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: Vr+glTQ4d4prcTZKLTIVE0wrdQziEyTvrV37bD24R8o=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=) 3: A486779E6FED11F1B401E8288CA30FBC.roa (hash: ZNuiSSyrHubK4AwyZlfjhIr65U0V5dbY5FcmNw+d+MA=) 4: 6DD2A340714011F191B402BC77A30FBC.roa (hash: a48AG/pGOmK4TOseQPCOrM/Wg8LOw5p4urOR/siiycQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Sep 22 22:35:21 2026 GMT Not After : Sep 29 22:35:21 2026 GMT Subject: CN=6ab302a9-39cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7c:ec:e2:c0:ca:4f:67:a2:65:d6:96:46:0d: fc:68:d7:8b:67:7c:ed:c8:89:bf:41:b0:de:b5:37: 34:87:be:78:17:e6:0c:77:3b:13:9d:58:c9:40:37: 95:2c:82:de:be:eb:fe:b8:69:5c:4a:8a:a8:7f:df: 98:5d:36:f9:12:82:a7:5c:a7:6e:eb:87:eb:a6:d2: 12:56:71:9f:f7:73:b3:6f:0e:2d:8f:d9:6e:73:fa: eb:c0:fb:c2:fc:71:63:05:3a:14:c5:c6:43:64:9b: dc:12:75:c9:3c:de:80:05:48:da:ca:17:ab:97:19: 28:c7:13:c6:70:fb:a3:c1:f4:97:1a:d7:4e:0e:ab: bd:a7:44:93:70:e4:ea:6c:85:14:72:5e:93:d8:61: e1:bc:ac:3e:78:25:4b:76:8b:f6:11:35:e6:63:57: 19:69:07:01:d7:5d:1e:de:49:c7:96:bc:60:bd:f7: b2:f6:1d:fb:03:69:09:cb:39:7e:01:72:7a:de:b7: 1d:42:23:86:5e:81:35:bb:3f:6e:63:49:2a:7c:10: 9a:86:24:18:6d:73:ce:dd:40:b5:54:43:85:17:05: cc:5d:a1:22:13:79:83:52:48:89:97:8d:93:65:a3: bb:fd:0a:79:b2:13:b6:2e:b8:45:3c:76:de:d1:c2: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AF:89:A9:71:00:AD:36:C9:4F:D8:59:BB:E2:6A:05:71:09:95:68 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ea:7f:9a:14:26:e4:33:b5:1d:62:d6:a7:42:9b:53:b7:b6: a4:8f:e1:19:03:25:3f:9a:e4:8d:a3:ed:fc:be:27:35:91:95: 84:ee:38:62:1c:c0:93:00:e2:ad:2f:9b:c1:02:db:fd:ec:e5: e5:97:fb:a6:1f:22:f6:79:a4:f7:37:e7:fd:b4:7f:3b:df:73: 48:81:f8:58:de:25:94:c1:0d:c3:0c:51:6c:e5:e5:45:a4:ae: fc:0e:be:0f:2c:63:9e:b0:7a:6d:88:8b:ce:f0:6c:ec:8e:8c: ff:42:62:2f:61:0b:5a:3e:5d:6b:fc:f0:37:b8:03:e1:55:af: 9f:a2:05:af:79:c5:7b:8d:86:78:03:38:6b:a5:c6:af:da:3d: 75:89:cb:fa:3b:9b:37:b9:50:01:f0:1e:78:d5:c1:39:e0:09: 3b:68:a1:f3:05:2f:9c:e9:d2:11:65:82:27:f6:43:0b:d3:ef: 05:05:e1:82:0b:a2:7a:d9:0c:3b:00:5f:15:7f:a0:45:85:08: 8f:c9:eb:f6:94:f5:59:b3:d1:ee:27:c4:4f:e1:33:f3:fa:e8: ab:4e:88:17:f8:71:83:c4:96:b3:d0:28:2e:db:f0:0f:8a:57: 7d:70:dc:2d:db:d0:b0:ba:95:0d:4f:03:c4:8a:c0:d9:7c:f2: fd:41:d6:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwOTIyMjIzNTIxWhcNMjYwOTI5MjIzNTIxWjAYMRYwFAYD VQQDEw02YWIzMDJhOS0zOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Hzs4sDKT2eiZdaWRg38aNeLZ3ztyIm/QbDetTc0h754F+YMdzsTnVjJQDeV LILevuv+uGlcSoqof9+YXTb5EoKnXKdu64frptISVnGf93Ozbw4tj9luc/rrwPvC /HFjBToUxcZDZJvcEnXJPN6ABUjayherlxkoxxPGcPujwfSXGtdODqu9p0STcOTq bIUUcl6T2GHhvKw+eCVLdov2ETXmY1cZaQcB110e3knHlrxgvfey9h37A2kJyzl+ AXJ63rcdQiOGXoE1uz9uY0kqfBCahiQYbXPO3UC1VEOFFwXMXaEiE3mDUkiJl42T ZaO7/Qp5shO2LrhFPHbe0cJItwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHivialx AK02yU/YWbviagVxCZVoMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaep/mhQm5DO1HWLWp0KbU7e2pI/hGQMlP5rkjaPt/L4nNZGVhO44YhzAkwDi rS+bwQLb/ezl5Zf7ph8i9nmk9zfn/bR/O99zSIH4WN4llMENwwxRbOXlRaSu/A6+ DyxjnrB6bYiLzvBs7I6M/0JiL2ELWj5da/zwN7gD4VWvn6IFr3nFe42GeAM4a6XG r9o9dYnL+jubN7lQAfAeeNXBOeAJO2ih8wUvnOnSEWWCJ/ZDC9PvBQXhgguietkM OwBfFX+gRYUIj8nr9pT1WbPR7ifET+Ez8/roq06IF/hxg8SWs9AoLtvwD4pXfXDc LdvQsLqVDU8DxIrA2Xzy/UHWJQ== -----END CERTIFICATE-----Generated at Thu Sep 24 10:40:17 2026 by rpki-client