$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json) Hash identifier: x5zdWwz/3CkEjTxjp8nZxPMudqPcpXnhD4mFEfWiRzg= Subject key identifier: CD:05:11:80:A8:67:4F:AB:15:78:AF:CB:71:BF:0B:87:34:67:0F:FF Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 1BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft Manifest number: 1B58 Signing time: Mon 28 Sep 2026 16:19:20 +0000 Manifest this update: Mon 28 Sep 2026 16:19:19 +0000 Manifest next update: Mon 05 Oct 2026 16:19:19 +0000 Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: iTsmRSZ5q8XckAaMiFnt+HFdidF/1Y4WM6nF1fALOeU=) 2: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=) 3: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: XSeKehM5j7pmoHF65TaAHO/RyKTZ5nn2cCKLbFlPOHY=) 4: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 98CICCcqBKJeROeWvWGHm6VVkIAhPXOwkpVDtDOK4LM=) 5: A704B6CA4E9611F1B39189EDBB833773.roa (hash: E4Gh/Hv+zCrfZWmDryHxww+Tu0R+4hjamnHpY0bEw4U=) 6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: s/ccLEEt6e6Q4nFE0+o3sJxXQEtivVp1ICl6j+C0f1g=) 7: EF9C17344E9611F1BFD1AE0BBC833773.roa (hash: gAKPkvfXsAOzOcaRCMLahWRXkGysJXYsTu5Osr0QToM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7089 (0x1bb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Sep 28 16:19:19 2026 GMT Not After : Oct 5 16:19:19 2026 GMT Subject: CN=6aba9388-e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:76:39:72:5d:06:f5:c8:00:71:d9:2c:31: 7a:37:27:ae:4b:be:40:6b:cd:b6:a9:f3:94:4f:9e: 7b:17:6b:b5:ed:ba:f5:e3:f4:56:dd:db:33:6e:9f: a8:62:1c:e4:6c:14:46:0a:8d:89:a9:ca:f4:0c:f5: 81:34:53:65:9a:9f:f2:2d:68:57:53:9d:b0:27:1b: 88:5c:ec:bf:f8:18:24:04:2e:1b:36:0e:97:ef:89: db:47:2f:cf:b7:97:d8:9e:7e:7d:ab:6a:bc:4b:0e: 3b:e9:c8:37:58:b5:13:6f:9b:22:6a:d3:2d:8d:b8: 93:e6:da:d7:18:85:a9:ff:25:b1:f7:dd:9d:a6:7a: 3e:6a:a4:16:3c:40:63:21:71:bf:c0:fc:cd:ee:24: 53:dc:b6:cb:e3:29:23:bc:a5:44:ba:bc:68:12:4d: a6:d2:25:28:0f:c5:30:b3:b4:e9:66:cd:17:aa:65: 8f:54:43:74:c7:22:4c:ee:f7:f3:50:2b:6c:31:98: 05:d8:ce:b8:87:dc:2a:92:31:cb:4e:7f:59:9d:c7: 28:1d:8a:f7:77:87:26:da:e4:9a:ce:8f:c6:5c:1c: 3a:16:72:9e:9e:a1:1f:fd:e7:f3:76:3b:7c:9d:5c: 7e:38:f5:da:75:1b:bc:0f:e7:87:c2:0c:87:d6:b8: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:05:11:80:A8:67:4F:AB:15:78:AF:CB:71:BF:0B:87:34:67:0F:FF X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9c:4d:93:ab:9a:dc:23:1c:b4:6c:68:c7:d2:3b:39:70:d5: 27:b9:45:94:fe:9d:c1:ba:ec:29:0b:86:18:2a:a8:7b:2e:9b: 70:04:a2:c9:1d:b2:5e:f1:43:44:74:b9:2a:d1:d0:4f:19:d8: 60:43:85:d4:2f:7e:95:b1:67:33:de:c8:60:3e:ee:45:ce:3e: ba:02:69:ce:ef:8c:2a:84:4e:d2:26:a1:cf:d2:2f:31:ff:0a: dd:3e:ea:f6:81:cb:82:ec:62:59:3b:06:b6:fb:00:e6:a4:61: 79:bf:27:0b:26:25:8e:14:28:6e:24:87:b0:39:40:36:01:2c: 6a:b6:1c:62:e4:78:86:b0:10:c0:c1:05:8c:7e:bc:ba:1d:14: b5:87:38:2a:42:79:89:81:64:8c:7d:a4:7f:83:dd:84:ba:87: de:d1:ac:36:05:0d:83:5c:71:45:0b:2a:69:2b:ea:4a:90:91: 54:32:0d:7a:47:78:1e:6e:6d:ef:cd:31:ff:21:49:0b:06:54: 3b:5a:ef:0b:a8:ad:0f:3b:41:b8:8b:f0:0d:fb:2e:e1:2f:67: 2c:29:67:39:00:35:28:af:38:3c:55:9a:c3:b3:31:fe:dd:33: b3:05:4d:80:e5:3e:7a:71:87:44:63:f3:d4:3b:f7:01:3e:50: d9:22:39:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjYwOTI4MTYxOTE5WhcNMjYxMDA1MTYxOTE5WjAYMRYwFAYD VQQDEw02YWJhOTM4OC1lODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+Z2OXJdBvXIAHHZLDF6NyeuS75Aa822qfOUT557F2u17br14/RW3dszbp+o YhzkbBRGCo2Jqcr0DPWBNFNlmp/yLWhXU52wJxuIXOy/+BgkBC4bNg6X74nbRy/P t5fYnn59q2q8Sw476cg3WLUTb5siatMtjbiT5trXGIWp/yWx992dpno+aqQWPEBj IXG/wPzN7iRT3LbL4ykjvKVEurxoEk2m0iUoD8Uws7TpZs0XqmWPVEN0xyJM7vfz UCtsMZgF2M64h9wqkjHLTn9ZnccoHYr3d4cm2uSazo/GXBw6FnKenqEf/efzdjt8 nVx+OPXadRu8D+eHwgyH1rgPvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0FEYCo Z0+rFXivy3G/C4c0Zw//MB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1 X0RZMXpVNDFCSXI0ampudTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJxNk6ua3CMctGxox9I7OXDVJ7lFlP6dwbrsKQuGGCqoey6bcASiyR2yXvFD RHS5KtHQTxnYYEOF1C9+lbFnM97IYD7uRc4+ugJpzu+MKoRO0iahz9IvMf8K3T7q 9oHLguxiWTsGtvsA5qRheb8nCyYljhQobiSHsDlANgEsarYcYuR4hrAQwMEFjH68 uh0UtYc4KkJ5iYFkjH2kf4PdhLqH3tGsNgUNg1xxRQsqaSvqSpCRVDINekd4Hm5t 780x/yFJCwZUO1rvC6itDztBuIvwDfsu4S9nLClnOQA1KK84PFWaw7Mx/t0zswVN gOU+enGHRGPz1Dv3AT5Q2SI5GA== -----END CERTIFICATE-----Generated at Mon Sep 28 20:09:06 2026 by rpki-client