$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: BVk6QhbbUXD0bvwrjxjZMUTH1+dgOx57oUh2mmzHM5s= Subject key identifier: C1:3F:23:B4:45:D1:5B:D8:8A:B5:3E:B2:9B:B9:93:2C:76:AF:48:E5 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: 01CC Signing time: Wed 23 Sep 2026 03:35:32 +0000 Manifest this update: Wed 23 Sep 2026 03:35:32 +0000 Manifest next update: Wed 30 Sep 2026 03:35:32 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: aWEtnOHvty8dg1udMoWRv0D7KKYl8A4i49ddFKgtiiY=) 2: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: ynRpXZGmVceBMQx25RkW+LRXIrRmRVCK0pAGR+60GBM=) 3: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: qQKLwedn/C2ikUUx4cT43tzL687XdUpFednnBntiEcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: Sep 23 03:35:32 2026 GMT Not After : Sep 30 03:35:32 2026 GMT Subject: CN=6ab34904-666e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:c3:1a:36:ec:01:89:4f:73:48:7c:54:e3: 0e:d2:6d:20:cf:73:18:d6:96:49:a2:4a:39:04:f9: 67:47:e4:a7:61:1c:54:5f:08:db:2c:5c:98:f1:69: bb:f4:eb:65:54:f3:35:d9:7e:f2:ed:da:55:7c:53: 99:07:71:8d:5a:cb:23:7c:02:5b:e6:84:86:2e:82: 51:2b:41:5d:8b:ae:c8:dc:5d:45:9a:8e:55:f0:92: bc:18:bd:20:ad:1b:4e:48:64:b4:05:e7:4a:db:9b: 5f:d4:96:09:48:05:55:00:56:2a:98:c0:14:40:86: 5d:2f:0d:7e:9d:77:f0:65:38:02:df:e7:ad:3e:ea: 82:34:f6:66:4b:97:32:49:89:2b:65:ee:90:43:51: 7e:31:1f:d1:94:95:00:b8:91:9f:c3:cb:a6:78:e5: 75:12:f1:f9:8a:cc:ae:5c:9a:3c:5b:53:e7:d0:1d: d8:b8:73:1c:b9:63:00:c2:c8:72:6a:9d:97:47:80: 6e:9a:d7:54:fc:77:d0:47:98:30:c4:79:03:d2:3c: c3:96:fe:f8:47:06:12:c6:94:3a:fc:50:94:a1:c3: cc:9b:e6:0e:4e:af:4c:65:4e:fd:4d:c3:f3:8a:51: 45:2e:e2:62:0d:81:74:f7:9f:e6:f0:87:21:c7:ab: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:23:B4:45:D1:5B:D8:8A:B5:3E:B2:9B:B9:93:2C:76:AF:48:E5 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:45:bc:0d:cb:72:49:be:89:d3:d4:ec:49:ec:32:70:86:1d: 46:86:07:bf:e1:a5:87:6a:4d:44:0c:d3:ef:2e:6e:55:7b:e9: be:e5:f0:22:ee:75:48:76:31:97:80:55:43:2a:fc:16:9a:42: 84:1b:01:70:e4:4f:d3:42:77:d4:75:72:51:69:43:df:4a:a5: 2b:d1:05:f4:68:f0:f5:a5:82:7c:30:8a:37:a9:1d:b0:22:44: 77:6f:d9:98:10:58:89:0c:a6:c9:72:f1:80:91:00:27:ee:a5: 03:d8:f7:35:f7:2f:1b:55:6f:c7:1c:16:e2:ac:85:dc:28:78: 9d:bb:fb:1f:8a:c1:d0:33:43:5d:3d:8d:a6:c0:4f:f7:6e:35: 6d:17:25:81:2b:1f:8a:47:d1:71:cd:61:d1:fc:27:4f:13:94: ea:5c:ec:80:e5:d6:0c:6e:c0:91:28:64:09:d1:ab:d6:ad:98: ca:66:3a:c9:dc:54:50:1b:32:15:8c:7a:a1:ab:89:5e:b3:2e: 37:e6:f0:a1:bc:1a:cd:7c:ce:11:3c:45:dd:15:fc:a9:13:f1: a4:44:6b:b8:c4:b5:32:9c:e5:35:32:ac:3b:c4:d3:db:ef:50: c9:4d:ed:39:e9:22:ca:84:45:c7:bd:4d:58:26:ba:c1:31:ba: 9d:1b:ee:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjYwOTIzMDMzNTMyWhcNMjYwOTMwMDMzNTMyWjAYMRYwFAYD VQQDEw02YWIzNDkwNC02NjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7evDGjbsAYlPc0h8VOMO0m0gz3MY1pZJoko5BPlnR+SnYRxUXwjbLFyY8Wm7 9OtlVPM12X7y7dpVfFOZB3GNWssjfAJb5oSGLoJRK0Fdi67I3F1Fmo5V8JK8GL0g rRtOSGS0BedK25tf1JYJSAVVAFYqmMAUQIZdLw1+nXfwZTgC3+etPuqCNPZmS5cy SYkrZe6QQ1F+MR/RlJUAuJGfw8umeOV1EvH5isyuXJo8W1Pn0B3YuHMcuWMAwshy ap2XR4BumtdU/HfQR5gwxHkD0jzDlv74RwYSxpQ6/FCUocPMm+YOTq9MZU79TcPz ilFFLuJiDYF095/m8Ichx6vKAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFME/I7RF 0VvYirU+spu5kyx2r0jlMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKkW8DctySb6J09TsSewycIYdRoYHv+Glh2pNRAzT7y5uVXvpvuXwIu51SHYx l4BVQyr8FppChBsBcORP00J31HVyUWlD30qlK9EF9Gjw9aWCfDCKN6kdsCJEd2/Z mBBYiQymyXLxgJEAJ+6lA9j3NfcvG1VvxxwW4qyF3Ch4nbv7H4rB0DNDXT2NpsBP 9241bRclgSsfikfRcc1h0fwnTxOU6lzsgOXWDG7AkShkCdGr1q2YymY6ydxUUBsy FYx6oauJXrMuN+bwobwazXzOETxF3RX8qRPxpERruMS1MpzlNTKsO8TT2+9QyU3t OekiyoRFx71NWCa6wTG6nRvuMw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:28:34 2026 by rpki-client