$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: rY3ckK8kHnUg0nHhJoCLk8mvj56jhBJPBoEKYFC38g4= Subject key identifier: BF:D6:E4:B9:EB:4D:3D:FE:E9:A4:14:58:C1:67:1A:0B:EA:70:37:2D Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 06A7 Signing time: Tue 22 Sep 2026 22:08:52 +0000 Manifest this update: Tue 22 Sep 2026 22:08:52 +0000 Manifest next update: Tue 29 Sep 2026 22:08:52 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: nnQt7qsMhDpd8iJCLU87eCqscvv7M2lVlmk4H9/Xpv8=) 2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) 4: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Sep 22 22:08:52 2026 GMT Not After : Sep 29 22:08:52 2026 GMT Subject: CN=6ab2fc74-79eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:dd:23:bd:16:02:be:45:38:f5:c4:78:2d: e3:54:1e:9f:1f:88:91:fa:42:11:a7:53:10:cc:60: 2d:a2:fc:4b:33:b6:23:f1:43:eb:0a:f8:c2:84:9a: 10:07:6f:5a:04:61:4b:d1:4c:b5:d5:ea:14:a8:23: c4:19:15:5f:f7:99:31:fd:d4:19:e1:2c:71:ee:78: e5:3b:28:19:2c:b7:b7:c7:d6:88:10:79:d9:8b:53: c1:7a:64:a6:74:9a:09:2c:7b:ca:02:4f:a5:a4:e9: 34:a9:ff:52:0c:f2:fd:f1:29:02:67:c4:65:1b:8c: a2:49:8c:33:3f:39:69:44:f1:30:be:8a:d3:d8:23: b7:9e:ba:2b:da:33:ec:3b:66:3c:36:46:51:22:f6: ef:4a:5f:31:7f:8d:09:96:6f:53:f8:21:d0:cb:fa: f9:10:13:75:d1:3b:3f:71:60:f4:f1:35:5d:0f:2f: aa:6e:c5:59:f7:fe:0f:ce:0b:de:c2:a7:bb:92:00: d8:73:79:24:cf:c2:d3:87:0a:65:da:1f:20:e6:15: 3b:7e:c1:a3:8f:b5:89:68:3d:36:15:b6:75:be:a7: 20:a3:21:f9:5f:db:01:01:df:97:13:7c:a7:c2:c2: 2f:cb:2a:e0:e4:b8:45:1b:6e:ad:c7:0f:b7:15:81: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D6:E4:B9:EB:4D:3D:FE:E9:A4:14:58:C1:67:1A:0B:EA:70:37:2D X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:96:9c:87:5f:46:9a:cd:6f:d0:c6:20:af:e3:d9:5c:fa:f4: 1f:ac:f2:34:de:4c:b7:cf:6c:51:66:df:87:ae:0d:8a:20:eb: a1:d5:41:1d:af:dd:56:b8:82:47:5f:09:02:24:7e:5d:ed:b8: 73:61:9b:a3:f4:03:b0:64:fe:63:ba:90:c6:0c:f7:0c:4a:c3: ff:d8:dd:1a:5e:78:20:c6:1e:60:58:bb:f3:53:d6:89:53:c6: 25:81:f4:06:69:94:ac:cf:22:50:84:07:37:d8:20:7c:8d:ab: 0b:43:70:3d:c9:79:d2:cc:55:c1:cd:0a:47:11:35:35:5c:5a: f2:fc:80:57:ae:a9:c2:1e:ee:54:72:c4:6d:1f:41:47:0d:a5: 54:a7:38:db:24:1d:f3:8d:7e:d1:8d:e7:57:43:fa:a9:7f:85: f7:87:95:21:df:d8:e2:c9:51:9a:0d:f6:b8:2b:d4:ca:17:2c: 21:a9:89:9f:d5:7a:fb:ca:0b:2e:51:89:e1:51:83:aa:f8:35: 74:38:ab:47:5f:6f:06:3d:3c:18:2a:7d:1f:91:3d:ae:ec:86: e2:c2:68:8e:62:08:99:b8:38:38:4e:37:e1:43:76:25:ea:ad: fc:62:91:5e:5a:94:10:ae:3d:3d:b4:a4:b0:04:c3:10:ee:79: b7:0e:5b:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwOTIyMjIwODUyWhcNMjYwOTI5MjIwODUyWjAYMRYwFAYD VQQDEw02YWIyZmM3NC03OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18DdI70WAr5FOPXEeC3jVB6fH4iR+kIRp1MQzGAtovxLM7Yj8UPrCvjChJoQ B29aBGFL0Uy11eoUqCPEGRVf95kx/dQZ4Sxx7njlOygZLLe3x9aIEHnZi1PBemSm dJoJLHvKAk+lpOk0qf9SDPL98SkCZ8RlG4yiSYwzPzlpRPEwvorT2CO3nror2jPs O2Y8NkZRIvbvSl8xf40Jlm9T+CHQy/r5EBN10Ts/cWD08TVdDy+qbsVZ9/4Pzgve wqe7kgDYc3kkz8LThwpl2h8g5hU7fsGjj7WJaD02FbZ1vqcgoyH5X9sBAd+XE3yn wsIvyyrg5LhFG26txw+3FYEr5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/W5Lnr TT3+6aQUWMFnGgvqcDctMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf5ach19Gms1v0MYgr+PZXPr0H6zyNN5Mt89sUWbfh64NiiDrodVBHa/dVriC R18JAiR+Xe24c2Gbo/QDsGT+Y7qQxgz3DErD/9jdGl54IMYeYFi781PWiVPGJYH0 BmmUrM8iUIQHN9ggfI2rC0NwPcl50sxVwc0KRxE1NVxa8vyAV66pwh7uVHLEbR9B Rw2lVKc42yQd841+0Y3nV0P6qX+F94eVId/Y4slRmg32uCvUyhcsIamJn9V6+8oL LlGJ4VGDqvg1dDirR19vBj08GCp9H5E9ruyG4sJojmIImbg4OE434UN2Jeqt/GKR XlqUEK49PbSksATDEO55tw5bUQ== -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:57 2026 by rpki-client