$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: kjdFi2uSMQwzajgzadpxFbstpkf2lg01/MogKnWfNR0= Subject key identifier: BD:BD:71:3A:3D:81:0F:14:22:DC:79:9F:22:3B:70:38:97:08:79:8B Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 35B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 3590 Signing time: Thu 24 Sep 2026 14:24:22 +0000 Manifest this update: Thu 24 Sep 2026 14:24:21 +0000 Manifest next update: Thu 01 Oct 2026 14:24:21 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: ub8midiNnEVMhNSWjqlQg73Qv1Kue7P6g2qPgk1y5K0=) 2: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: wACutP1f1rqOkMuUfI0y6o4RkmpusyPFR7IEkRsm+4E=) 3: 8CF6539E86FC11F194514C90ABEE528E.roa (hash: 4EONKVRgRQ2Go5fxovVPn9tWmBAdwnNdr7oDHnDjYAc=) 4: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13751 (0x35b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Sep 24 14:24:21 2026 GMT Not After : Oct 1 14:24:21 2026 GMT Subject: CN=6ab53296-6e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7d:0b:3e:90:23:a8:d1:3e:7f:1f:5c:af:8b: af:0d:0c:6f:63:9d:ab:94:de:da:a2:af:1b:9c:16: e4:05:c9:09:ea:1a:1e:38:98:c3:09:19:29:a9:97: 62:c5:1d:5a:08:77:07:ae:23:28:25:85:43:9e:4a: 25:e3:b0:cf:40:3e:59:36:cf:b9:53:69:ad:d8:10: 70:63:ce:ef:49:a4:bc:70:3d:ce:17:53:f8:42:d0: 24:7e:7d:6c:3d:b3:f4:d8:36:4a:aa:39:ea:fc:7b: 20:9d:fe:40:f3:5c:b3:b4:a9:09:44:db:3e:36:2c: 1d:b0:42:e3:5c:c2:b9:e5:5b:7b:94:21:8d:bc:1a: 06:d8:8e:de:ef:84:bc:1c:32:c8:f4:bf:16:19:6e: 8c:2a:84:5e:88:e5:d4:cb:ed:95:6e:97:3a:07:b6: 99:60:95:38:f6:f8:a1:ac:11:0a:af:31:58:c9:c8: 7b:9c:04:a5:6b:ae:01:f3:fc:df:ce:6b:74:00:eb: c2:4e:e7:c0:93:a0:ab:47:e5:d5:5d:55:41:77:0d: c6:61:a0:0e:44:2b:f7:02:53:45:59:cc:09:7b:eb: 2f:41:52:0c:5f:ba:19:04:5f:24:58:48:84:df:15: dc:ee:33:cd:b3:c6:4e:c0:ec:f2:ed:bc:5b:60:91: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BD:71:3A:3D:81:0F:14:22:DC:79:9F:22:3B:70:38:97:08:79:8B X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b4:59:a7:d0:55:39:33:0a:dc:86:65:b0:4b:e6:dc:7d:20: aa:9c:08:9f:da:98:bc:c8:dc:6a:e8:0b:37:6d:3f:93:7d:c7: 9f:5d:9b:a1:e6:3a:3f:da:e5:dd:0b:25:d1:93:59:b0:a7:39: f0:89:14:d9:e7:46:aa:ff:32:5f:46:ee:d0:12:53:63:68:a0: ea:96:89:c1:cf:6a:b0:da:b9:a7:cb:9d:26:59:c1:3e:95:5a: 62:e8:34:e2:ca:66:8f:98:b5:5d:27:fa:0e:18:dc:58:e2:29: 82:ab:4c:5d:f2:40:f2:fb:de:ef:d7:6f:5b:f1:1d:fe:9a:32: da:60:25:3d:be:0e:35:b6:dd:f5:e1:3e:ca:95:8d:44:77:be: dd:57:aa:9a:69:30:01:68:7e:5d:96:a1:db:e2:25:83:78:22: a3:3f:66:97:2f:0b:19:e1:22:95:13:b9:fc:e4:1d:dc:c6:82: f8:46:41:4d:31:21:c3:2d:32:d7:2c:13:e5:49:4e:20:73:a2: cf:7a:bf:2a:09:77:27:62:50:0d:4c:ab:b3:ed:02:b9:8c:dc: 46:dc:39:e1:15:59:b0:6f:e4:81:48:b6:d6:3a:fa:4c:60:95: 7e:cf:8d:19:6f:0c:38:cc:58:aa:92:d8:f9:1a:d9:a3:57:fc: 5b:64:d3:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjYwOTI0MTQyNDIxWhcNMjYxMDAxMTQyNDIxWjAYMRYwFAYD VQQDEw02YWI1MzI5Ni02ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H0LPpAjqNE+fx9cr4uvDQxvY52rlN7aoq8bnBbkBckJ6hoeOJjDCRkpqZdi xR1aCHcHriMoJYVDnkol47DPQD5ZNs+5U2mt2BBwY87vSaS8cD3OF1P4QtAkfn1s PbP02DZKqjnq/Hsgnf5A81yztKkJRNs+NiwdsELjXMK55Vt7lCGNvBoG2I7e74S8 HDLI9L8WGW6MKoReiOXUy+2Vbpc6B7aZYJU49vihrBEKrzFYych7nASla64B8/zf zmt0AOvCTufAk6CrR+XVXVVBdw3GYaAORCv3AlNFWcwJe+svQVIMX7oZBF8kWEiE 3xXc7jPNs8ZOwOzy7bxbYJGgaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL29cTo9 gQ8UItx5nyI7cDiXCHmLMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlLRZp9BVOTMK3IZlsEvm3H0gqpwIn9qYvMjcaugLN20/k33Hn12boeY6P9rl 3Qsl0ZNZsKc58IkU2edGqv8yX0bu0BJTY2ig6paJwc9qsNq5p8udJlnBPpVaYug0 4spmj5i1XSf6DhjcWOIpgqtMXfJA8vve79dvW/Ed/poy2mAlPb4ONbbd9eE+ypWN RHe+3VeqmmkwAWh+XZah2+Ilg3gioz9mly8LGeEilRO5/OQd3MaC+EZBTTEhwy0y 1ywT5UlOIHOiz3q/Kgl3J2JQDUyrs+0CuYzcRtw54RVZsG/kgUi21jr6TGCVfs+N GW8MOMxYqpLY+RrZo1f8W2TTsA== -----END CERTIFICATE-----Generated at Thu Sep 24 17:31:38 2026 by rpki-client