$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: qx5lwDZyA0RqPnQ0q2KpSTa/YcKTHqtEaztJfjgfrfk= Subject key identifier: 1D:65:71:8C:28:1C:45:C8:E4:BD:91:61:70:31:B5:6C:D6:FE:B8:B9 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 025C Signing time: Sun 27 Sep 2026 02:43:45 +0000 Manifest this update: Sun 27 Sep 2026 02:43:44 +0000 Manifest next update: Sun 04 Oct 2026 02:43:44 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: mwfrsgGFGIV6qk4/BBsk959IPlppUQHj1JYBoN1ZEmw=) 2: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: VMT1xU70dE5HYB1EHd2Tb1ASm0RRDcnimQ+3IrrOZ7g=) 3: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: iXBfomCkV4xNH1cYbzZuww9SUUgCW5qk20yC43URNok=) 4: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: 170jykPgfx0s5CIB7KCfpg6Av4bJnDZ6uSGDY5UfwZQ=) 5: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: P3O7u+qRGn1bwR58h4CF4ybrJlg7WXxzi0HEWNF1wU8=) 6: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: V/7VSGMl5ikCm95Tbf+xqFXER+QUdiwbSFx6fNdYM2Y=) 7: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: kTWCQH3l0WWzLGhSEAUO4J7QO5Yg3xSjvZflpuriZzI=) 8: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: OsNJpFKmHPyfNeh8koHIfP2TRZRKEPMZ5UDUwZ4ntLI=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: /RmusU5UC3h4mIZxyyVvzpFaDdQyB/V1AfNpSxG2USc=) 10: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: vbQDLMrS8rOq+qQeyQoAROFt0AaGqDcf1/1F1wwGpXo=) 11: E9874B2A16D011EF90793868C4F9AE02.roa (hash: StFMy3NKhkaFCNdoWKE6eyzBLd+skcdMmjgC62pSh+8=) 12: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: U9Cn0ELdUyS5NVvWmDLivz50FWKKV0p0b8inagt4fog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Sep 27 02:43:44 2026 GMT Not After : Oct 4 02:43:44 2026 GMT Subject: CN=6ab882e1-566d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:b3:45:ff:a4:b9:82:d2:1e:c5:dd:b3:0c: 13:46:83:91:c5:8b:d3:a9:09:b6:02:24:d8:27:98: e7:93:6c:67:53:c8:46:7f:d4:40:89:af:26:41:f6: f7:73:a3:72:d7:22:84:bf:33:69:c6:59:e1:ca:97: ca:3e:5a:26:81:78:54:c0:1e:83:e7:6e:57:00:05: 43:d2:30:2e:da:20:61:74:1e:0e:65:60:e3:9a:ec: f6:5e:b3:56:fe:85:c8:6b:d4:d5:f8:23:55:55:16: ca:bf:15:06:eb:36:6a:4b:ef:1d:1e:02:15:3c:6c: bc:64:52:35:2b:83:a2:80:bc:45:0f:4e:8d:b2:8a: d0:a9:b2:c4:cf:54:87:70:7b:51:72:87:85:48:52: 79:e4:76:7c:75:f7:af:a7:bd:30:90:51:a0:6e:c2: 2b:71:68:cb:d9:bb:9f:bc:15:49:b5:33:35:95:65: 87:88:35:38:ae:5d:2f:d7:ab:1c:a7:e9:de:04:4a: 4b:52:e4:d4:b4:a2:2f:74:3f:09:ef:f0:15:ca:60: 25:f2:09:b6:e6:11:ec:a3:0c:87:a5:11:81:64:25: 08:97:4d:e6:f0:61:4b:f3:4e:b2:75:f7:98:84:e4: 0f:5f:65:d4:51:ed:79:da:f6:bb:ec:f5:66:9b:c1: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:71:8C:28:1C:45:C8:E4:BD:91:61:70:31:B5:6C:D6:FE:B8:B9 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:76:19:8c:88:db:01:2a:1b:42:4a:30:e3:85:e9:cb:81: 13:eb:1f:c4:41:6d:3c:0e:fc:7b:bb:1b:b9:e2:f4:00:bd:3c: b2:0d:c9:5c:55:b8:41:af:5b:1f:4f:0f:cc:a9:29:1f:45:14: 24:56:dd:55:2c:b5:0e:36:cf:d2:b1:ec:a5:91:1c:b7:31:26: 36:ef:78:78:d2:0d:7c:b8:74:f4:3a:10:4c:3c:f7:8d:c3:39: 5d:04:52:31:3b:3c:76:b5:b4:9c:09:87:e8:41:31:37:7d:5a: 73:eb:e5:7a:53:d8:88:93:29:49:ff:51:3f:44:f5:1b:62:ac: fe:66:29:01:d3:8a:4d:15:39:c4:52:d9:7d:d5:b2:cc:bb:71: 3f:6b:89:a5:0f:7c:2b:b5:4b:c1:55:30:10:db:7e:ee:3b:9c: 9c:a9:a9:3c:77:36:26:8e:ce:2f:f8:56:62:ec:54:81:3e:a7: e2:e9:09:05:7b:8a:24:68:9d:70:c2:a8:f4:a1:e4:3e:ad:57: a1:66:a5:81:3e:e8:1c:de:b1:68:c0:7c:bc:bb:f6:e5:72:2c: 8b:ad:1a:56:89:be:40:09:7e:bf:49:86:e7:28:82:3d:b3:a6: 14:98:ca:f7:b7:ee:37:d3:c5:e3:f4:f7:f8:e5:92:23:bd:70: e8:ed:eb:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjYwOTI3MDI0MzQ0WhcNMjYxMDA0MDI0MzQ0WjAYMRYwFAYD VQQDEw02YWI4ODJlMS01NjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtOzRf+kuYLSHsXdswwTRoORxYvTqQm2AiTYJ5jnk2xnU8hGf9RAia8mQfb3 c6Ny1yKEvzNpxlnhypfKPlomgXhUwB6D525XAAVD0jAu2iBhdB4OZWDjmuz2XrNW /oXIa9TV+CNVVRbKvxUG6zZqS+8dHgIVPGy8ZFI1K4OigLxFD06NsorQqbLEz1SH cHtRcoeFSFJ55HZ8dfevp70wkFGgbsIrcWjL2bufvBVJtTM1lWWHiDU4rl0v16sc p+neBEpLUuTUtKIvdD8J7/AVymAl8gm25hHsowyHpRGBZCUIl03m8GFL806ydfeY hOQPX2XUUe152va77PVmm8Gd6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1lcYwo HEXI5L2RYXAxtWzW/ri5MB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqY52GYyI2wEqG0JKMOOF6cuBE+sfxEFtPA78e7sbueL0AL08sg3JXFW4Qa9b H08PzKkpH0UUJFbdVSy1DjbP0rHspZEctzEmNu94eNINfLh09DoQTDz3jcM5XQRS MTs8drW0nAmH6EExN31ac+vlelPYiJMpSf9RP0T1G2Ks/mYpAdOKTRU5xFLZfdWy zLtxP2uJpQ98K7VLwVUwENt+7jucnKmpPHc2Jo7OL/hWYuxUgT6n4ukJBXuKJGid cMKo9KHkPq1XoWalgT7oHN6xaMB8vLv25XIsi60aVom+QAl+v0mG5yiCPbOmFJjK 97fuN9PF4/T3+OWSI71w6O3r8g== -----END CERTIFICATE-----Generated at Mon Sep 28 16:23:06 2026 by rpki-client