$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: uZ5CniuJu5qKj73fQvmMY9vM9Jx78zcOVqETblI2bkk= Subject key identifier: 0C:73:7B:B6:89:0B:BD:3D:FE:71:63:B3:80:6B:BD:D1:35:B7:38:C9 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0DA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0D97 Signing time: Tue 22 Sep 2026 17:49:49 +0000 Manifest this update: Tue 22 Sep 2026 17:49:49 +0000 Manifest next update: Tue 29 Sep 2026 17:49:49 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: CBjTvKrWOVyy56pYDqOTRcRYXPpERlQexrV0Esv7sms=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: fffjJpFpj/z4UNsYvzkaYrSCN55neJCtG8ZFfHxTto8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3491 (0xda3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Sep 22 17:49:49 2026 GMT Not After : Sep 29 17:49:49 2026 GMT Subject: CN=6ab2bfbd-5a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:7e:9d:5b:f9:91:4e:49:05:b8:5a:e4:ec: b2:87:49:40:17:ba:dc:f7:cc:09:5b:fa:11:7f:d9: b0:2c:3d:e8:a7:e7:4d:03:6c:32:8b:d2:b2:74:84: d7:c0:96:83:d0:61:15:6c:87:18:16:6d:69:bc:1d: 2d:5d:8c:a1:c2:64:8a:02:64:76:a6:6b:09:d5:3b: 35:01:65:5f:82:80:4d:14:c9:ee:8b:4e:8f:6c:b5: a2:fa:66:79:44:22:f2:b0:e1:0a:da:b4:9e:78:68: 47:c9:a0:66:4e:e6:b2:e1:f1:ca:f6:37:60:f7:f3: 38:df:14:73:98:7b:78:3f:19:0b:b6:ec:28:db:9f: 8c:b6:f1:6c:f9:df:ec:a0:3a:72:dc:92:46:51:5d: 4f:76:e3:30:20:9e:d0:fe:16:cd:82:02:d3:fe:f2: e9:c1:c9:8d:f7:5d:52:1d:e7:d9:bb:5c:f2:1d:5f: 74:96:19:a5:81:0d:5a:07:3e:4c:df:3a:80:0c:db: 4c:74:a5:c1:1a:a3:5d:f6:3c:83:37:41:f5:a7:bf: 22:13:2b:6f:ee:4e:62:b8:a1:45:04:e0:a2:6a:f2: b2:37:ff:24:30:e9:a6:45:7d:53:a5:a5:40:2a:ed: c3:af:46:f0:a5:c6:f5:bf:62:05:22:74:5b:91:df: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:7B:B6:89:0B:BD:3D:FE:71:63:B3:80:6B:BD:D1:35:B7:38:C9 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:2d:77:48:19:3a:04:14:39:f6:3b:81:25:22:c4:1d:d4:f3: b5:65:7c:2a:8e:d3:2c:d1:ca:0c:32:20:73:f4:30:bc:da:e2: 0c:7f:67:3d:fb:bf:c9:ab:1e:8f:0e:5a:1c:37:00:e8:e8:af: 04:c8:79:a7:17:18:b2:bf:89:ba:75:29:89:fe:e5:91:87:a9: d2:90:72:df:26:ff:84:9b:b1:db:17:ec:8a:63:93:04:bf:f1: f2:71:1f:b1:59:62:7d:a5:d2:2f:ba:7e:4b:02:93:41:5e:08: f3:31:3f:61:69:24:bc:8b:ce:2b:8e:2f:6a:d8:11:6c:ff:f9: 59:07:73:91:0b:b1:87:1b:1e:23:c2:d9:f1:27:e7:ec:ec:44: 81:48:ae:4e:e8:9a:0e:99:11:f4:47:07:90:a2:7b:2a:92:24: 61:60:69:38:de:4f:d3:00:7d:5c:bb:e4:29:fd:12:fe:32:d5: 6b:e5:2d:03:f8:47:97:00:96:aa:cb:80:01:a3:25:5d:95:b1: 52:7d:30:20:fd:39:b7:f5:d5:b8:51:bc:93:b9:48:0a:3a:a5: 07:6e:04:fe:95:a3:bf:de:c8:9f:fd:91:c6:51:79:c9:83:39: 0f:60:d8:dc:ca:8e:fe:31:bf:13:98:f7:87:e7:f0:fa:90:6f: 0e:94:b6:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjYwOTIyMTc0OTQ5WhcNMjYwOTI5MTc0OTQ5WjAYMRYwFAYD VQQDEw02YWIyYmZiZC01YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviF+nVv5kU5JBbha5Oyyh0lAF7rc98wJW/oRf9mwLD3op+dNA2wyi9KydITX wJaD0GEVbIcYFm1pvB0tXYyhwmSKAmR2pmsJ1Ts1AWVfgoBNFMnui06PbLWi+mZ5 RCLysOEK2rSeeGhHyaBmTuay4fHK9jdg9/M43xRzmHt4PxkLtuwo25+MtvFs+d/s oDpy3JJGUV1PduMwIJ7Q/hbNggLT/vLpwcmN911SHefZu1zyHV90lhmlgQ1aBz5M 3zqADNtMdKXBGqNd9jyDN0H1p78iEytv7k5iuKFFBOCiavKyN/8kMOmmRX1TpaVA Ku3Dr0bwpcb1v2IFInRbkd8bAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxze7aJ C709/nFjs4BrvdE1tzjJMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2i13SBk6BBQ59juBJSLEHdTztWV8Ko7TLNHKDDIgc/QwvNriDH9nPfu/yase jw5aHDcA6OivBMh5pxcYsr+JunUpif7lkYep0pBy3yb/hJux2xfsimOTBL/x8nEf sVlifaXSL7p+SwKTQV4I8zE/YWkkvIvOK44vatgRbP/5WQdzkQuxhxseI8LZ8Sfn 7OxEgUiuTuiaDpkR9EcHkKJ7KpIkYWBpON5P0wB9XLvkKf0S/jLVa+UtA/hHlwCW qsuAAaMlXZWxUn0wIP05t/XVuFG8k7lICjqlB24E/pWjv97In/2RxlF5yYM5D2DY 3MqO/jG/E5j3h+fw+pBvDpS23g== -----END CERTIFICATE-----Generated at Thu Sep 24 09:42:58 2026 by rpki-client