$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json) Hash identifier: lnCkRaG2GQaKuORjBUjgjLYgKgaqWIgo54vZ1CrWtwM= Subject key identifier: B6:20:0D:2F:C3:5A:19:08:EF:5E:6E:FC:BE:F9:69:36:D8:E6:DC:16 Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft Manifest number: 0AB1 Signing time: Tue 22 Sep 2026 19:20:44 +0000 Manifest this update: Tue 22 Sep 2026 19:20:44 +0000 Manifest next update: Tue 29 Sep 2026 19:20:44 +0000 Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: tbuIJsUwHmGkIfvmWXDZFK8gbJzx81HbaZThj1dyzvM=) 2: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=) 3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=) 4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Validity Not Before: Sep 22 19:20:44 2026 GMT Not After : Sep 29 19:20:44 2026 GMT Subject: CN=6ab2d50c-254c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:7a:5a:e0:f9:ee:f7:1b:46:c5:f5:d2:9d: f7:85:7f:e7:77:a5:28:e3:cb:4c:4d:9b:1f:a4:11: 2c:ad:52:f1:b6:b4:a1:65:5f:06:72:90:3f:41:dc: 70:ee:a1:53:a7:3b:29:29:b6:48:e7:58:0a:be:00: 1b:d3:6c:50:e2:e2:75:ec:c0:e6:43:c5:57:92:57: 66:c3:57:62:a3:57:3d:80:99:83:93:fd:6d:a7:3e: d6:ca:38:c4:58:82:ed:6a:96:78:c8:5a:e2:7a:84: ee:68:30:3f:f5:dc:1c:83:ef:3f:67:53:f0:b5:33: 0e:56:10:18:ce:29:7e:df:98:7b:c4:f3:2a:91:74: 19:2e:b1:c5:55:72:eb:f2:52:15:ee:80:29:1e:50: f9:c9:69:80:a9:60:d4:fe:a2:85:9a:0e:23:af:c5: 9f:bd:07:c8:6a:a7:f0:76:f1:1c:30:5b:11:eb:5e: 76:29:8b:73:99:89:92:58:28:ac:61:5a:99:6c:8e: bc:d2:23:12:fd:e5:82:89:99:80:8e:77:9b:bc:cb: 5d:04:00:d1:83:35:83:f1:c0:23:d6:d8:22:4c:3a: 2d:36:58:71:8b:56:c3:d0:c6:e7:f6:d0:10:73:14: e4:46:3c:d9:08:d9:29:04:7b:32:f3:34:51:77:80: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:0D:2F:C3:5A:19:08:EF:5E:6E:FC:BE:F9:69:36:D8:E6:DC:16 X509v3 Authority Key Identifier: keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:43:3f:38:e6:a8:18:82:f2:0d:21:1b:b3:9d:67:76:e7:20: 39:ab:91:77:50:0f:61:09:81:e1:bd:de:92:0b:a6:5f:6f:1c: d8:03:2c:fe:59:e2:13:af:58:38:4d:8d:1f:53:6a:e1:8f:90: 31:b8:72:b6:ba:34:41:f6:e5:34:14:a5:bd:c6:97:d5:d4:88: e6:6b:9f:6d:ad:5e:c6:fa:02:ec:cd:40:35:11:fc:8f:f9:43: 2a:6e:f3:76:3c:03:71:5f:5b:13:d1:09:5a:9e:c9:ce:ea:11: be:bc:c8:44:cd:d4:fb:13:c1:57:c2:f9:0f:89:cb:69:83:fe: ad:d0:99:9f:ed:ff:10:84:6a:b2:39:2c:8a:b2:32:e2:47:50: 88:0c:17:74:2f:0f:ab:3d:69:91:5d:bc:04:24:74:b8:02:35: 61:68:ca:3c:cd:5d:52:a8:5f:00:25:d7:c0:fc:19:14:1c:4a: 47:33:f1:96:b3:d1:3c:68:26:79:70:e1:0e:d0:53:73:f6:15: ba:2b:8b:db:0e:90:42:50:9d:da:3c:56:75:39:f6:59:e1:af: a5:27:c8:d5:48:e3:12:ee:9b:7e:9e:36:40:99:b2:68:19:7b: a8:be:a4:4c:2e:0c:0f:b9:d6:c8:fc:70:37:17:75:f1:d2:d7: 4a:d2:ba:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx RDZEOTc1OTIwHhcNMjYwOTIyMTkyMDQ0WhcNMjYwOTI5MTkyMDQ0WjAYMRYwFAYD VQQDEw02YWIyZDUwYy0yNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NF6WuD57vcbRsX10p33hX/nd6Uo48tMTZsfpBEsrVLxtrShZV8GcpA/Qdxw 7qFTpzspKbZI51gKvgAb02xQ4uJ17MDmQ8VXkldmw1dio1c9gJmDk/1tpz7WyjjE WILtapZ4yFrieoTuaDA/9dwcg+8/Z1PwtTMOVhAYzil+35h7xPMqkXQZLrHFVXLr 8lIV7oApHlD5yWmAqWDU/qKFmg4jr8WfvQfIaqfwdvEcMFsR6152KYtzmYmSWCis YVqZbI680iMS/eWCiZmAjnebvMtdBADRgzWD8cAj1tgiTDotNlhxi1bD0Mbn9tAQ cxTkRjzZCNkpBHsy8zRRd4CH0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYgDS/D WhkI715u/L75aTbY5twWMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0 RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy d3hkdUhmZE9rSWdkYlpkWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACUM/OOaoGILyDSEbs51nducgOauRd1APYQmB4b3ekgumX28c2AMs/lniE69Y OE2NH1Nq4Y+QMbhytro0QfblNBSlvcaX1dSI5mufba1exvoC7M1ANRH8j/lDKm7z djwDcV9bE9EJWp7JzuoRvrzIRM3U+xPBV8L5D4nLaYP+rdCZn+3/EIRqsjksirIy 4kdQiAwXdC8Pqz1pkV28BCR0uAI1YWjKPM1dUqhfACXXwPwZFBxKRzPxlrPRPGgm eXDhDtBTc/YVuiuL2w6QQlCd2jxWdTn2WeGvpSfI1UjjEu6bfp42QJmyaBl7qL6k TC4MD7nWyPxwNxd18dLXStK6+w== -----END CERTIFICATE-----Generated at Wed Sep 23 09:19:43 2026 by rpki-client