$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: suy5sMsqWBBpifrHkfGhVQJ5beBzt6ZkJ234f8I+Td4= Subject key identifier: C3:7D:AB:74:A5:D9:3F:A0:2E:76:B7:50:E6:C5:A3:34:BD:2A:58:38 Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 8B Signing time: Mon 21 Sep 2026 07:34:57 +0000 Manifest this update: Mon 21 Sep 2026 07:34:57 +0000 Manifest next update: Mon 28 Sep 2026 07:34:57 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: zxF1Xwd1xMHOHTzCs95J0rNzyCW/4HaQW4bpcQVzfDY=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: Sep 21 07:34:57 2026 GMT Not After : Sep 28 07:34:57 2026 GMT Subject: CN=6ab0de21-f187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:9f:6e:97:28:38:19:33:b5:88:65:59:22: 18:ca:45:88:9a:af:ae:5c:48:77:b2:50:c7:b5:82: c3:f2:bf:a6:9e:fc:ee:c5:62:94:b6:1d:82:1d:0d: b8:7b:d6:16:d2:c3:6a:43:5c:ef:fd:b7:74:cb:e6: 2a:d5:4c:e5:2e:af:c9:c0:65:72:80:29:41:f7:aa: 87:99:b8:51:40:ee:c9:3f:81:f7:cf:a9:0f:cf:86: 50:00:a7:e1:55:98:99:eb:61:45:4a:01:59:0a:c1: a4:36:de:1b:46:e7:8a:99:12:b6:ce:d8:40:64:f7: ee:0c:bf:b7:a6:bf:1a:ca:12:05:f1:2d:67:7b:8d: bf:8c:65:2a:39:f6:2c:77:dc:f1:31:44:6a:b0:89: 19:58:a4:22:0f:b4:51:58:54:0f:02:56:53:66:7c: a5:54:03:e1:71:8f:0d:d9:04:74:5f:e8:7e:4a:b7: 10:84:1c:2d:df:37:62:25:a0:c4:2f:cb:09:54:49: 23:25:1c:4d:10:69:f5:57:a6:19:1d:e7:c2:2b:54: a6:b2:b2:eb:2a:49:0c:c6:6d:d3:c1:ea:21:86:e2: e4:1e:69:9f:a3:c9:3f:16:bb:5e:a0:83:89:41:31: fa:22:fb:00:33:bf:db:23:25:72:11:85:eb:58:92: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7D:AB:74:A5:D9:3F:A0:2E:76:B7:50:E6:C5:A3:34:BD:2A:58:38 X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5f:bd:5c:05:d6:7a:1f:9c:2d:b6:45:96:7a:12:c1:a0:57: a0:17:9c:58:06:04:9a:28:b2:e4:41:c3:56:78:90:40:5d:41: 36:4e:9d:55:b3:7d:da:58:43:7f:d5:a9:dd:be:da:ad:96:64: 42:6a:72:50:40:96:bb:76:12:cb:58:b4:24:20:0e:e3:9c:1f: 34:c7:2f:84:db:24:bd:84:2a:ac:ac:8f:a9:50:26:d6:4a:70: ca:be:57:51:a6:7a:e0:00:1b:27:5c:39:d9:bd:0a:2a:1f:b0: b8:16:45:1d:c7:f4:d2:b7:65:14:28:53:c1:04:d9:8a:d6:79: 71:c1:7c:e7:a0:bd:f0:13:ad:2b:09:d3:f9:f9:d0:1d:6b:13: 63:af:0c:de:78:9a:50:47:10:7f:6c:8c:a0:1a:62:e2:75:2b: de:20:f3:20:90:d7:26:33:d1:73:16:f6:9c:43:d1:47:3e:a9: 3f:46:83:f1:36:81:c6:e9:c1:5b:20:c1:44:b3:b9:e5:a7:40: 51:4d:bf:7e:63:08:85:d5:bb:05:70:d6:f4:ea:fa:48:aa:cd: 7e:b4:e9:89:38:70:8a:90:65:a4:14:bd:44:8e:23:0f:68:72: ef:d5:72:69:7e:46:4a:56:ff:a0:82:7f:98:cd:55:4a:34:c6: 13:ec:d7:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3MjAxMTAvBgNVBAUTKDBGNTQ2N0E5RDFFQjA5OEI1MkNDMTM5RDU3NDNCNDc0 NUJGNTkwNzUwHhcNMjYwOTIxMDczNDU3WhcNMjYwOTI4MDczNDU3WjAYMRYwFAYD VQQDEw02YWIwZGUyMS1mMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD6fbpcoOBkztYhlWSIYykWImq+uXEh3slDHtYLD8r+mnvzuxWKUth2CHQ24 e9YW0sNqQ1zv/bd0y+Yq1UzlLq/JwGVygClB96qHmbhRQO7JP4H3z6kPz4ZQAKfh VZiZ62FFSgFZCsGkNt4bRueKmRK2zthAZPfuDL+3pr8ayhIF8S1ne42/jGUqOfYs d9zxMURqsIkZWKQiD7RRWFQPAlZTZnylVAPhcY8N2QR0X+h+SrcQhBwt3zdiJaDE L8sJVEkjJRxNEGn1V6YZHefCK1SmsrLrKkkMxm3TweohhuLkHmmfo8k/FrteoIOJ QTH6IvsAM7/bIyVyEYXrWJIqVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMN9q3Sl 2T+gLna3UObFozS9Klg4MB8GA1UdIwQYMBaAFA9UZ6nR6wmLUswTnVdDtHRb9ZB1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTcyMC81MTlDMTA0RUU1 NTkxMUYwQjIyODg5NTgzODZGNTZCQy9EMVJucWRIckNZdFN6Qk9kVjBPMGRGdjFr SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTcyMC81MTlDMTA0RUU1NTkxMUYwQjIyODg5NTgzODZGNTZCQy9EMVJucWRIckNZ dFN6Qk9kVjBPMGRGdjFrSFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJF+9XAXWeh+cLbZFlnoSwaBXoBecWAYEmiiy5EHDVniQQF1BNk6dVbN92lhD f9Wp3b7arZZkQmpyUECWu3YSy1i0JCAO45wfNMcvhNskvYQqrKyPqVAm1kpwyr5X UaZ64AAbJ1w52b0KKh+wuBZFHcf00rdlFChTwQTZitZ5ccF856C98BOtKwnT+fnQ HWsTY68M3niaUEcQf2yMoBpi4nUr3iDzIJDXJjPRcxb2nEPRRz6pP0aD8TaBxunB WyDBRLO55adAUU2/fmMIhdW7BXDW9Or6SKrNfrTpiThwipBlpBS9RI4jD2hy79Vy aX5GSlb/oIJ/mM1VSjTGE+zXHQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:26:40 2026 by rpki-client