$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json) Hash identifier: TVHWWb31PeS+x2FPJ2tpJUSLZN18QO4Gmm+uzzmCbrw= Subject key identifier: 89:08:3D:30:94:FE:85:A3:A2:F3:52:22:13:08:B3:B2:33:07:C7:AB Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft Manifest number: 7B Signing time: Mon 05 Oct 2026 08:13:49 +0000 Manifest this update: Mon 05 Oct 2026 08:13:49 +0000 Manifest next update: Mon 12 Oct 2026 08:13:49 +0000 Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: 3OX842//oU4OoVrFKMBCs4l7LcgEeEt+lzh6IoKfSO0=) 2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: Oct 5 08:13:49 2026 GMT Not After : Oct 12 08:13:49 2026 GMT Subject: CN=6ac35c3d-9d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:e6:63:b9:3b:3a:86:f1:76:ef:2c:d7:a7: c8:02:81:24:5a:c6:60:2d:c1:b5:0d:2d:17:cb:0f: cb:01:af:ef:76:f7:d9:b7:ff:7e:11:e9:9f:3c:8e: ae:df:1d:59:e5:ba:f3:f1:c6:46:fb:12:18:b3:92: 02:3a:2b:16:ff:68:f1:50:76:c5:26:76:90:8c:a9: 5d:b0:80:0c:3e:a4:4c:ff:a6:a2:52:b7:d1:6f:91: 9c:b7:56:36:f6:a4:60:98:84:de:f9:39:22:e9:02: ad:19:6a:9e:35:30:26:13:98:32:52:2d:26:84:1e: 91:f5:15:4f:77:c2:10:b2:28:e7:e4:e1:7e:ba:dc: 8a:57:f2:9e:30:cf:ec:7d:5b:8f:0b:e1:96:10:d5: 64:68:3d:79:3f:bb:d7:82:ac:e6:1d:04:a4:94:fc: a9:2b:35:11:76:ff:a8:0e:0d:c2:83:13:20:33:3f: ce:9d:eb:86:2c:13:62:8e:8e:f7:21:f4:4a:c2:c8: 0f:c1:bf:7c:82:90:38:d0:69:9b:be:04:68:a0:86: 37:18:e5:e0:c4:fd:32:71:af:7a:73:36:d0:9e:02: d7:f5:fc:c7:01:d2:6e:cb:03:17:80:dc:aa:d2:cc: 67:f0:77:f7:3b:45:7a:84:fe:00:b1:20:c9:a9:b6: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:3D:30:94:FE:85:A3:A2:F3:52:22:13:08:B3:B2:33:07:C7:AB X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:68:3d:55:ff:cf:46:71:df:e3:9d:81:ed:99:ee:4f:3b:cd: 6f:0d:fe:01:ac:67:70:f5:77:36:b6:a4:7d:68:3b:b0:5b:30: 47:28:9f:30:fb:df:48:55:1d:f6:dc:f2:d0:1e:1a:66:42:5f: a3:33:91:6c:f5:58:34:de:d3:76:00:67:a1:99:63:ab:ef:d9: 81:a3:fa:66:4f:54:af:c6:43:24:b2:e6:63:c5:6e:7b:f4:d7: 78:f6:83:29:4a:01:35:dc:42:7d:83:b8:98:0b:02:cc:6a:42: c2:af:22:10:c3:e8:6c:99:60:3a:53:90:f0:4a:c7:1f:0f:6e: f5:6c:90:6f:e0:e4:1e:be:e5:21:f6:fd:f0:ee:f3:58:4f:75: 81:dc:15:0a:b4:b3:fc:99:1e:ff:cc:68:c8:7b:55:9d:93:3e: 29:74:7f:7a:11:1b:73:97:2a:1a:2b:70:f7:a9:f8:21:f5:8a: 0c:13:40:38:57:96:2f:6e:c7:8d:7d:e1:44:34:dc:4a:13:58: 0f:3f:e6:ee:c1:f3:57:99:34:30:70:5b:2e:97:cd:e9:60:46: e4:3e:51:b2:10:9c:c6:a7:50:9e:1b:aa:0b:0f:19:f5:f8:52: 28:cd:10:6c:87:8b:86:d1:2a:6b:c0:cb:86:08:02:32:48:3a: 56:5a:0f:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjEwMDUwODEzNDlaFw0yNjEwMTIwODEzNDlaMBgxFjAUBgNV BAMTDTZhYzM1YzNkLTlkOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUluZjuTs6hvF27yzXp8gCgSRaxmAtwbUNLRfLD8sBr+9299m3/34R6Z88jq7f HVnluvPxxkb7EhizkgI6Kxb/aPFQdsUmdpCMqV2wgAw+pEz/pqJSt9FvkZy3Vjb2 pGCYhN75OSLpAq0Zap41MCYTmDJSLSaEHpH1FU93whCyKOfk4X663IpX8p4wz+x9 W48L4ZYQ1WRoPXk/u9eCrOYdBKSU/KkrNRF2/6gODcKDEyAzP86d64YsE2KOjvch 9ErCyA/Bv3yCkDjQaZu+BGighjcY5eDE/TJxr3pzNtCeAtf1/McB0m7LAxeA3KrS zGfwd/c7RXqE/gCxIMmptk19AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiQg9MJT+ haOi81IiEwizsjMHx6swHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NkIxL0Y0QTkxNTdBMDg4QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRv WVJCb3FjT0JSU3NsOFFFMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0aD1V/89Gcd/jnYHtme5PO81vDf4BrGdw9Xc2tqR9aDuwWzBHKJ8w+99IVR32 3PLQHhpmQl+jM5Fs9Vg03tN2AGehmWOr79mBo/pmT1SvxkMksuZjxW579Nd49oMp SgE13EJ9g7iYCwLMakLCryIQw+hsmWA6U5DwSscfD271bJBv4OQevuUh9v3w7vNY T3WB3BUKtLP8mR7/zGjIe1Wdkz4pdH96ERtzlyoaK3D3qfgh9YoME0A4V5YvbseN feFENNxKE1gPP+buwfNXmTQwcFsul83pYEbkPlGyEJzGp1CeG6oLDxn1+FIozRBs h4uG0SprwMuGCAIySDpWWg/q -----END CERTIFICATE-----Generated at Tue Oct 6 15:36:30 2026 by rpki-client