$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft File: E7pcaYHZl-kImp3nvIorcpwiE2g.mft (raw, json) Hash identifier: hwyBCvUa8nync3B4Ydl4ZBMAK93ShQ9RSmXxEOQgrHw= Subject key identifier: 83:81:5D:30:34:72:FC:29:C5:AE:B2:7E:92:78:30:4A:EF:FE:22:12 Authority key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68 Certificate issuer: /CN=A91AE7C5/serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft Manifest number: 68 Signing time: Fri 25 Sep 2026 08:07:03 +0000 Manifest this update: Fri 25 Sep 2026 08:07:03 +0000 Manifest next update: Fri 02 Oct 2026 08:07:03 +0000 Files and hashes: 1: E7pcaYHZl-kImp3nvIorcpwiE2g.crl (hash: 9esdigAZ6jHmMrQScD90e5IF3vO0U5Htt9m2ZpQz5iM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368 Validity Not Before: Sep 25 08:07:03 2026 GMT Not After : Oct 2 08:07:03 2026 GMT Subject: CN=6ab62ba7-b936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:8a:e8:c2:a3:0e:a8:ad:23:d0:38:3d:60: 5f:8e:5a:7f:74:9b:aa:e2:17:fc:da:e7:b2:fe:23: 88:6b:ef:d5:3e:b9:5a:34:c1:3e:25:ff:6f:6d:34: d0:2d:ae:eb:75:f4:33:b0:15:da:37:2b:6a:00:4d: f8:0e:3b:14:74:94:00:42:17:29:37:82:23:1b:79: 2e:73:02:f2:c8:d6:35:b3:fb:cf:85:27:ae:ae:5f: b2:5e:39:6c:57:1e:07:46:48:3a:42:dd:64:ee:9b: 2b:ed:8b:c0:f6:6c:fb:db:56:6b:98:56:a0:51:e0: 84:87:f1:14:8b:95:8b:5e:24:d8:f3:67:0d:9f:7f: eb:db:90:7f:9e:f4:c2:af:73:9e:12:81:73:69:b2: e7:7c:47:ff:97:47:3e:df:3b:78:4f:57:47:b2:38: e7:59:fd:47:fb:e9:5c:29:19:ba:d2:bd:a0:f3:a8: 92:ce:1d:07:00:5f:b1:68:13:91:e3:2a:1e:08:f8: e2:cd:6d:c3:7c:1f:6e:53:b9:03:c1:fa:a0:ae:b8: 79:83:40:46:6c:b4:3d:49:7f:a7:b8:74:9d:b7:de: 45:c4:42:63:ed:72:e1:29:52:94:33:1b:f1:76:4b: d8:fb:b6:57:a2:eb:0f:d3:79:3c:fa:56:80:4e:55: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:5D:30:34:72:FC:29:C5:AE:B2:7E:92:78:30:4A:EF:FE:22:12 X509v3 Authority Key Identifier: keyid:13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a6:ac:e9:5d:e0:5e:1f:f1:2c:74:49:76:9c:6e:4b:23:de: 58:64:c0:11:f5:57:b1:96:c4:9b:5c:2f:33:a5:ac:ad:06:c0: 0e:90:8c:c9:32:a4:2b:65:e8:a0:7e:e8:0d:83:0a:18:4d:7e: 21:76:e7:9b:9b:54:be:61:de:e1:b5:3a:d0:95:0a:03:df:f6: 6d:81:f9:85:c5:95:1c:fe:de:5e:7e:ad:40:69:89:b2:d4:3d: 16:5e:a3:65:4e:55:8e:23:ec:98:a1:f1:61:7f:6c:6d:71:5d: df:15:91:fb:c7:73:f7:b7:34:eb:f6:09:7e:4f:6b:78:2a:f5: ef:f6:23:a0:11:93:9d:ca:fd:bf:ed:b4:2f:42:9a:9c:8d:0b: d0:dd:e9:6c:f0:95:3d:80:e1:d4:2a:1e:66:3e:c1:ab:34:d4: 9e:2e:48:ba:65:84:26:6f:44:76:75:09:1d:90:8d:93:0d:39: 31:5a:5d:b7:b3:3b:86:73:79:bb:1e:90:45:65:df:51:57:23: 4c:95:63:43:5d:1b:a2:bc:0e:74:37:87:9d:c8:26:82:dd:46: 7d:14:2e:1a:4a:9a:62:a5:a0:29:e0:9e:ea:3d:d9:a5:ff:28: 12:bc:2e:2c:5d:ee:26:d2:03:ad:0a:77:cf:c0:61:b6:e6:77: 19:5d:68:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoMTNCQTVDNjk4MUQ5OTdFOTA4OUE5REU3QkM4QTJCNzI5 QzIyMTM2ODAeFw0yNjA5MjUwODA3MDNaFw0yNjEwMDIwODA3MDNaMBgxFjAUBgNV BAMTDTZhYjYyYmE3LWI5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdEorowqMOqK0j0Dg9YF+OWn90m6riF/za57L+I4hr79U+uVo0wT4l/29tNNAt rut19DOwFdo3K2oATfgOOxR0lABCFyk3giMbeS5zAvLI1jWz+8+FJ66uX7JeOWxX HgdGSDpC3WTumyvti8D2bPvbVmuYVqBR4ISH8RSLlYteJNjzZw2ff+vbkH+e9MKv c54SgXNpsud8R/+XRz7fO3hPV0eyOOdZ/Uf76VwpGbrSvaDzqJLOHQcAX7FoE5Hj Kh4I+OLNbcN8H25TuQPB+qCuuHmDQEZstD1Jf6e4dJ233kXEQmPtcuEpUpQzG/F2 S9j7tlei6w/TeTz6VoBOVZrZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUg4FdMDRy /CnFrrJ+kngwSu/+IhIwHwYDVR0jBBgwFoAUE7pcaYHZl+kImp3nvIorcpwiE2gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzE3QjFGRDQ0MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3L0U3cGNhWUhabC1rSW1wM252SW9yY3B3aUUy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTdwY2FZSFpsLWtJbXAzbnZJb3JjcHdpRTJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzE3QjFGRDQ0MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3L0U3cGNhWUhabC1r SW1wM252SW9yY3B3aUUyZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjpqzpXeBeH/EsdEl2nG5LI95YZMAR9VexlsSbXC8zpaytBsAOkIzJMqQrZeig fugNgwoYTX4hduebm1S+Yd7htTrQlQoD3/ZtgfmFxZUc/t5efq1AaYmy1D0WXqNl TlWOI+yYofFhf2xtcV3fFZH7x3P3tzTr9gl+T2t4KvXv9iOgEZOdyv2/7bQvQpqc jQvQ3els8JU9gOHUKh5mPsGrNNSeLki6ZYQmb0R2dQkdkI2TDTkxWl23szuGc3m7 HpBFZd9RVyNMlWNDXRuivA50N4edyCaC3UZ9FC4aSppipaAp4J7qPdml/ygSvC4s Xe4m0gOtCnfPwGG25ncZXWhE -----END CERTIFICATE-----Generated at Sat Sep 26 08:33:48 2026 by rpki-client