$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: hDYiPdgZJpseQxMwY2mkz8/w9npvzp2oLrpHkJoISpA= Subject key identifier: 5F:9E:A9:FC:BB:30:84:36:C2:0C:6D:EF:D5:4C:9D:ED:47:16:3C:55 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 0438 Signing time: Sun 27 Sep 2026 00:16:25 +0000 Manifest this update: Sun 27 Sep 2026 00:16:24 +0000 Manifest next update: Sun 04 Oct 2026 00:16:24 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: BOPAMPbAkTPaZa9EEp4KboghzrnV7CIYRH/nHNWMHBw=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=) 3: 2678DE4275A011F1A0FDA4E35BA30FBC.roa (hash: HO4c9apAU+SF4J/bcSAIOWLgnk4/jkKppRJxjoUD8Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Sep 27 00:16:24 2026 GMT Not After : Oct 4 00:16:24 2026 GMT Subject: CN=6ab86058-e670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:95:78:89:39:81:7b:3d:65:ee:47:b7:1d: d9:18:3e:5e:57:c7:41:9c:4d:27:39:6a:8e:ba:c3: ea:6e:a7:b2:c0:a3:c2:3d:30:c8:f9:8a:0d:37:3d: c3:ff:d1:a3:99:6b:47:1d:c0:d7:15:4e:e7:49:fc: fa:02:2d:d6:37:e4:78:7c:3b:6a:2c:9f:08:03:48: 23:7c:a1:12:80:35:4d:0b:e5:36:b5:5c:18:3a:83: a8:62:8f:e4:39:43:ce:92:d2:99:93:06:3e:b8:0a: f5:d9:57:5e:c0:b5:10:fa:5f:16:2d:86:48:17:34: 33:82:33:ea:15:21:b0:a8:7c:c0:c8:86:46:22:00: 1b:10:7f:62:24:bf:ce:6f:25:41:7f:25:62:1a:d5: 77:30:f6:87:8b:81:62:91:c9:ca:9e:0f:f8:3a:5d: ca:b3:35:cd:3e:e7:b2:1d:da:c9:86:21:0c:11:15: f0:6d:c3:ba:14:16:c1:a2:e3:5a:17:bf:1d:2e:a6: 98:ee:46:b2:89:09:3d:22:5a:b2:35:91:b8:8c:f2: 20:9c:2f:33:80:68:6c:70:3b:05:65:d8:d6:93:62: f4:76:b1:fc:7d:32:a4:d5:56:f5:cc:94:0d:47:3b: 56:03:64:59:8c:0a:80:d2:11:a1:a3:97:71:9e:bc: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:A9:FC:BB:30:84:36:C2:0C:6D:EF:D5:4C:9D:ED:47:16:3C:55 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:86:4e:cc:bf:0f:dc:04:2b:fd:39:24:9d:9a:e8:c8:ee:2b: d8:1b:d0:16:f7:c4:78:63:b4:7a:86:c6:f9:4c:32:aa:75:ac: 3f:77:39:d7:1a:8e:28:9c:00:29:f9:9b:5e:0a:86:45:7f:a6: 89:18:8c:ba:ae:55:96:ce:1f:28:64:0b:a2:d4:4a:89:30:9e: 60:a3:53:e5:71:d6:20:f2:2e:47:ea:58:a0:65:55:32:87:54: 50:07:37:e9:f0:21:2a:08:d9:24:88:47:22:76:6f:36:16:12: 6b:cf:14:3f:5d:65:39:e4:99:7c:6f:9c:83:b2:6d:e7:99:dd: ae:60:e0:04:cd:9a:9d:e6:d1:c1:86:6e:1e:ef:9f:52:31:7f: b1:27:19:a9:fa:00:fd:0b:49:ea:31:c5:22:7d:24:87:c7:0a: d8:4d:8c:71:2b:c4:12:de:ee:8e:d5:08:af:89:1a:ce:8a:44: bd:75:26:ac:84:42:ab:ac:08:92:5a:b4:07:b6:e3:8e:95:76: 10:28:f4:79:81:bc:58:20:7b:26:85:f5:41:b9:71:93:87:5f: 91:40:81:99:e9:2a:f0:0d:fc:a0:b6:7c:c4:a0:f3:25:f7:5b: 7b:7a:ae:29:f4:37:49:77:a9:ee:a8:94:70:47:cf:6e:48:b3: 1e:b3:d3:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjYwOTI3MDAxNjI0WhcNMjYxMDA0MDAxNjI0WjAYMRYwFAYD VQQDEw02YWI4NjA1OC1lNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMSVeIk5gXs9Ze5Htx3ZGD5eV8dBnE0nOWqOusPqbqeywKPCPTDI+YoNNz3D /9GjmWtHHcDXFU7nSfz6Ai3WN+R4fDtqLJ8IA0gjfKESgDVNC+U2tVwYOoOoYo/k OUPOktKZkwY+uAr12VdewLUQ+l8WLYZIFzQzgjPqFSGwqHzAyIZGIgAbEH9iJL/O byVBfyViGtV3MPaHi4FikcnKng/4Ol3KszXNPueyHdrJhiEMERXwbcO6FBbBouNa F78dLqaY7kayiQk9IlqyNZG4jPIgnC8zgGhscDsFZdjWk2L0drH8fTKk1Vb1zJQN RztWA2RZjAqA0hGho5dxnrxQNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+eqfy7 MIQ2wgxt79VMne1HFjxVMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALYZOzL8P3AQr/TkknZroyO4r2BvQFvfEeGO0eobG+UwyqnWsP3c51xqOKJwA KfmbXgqGRX+miRiMuq5Vls4fKGQLotRKiTCeYKNT5XHWIPIuR+pYoGVVModUUAc3 6fAhKgjZJIhHInZvNhYSa88UP11lOeSZfG+cg7Jt55ndrmDgBM2anebRwYZuHu+f UjF/sScZqfoA/QtJ6jHFIn0kh8cK2E2McSvEEt7ujtUIr4kazopEvXUmrIRCq6wI klq0B7bjjpV2ECj0eYG8WCB7JoX1Qblxk4dfkUCBmekq8A38oLZ8xKDzJfdbe3qu KfQ3SXep7qiUcEfPbkizHrPTWA== -----END CERTIFICATE-----Generated at Mon Sep 28 12:24:56 2026 by rpki-client