$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: AxsTEBjAbA4HAsDgXmPQp1wtBEIKC3E6WD0bJqRWHd8= Subject key identifier: F1:1D:73:0B:CB:6E:7B:11:48:40:D3:07:EA:08:A7:5C:C5:BD:38:43 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 0255 Signing time: Fri 25 Sep 2026 02:26:02 +0000 Manifest this update: Fri 25 Sep 2026 02:26:01 +0000 Manifest next update: Fri 02 Oct 2026 02:26:01 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: MrHp6mrMGBvNaqlSaerr+rX9sxw+FpVuo26ipxCwknE=) 2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=) 3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Sep 25 02:26:01 2026 GMT Not After : Oct 2 02:26:01 2026 GMT Subject: CN=6ab5dbba-1158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:ee:c1:14:fb:ae:a2:e1:a2:31:2c:56:61: ee:bb:92:4d:97:d2:ad:e7:18:3c:25:5f:1f:e2:74: 55:ab:f2:06:e3:f5:44:96:8f:33:01:1d:93:f1:c9: 42:59:64:6a:04:61:4d:62:c3:8a:65:d9:78:0e:f9: fa:4e:c7:ae:cd:b4:e0:ba:d4:23:c9:39:4e:90:72: d0:0d:19:b6:df:0d:c7:dd:2b:9f:3a:cd:d9:88:b6: 03:55:de:8b:19:29:30:e4:6b:4d:cd:b3:f5:c7:4b: 6e:26:d7:83:57:2b:84:b3:2f:01:e8:99:78:13:12: 28:5c:96:c6:b7:66:64:bf:13:9f:c7:ef:e0:c9:bd: a4:a3:9e:50:94:e0:e2:45:e8:3e:3e:9e:08:0e:e4: b0:f6:75:b4:b1:8a:5d:1f:52:e0:ed:0b:86:35:99: 0d:de:69:f1:97:46:76:b9:0c:2d:17:87:6c:e2:9e: a4:bb:ca:5c:8a:2c:a2:d4:3f:b7:7f:e7:c8:d2:2d: 03:8c:d4:48:e8:db:75:14:45:1a:76:02:c7:c8:2f: cf:2c:bf:e4:1f:d1:97:e0:a7:4d:f5:8c:1e:6d:24: d1:8f:ef:d8:0e:1e:48:f4:8e:03:ae:d0:43:28:c2: f3:b8:78:d4:30:09:45:a3:59:a3:75:a5:13:82:58: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:73:0B:CB:6E:7B:11:48:40:D3:07:EA:08:A7:5C:C5:BD:38:43 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:14:95:56:ca:da:a9:22:df:ad:f0:f9:cd:b8:45:89:66:56: b2:af:e8:d2:2d:09:dd:ba:b9:ff:77:81:e7:81:31:78:2e:b0: 0b:cc:3d:1f:28:e2:a9:f4:54:71:a1:61:f3:af:6d:1c:2f:43: 79:eb:08:77:b3:5f:f7:be:22:3b:b2:20:1d:f9:06:e5:42:30: b7:80:5e:fc:09:79:40:49:77:b4:ed:2a:8e:c9:8b:8f:eb:77: 2a:03:a1:24:52:76:d0:53:5c:26:81:0d:ee:14:16:14:b6:ae: d7:e7:d9:78:45:4c:f2:e7:bb:86:f1:9e:e9:f5:cc:1a:3d:7a: ee:8c:3a:ff:db:9c:9c:82:4a:96:3c:26:6a:11:35:aa:16:42: 38:3b:13:53:e3:bc:71:12:ed:0b:0e:fd:9c:ef:36:dc:b2:0b: 2a:36:d5:3f:04:d2:71:ac:08:87:e5:52:92:18:25:dc:3f:ba: 34:97:9a:9b:29:67:3c:2f:2f:5b:a9:68:00:7d:cf:5d:82:c0: 30:94:1f:e0:cb:43:ee:c2:b4:9f:ea:11:79:25:ce:7c:84:3f: 26:57:5c:d5:93:b7:d5:2f:38:41:78:03:ed:5e:2c:89:a0:c3: 27:6b:85:39:1c:2d:85:f6:07:15:e3:45:9b:2f:6e:68:d8:d3: e3:75:8a:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYwOTI1MDIyNjAxWhcNMjYxMDAyMDIyNjAxWjAYMRYwFAYD VQQDEw02YWI1ZGJiYS0xMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZvuwRT7rqLhojEsVmHuu5JNl9Kt5xg8JV8f4nRVq/IG4/VElo8zAR2T8clC WWRqBGFNYsOKZdl4Dvn6TseuzbTgutQjyTlOkHLQDRm23w3H3SufOs3ZiLYDVd6L GSkw5GtNzbP1x0tuJteDVyuEsy8B6Jl4ExIoXJbGt2ZkvxOfx+/gyb2ko55QlODi Reg+Pp4IDuSw9nW0sYpdH1Lg7QuGNZkN3mnxl0Z2uQwtF4ds4p6ku8pciiyi1D+3 f+fI0i0DjNRI6Nt1FEUadgLHyC/PLL/kH9GX4KdN9YwebSTRj+/YDh5I9I4DrtBD KMLzuHjUMAlFo1mjdaUTglhz2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEdcwvL bnsRSEDTB+oIp1zFvThDMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACBSVVsraqSLfrfD5zbhFiWZWsq/o0i0J3bq5/3eB54ExeC6wC8w9HyjiqfRU caFh869tHC9DeesId7Nf974iO7IgHfkG5UIwt4Be/Al5QEl3tO0qjsmLj+t3KgOh JFJ20FNcJoEN7hQWFLau1+fZeEVM8ue7hvGe6fXMGj167ow6/9ucnIJKljwmahE1 qhZCODsTU+O8cRLtCw79nO823LILKjbVPwTScawIh+VSkhgl3D+6NJeamylnPC8v W6loAH3PXYLAMJQf4MtD7sK0n+oReSXOfIQ/Jldc1ZO31S84QXgD7V4siaDDJ2uF ORwthfYHFeNFmy9uaNjT43WKQg== -----END CERTIFICATE-----Generated at Sat Sep 26 11:08:38 2026 by rpki-client