$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json) Hash identifier: +EcFctg0evl4GvLzdU/IhsQsAGcyiUdxkdyD1m3iA94= Subject key identifier: 7F:A0:17:7D:C1:7A:12:8D:0D:63:41:4A:45:A8:D8:11:8C:6D:D5:C4 Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft Manifest number: 0222 Signing time: Wed 23 Sep 2026 02:42:53 +0000 Manifest this update: Wed 23 Sep 2026 02:42:53 +0000 Manifest next update: Wed 30 Sep 2026 02:42:53 +0000 Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: Ja5mVXU25+0Au914qFy4jkusawouo9iCJQN2f5XI3yg=) 2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: CsyZRvBZjt0dHAYffGH8YRNAMUomFdDHqloAHzosLdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Validity Not Before: Sep 23 02:42:53 2026 GMT Not After : Sep 30 02:42:53 2026 GMT Subject: CN=6ab33cad-b446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:26:7d:4f:72:b5:7a:ea:41:76:cd:7d:fb: 1e:f9:96:14:94:04:d7:9d:36:30:c4:85:3e:b9:17: 56:98:c2:85:06:2c:d5:19:89:e4:26:ed:81:d9:63: f9:76:0f:f2:aa:15:bb:ed:e4:8b:4c:d4:b6:54:a5: 9d:32:e1:8a:44:99:7f:0d:27:a4:37:6e:0d:b9:ee: 0b:80:81:63:49:ef:f0:e1:70:b6:b4:ff:2d:63:a5: f3:95:96:6f:8c:63:96:27:a3:fc:05:f2:7c:3f:48: ac:bf:79:1b:91:e1:59:94:c0:f9:2c:6d:09:a6:52: 91:06:ba:5e:15:be:85:58:e0:ec:34:bf:b1:69:d8: a6:37:a0:9b:fa:71:cc:4a:99:1e:3f:05:3e:bc:7e: 36:6d:03:b0:1e:f1:50:bd:e3:6a:d2:3b:8c:b2:4b: 7f:7f:b8:93:4a:16:bf:d9:49:e7:8e:6a:74:cd:0c: ed:cd:6f:12:85:db:09:ba:1b:d7:f3:ad:c2:11:99: b9:da:08:71:17:3a:25:32:2b:79:ed:9f:8d:e8:b0: 16:26:d6:3c:31:95:42:f1:e6:55:59:89:7e:da:20: 82:3b:7b:28:50:ae:e9:95:32:93:40:58:f0:80:0b: 43:37:c3:51:44:63:e7:0a:16:8c:87:69:22:77:6b: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:17:7D:C1:7A:12:8D:0D:63:41:4A:45:A8:D8:11:8C:6D:D5:C4 X509v3 Authority Key Identifier: keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d3:91:11:20:c0:94:ef:b3:50:61:f0:95:98:b1:0a:36:c8: 85:64:24:a7:20:ef:6b:36:c2:e5:9c:ec:b1:ec:69:1c:c9:fd: 3f:ab:04:05:45:e0:c3:aa:eb:45:09:d7:d5:2f:00:fc:f1:b1: 0f:d1:14:a8:f8:b6:f2:47:db:96:e5:48:71:74:ac:54:f1:18: 13:9c:59:8f:04:18:42:c7:c2:49:ea:f8:4e:6b:80:85:6c:42: a5:29:03:d4:92:10:fb:21:7f:4f:db:b9:0d:de:1c:c4:e6:29: 55:bb:79:53:0b:3e:8f:f1:57:af:1c:d6:ab:74:15:e9:84:97: 01:ac:e7:05:c0:17:04:0a:25:0b:94:97:64:1f:18:f7:d1:c1: dd:73:7d:07:d4:72:65:87:19:57:7e:e2:13:b8:54:53:aa:31: d4:31:98:04:30:5a:cd:6f:c7:36:79:f4:6a:8c:56:89:68:41: 37:c1:7e:73:3f:63:43:2f:e8:a0:29:01:69:64:e0:52:5e:ba: 6b:94:9d:ff:16:be:a1:c7:eb:e3:65:7d:8c:03:0c:53:a7:12: 56:45:70:5e:38:28:f2:f9:17:4c:1d:cb:1b:93:ae:ae:94:37: 42:e3:1f:46:a9:fd:14:59:a3:e3:f7:2c:7c:34:fb:d6:60:f4: e3:8f:98:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4 NERFOUQ3MEIwHhcNMjYwOTIzMDI0MjUzWhcNMjYwOTMwMDI0MjUzWjAYMRYwFAYD VQQDEw02YWIzM2NhZC1iNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstMmfU9ytXrqQXbNffse+ZYUlATXnTYwxIU+uRdWmMKFBizVGYnkJu2B2WP5 dg/yqhW77eSLTNS2VKWdMuGKRJl/DSekN24Nue4LgIFjSe/w4XC2tP8tY6XzlZZv jGOWJ6P8BfJ8P0isv3kbkeFZlMD5LG0JplKRBrpeFb6FWODsNL+xadimN6Cb+nHM SpkePwU+vH42bQOwHvFQveNq0juMskt/f7iTSha/2Unnjmp0zQztzW8ShdsJuhvX 863CEZm52ghxFzolMit57Z+N6LAWJtY8MZVC8eZVWYl+2iCCO3soUK7plTKTQFjw gAtDN8NRRGPnChaMh2kid2sq+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+gF33B ehKNDWNBSkWo2BGMbdXEMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3 RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2 OUEwT09IOGh0RzZFM3Axd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhtORESDAlO+zUGHwlZixCjbIhWQkpyDvazbC5ZzssexpHMn9P6sEBUXgw6rr RQnX1S8A/PGxD9EUqPi28kfbluVIcXSsVPEYE5xZjwQYQsfCSer4TmuAhWxCpSkD 1JIQ+yF/T9u5Dd4cxOYpVbt5Uws+j/FXrxzWq3QV6YSXAaznBcAXBAolC5SXZB8Y 99HB3XN9B9RyZYcZV37iE7hUU6ox1DGYBDBazW/HNnn0aoxWiWhBN8F+cz9jQy/o oCkBaWTgUl66a5Sd/xa+ocfr42V9jAMMU6cSVkVwXjgo8vkXTB3LG5OurpQ3QuMf Rqn9FFmj4/csfDT71mD044+Y0w== -----END CERTIFICATE-----Generated at Wed Sep 23 11:35:53 2026 by rpki-client