$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: 1is/E/FLxe2WP48b4TIdFVJobfveEcbYK8iBzOTPsUQ= Subject key identifier: 15:43:AB:C8:57:00:D9:8C:C0:77:82:1D:CF:35:62:D9:01:8D:C4:39 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 0212 Signing time: Mon 21 Sep 2026 03:30:42 +0000 Manifest this update: Mon 21 Sep 2026 03:30:42 +0000 Manifest next update: Mon 28 Sep 2026 03:30:42 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: JTiSvwVTpIalaOnzWaEHaomtdd/G7ApJzcFZENG75Cg=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Sep 21 03:30:42 2026 GMT Not After : Sep 28 03:30:42 2026 GMT Subject: CN=6ab0a4e2-ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:65:1c:b2:a0:e9:00:a8:6c:e3:49:e9:44: 32:ac:65:d6:e1:b9:00:3f:d9:ce:ef:ca:cc:4b:ca: f0:16:9a:86:ee:86:4d:3e:cb:bb:81:fe:f6:f0:10: cc:0b:a1:bf:f2:f3:0b:10:d1:c5:ca:71:5b:17:e8: 70:84:19:71:53:27:df:ef:7c:db:d8:5a:54:de:00: 28:45:75:5a:85:f9:ee:4f:75:4a:f4:0e:ac:8e:e6: 75:58:49:09:aa:9e:40:ac:f8:16:a0:40:83:5f:e5: 9b:76:35:76:5c:a4:f1:50:64:ad:26:ed:98:80:bc: b9:4e:c9:4d:05:9e:d2:ec:be:b0:9f:71:5a:b8:1f: 39:e6:88:e0:ee:97:de:7f:ed:33:2e:98:b4:71:2c: 7b:c9:1d:a7:49:8e:3c:38:ac:23:d1:8e:cb:48:38: 83:ca:8d:65:61:b0:99:a0:c8:00:5e:ea:9d:6f:0a: db:18:6b:e2:63:4e:80:2b:88:c0:e0:65:33:1c:71: 99:6b:89:a6:f0:ac:f5:df:a7:63:4e:4c:a6:1a:cf: de:6b:3a:ab:d8:60:09:52:26:90:0f:b0:2a:b5:27: 5f:97:e6:7b:ff:95:43:c1:f8:17:35:6b:d7:82:b2: a1:d9:fb:33:16:fb:2d:38:f9:4b:06:88:0f:7e:a1: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:43:AB:C8:57:00:D9:8C:C0:77:82:1D:CF:35:62:D9:01:8D:C4:39 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:3e:27:27:00:7f:19:ac:d5:58:3b:43:c3:18:55:73:99: 9f:f6:59:31:e1:a2:03:af:62:a6:35:40:10:4e:44:c6:a9:2e: 9e:91:81:7c:72:2a:f1:b8:6e:c3:23:35:5d:12:21:5f:a1:34: 12:9f:bd:d1:f9:7f:39:86:6f:35:93:8b:64:27:94:cf:f0:70: d8:48:52:69:87:00:cf:d7:d3:8e:ed:17:ca:88:c8:d6:00:4b: cd:1d:91:8a:b7:b8:fd:9a:d5:f8:c5:86:21:ef:14:84:2f:74: 71:8b:3a:80:90:24:a5:dd:c0:10:8f:ba:08:66:77:bb:54:91: be:ac:62:80:60:97:18:af:37:e1:27:0f:a0:de:dc:3b:2b:c2: 6d:73:37:3c:6c:6a:20:df:ac:f1:55:9c:1f:f7:08:3c:4c:6e: ec:57:69:a2:fe:ec:42:43:82:72:87:78:49:10:69:bb:1e:f5: 83:1f:48:83:6a:2a:e3:2b:9b:4f:2f:f4:b3:9f:11:f3:53:8b: 9d:e7:3e:c6:25:f5:df:93:a7:1c:86:12:71:24:75:c2:1b:00: c5:2c:b1:de:8a:bf:82:ba:32:d6:c4:8a:54:a6:05:43:c5:2a: 2c:c9:6c:73:8a:a8:c1:e8:d8:70:7c:4d:fa:d9:4e:41:31:bd: 31:4a:23:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwOTIxMDMzMDQyWhcNMjYwOTI4MDMzMDQyWjAYMRYwFAYD VQQDEw02YWIwYTRlMi1jYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWFlHLKg6QCobONJ6UQyrGXW4bkAP9nO78rMS8rwFpqG7oZNPsu7gf728BDM C6G/8vMLENHFynFbF+hwhBlxUyff73zb2FpU3gAoRXVahfnuT3VK9A6sjuZ1WEkJ qp5ArPgWoECDX+WbdjV2XKTxUGStJu2YgLy5TslNBZ7S7L6wn3FauB855ojg7pfe f+0zLpi0cSx7yR2nSY48OKwj0Y7LSDiDyo1lYbCZoMgAXuqdbwrbGGviY06AK4jA 4GUzHHGZa4mm8Kz136djTkymGs/eazqr2GAJUiaQD7AqtSdfl+Z7/5VDwfgXNWvX grKh2fszFvstOPlLBogPfqFHdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVDq8hX ANmMwHeCHc81YtkBjcQ5MB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNI+JycAfxms1Vg7Q8MYVXOZn/ZZMeGiA69ipjVAEE5ExqkunpGBfHIq8bhu wyM1XRIhX6E0Ep+90fl/OYZvNZOLZCeUz/Bw2EhSaYcAz9fTju0XyojI1gBLzR2R ire4/ZrV+MWGIe8UhC90cYs6gJAkpd3AEI+6CGZ3u1SRvqxigGCXGK834ScPoN7c OyvCbXM3PGxqIN+s8VWcH/cIPExu7Fdpov7sQkOCcod4SRBpux71gx9Ig2oq4yub Ty/0s58R81OLnec+xiX135OnHIYScSR1whsAxSyx3oq/groy1sSKVKYFQ8UqLMls c4qowejYcHxN+tlOQTG9MUoj/A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:22:00 2026 by rpki-client