$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: CJKGL9sNn/qq36DJFq+aHIGRzrLXiEvLuO+0RnY8PEM= Subject key identifier: 6C:B6:5F:C6:89:6D:2B:DA:4E:1C:E9:1E:F1:BE:EC:EF:98:2B:36:D6 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 04E7 Signing time: Sat 26 Sep 2026 23:54:35 +0000 Manifest this update: Sat 26 Sep 2026 23:54:34 +0000 Manifest next update: Sat 03 Oct 2026 23:54:34 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: /1924GLQVOVdPsdcj2RtYUS8hYAqZqZ0OLatbwtTFMc=) 2: 488DBEDE508011F1A55F3568A4833773.roa (hash: 0IdhV/KCNA/ojcwThaYzEeluJBUJZFZ2dd7XnSYNWPA=) 3: 55DFA64492D711F18635C2A96211F970.roa (hash: djt66eXRykHBM3V8fZJrRs+bzF9etdDuyzOhtNwvhh0=) 4: A8BE9FFAB50011F1B3BDAF644111F970.roa (hash: 5gVUR1LzJSjsrME038vobJbhlEsjKxPYEroo5GUJ9Fk=) 5: FE7B43E0702611F18D33291E5EA30FBC.roa (hash: Q+eArnfIDLtygrr6Aol5UteYep7GUE2spzZ7FznPuig=) 6: F1CD29047C8011F19A00D38478A30FBC.roa (hash: hC97lom9DKTata6nuBTwWb1tpOUqOikEDUgwzjzb3oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Sep 26 23:54:34 2026 GMT Not After : Oct 3 23:54:34 2026 GMT Subject: CN=6ab85b3b-ba18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:2a:65:c0:7f:59:26:7e:2b:93:26:2f:43: e9:bd:a6:0b:da:90:8d:a2:61:d7:07:09:e5:80:f8: b9:e5:d9:3c:72:44:b0:94:02:da:7a:9b:4d:d8:71: 30:c3:47:52:8c:a7:4a:b8:e0:38:5d:db:54:7a:5a: 12:f7:01:29:2a:61:15:1c:54:5e:02:3a:2b:b5:88: 6d:aa:97:96:09:3f:2f:81:9e:ca:c0:9a:b0:f2:e1: 54:45:c3:2e:97:fb:f2:11:4e:47:06:11:39:ba:89: d2:b6:e5:e3:b0:7a:9c:1a:13:da:fd:a9:33:61:27: d2:3a:0d:e1:0f:0b:31:cf:de:0b:ed:54:f5:e7:52: 1c:10:55:f9:73:4d:c1:b3:b7:87:46:e6:65:e0:12: c2:e8:0d:fd:cf:d3:00:29:be:c3:62:06:a5:33:e3: 77:45:5d:94:4b:c3:2a:d0:35:6c:41:86:de:fb:56: fe:c5:ed:ff:3e:9c:9c:db:33:bc:0c:32:d3:50:07: 46:c5:ac:19:df:a8:d8:aa:59:f1:e5:fe:e4:e9:66: cb:61:eb:85:50:da:a3:46:ed:06:43:9a:2b:bc:f2: 1b:97:e4:91:27:e9:68:8a:0b:fc:de:73:34:1c:cf: c9:8b:67:ac:29:89:a1:e9:3c:a2:f6:ba:f1:e6:37: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B6:5F:C6:89:6D:2B:DA:4E:1C:E9:1E:F1:BE:EC:EF:98:2B:36:D6 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:15:54:14:b6:61:de:07:15:8f:e1:5e:e9:b7:7c:e8:73:57: 07:56:b7:24:15:d0:e5:b7:ad:bd:bb:e9:bc:90:c3:a6:3f:6d: d0:70:35:f0:a8:94:3d:b5:e5:1f:be:f5:c9:a5:dc:3c:42:14: c4:d3:0e:94:48:17:b5:6b:c8:15:12:82:5b:5a:08:10:2c:0d: b5:6f:16:b9:18:34:2b:64:86:e3:4b:29:77:bf:24:08:13:52: d6:d4:04:66:8a:c5:17:c7:f4:b0:5e:6d:04:48:55:64:13:64: ed:de:f3:ee:3f:04:20:94:b0:93:e0:be:46:ed:15:cc:4f:c1: db:52:e6:b6:c3:53:9b:d8:02:ef:7f:c1:f2:a6:5c:4f:23:3b: d6:f9:8a:7a:5d:0e:62:df:30:f2:5c:30:17:59:0a:6e:67:8a: cd:98:d4:34:f0:ae:ff:aa:f4:1f:3e:4d:c9:23:82:bf:0c:81: 3f:c5:5c:c6:ef:17:9d:ca:ca:bb:f8:33:83:c8:7c:3d:f8:a9: 4b:fe:c6:8c:7d:5d:9e:58:68:5b:dc:e1:0a:11:38:c9:c4:7a: a5:71:3a:98:4f:a0:b3:e8:02:70:03:33:a7:3b:56:90:46:ad: e7:0e:b6:36:41:97:2e:00:66:9e:91:83:fb:ca:29:fa:2d:9e: 4a:5a:5d:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjYwOTI2MjM1NDM0WhcNMjYxMDAzMjM1NDM0WjAYMRYwFAYD VQQDEw02YWI4NWIzYi1iYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgQqZcB/WSZ+K5MmL0PpvaYL2pCNomHXBwnlgPi55dk8ckSwlALaeptN2HEw w0dSjKdKuOA4XdtUeloS9wEpKmEVHFReAjortYhtqpeWCT8vgZ7KwJqw8uFURcMu l/vyEU5HBhE5uonStuXjsHqcGhPa/akzYSfSOg3hDwsxz94L7VT151IcEFX5c03B s7eHRuZl4BLC6A39z9MAKb7DYgalM+N3RV2US8Mq0DVsQYbe+1b+xe3/Ppyc2zO8 DDLTUAdGxawZ36jYqlnx5f7k6WbLYeuFUNqjRu0GQ5orvPIbl+SRJ+loigv83nM0 HM/Ji2esKYmh6Tyi9rrx5jdj9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGy2X8aJ bSvaThzpHvG+7O+YKzbWMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKBVUFLZh3gcVj+Fe6bd86HNXB1a3JBXQ5betvbvpvJDDpj9t0HA18KiUPbXl H771yaXcPEIUxNMOlEgXtWvIFRKCW1oIECwNtW8WuRg0K2SG40spd78kCBNS1tQE ZorFF8f0sF5tBEhVZBNk7d7z7j8EIJSwk+C+Ru0VzE/B21LmtsNTm9gC73/B8qZc TyM71vmKel0OYt8w8lwwF1kKbmeKzZjUNPCu/6r0Hz5NySOCvwyBP8Vcxu8XncrK u/gzg8h8PfipS/7GjH1dnlhoW9zhChE4ycR6pXE6mE+gs+gCcAMzpztWkEat5w62 NkGXLgBmnpGD+8op+i2eSlpdcw== -----END CERTIFICATE-----Generated at Mon Sep 28 14:19:48 2026 by rpki-client