$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: DlMvWF3THqfVtqQJu5U9EAsEmdWsq8lw41A48506p7o= Subject key identifier: 6B:63:2A:E2:26:8F:30:FF:C9:5F:18:B1:47:46:D6:6F:7E:0F:70:82 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 143E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1423 Signing time: Tue 22 Sep 2026 16:50:41 +0000 Manifest this update: Tue 22 Sep 2026 16:50:40 +0000 Manifest next update: Tue 29 Sep 2026 16:50:40 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: zu+YTzyxODR+wyh2eKjp+3HLFmGaFG5b/AS4zwFC0OU=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5182 (0x143e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Sep 22 16:50:40 2026 GMT Not After : Sep 29 16:50:40 2026 GMT Subject: CN=6ab2b1e1-45df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:83:3f:1d:d5:1a:b0:1d:69:ad:63:82:05: 1f:3b:64:fa:f0:68:a5:76:b3:4e:b7:cc:8d:27:69: 26:86:69:e9:89:bc:40:3a:86:d3:52:78:35:b6:81: b3:bb:8a:41:0f:2d:7f:4d:9c:7a:60:21:6e:6c:84: d5:e9:5e:4d:67:af:39:52:35:33:47:2b:c5:d5:1d: ec:22:fa:e3:59:14:8a:43:85:5d:5d:b7:f4:a8:36: a3:1a:5a:13:84:6c:2c:95:f8:7e:24:1b:12:9f:d4: 1b:19:50:a7:3c:9b:c5:4f:7f:2b:be:62:fd:ab:7e: 9b:4e:9d:92:3e:e8:e3:4c:5f:d8:e6:f1:a7:c3:5f: 2d:5c:a8:61:c0:5f:5b:f0:37:0c:17:a8:68:ac:3d: ad:e4:3a:91:48:26:2a:39:98:97:b6:30:83:3c:42: 9c:a8:1a:f5:c3:d9:9c:69:e9:a1:66:94:e1:22:cd: 6e:72:9e:ad:c0:36:a7:e2:e1:91:09:6f:29:53:28: 29:af:b8:8c:af:ca:0b:99:bc:56:fd:11:10:b6:aa: e7:e8:e0:12:f7:43:f1:1b:f2:bc:c6:66:c7:04:e2: bd:63:18:88:a5:e4:2e:95:24:c1:0e:8c:17:a1:ec: fc:ef:61:b7:66:6e:15:66:4d:29:10:48:8f:6a:df: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:63:2A:E2:26:8F:30:FF:C9:5F:18:B1:47:46:D6:6F:7E:0F:70:82 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2e:4c:98:80:2a:8e:77:8b:41:fe:bb:c5:88:9f:a8:e6:dc: 78:d4:4b:e4:19:5b:a7:99:0e:3d:31:e7:23:7f:cf:c9:47:05: 3e:84:0a:9d:84:19:1b:ae:b6:15:04:3f:5e:c9:13:c6:95:3e: 48:ab:10:d6:5f:4a:d1:bb:0e:ce:2a:9e:1d:70:b2:38:f0:e8: 25:b4:e0:19:d4:53:9f:a1:ce:cd:f2:8d:aa:c7:a2:44:8a:2f: 3f:e1:32:d4:b8:93:4b:5e:e8:b9:a6:9f:d2:c8:ec:43:ff:96: c6:90:c9:d8:8a:a8:90:3f:fd:2d:8b:ae:23:75:56:4d:c3:05: c5:9a:7d:64:a6:c8:a2:71:66:ba:0d:02:cb:31:9e:3a:55:b7: f1:29:3b:25:c5:3c:00:e2:d1:69:44:c2:c2:23:07:52:3b:d2: 75:64:c5:13:ef:d1:e4:70:f1:75:51:3d:51:ed:68:f6:21:5c: a5:23:25:9f:02:da:23:7f:77:a1:bc:6e:e3:c0:80:fb:3d:76: 89:16:33:b6:f1:43:9f:43:d1:3d:e3:4a:a3:08:38:9c:f4:c7: 25:9c:6a:45:11:97:02:e2:68:ff:43:b0:0a:2c:50:11:61:a3: 17:dd:00:18:53:bf:17:a0:cf:9b:2d:2d:1c:af:56:8b:b9:80: 22:a0:1f:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwOTIyMTY1MDQwWhcNMjYwOTI5MTY1MDQwWjAYMRYwFAYD VQQDEw02YWIyYjFlMS00NWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WKDPx3VGrAdaa1jggUfO2T68GildrNOt8yNJ2kmhmnpibxAOobTUng1toGz u4pBDy1/TZx6YCFubITV6V5NZ685UjUzRyvF1R3sIvrjWRSKQ4VdXbf0qDajGloT hGwslfh+JBsSn9QbGVCnPJvFT38rvmL9q36bTp2SPujjTF/Y5vGnw18tXKhhwF9b 8DcMF6horD2t5DqRSCYqOZiXtjCDPEKcqBr1w9mcaemhZpThIs1ucp6twDan4uGR CW8pUygpr7iMr8oLmbxW/REQtqrn6OAS90PxG/K8xmbHBOK9YxiIpeQulSTBDowX oez872G3Zm4VZk0pEEiPat+v0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtjKuIm jzD/yV8YsUdG1m9+D3CCMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvS5MmIAqjneLQf67xYifqObceNRL5Blbp5kOPTHnI3/PyUcFPoQKnYQZG662 FQQ/XskTxpU+SKsQ1l9K0bsOziqeHXCyOPDoJbTgGdRTn6HOzfKNqseiRIovP+Ey 1LiTS17ouaaf0sjsQ/+WxpDJ2IqokD/9LYuuI3VWTcMFxZp9ZKbIonFmug0CyzGe OlW38Sk7JcU8AOLRaUTCwiMHUjvSdWTFE+/R5HDxdVE9Ue1o9iFcpSMlnwLaI393 obxu48CA+z12iRYztvFDn0PRPeNKowg4nPTHJZxqRRGXAuJo/0OwCixQEWGjF90A GFO/F6DPmy0tHK9Wi7mAIqAfOg== -----END CERTIFICATE-----Generated at Wed Sep 23 23:43:10 2026 by rpki-client