$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: qKNTJ+XX6ALZcA64OgLr/Iydnjqu6J+4VgCDCK3Tqbc= Subject key identifier: 93:3A:B7:FD:3E:A7:6A:F2:66:AD:0E:D4:FC:B1:CC:CE:F5:17:96:2A Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: A6 Signing time: Tue 22 Sep 2026 18:01:51 +0000 Manifest this update: Tue 22 Sep 2026 18:01:51 +0000 Manifest next update: Tue 29 Sep 2026 18:01:51 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: eHGy2ghqr9bEpCe3dj1RJptKY0s5h0xXTvsY9yisFZY=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Sep 22 18:01:51 2026 GMT Not After : Sep 29 18:01:51 2026 GMT Subject: CN=6ab2c28f-181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:93:d6:19:1b:4f:4f:9f:50:fd:57:7e:92: 5b:27:6e:ac:b9:5a:4b:f1:03:8f:fe:84:d9:49:25: 8a:dd:93:6d:75:5f:e9:04:0f:8b:1b:e6:4a:75:ae: 7f:d2:fb:c2:28:23:ab:37:be:26:99:a2:66:6a:d2: f5:29:48:5a:5b:72:6a:47:0c:76:d9:14:af:82:77: 53:09:12:d9:bb:c9:da:d2:ef:88:f3:98:08:98:08: 6a:b3:4e:e3:55:52:a5:d7:70:1b:a8:5b:f1:8f:13: e5:09:9b:ae:fe:ac:52:dc:82:61:f4:52:00:ac:8c: e0:97:f2:c6:46:e8:ab:9a:83:3a:c5:45:eb:fa:89: bf:2a:b5:8c:4f:d9:6d:e0:06:1c:00:62:17:fa:3b: dc:c3:9c:01:e1:5a:a5:cc:f8:f7:34:cf:99:31:61: a7:84:9c:c5:17:f7:8f:64:e8:f9:c6:a4:9a:e5:0c: bc:c7:f1:6a:94:9f:9d:22:a7:f9:a4:bf:ab:a3:84: b4:9b:09:c2:37:1a:e9:5b:48:ce:dc:a8:ac:55:c1: de:e9:52:52:28:e0:bf:ca:51:e0:e3:0c:09:c3:de: 0e:a6:fc:28:c5:77:e5:d6:47:9d:cd:03:82:ce:01: c0:1f:07:71:fc:b2:6c:90:3e:78:de:09:28:53:58: 50:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3A:B7:FD:3E:A7:6A:F2:66:AD:0E:D4:FC:B1:CC:CE:F5:17:96:2A X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0f:39:74:34:cc:bb:61:d3:9c:80:91:b1:64:b1:2b:20:0f: ca:31:a5:71:43:b2:c8:ca:48:fc:54:0b:f3:80:92:d1:55:fa: aa:fe:dd:de:a1:0a:8c:50:3f:19:42:88:81:2c:8f:32:4c:1e: c9:af:f3:0d:9a:77:c0:2f:c1:fd:9a:97:d4:8c:fd:d3:83:7a: 24:01:67:ec:d4:a0:2c:d4:86:1a:0b:e9:24:c5:9b:82:0e:a9: f0:5e:9a:02:59:b1:e8:e3:3f:49:25:bc:b5:98:e8:ad:f8:09: 92:c3:32:a5:00:f4:aa:bd:df:92:6f:00:8b:13:d0:1a:17:44: a7:43:c9:a4:b8:50:5f:7b:0b:87:88:ce:98:33:ea:ce:9f:54: d3:e9:f2:06:97:58:1d:eb:3f:95:5c:fa:9b:8b:df:a2:ff:83: 8b:33:36:78:38:25:29:03:49:d0:a6:50:7e:59:1b:80:f6:4e: 33:d8:a1:be:c3:3f:22:81:e7:ce:94:14:1b:43:bc:61:a0:d1: e7:8e:f2:3a:98:a8:12:3a:2d:95:3e:74:3c:55:95:d4:ad:f7: 9d:88:a8:ba:a8:23:b1:b6:6e:70:28:54:02:97:69:58:51:2e: ed:62:ea:45:0c:7b:0d:6d:6d:32:47:0b:e6:5d:93:b0:e1:28: 26:2c:24:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKEI2ODM0OEIxOTA3MDYzQzA0NDQ1NjlDRUIyMjhFQTUy NDZEMDJGMTkwHhcNMjYwOTIyMTgwMTUxWhcNMjYwOTI5MTgwMTUxWjAYMRYwFAYD VQQDEw02YWIyYzI4Zi0xODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2eT1hkbT0+fUP1XfpJbJ26suVpL8QOP/oTZSSWK3ZNtdV/pBA+LG+ZKda5/ 0vvCKCOrN74mmaJmatL1KUhaW3JqRwx22RSvgndTCRLZu8na0u+I85gImAhqs07j VVKl13AbqFvxjxPlCZuu/qxS3IJh9FIArIzgl/LGRuirmoM6xUXr+om/KrWMT9lt 4AYcAGIX+jvcw5wB4VqlzPj3NM+ZMWGnhJzFF/ePZOj5xqSa5Qy8x/FqlJ+dIqf5 pL+ro4S0mwnCNxrpW0jO3KisVcHe6VJSKOC/ylHg4wwJw94OpvwoxXfl1kedzQOC zgHAHwdx/LJskD543gkoU1hQVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJM6t/0+ p2ryZq0O1PyxzM71F5YqMB8GA1UdIwQYMBaAFLaDSLGQcGPAREVpzrIo6lJG0C8Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS9FRDIyNTUzMkM0 MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4QkVSV25Pc2lqcVVrYlFM eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4 QkVSV25Pc2lqcVVrYlFMeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMw85dDTMu2HTnICRsWSxKyAPyjGlcUOyyMpI/FQL84CS0VX6qv7d3qEKjFA/ GUKIgSyPMkweya/zDZp3wC/B/ZqX1Iz904N6JAFn7NSgLNSGGgvpJMWbgg6p8F6a Almx6OM/SSW8tZjorfgJksMypQD0qr3fkm8AixPQGhdEp0PJpLhQX3sLh4jOmDPq zp9U0+nyBpdYHes/lVz6m4vfov+DizM2eDglKQNJ0KZQflkbgPZOM9ihvsM/IoHn zpQUG0O8YaDR547yOpioEjotlT50PFWV1K33nYiouqgjsbZucChUApdpWFEu7WLq RQx7DW1tMkcL5l2TsOEoJiwkjQ== -----END CERTIFICATE-----Generated at Thu Sep 24 14:22:52 2026 by rpki-client