$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: t+4I24LZrdxvEV4aS9uZvaf3Bid53xyTo+runnZhZq8= Subject key identifier: 1A:B4:23:61:D3:24:61:38:11:65:4C:5E:FE:2D:68:96:BA:24:5D:9B Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0A05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1B3E Signing time: Tue 22 Sep 2026 17:07:41 +0000 Manifest this update: Tue 22 Sep 2026 17:07:41 +0000 Manifest next update: Tue 29 Sep 2026 17:07:41 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: v1AmC1tfvrLSoNG96vHGVKFSI6EDD9yPX8zR/qduFAo=) 2: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o=) 3: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=) 4: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: 7tv/5D9HntchiRfctALMuiuXJj9zM35Uyt8wDbjn1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2565 (0xa05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Sep 22 17:07:41 2026 GMT Not After : Sep 29 17:07:41 2026 GMT Subject: CN=6ab2b5dd-a2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:42:36:b2:9c:ac:e7:c8:1e:78:65:94:25: 5b:28:3e:04:7e:4e:0f:3e:a0:a9:9d:f0:61:66:da: 94:2e:1e:ed:b0:ff:c8:25:ca:f9:af:f8:94:a4:bc: cf:5d:51:f2:3d:f6:d4:29:d0:d6:9c:a5:5d:ca:e9: 41:3a:3d:f9:cf:2b:8b:d0:19:19:71:00:6e:d6:52: 34:e1:2d:44:40:61:36:5e:7d:5b:8a:40:3a:5f:86: 5e:1e:cb:d5:e4:94:6a:f3:eb:55:ba:e8:ff:8e:23: c6:78:8d:49:55:ba:02:76:b3:6f:03:74:8e:ea:76: a9:6d:14:19:d5:73:8d:d6:67:46:f7:86:3c:ce:05: 06:3f:4f:a9:88:cc:db:d4:b2:5a:82:c6:4d:3a:31: 0f:b1:0c:45:94:0b:8f:e8:2a:55:1f:4e:bb:67:01: 80:9d:e6:a4:db:b2:18:11:15:ce:b5:ef:2c:63:67: 32:a7:69:10:f2:99:04:a7:f5:04:15:6a:18:a0:74: bb:cc:2a:5b:46:6c:ab:fa:40:e8:4c:56:7f:3a:b0: a8:e9:a5:ef:b3:d9:c1:ac:36:c3:12:81:80:36:ab: cf:8e:cf:e3:6a:e6:6b:ae:fc:4f:9f:30:22:62:60: 58:a7:d7:f6:bb:e3:bc:d3:d4:5e:dc:ea:5f:af:1e: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:23:61:D3:24:61:38:11:65:4C:5E:FE:2D:68:96:BA:24:5D:9B X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:aa:77:fe:39:e2:d7:d4:7b:c8:14:7e:c7:58:06:bd:cc:7d: e1:15:ff:12:57:66:01:02:d4:e5:5b:46:80:42:08:28:87:8a: 45:6a:04:67:53:64:e9:be:f6:ac:aa:9a:f4:42:0c:b2:1d:7c: 4e:a9:5c:7c:10:bb:a2:a9:33:a5:3e:78:9e:b1:06:bc:71:13: 7d:c7:e7:57:f2:3d:2d:f2:05:90:d8:f0:fd:4b:ee:f3:97:15: 78:91:63:de:0b:36:54:c2:0d:5e:27:5c:b4:23:85:b0:86:21: ba:c6:9c:73:d0:c8:ec:d6:b8:6c:54:89:fa:d1:73:63:ec:34: ca:0d:98:74:f1:88:d7:f1:60:0c:72:15:de:57:42:c9:b9:6e: 9e:e8:d0:05:a3:48:f5:37:78:52:ff:c1:c1:5d:f3:a2:5c:fc: 61:8b:cf:ec:cc:1f:14:ee:df:e8:50:4d:e8:d3:6e:17:3f:9d: 96:c3:22:69:08:af:cc:2c:67:0c:7a:24:d3:79:53:62:26:a1: 87:67:2b:e4:fe:be:21:ef:75:da:0b:35:48:4e:d8:7b:e6:c5: 4b:1c:ce:f1:8e:c1:a4:d6:2f:fc:93:99:40:a9:4b:dc:79:df: d3:57:57:4e:46:ae:7d:e4:04:ff:2a:af:06:4e:7c:73:c1:d0: 56:55:dd:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjYwOTIyMTcwNzQxWhcNMjYwOTI5MTcwNzQxWjAYMRYwFAYD VQQDEw02YWIyYjVkZC1hMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0lCNrKcrOfIHnhllCVbKD4Efk4PPqCpnfBhZtqULh7tsP/IJcr5r/iUpLzP XVHyPfbUKdDWnKVdyulBOj35zyuL0BkZcQBu1lI04S1EQGE2Xn1bikA6X4ZeHsvV 5JRq8+tVuuj/jiPGeI1JVboCdrNvA3SO6napbRQZ1XON1mdG94Y8zgUGP0+piMzb 1LJagsZNOjEPsQxFlAuP6CpVH067ZwGAneak27IYERXOte8sY2cyp2kQ8pkEp/UE FWoYoHS7zCpbRmyr+kDoTFZ/OrCo6aXvs9nBrDbDEoGANqvPjs/jauZrrvxPnzAi YmBYp9f2u+O809Re3Opfrx5EpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBq0I2HT JGE4EWVMXv4taJa6JF2bMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6p3/jni19R7yBR+x1gGvcx94RX/EldmAQLU5VtGgEIIKIeKRWoEZ1Nk6b72 rKqa9EIMsh18TqlcfBC7oqkzpT54nrEGvHETfcfnV/I9LfIFkNjw/Uvu85cVeJFj 3gs2VMINXidctCOFsIYhusacc9DI7Na4bFSJ+tFzY+w0yg2YdPGI1/FgDHIV3ldC yblunujQBaNI9Td4Uv/BwV3zolz8YYvP7MwfFO7f6FBN6NNuFz+dlsMiaQivzCxn DHok03lTYiahh2cr5P6+Ie912gs1SE7Ye+bFSxzO8Y7BpNYv/JOZQKlL3Hnf01dX TkaufeQE/yqvBk58c8HQVlXdSg== -----END CERTIFICATE-----Generated at Thu Sep 24 01:01:25 2026 by rpki-client