$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: 4WOu1/t01lpdSbA0vpXLqujgssR4hIpmBAc7QH8O79w= Subject key identifier: 0E:4A:82:42:E0:E0:2D:FC:66:60:79:DE:DE:BF:7E:0D:6F:45:2B:FD Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02D7 Signing time: Wed 23 Sep 2026 00:59:14 +0000 Manifest this update: Wed 23 Sep 2026 00:59:13 +0000 Manifest next update: Wed 30 Sep 2026 00:59:13 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: zWRIb7C99evvPFTlemqSMXLavlmPYQu1YamJ54rwfuI=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Sep 23 00:59:13 2026 GMT Not After : Sep 30 00:59:13 2026 GMT Subject: CN=6ab32462-dba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:af:e7:ba:bf:ca:e9:c4:af:e8:f0:6e:18: ec:3e:6e:4f:da:39:40:4b:02:54:3e:2a:a7:bf:93: 2c:6e:35:80:07:db:57:3f:62:bd:1d:71:16:0c:f1: 56:5f:f6:2c:63:16:a3:69:5c:df:88:75:ee:32:ae: a9:58:df:80:77:01:7a:bd:5e:cb:4a:9e:42:fb:b9: 91:1d:17:16:59:06:34:86:e9:ce:ba:91:25:e8:ca: ec:44:05:0d:64:80:77:a5:06:b2:c4:a8:c4:49:5f: c1:e0:5c:fa:83:07:7d:80:e3:e4:f5:6e:e1:11:b6: b7:5c:e9:ce:d0:91:84:9b:c8:3c:8f:da:73:95:cd: 9a:85:bb:74:d7:f8:77:e1:9c:1f:dd:16:aa:82:7d: 64:60:2e:88:c1:4a:02:a0:1e:cf:0e:b4:46:44:5c: f4:9e:b8:89:23:2a:70:93:ca:a6:5c:7f:85:73:f2: f4:68:8a:4a:e3:81:6e:0d:2b:23:dd:58:f9:a7:75: b9:10:f8:0b:0d:d9:39:c1:e1:dd:bf:be:12:4d:07: 2d:1f:1f:04:08:54:44:f4:53:44:2a:2a:22:b2:64: 5f:9e:58:ed:69:35:7c:bb:14:f5:1b:f3:7b:9e:20: a4:d6:a3:fb:cb:a0:09:57:2f:2e:2a:5b:1a:57:2e: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4A:82:42:E0:E0:2D:FC:66:60:79:DE:DE:BF:7E:0D:6F:45:2B:FD X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:51:d3:42:87:e4:ad:f4:ce:b2:3d:36:b5:ca:e1:0a:da:03: bb:9f:0d:37:30:cf:87:4a:b3:e9:fa:a1:60:55:5c:36:61:7c: e9:b8:01:33:1c:bd:98:6d:a4:de:39:61:c8:77:99:58:04:2d: 32:12:0f:b1:44:52:4a:31:1a:47:0e:ec:f0:53:30:52:97:4b: 15:32:11:19:31:9c:3a:ce:a5:40:20:b3:4b:86:79:30:58:9e: 2f:1e:1a:84:b2:c3:44:97:1e:2a:3a:1c:fe:67:a9:d7:de:57: eb:56:f5:af:ad:01:41:09:2a:15:b0:da:f3:ce:85:e9:e8:6d: ba:46:bf:9e:37:27:75:2b:ab:62:c0:7d:b4:84:8c:d5:15:70: dd:f3:05:70:38:23:ba:f8:c2:54:ff:1b:40:b1:64:40:33:88: 0d:cc:6c:72:d3:3e:e8:db:50:07:48:e1:0b:d7:f4:cf:3b:73: 93:04:19:f7:85:de:5c:b8:1c:5b:ec:b9:fb:db:47:10:ab:64: 3e:89:c2:23:1a:b0:96:95:12:af:89:91:f5:23:96:6e:09:1e: 8a:78:b0:f9:53:64:a7:36:d0:0e:27:e6:60:08:e9:1a:9d:0a: c8:84:7f:62:aa:72:7b:14:75:0d:f0:09:8b:24:14:3b:fe:75: 7c:c4:19:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYwOTIzMDA1OTEzWhcNMjYwOTMwMDA1OTEzWjAYMRYwFAYD VQQDEw02YWIzMjQ2Mi1kYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOqv57q/yunEr+jwbhjsPm5P2jlASwJUPiqnv5MsbjWAB9tXP2K9HXEWDPFW X/YsYxajaVzfiHXuMq6pWN+AdwF6vV7LSp5C+7mRHRcWWQY0hunOupEl6MrsRAUN ZIB3pQayxKjESV/B4Fz6gwd9gOPk9W7hEba3XOnO0JGEm8g8j9pzlc2ahbt01/h3 4Zwf3Raqgn1kYC6IwUoCoB7PDrRGRFz0nriJIypwk8qmXH+Fc/L0aIpK44FuDSsj 3Vj5p3W5EPgLDdk5weHdv74STQctHx8ECFRE9FNEKioismRfnljtaTV8uxT1G/N7 niCk1qP7y6AJVy8uKlsaVy7lvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5KgkLg 4C38ZmB53t6/fg1vRSv9MB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1HTQofkrfTOsj02tcrhCtoDu58NNzDPh0qz6fqhYFVcNmF86bgBMxy9mG2k 3jlhyHeZWAQtMhIPsURSSjEaRw7s8FMwUpdLFTIRGTGcOs6lQCCzS4Z5MFieLx4a hLLDRJceKjoc/mep195X61b1r60BQQkqFbDa886F6ehtuka/njcndSurYsB9tISM 1RVw3fMFcDgjuvjCVP8bQLFkQDOIDcxsctM+6NtQB0jhC9f0zztzkwQZ94XeXLgc W+y5+9tHEKtkPonCIxqwlpUSr4mR9SOWbgkeiniw+VNkpzbQDifmYAjpGp0KyIR/ YqpyexR1DfAJiyQUO/51fMQZYw== -----END CERTIFICATE-----Generated at Fri Sep 25 01:03:51 2026 by rpki-client