$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json) Hash identifier: NRAqHaDICZy1zGGveqsYF3yJ4Ytn0gSGdt6w24D8d3o= Subject key identifier: 6B:7E:49:3B:6D:5C:38:D1:AF:0B:31:5B:5D:DC:17:AE:69:89:0E:45 Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 10B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft Manifest number: 1089 Signing time: Tue 22 Sep 2026 17:17:24 +0000 Manifest this update: Tue 22 Sep 2026 17:17:23 +0000 Manifest next update: Tue 29 Sep 2026 17:17:23 +0000 Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: pIpQ1s3yMmOuj4Zhj3LI+WgloGxlFIBrqO6edKw538k=) 2: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: sWIaQsRig/VPK+jbVKOZ7b0CcY18nT76qL7QJZBmK1M=) 3: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: Cj4OYm14pPKAq2MPYlPoOUpdF12Cuo+hs3NS/ALB7Mk=) 4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: X9qQAMuSIANj5rZ69KeyXyhB5xhdMqRkN0M45pqUe9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4279 (0x10b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 22 17:17:23 2026 GMT Not After : Sep 29 17:17:23 2026 GMT Subject: CN=6ab2b824-9847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:6f:d9:cd:9f:7f:4c:c7:90:77:59:e6:d2: 89:d3:e5:36:dc:44:a7:e3:2e:94:dd:5e:77:24:b8: 58:b5:1e:e6:7e:4d:ee:b9:e0:54:bd:e0:ad:cc:d1: e0:22:21:e2:45:18:c8:e0:98:59:85:e7:60:a2:c5: 5d:27:60:5a:f3:ad:09:31:d9:f1:8f:0f:c7:66:95: a4:e8:d9:0b:ce:ce:30:fa:b5:16:af:87:96:c1:e8: 6e:9b:f1:69:9b:c8:e9:92:d3:1e:9c:fa:b0:22:0d: 91:f6:4f:d8:df:24:c4:fe:36:31:3e:9b:86:23:8e: 96:7c:4c:df:95:2a:29:53:73:0c:78:10:a7:00:d4: 0f:1d:a7:75:2a:9d:21:6a:16:db:f9:56:38:a2:09: fb:65:d1:61:35:34:38:9a:22:55:ea:4b:fc:a7:9e: bb:ce:d6:c5:01:57:1f:af:19:88:cf:e3:2c:ca:c4: 13:ec:77:8b:80:60:89:b5:e1:de:de:ae:1b:56:25: dc:04:a3:02:aa:d3:1c:fa:27:95:e3:e5:0a:0d:65: 93:f5:6d:ab:27:06:24:96:b3:21:c4:c0:cc:84:c2: 8a:76:5e:6e:9e:2c:af:b0:02:e5:50:96:d1:87:3e: 08:5b:20:6c:fd:0e:b9:2b:80:21:4d:94:88:78:38: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7E:49:3B:6D:5C:38:D1:AF:0B:31:5B:5D:DC:17:AE:69:89:0E:45 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1e:ad:c6:f4:92:f2:cd:7c:12:7d:df:e0:44:d0:79:3f:2c: 38:ae:82:72:31:4f:d4:80:3f:2a:23:75:35:6b:c1:81:67:8f: 82:ec:ea:75:b8:fa:1d:20:aa:7a:a0:d3:ba:3f:21:35:fa:37: 75:a6:79:d7:9d:1a:22:2b:64:7c:4e:88:6e:69:a3:f5:6d:a2: 2b:f1:92:44:a1:be:10:c9:c5:9b:45:b3:af:46:bd:ae:cb:3a: d6:3c:6c:e2:93:95:66:d6:02:38:fb:ce:8c:56:34:e5:fe:0e: 0d:9f:a8:29:bb:ce:ba:bc:41:eb:44:3b:61:c4:ac:c1:d8:df: 14:d3:57:7d:14:45:57:2d:55:10:90:8b:f6:e2:41:a0:94:49: 24:cb:13:33:9d:41:99:91:23:45:52:2f:c5:3a:1f:3b:47:7e: 40:bb:f2:b8:96:bb:d7:5a:e4:d7:fd:4c:c2:21:e5:58:55:77: 92:57:c1:89:c2:f0:e9:12:48:b4:88:b1:68:cb:29:b0:3f:e7: db:e2:f8:cf:98:f7:3b:ac:9d:a2:f9:e5:1b:9c:e1:1d:d7:e2: 69:da:3a:b8:b7:37:a7:1a:a4:6f:e8:14:0e:2b:bc:c2:4c:ef: 50:2c:d4:79:d2:61:43:07:25:8d:f1:66:2a:40:c3:67:2b:75: b9:9b:0b:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICELcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjYwOTIyMTcxNzIzWhcNMjYwOTI5MTcxNzIzWjAYMRYwFAYD VQQDEw02YWIyYjgyNC05ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwJv2c2ff0zHkHdZ5tKJ0+U23ESn4y6U3V53JLhYtR7mfk3uueBUveCtzNHg IiHiRRjI4JhZhedgosVdJ2Ba860JMdnxjw/HZpWk6NkLzs4w+rUWr4eWwehum/Fp m8jpktMenPqwIg2R9k/Y3yTE/jYxPpuGI46WfEzflSopU3MMeBCnANQPHad1Kp0h ahbb+VY4ogn7ZdFhNTQ4miJV6kv8p567ztbFAVcfrxmIz+MsysQT7HeLgGCJteHe 3q4bViXcBKMCqtMc+ieV4+UKDWWT9W2rJwYklrMhxMDMhMKKdl5uniyvsALlUJbR hz4IWyBs/Q65K4AhTZSIeDhPTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGt+STtt XDjRrwsxW13cF65piQ5FMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdEMS82Q0JDOUI0MDYxMUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdt cGtsZGdTYWhPZnhBU1RnQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAch6txvSS8s18En3f4ETQeT8sOK6CcjFP1IA/KiN1NWvBgWePguzqdbj6HSCq eqDTuj8hNfo3daZ5150aIitkfE6Ibmmj9W2iK/GSRKG+EMnFm0Wzr0a9rss61jxs 4pOVZtYCOPvOjFY05f4ODZ+oKbvOurxB60Q7YcSswdjfFNNXfRRFVy1VEJCL9uJB oJRJJMsTM51BmZEjRVIvxTofO0d+QLvyuJa711rk1/1MwiHlWFV3klfBicLw6RJI tIixaMspsD/n2+L4z5j3O6ydovnlG5zhHdfiado6uLc3pxqkb+gUDiu8wkzvUCzU edJhQwcljfFmKkDDZyt1uZsL2w== -----END CERTIFICATE-----Generated at Wed Sep 23 08:28:03 2026 by rpki-client