$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: U8KC+PPGrT53qqrbXXQ/LmyBH1IKnccP7fvi0XYf6+s= Subject key identifier: 14:46:CD:DC:49:B8:B7:9C:97:C8:7A:74:CF:14:E2:B5:DF:58:49:EE Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: 01E9 Signing time: Wed 23 Sep 2026 03:21:52 +0000 Manifest this update: Wed 23 Sep 2026 03:21:52 +0000 Manifest next update: Wed 30 Sep 2026 03:21:52 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: ejoSi8bz/PA4mCR+WQPzAY/2RnSfd52YvEBP7i9zeBo=) 2: C63D0814097B11F0B1329480C4F9AE02.roa (hash: MmLLr6l4IDOg8XMaUZVystbsTDwX0oyuPDuuzGnXhFs=) 3: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: 1R5i5o2t6sI6xlQkmjgkQQNJTTUz/BHQTGAZz17WwEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Sep 23 03:21:52 2026 GMT Not After : Sep 30 03:21:52 2026 GMT Subject: CN=6ab345d0-089f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:ac:01:8f:80:37:b1:ad:00:89:a8:33:73: 16:c4:56:a6:45:76:ca:4e:7d:01:80:69:93:9e:58: 5b:ce:50:d3:e4:31:34:44:5e:f1:de:70:b5:b7:4e: 45:78:ed:fa:aa:10:68:38:de:ce:c5:c2:80:e0:6f: 2d:ee:2d:05:b2:2a:5c:fc:16:79:ca:49:d7:21:a9: 7a:7c:02:28:74:77:cf:58:c0:c4:04:d7:38:6b:bd: 6b:87:f8:f8:e2:44:f7:6f:00:00:eb:82:bf:0e:9c: 62:97:29:5f:da:fe:ff:e3:b1:29:9f:3e:c5:65:88: 1a:41:a5:d0:49:f0:90:49:ad:5b:9f:59:eb:84:27: b0:b6:2e:47:59:83:6d:78:6a:a3:1f:0c:e2:0a:e1: 2a:95:55:38:14:89:4d:a7:46:0f:cf:c3:e4:0c:74: ed:72:6d:25:ad:e2:46:eb:a8:1d:cc:42:5b:c1:82: c2:42:27:84:0e:41:8f:32:3a:fb:dd:f6:4c:4e:71: 90:11:07:7e:27:54:14:1b:b5:e8:27:5f:e0:2e:e7: f3:f5:ae:14:3b:cd:08:24:dd:fe:6f:74:a2:9d:31: 9b:6e:81:07:84:fb:2c:bf:dd:c3:38:cf:26:16:f5: 8d:72:32:a2:32:0b:b0:a3:38:d4:0d:d8:76:68:51: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:46:CD:DC:49:B8:B7:9C:97:C8:7A:74:CF:14:E2:B5:DF:58:49:EE X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:46:34:4e:a3:09:b6:06:af:d5:5b:fe:dd:4a:4d:ea:03:85: f8:25:c3:36:8b:ce:0a:32:83:94:69:6b:de:e0:32:a5:11:cf: 16:7c:8e:e7:10:63:6d:a0:6c:68:c1:67:43:b4:80:3d:91:98: 11:f8:8a:bd:dc:bd:ac:28:1f:d1:9f:3c:c9:26:5d:87:aa:fb: be:a4:b8:56:e2:35:2b:a6:68:96:b1:28:d5:1d:cb:f4:af:31: 25:64:2f:ed:33:a2:a7:0a:b5:5b:4b:df:af:74:90:84:ae:6d: 10:b3:79:0b:6b:12:1c:22:cc:c3:bb:6e:45:8a:f9:20:bc:f6: ba:0c:b2:d5:ef:fb:49:a6:41:4e:45:92:97:7b:8a:4c:38:97: 96:68:75:39:55:2e:28:ec:2f:33:a4:aa:80:ba:92:c8:f6:a7: 6f:d7:b8:c9:50:4b:f1:a2:2c:07:62:77:4c:09:c2:56:51:83: 3a:8b:da:ba:6a:95:15:c2:b9:e7:63:f6:d0:e7:fd:d5:69:cd: 8b:61:5e:10:90:39:76:b8:12:12:13:b2:0d:98:5c:d7:62:02: 73:61:f8:e9:b6:08:81:db:c2:89:a1:2a:db:a9:54:2a:0d:95: 13:ed:96:aa:bb:b4:bd:dc:d9:3f:ac:54:e0:61:03:32:f4:1e: d7:f3:45:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjYwOTIzMDMyMTUyWhcNMjYwOTMwMDMyMTUyWjAYMRYwFAYD VQQDEw02YWIzNDVkMC0wODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5WsAY+AN7GtAImoM3MWxFamRXbKTn0BgGmTnlhbzlDT5DE0RF7x3nC1t05F eO36qhBoON7OxcKA4G8t7i0Fsipc/BZ5yknXIal6fAIodHfPWMDEBNc4a71rh/j4 4kT3bwAA64K/Dpxilylf2v7/47Epnz7FZYgaQaXQSfCQSa1bn1nrhCewti5HWYNt eGqjHwziCuEqlVU4FIlNp0YPz8PkDHTtcm0lreJG66gdzEJbwYLCQieEDkGPMjr7 3fZMTnGQEQd+J1QUG7XoJ1/gLufz9a4UO80IJN3+b3SinTGbboEHhPssv93DOM8m FvWNcjKiMguwozjUDdh2aFFIjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRGzdxJ uLecl8h6dM8U4rXfWEnuMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA0Y0TqMJtgav1Vv+3UpN6gOF+CXDNovOCjKDlGlr3uAypRHPFnyO5xBjbaBs aMFnQ7SAPZGYEfiKvdy9rCgf0Z88ySZdh6r7vqS4VuI1K6ZolrEo1R3L9K8xJWQv 7TOipwq1W0vfr3SQhK5tELN5C2sSHCLMw7tuRYr5ILz2ugyy1e/7SaZBTkWSl3uK TDiXlmh1OVUuKOwvM6SqgLqSyPanb9e4yVBL8aIsB2J3TAnCVlGDOovaumqVFcK5 52P20Of91WnNi2FeEJA5drgSEhOyDZhc12ICc2H46bYIgdvCiaEq26lUKg2VE+2W qru0vdzZP6xU4GEDMvQe1/NFUQ== -----END CERTIFICATE-----Generated at Thu Sep 24 00:57:33 2026 by rpki-client