$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: R/ZlNVHFSqsB6ongpO9+q2npAWZorkR2aYh5iUSTqAQ= Subject key identifier: F4:BB:2D:10:56:49:58:7C:AD:3F:B1:CB:4F:6E:C8:2E:4D:A5:FF:C2 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 0554 Signing time: Tue 22 Sep 2026 23:09:25 +0000 Manifest this update: Tue 22 Sep 2026 23:09:24 +0000 Manifest next update: Tue 29 Sep 2026 23:09:24 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: vSAXvzeW0IyUb8TD8TvUJXAL4z5/CRvh7q5MH6WDKjY=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: THixLa/45ZK/Pkv9/quk4OO+SRxBsBhh9iA6Q9k83cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Sep 22 23:09:24 2026 GMT Not After : Sep 29 23:09:24 2026 GMT Subject: CN=6ab30aa5-28f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:0f:dd:82:b3:71:99:6c:82:28:67:5c:0c: 74:7a:56:16:60:3c:6d:ee:84:f8:89:fe:39:38:22: 0e:99:88:a3:62:c9:d3:2d:4c:0b:77:3d:4e:72:af: 99:91:90:3c:90:89:98:da:66:4f:12:24:51:81:b7: 97:4b:3d:3f:32:47:a3:74:bb:10:21:ed:be:fa:3a: f0:58:43:d4:d9:00:02:40:cf:e7:33:fd:2f:6a:91: 1d:6d:ca:5c:5e:f0:78:6e:8c:f0:29:79:6c:2f:8b: 5c:2e:bd:e9:96:94:19:10:f5:8b:8c:c4:6d:95:91: 87:fa:14:22:e7:75:0a:26:64:6a:7d:2d:d0:b3:ff: a3:a6:20:7f:1f:d2:3c:89:f6:9b:a7:5a:ef:54:6c: 19:28:f7:35:78:b2:69:71:b2:6e:53:d7:5e:03:a0: a8:54:47:a2:93:37:bb:1c:0a:0d:d7:2f:f0:99:d9: dc:ff:99:fc:e4:54:03:95:39:50:69:81:c9:6b:3b: 3a:80:ca:31:f9:65:3d:a5:40:51:cf:91:87:3a:44: d7:5e:d2:58:9a:6a:e2:c2:0e:3e:13:f5:a6:69:48: 39:95:cf:65:d2:58:bf:ba:72:ce:dd:da:14:0a:cf: e9:2c:97:38:52:21:31:5f:06:dd:1d:90:ff:7f:2e: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:2D:10:56:49:58:7C:AD:3F:B1:CB:4F:6E:C8:2E:4D:A5:FF:C2 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:52:60:32:2b:2d:b3:e9:cb:2c:7a:49:3b:ad:59:93:9f:35: e5:09:52:5a:99:07:28:a8:d2:2b:95:03:5c:95:66:53:78:3c: 6e:be:56:10:bb:09:27:aa:e9:eb:f3:74:49:f3:d8:4c:dc:99: 49:3e:90:ab:ce:66:fb:7d:fc:1c:56:c5:03:ec:d6:a9:e4:2e: 32:0a:d3:a7:8a:fe:15:41:62:c0:24:52:3e:75:06:10:39:b3: 4f:fb:ba:06:07:ae:cd:de:4a:82:22:9d:43:da:d0:db:5a:04: 2e:ac:6b:bd:5c:91:a6:7b:09:e0:6a:ae:a7:eb:89:47:83:ab: b7:58:99:45:6d:3d:d5:0f:48:7c:f3:b5:ca:70:93:64:29:c9: 32:43:aa:ad:7f:51:5a:ed:a8:32:44:04:97:13:51:14:c4:33: 25:4d:28:95:43:fb:42:ac:f0:65:d6:da:6c:16:e1:81:12:af: a3:3e:35:26:3e:66:6d:9f:f4:fb:a3:ba:b4:79:dd:6b:09:95: b6:8b:32:5e:8a:88:28:fc:71:e2:cf:cd:b6:1f:64:1e:08:06: 90:6b:8f:9b:2c:84:e4:96:55:0f:bf:f5:d9:a1:18:7e:a3:ef: 90:6d:89:d1:95:59:c5:eb:c7:32:95:0d:e6:73:93:61:54:ce: 96:d1:cf:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjYwOTIyMjMwOTI0WhcNMjYwOTI5MjMwOTI0WjAYMRYwFAYD VQQDEw02YWIzMGFhNS0yOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwoP3YKzcZlsgihnXAx0elYWYDxt7oT4if45OCIOmYijYsnTLUwLdz1Ocq+Z kZA8kImY2mZPEiRRgbeXSz0/MkejdLsQIe2++jrwWEPU2QACQM/nM/0vapEdbcpc XvB4bozwKXlsL4tcLr3plpQZEPWLjMRtlZGH+hQi53UKJmRqfS3Qs/+jpiB/H9I8 ifabp1rvVGwZKPc1eLJpcbJuU9deA6CoVEeikze7HAoN1y/wmdnc/5n85FQDlTlQ aYHJazs6gMox+WU9pUBRz5GHOkTXXtJYmmriwg4+E/WmaUg5lc9l0li/unLO3doU Cs/pLJc4UiExXwbdHZD/fy4HxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPS7LRBW SVh8rT+xy09uyC5Npf/CMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAalJgMists+nLLHpJO61Zk5815QlSWpkHKKjSK5UDXJVmU3g8br5WELsJJ6rp 6/N0SfPYTNyZST6Qq85m+338HFbFA+zWqeQuMgrTp4r+FUFiwCRSPnUGEDmzT/u6 Bgeuzd5KgiKdQ9rQ21oELqxrvVyRpnsJ4Gqup+uJR4Ort1iZRW091Q9IfPO1ynCT ZCnJMkOqrX9RWu2oMkQElxNRFMQzJU0olUP7QqzwZdbabBbhgRKvoz41Jj5mbZ/0 +6O6tHndawmVtosyXoqIKPxx4s/Nth9kHggGkGuPmyyE5JZVD7/12aEYfqPvkG2J 0ZVZxevHMpUN5nOTYVTOltHPcA== -----END CERTIFICATE-----Generated at Wed Sep 23 08:27:49 2026 by rpki-client