$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft File: 80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json) Hash identifier: owDRjQUPu/wY/9wHH0nbZETxg7pjR4Ec3nKoxNWISyg= Subject key identifier: 29:38:5D:18:14:B2:9E:E3:1A:D3:02:7A:30:9D:21:58:19:29:1A:BB Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft Manifest number: D2 Signing time: Wed 23 Sep 2026 06:29:34 +0000 Manifest this update: Wed 23 Sep 2026 06:29:33 +0000 Manifest next update: Wed 30 Sep 2026 06:29:33 +0000 Files and hashes: 1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: WuWI3WaIJd4o5mQNx/XnZ9GguFqNF3WwLg1tnERg4oY=) 2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: y9XglzGcT/yANEywLEKFOF3/z+vv31d43TaG6CEceQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Validity Not Before: Sep 23 06:29:33 2026 GMT Not After : Sep 30 06:29:33 2026 GMT Subject: CN=6ab371cd-81fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:22:21:c3:45:23:59:83:75:d2:28:d4:98: c2:18:5a:2b:5a:51:20:d4:ef:cc:58:43:ce:4c:13: 61:96:d5:4e:eb:db:1e:29:78:99:a6:bb:86:15:8f: f5:d5:0e:37:ff:63:31:73:a8:29:b5:3f:8a:08:a0: 96:3b:aa:e8:55:c0:69:b6:dd:c5:b7:87:af:75:50: 7b:fd:5a:d1:61:bf:82:80:fd:a7:4c:cf:25:98:0f: 7e:a7:91:ca:fb:98:3f:d7:e0:69:85:71:ee:d5:83: ca:ed:5e:07:1a:0a:6a:d9:d6:38:b6:bb:74:17:8b: e6:f3:8a:ed:11:42:db:08:a2:77:b3:8c:f7:a0:65: d6:be:6b:ec:f2:a1:da:3d:9a:8b:27:f2:a2:cd:fb: 28:1d:9f:ca:ea:2e:41:24:9b:7c:98:c8:9d:67:a2: cf:4b:36:77:56:ae:6c:e4:e1:fc:2b:7e:d6:d9:a1: 93:fc:6c:5a:dc:a3:74:5f:2b:f8:3f:3c:9a:20:04: ea:8d:1e:79:11:ab:e3:16:22:99:71:2e:6b:ee:b5: 3b:ae:de:f2:90:2a:75:9e:6b:ca:32:32:f5:e1:89: 82:30:51:fc:54:bc:86:35:e4:0f:8c:8f:75:65:51: 1d:b2:1f:34:50:84:b9:a2:7b:c2:99:1b:91:81:79: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:5D:18:14:B2:9E:E3:1A:D3:02:7A:30:9D:21:58:19:29:1A:BB X509v3 Authority Key Identifier: keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:77:7a:52:0b:32:95:51:f2:9e:c7:a8:54:d7:55:bb:64:cf: fe:04:f2:3b:63:91:ca:b3:9e:7f:e2:36:7b:ff:78:63:78:cf: cd:ce:c4:80:7b:51:07:8d:ec:ce:48:8d:15:e5:2b:ff:49:7a: e4:d4:15:49:97:b6:bf:0e:d7:12:6a:1c:c8:3a:ce:26:4b:77: 27:89:2c:39:2b:70:0e:42:93:22:d1:44:0a:2d:b4:b6:be:ea: 16:a4:22:56:9c:c2:34:8f:05:59:6d:31:56:b9:83:88:f3:ad: 7f:d0:6f:4c:e3:f0:de:c4:14:02:ff:06:bd:6c:2b:4e:98:3b: 1e:a8:66:32:12:04:11:ba:f1:38:f7:4c:b5:c9:8b:5c:76:1a: 65:c0:35:32:04:d5:f5:1c:31:20:b8:5d:70:f1:7f:e8:11:d5: fc:66:ab:51:7f:95:ae:35:80:3c:dd:00:76:04:6f:0b:c0:ee: 80:9b:40:93:10:01:31:2c:5b:d1:20:74:fc:42:c9:4c:76:6f: fe:d6:78:ff:f2:d8:0b:e9:5e:21:0f:c5:5e:f5:96:3f:71:04: 05:14:9a:be:a2:fc:34:3f:c5:69:16:be:87:a7:58:c5:8d:13: ba:63:83:9f:7d:a4:7d:ce:a3:e9:c4:2d:1c:e5:84:04:b1:db: 97:85:17:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDRTExMTAvBgNVBAUTKEYzNEM1MjE1OTFGQjJDRDAyREM2N0JERDcyRENGMjhC MDdBNDJGRjYwHhcNMjYwOTIzMDYyOTMzWhcNMjYwOTMwMDYyOTMzWjAYMRYwFAYD VQQDEw02YWIzNzFjZC04MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GQiIcNFI1mDddIo1JjCGForWlEg1O/MWEPOTBNhltVO69seKXiZpruGFY/1 1Q43/2Mxc6gptT+KCKCWO6roVcBptt3Ft4evdVB7/VrRYb+CgP2nTM8lmA9+p5HK +5g/1+BphXHu1YPK7V4HGgpq2dY4trt0F4vm84rtEULbCKJ3s4z3oGXWvmvs8qHa PZqLJ/KizfsoHZ/K6i5BJJt8mMidZ6LPSzZ3Vq5s5OH8K37W2aGT/Gxa3KN0Xyv4 PzyaIATqjR55EavjFiKZcS5r7rU7rt7ykCp1nmvKMjL14YmCMFH8VLyGNeQPjI91 ZVEdsh80UIS5onvCmRuRgXlBEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCk4XRgU sp7jGtMCejCdIVgZKRq7MB8GA1UdIwQYMBaAFPNMUhWR+yzQLcZ73XLc8osHpC/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENFMS82NzkwQkU1Qzc3 Q0UxMUYwQjU1NzQwNENDNEY5QUUwMi84MHhTRlpIN0xOQXR4bnZkY3R6eWl3ZWtM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgweFNGWkg3TE5BdHhudmRjdHp5aXdla0xfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENFMS82NzkwQkU1Qzc3Q0UxMUYwQjU1NzQwNENDNEY5QUUwMi84MHhTRlpIN0xO QXR4bnZkY3R6eWl3ZWtMX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADXd6UgsylVHynseoVNdVu2TP/gTyO2ORyrOef+I2e/94Y3jPzc7EgHtRB43s zkiNFeUr/0l65NQVSZe2vw7XEmocyDrOJkt3J4ksOStwDkKTItFECi20tr7qFqQi VpzCNI8FWW0xVrmDiPOtf9BvTOPw3sQUAv8GvWwrTpg7HqhmMhIEEbrxOPdMtcmL XHYaZcA1MgTV9RwxILhdcPF/6BHV/GarUX+VrjWAPN0AdgRvC8DugJtAkxABMSxb 0SB0/ELJTHZv/tZ4//LYC+leIQ/FXvWWP3EEBRSavqL8ND/FaRa+h6dYxY0TumOD n32kfc6j6cQtHOWEBLHbl4UXnw== -----END CERTIFICATE-----Generated at Wed Sep 23 11:42:54 2026 by rpki-client