$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft File: EDhLgnxFluWuq0OYhypdFG6ggV8.mft (raw, json) Hash identifier: kustl3+bzZndNVbGDY/5quQsLM1LhWvlV9qs80L6Eq8= Subject key identifier: EC:64:56:CB:35:D8:E1:AF:1F:D4:F3:EE:DB:AD:E6:E3:77:F9:76:DF Authority key identifier: 10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F Certificate issuer: /CN=A91BA3E7/serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft Manifest number: 20 Signing time: Wed 23 Sep 2026 08:37:09 +0000 Manifest this update: Wed 23 Sep 2026 08:37:08 +0000 Manifest next update: Wed 30 Sep 2026 08:37:08 +0000 Files and hashes: 1: EDhLgnxFluWuq0OYhypdFG6ggV8.crl (hash: cJckdHM9tUFnqAtQxSxf8+/hhY/s2NKL3lqhLbQl3Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA3E7, serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F Validity Not Before: Sep 23 08:37:08 2026 GMT Not After : Sep 30 08:37:08 2026 GMT Subject: CN=6ab38fb5-7d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:18:75:42:f9:41:87:86:e3:db:83:ba:bd: 50:72:43:94:99:9f:94:c3:a0:2a:89:50:cf:c1:75: 95:1d:ca:6a:7d:9e:4a:df:7b:06:08:af:ed:fa:2f: 97:d7:60:6b:14:9c:88:56:9d:a0:c0:ff:ad:08:f3: 4d:f3:ce:c7:ad:8a:82:76:2a:e6:16:64:a6:9a:ae: 8a:27:fe:9a:df:b4:d7:13:aa:1e:2d:68:41:e1:56: 11:ba:dd:15:96:c9:93:49:1c:d9:eb:31:04:c6:78: a5:7d:9a:10:ae:7a:26:8f:04:a1:c7:4e:3d:a6:db: e0:c9:37:4e:d9:a5:38:a9:be:d8:9f:b3:b3:9a:d1: 9c:97:f5:6e:27:bf:f5:af:ed:c3:bf:35:fb:ff:db: 5c:47:ce:19:20:c3:1c:65:67:d9:f7:a5:01:92:77: 20:10:c9:cc:df:fc:96:64:31:88:cf:14:bf:1e:45: fe:b8:18:99:e9:e2:75:99:84:f1:aa:a1:7e:f9:0b: 43:81:1d:99:51:1e:29:eb:7f:96:e3:75:9d:8e:22: 6e:fe:08:62:3d:49:3a:a4:9b:20:e6:e8:16:89:0a: b4:68:80:f0:7d:77:65:d1:87:ae:a3:dc:a9:45:91: a8:55:4f:69:89:e3:94:ba:23:3d:92:21:6a:4a:79: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:56:CB:35:D8:E1:AF:1F:D4:F3:EE:DB:AD:E6:E3:77:F9:76:DF X509v3 Authority Key Identifier: keyid:10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9f:ba:b0:a2:cf:6c:cd:49:e6:2a:ab:f9:76:17:e4:41:cd: 95:4c:91:40:04:cf:f0:4d:9e:30:97:10:10:8a:2a:80:9e:25: c5:43:3a:86:2d:d0:a2:d3:1e:25:33:e1:fd:23:63:a6:cc:aa: 04:83:b8:8d:ab:75:18:9e:bc:9f:3f:5f:4b:3d:61:de:b4:75: 5a:ff:5d:e4:f3:08:51:68:c6:fc:93:f6:02:75:0e:e6:04:a9: 12:cf:33:52:3a:d7:04:40:d4:8e:79:f4:5d:9b:cf:c8:12:19: 2d:5e:0e:92:d8:72:dd:43:6e:4f:f8:cd:9b:40:2e:1c:2a:33: 94:f1:cc:d5:af:e4:9c:42:d7:1f:ab:9d:2e:b7:83:bf:31:11: 76:ce:86:9d:74:8a:0a:0e:3b:c2:7a:fa:ca:85:85:27:8e:2e: f7:2a:c0:a0:88:8f:61:c3:97:27:97:78:34:11:b3:de:b5:59: 3d:6c:45:73:7a:9e:17:37:53:83:58:b7:39:0d:b0:cd:93:22: 71:0d:51:22:c0:ab:ff:4a:86:86:f6:90:2c:32:48:6d:e8:80: c8:93:46:8f:b9:74:6c:9c:1c:3b:0f:6c:1a:b9:0a:66:ea:ac: 4f:9b:52:45:6c:bf:7a:1a:86:5b:b1:80:31:7b:20:c1:d0:fa: 16:bb:a5:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTNFNzExMC8GA1UEBRMoMTAzODRCODI3QzQ1OTZFNUFFQUI0Mzk4ODcyQTVEMTQ2 RUEwODE1RjAeFw0yNjA5MjMwODM3MDhaFw0yNjA5MzAwODM3MDhaMBgxFjAUBgNV BAMTDTZhYjM4ZmI1LTdkMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1zRh1QvlBh4bj24O6vVByQ5SZn5TDoCqJUM/BdZUdymp9nkrfewYIr+36L5fX YGsUnIhWnaDA/60I803zzsetioJ2KuYWZKaaroon/prftNcTqh4taEHhVhG63RWW yZNJHNnrMQTGeKV9mhCueiaPBKHHTj2m2+DJN07ZpTipvtifs7Oa0ZyX9W4nv/Wv 7cO/Nfv/21xHzhkgwxxlZ9n3pQGSdyAQyczf/JZkMYjPFL8eRf64GJnp4nWZhPGq oX75C0OBHZlRHinrf5bjdZ2OIm7+CGI9STqkmyDm6BaJCrRogPB9d2XRh66j3KlF kahVT2mJ45S6Iz2SIWpKeYcdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7GRWyzXY 4a8f1PPu263m43f5dt8wHwYDVR0jBBgwFoAUEDhLgnxFluWuq0OYhypdFG6ggV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzZFQjRCNTEyOEEx RjExRjE5RTRFQzdBMTY4MTFGOTcwL0VEaExnbnhGbHVXdXEwT1loeXBkRkc2Z2dW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRURoTGdueEZsdVd1cTBPWWh5cGRGRzZnZ1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB M0U3LzZFQjRCNTEyOEExRjExRjE5RTRFQzdBMTY4MTFGOTcwL0VEaExnbnhGbHVX dXEwT1loeXBkRkc2Z2dWOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3n7qwos9szUnmKqv5dhfkQc2VTJFABM/wTZ4wlxAQiiqAniXFQzqGLdCi0x4l M+H9I2OmzKoEg7iNq3UYnryfP19LPWHetHVa/13k8whRaMb8k/YCdQ7mBKkSzzNS OtcEQNSOefRdm8/IEhktXg6S2HLdQ25P+M2bQC4cKjOU8czVr+ScQtcfq50ut4O/ MRF2zoaddIoKDjvCevrKhYUnji73KsCgiI9hw5cnl3g0EbPetVk9bEVzep4XN1OD WLc5DbDNkyJxDVEiwKv/SoaG9pAsMkht6IDIk0aPuXRsnBw7D2wauQpm6qxPm1JF bL96GoZbsYAxeyDB0PoWu6V+ -----END CERTIFICATE-----Generated at Thu Sep 24 14:02:20 2026 by rpki-client