$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: 0WuBDsTmh9HkOeLn6EaHeYmHjmSjq4GKLf1h0V4giqk= Subject key identifier: 3E:CC:39:F3:98:64:37:EC:A1:C9:8F:70:AF:8F:E4:A4:50:AD:5A:89 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 05A9 Signing time: Tue 22 Sep 2026 22:51:11 +0000 Manifest this update: Tue 22 Sep 2026 22:51:11 +0000 Manifest next update: Tue 29 Sep 2026 22:51:11 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: REl07JD1qRKU5277MJFtfpTda59uG5WMrzGno92rJwM=) 2: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: nNfdgdLoLhr6Vy9d41UW1l+EsR1U5EgpKmeHjbrVZXE=) 3: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: n4tuVdk3omfSB8XzyCrNJHNaBap0wt8tJ/fhHnIddvI=) 4: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: CtlN2Faru+xDk/jym7szi2Dss5+eT2ey7yUoE46ChWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Sep 22 22:51:11 2026 GMT Not After : Sep 29 22:51:11 2026 GMT Subject: CN=6ab3065f-77a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:9e:da:9b:48:a3:f5:da:48:42:b5:1c:df: e8:cb:9e:b9:cb:1b:d3:9b:c3:90:28:34:44:5b:e8: 1d:a2:a0:ba:39:37:ac:77:97:b7:22:f4:aa:18:5f: 93:6d:40:54:70:3b:34:e8:ba:ad:4e:fd:15:67:40: 20:79:15:4f:52:89:87:55:cd:b7:7b:c3:a0:10:49: e8:ba:b7:47:1a:a1:c3:0c:59:44:bf:27:ee:4d:b4: 06:49:37:33:84:fd:33:2c:62:93:c7:aa:56:55:4e: 97:0d:54:d1:b2:b9:63:30:ae:cd:95:78:0e:70:a7: e8:65:a3:ab:35:0f:f7:c2:fe:af:49:61:a8:4d:76: a0:f8:4f:9c:b5:40:13:27:d8:b3:1e:ac:96:d5:5b: 6f:5f:d5:40:ab:79:c7:b9:e8:4a:31:87:03:32:36: 66:02:09:5e:72:36:dd:15:34:d2:47:73:b1:ac:be: d3:1d:71:5b:63:99:ca:04:7d:0a:74:1f:00:46:3f: 38:d6:ce:38:c0:e6:95:57:e1:e7:4e:6d:38:38:d5: 71:3a:52:3f:f9:bb:93:01:26:85:01:7f:ed:71:e9: 75:6f:d4:78:90:fc:8c:13:a6:df:12:59:2f:20:cc: 12:32:20:98:31:e0:b8:03:d5:a4:d1:3b:89:c0:5f: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:39:F3:98:64:37:EC:A1:C9:8F:70:AF:8F:E4:A4:50:AD:5A:89 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:04:fb:2f:64:5d:1c:55:6e:68:7d:b6:3b:63:52:6f:0b:ab: 9f:74:33:d7:4d:1d:98:c4:b3:54:90:7c:25:72:bc:10:9c:06: 05:76:6f:f0:c7:e7:85:db:04:93:dd:35:6f:f7:af:9b:f6:e0: 9b:24:e1:77:33:1c:f9:97:76:f6:bd:c1:23:9c:af:42:21:9e: 3e:4d:db:79:01:f9:c7:56:b0:f0:48:08:5b:cc:70:d7:d6:9f: 27:96:a8:64:81:60:4d:09:41:4a:08:ba:ac:e5:c6:53:cf:21: 59:40:32:a2:22:b5:ea:1d:ef:1e:d2:a2:d0:8b:01:87:87:bf: 22:1d:76:8d:93:04:08:4c:11:8e:66:ab:5d:66:1d:02:e6:ac: 4e:b2:eb:32:42:fc:33:96:6a:36:bc:6b:06:df:ac:3e:1b:6f: c9:17:53:4e:26:4a:85:2b:f8:88:83:da:64:5c:26:e9:4b:a3: 37:96:93:87:44:a8:e6:ff:05:52:54:77:c2:9f:a4:1e:2a:05: 9b:24:93:25:e4:dc:70:39:c4:10:0c:54:9f:14:17:3e:34:78: 8e:9c:a1:15:e9:44:a4:ab:6f:00:c0:a5:d0:65:d3:07:b8:65: d0:bc:3a:aa:a4:5d:0c:7a:83:ea:5f:26:3a:54:19:f9:d5:da: 91:ad:ee:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjYwOTIyMjI1MTExWhcNMjYwOTI5MjI1MTExWjAYMRYwFAYD VQQDEw02YWIzMDY1Zi03N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9Ke2ptIo/XaSEK1HN/oy565yxvTm8OQKDREW+gdoqC6OTesd5e3IvSqGF+T bUBUcDs06LqtTv0VZ0AgeRVPUomHVc23e8OgEEnourdHGqHDDFlEvyfuTbQGSTcz hP0zLGKTx6pWVU6XDVTRsrljMK7NlXgOcKfoZaOrNQ/3wv6vSWGoTXag+E+ctUAT J9izHqyW1VtvX9VAq3nHuehKMYcDMjZmAglecjbdFTTSR3OxrL7THXFbY5nKBH0K dB8ARj841s44wOaVV+HnTm04ONVxOlI/+buTASaFAX/tcel1b9R4kPyME6bfElkv IMwSMiCYMeC4A9Wk0TuJwF8CMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7MOfOY ZDfsocmPcK+P5KRQrVqJMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsQT7L2RdHFVuaH22O2NSbwurn3Qz100dmMSzVJB8JXK8EJwGBXZv8MfnhdsE k901b/evm/bgmyThdzMc+Zd29r3BI5yvQiGePk3beQH5x1aw8EgIW8xw19afJ5ao ZIFgTQlBSgi6rOXGU88hWUAyoiK16h3vHtKi0IsBh4e/Ih12jZMECEwRjmarXWYd AuasTrLrMkL8M5ZqNrxrBt+sPhtvyRdTTiZKhSv4iIPaZFwm6UujN5aTh0So5v8F UlR3wp+kHioFmySTJeTccDnEEAxUnxQXPjR4jpyhFelEpKtvAMCl0GXTB7hl0Lw6 qqRdDHqD6l8mOlQZ+dXaka3uTw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:16 2026 by rpki-client