$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: OH0gtk9OplRaVD6y1+HZ0eDN4a9mjJ/mgcOo/y+4rzo= Subject key identifier: 5B:FF:BF:AF:F2:8A:30:CD:04:1E:F4:D5:F6:C7:59:EE:90:2F:EA:8F Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0D13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0D07 Signing time: Sat 26 Sep 2026 18:27:14 +0000 Manifest this update: Sat 26 Sep 2026 18:27:13 +0000 Manifest next update: Sat 03 Oct 2026 18:27:13 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: a0rx/zJXtkp+U5kWH6zF0f51C809dYCtGndtwVshtjQ=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=) 3: w0UxDksEhVgTbiOPi32yfBjO8Nc.asa (hash: cCNwpQu6uKNcvL+/ux8Wy6Y48MKl03STw/0+ZuYQCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Sep 26 18:27:13 2026 GMT Not After : Oct 3 18:27:13 2026 GMT Subject: CN=6ab80e82-abb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:73:c4:37:4e:05:26:f1:6a:18:32:1e:01: e8:e2:e9:26:91:8e:e9:a6:f4:04:47:d2:3a:c5:65: 35:26:c2:7d:e5:f8:ec:4a:c2:44:23:74:0c:55:ff: 40:66:53:1a:d7:6d:52:31:1a:0d:4a:f2:37:fc:e5: c7:43:57:ac:51:bb:5d:b4:92:35:8f:2f:32:14:5c: 2e:c0:8b:12:4a:09:27:a2:93:95:a9:50:3a:08:d6: e4:fb:10:5b:ec:44:6c:a4:0f:ed:64:76:64:d5:8f: 66:b8:ed:18:21:8b:e4:d8:92:c6:f0:d3:77:58:1d: 05:ec:95:b7:e4:d6:06:d2:34:51:f8:a3:16:48:85: 2a:b2:0a:db:d5:0b:3f:76:52:35:ed:b8:93:6c:24: 0c:53:3c:b6:39:1c:b4:5a:bb:5f:3c:b6:19:b0:1a: 0e:d6:31:7a:b4:49:54:91:2c:13:85:cf:ce:ca:ac: 4d:65:9b:fa:7a:1c:62:cf:2b:e7:66:88:7b:d2:a3: 5e:6a:c9:74:22:52:cf:8b:86:e7:c3:0c:40:8a:07: 58:cb:fe:ca:01:4a:1c:0a:30:db:ab:9d:81:df:8c: 40:63:2b:59:7d:c2:7e:02:87:fa:00:37:66:49:72: 94:3a:0e:60:4e:7d:5e:6a:2c:e8:47:c3:64:20:7d: 4a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:BF:AF:F2:8A:30:CD:04:1E:F4:D5:F6:C7:59:EE:90:2F:EA:8F X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:17:e3:ef:ea:c7:56:d1:15:2a:b7:1a:c6:aa:e4:bd:3e:8e: 56:2b:2d:50:44:4c:5c:16:03:94:4c:a6:a2:7b:34:4d:ca:bf: a2:ec:c1:5f:25:19:08:54:3a:f8:cd:1e:25:27:8e:2b:79:eb: ec:26:ef:43:df:94:2e:48:07:31:7d:a0:4f:47:a3:07:2b:5c: bc:ee:d4:35:00:85:e1:cd:2a:b3:61:4d:c4:93:10:be:8c:88: 4c:68:a2:36:9b:51:d8:f2:96:f2:6c:ce:0d:6e:59:d5:a6:58: 34:1e:80:9a:92:2d:a8:f3:17:1f:9f:e9:bf:b3:16:3f:b6:94: ab:1a:dd:eb:62:fb:ea:66:4f:15:8c:2d:9f:3d:df:c3:b7:ea: 31:c6:0c:23:8d:2f:58:5a:05:23:79:e9:a2:82:c0:81:1f:54: d2:7d:1d:51:4c:bd:3a:6d:e6:b0:37:71:43:df:dd:ea:4a:93: 65:3f:3d:fb:16:b9:fd:31:ad:6a:66:2e:50:11:92:6b:f5:eb: 5c:1e:3d:3e:8a:2b:88:03:c7:c9:96:0a:48:de:b2:31:c3:09: 6e:a2:6d:31:d7:94:72:99:df:50:2c:b4:ab:f6:50:8a:a9:0f: 1a:b5:18:df:a7:f6:dd:1c:18:f8:08:d7:a9:41:94:af:05:05: 17:0b:d0:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjYwOTI2MTgyNzEzWhcNMjYxMDAzMTgyNzEzWjAYMRYwFAYD VQQDEw02YWI4MGU4Mi1hYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCBzxDdOBSbxahgyHgHo4ukmkY7ppvQER9I6xWU1JsJ95fjsSsJEI3QMVf9A ZlMa121SMRoNSvI3/OXHQ1esUbtdtJI1jy8yFFwuwIsSSgknopOVqVA6CNbk+xBb 7ERspA/tZHZk1Y9muO0YIYvk2JLG8NN3WB0F7JW35NYG0jRR+KMWSIUqsgrb1Qs/ dlI17biTbCQMUzy2ORy0WrtfPLYZsBoO1jF6tElUkSwThc/OyqxNZZv6ehxizyvn Zoh70qNeasl0IlLPi4bnwwxAigdYy/7KAUocCjDbq52B34xAYytZfcJ+Aof6ADdm SXKUOg5gTn1eaizoR8NkIH1KVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFv/v6/y ijDNBB701fbHWe6QL+qPMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoBfj7+rHVtEVKrcaxqrkvT6OVistUERMXBYDlEymons0Tcq/ouzBXyUZCFQ6 +M0eJSeOK3nr7CbvQ9+ULkgHMX2gT0ejBytcvO7UNQCF4c0qs2FNxJMQvoyITGii NptR2PKW8mzODW5Z1aZYNB6AmpItqPMXH5/pv7MWP7aUqxrd62L76mZPFYwtnz3f w7fqMcYMI40vWFoFI3npooLAgR9U0n0dUUy9Om3msDdxQ9/d6kqTZT89+xa5/TGt amYuUBGSa/XrXB49PooriAPHyZYKSN6yMcMJbqJtMdeUcpnfUCy0q/ZQiqkPGrUY 36f23RwY+AjXqUGUrwUFFwvQug== -----END CERTIFICATE-----Generated at Sun Sep 27 19:31:27 2026 by rpki-client