$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: DZ7uyA+aSRyrwSo2hUwSlnyzofoQPV1NlnXpGa3vHRw= Subject key identifier: FB:54:36:0A:DA:77:F5:95:DE:18:F8:B4:BC:0D:4C:41:BE:BD:CB:F3 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 014A Signing time: Wed 23 Sep 2026 05:12:22 +0000 Manifest this update: Wed 23 Sep 2026 05:12:21 +0000 Manifest next update: Wed 30 Sep 2026 05:12:21 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: dKAQLO0unBBe4r3b9NQFxxUWeAo0uDN/ThzE6fGtzps=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=) 3: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=) 4: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Sep 23 05:12:21 2026 GMT Not After : Sep 30 05:12:21 2026 GMT Subject: CN=6ab35fb6-7eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c1:d0:1a:e9:2f:ae:12:16:9b:bd:e0:09:96: 89:1a:10:d2:16:e2:46:34:cd:c2:d7:cf:e3:21:6b: f3:15:07:ca:66:bc:f7:b7:9b:bc:c0:fc:84:6d:07: cf:55:fd:c0:ae:0c:72:e4:d8:ea:07:97:6a:ca:8a: 0a:18:f6:f3:0e:96:e7:6a:13:18:07:ae:33:f5:10: a5:ad:72:01:22:b3:be:49:4d:e6:ef:8b:76:48:0c: d2:62:bb:bd:66:7c:7f:9c:00:d1:1a:e1:99:96:00: 25:2a:93:1d:0b:3f:8c:75:21:04:52:23:01:44:b3: cb:f7:1f:ef:ae:af:1e:d3:b2:1e:fc:6e:99:c3:dc: 3f:35:0f:42:94:27:6a:ca:83:d7:45:9d:af:e2:0c: 55:3f:76:dd:8c:e2:b7:43:e6:23:08:0a:5e:ff:ff: db:87:c7:ef:ba:3a:4e:7c:9d:28:8e:48:f3:af:a4: ed:a9:b3:56:4c:cf:d7:12:93:5f:39:21:5a:f2:d2: e8:1a:b9:d8:57:af:db:d2:a9:2f:bc:3f:ca:6c:bb: c1:de:2f:00:31:13:ef:4a:fe:25:27:c1:52:10:35: ee:88:cc:a6:05:e0:19:c7:3a:83:88:23:26:25:e8: ee:86:13:05:27:72:ad:c1:9a:05:2f:7e:36:6b:4f: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:54:36:0A:DA:77:F5:95:DE:18:F8:B4:BC:0D:4C:41:BE:BD:CB:F3 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cb:85:1d:7f:87:0a:5d:6c:c1:fd:4d:7b:4c:02:fd:90:9b: aa:e1:f0:f9:d3:56:5a:28:90:07:64:26:02:79:93:dc:42:c4: c2:19:6b:39:c2:39:3f:00:76:9e:72:0e:63:4c:8b:2f:bd:bc: 49:b9:ed:04:0d:fd:5f:79:d0:c2:19:41:d8:fb:ac:75:5e:4a: ca:88:c3:4a:be:62:b9:ce:e3:65:47:a5:8d:cd:ee:6f:e6:93: 3c:bb:e7:6f:21:c8:53:8e:53:23:51:45:a8:c1:37:e8:3e:0b: 5e:e0:fe:c2:bf:e5:f9:5a:73:e7:60:1d:71:98:ea:ed:4d:cc: 90:f6:3f:06:2e:cd:99:4e:fd:eb:86:28:9c:f8:6e:73:8e:d0: ac:a4:02:03:18:91:64:e9:77:6e:25:39:b0:a4:44:cb:63:a4: c2:c2:a9:fa:bd:b6:ec:26:68:9f:38:f9:74:2f:87:0e:d6:d3: 04:53:21:39:a2:04:ec:62:fb:25:f1:8c:63:94:17:c5:cd:f6: 13:12:82:fb:99:af:66:1f:13:45:d5:7b:5a:8c:d2:5f:12:1a: 20:d3:0f:57:d1:aa:59:c7:2a:88:c7:64:ec:b4:13:a2:ab:14: c1:95:33:11:37:f7:99:8f:67:fd:c4:18:44:5d:52:d4:f5:f8: 9f:0d:38:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjYwOTIzMDUxMjIxWhcNMjYwOTMwMDUxMjIxWjAYMRYwFAYD VQQDEw02YWIzNWZiNi03ZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cHQGukvrhIWm73gCZaJGhDSFuJGNM3C18/jIWvzFQfKZrz3t5u8wPyEbQfP Vf3Argxy5NjqB5dqyooKGPbzDpbnahMYB64z9RClrXIBIrO+SU3m74t2SAzSYru9 Znx/nADRGuGZlgAlKpMdCz+MdSEEUiMBRLPL9x/vrq8e07Ie/G6Zw9w/NQ9ClCdq yoPXRZ2v4gxVP3bdjOK3Q+YjCApe///bh8fvujpOfJ0ojkjzr6TtqbNWTM/XEpNf OSFa8tLoGrnYV6/b0qkvvD/KbLvB3i8AMRPvSv4lJ8FSEDXuiMymBeAZxzqDiCMm JejuhhMFJ3KtwZoFL342a0+wgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtUNgra d/WV3hj4tLwNTEG+vcvzMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL8uFHX+HCl1swf1Ne0wC/ZCbquHw+dNWWiiQB2QmAnmT3ELEwhlrOcI5PwB2 nnIOY0yLL728SbntBA39X3nQwhlB2PusdV5KyojDSr5iuc7jZUeljc3ub+aTPLvn byHIU45TI1FFqME36D4LXuD+wr/l+Vpz52AdcZjq7U3MkPY/Bi7NmU7964YonPhu c47QrKQCAxiRZOl3biU5sKREy2OkwsKp+r227CZonzj5dC+HDtbTBFMhOaIE7GL7 JfGMY5QXxc32ExKC+5mvZh8TRdV7WozSXxIaINMPV9GqWccqiMdk7LQToqsUwZUz ETf3mY9n/cQYRF1S1PX4nw04ow== -----END CERTIFICATE-----Generated at Wed Sep 23 11:28:50 2026 by rpki-client