$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json) Hash identifier: ofNYItQ6Lxy7oR3tkMeh5qCwEy3f28mxkRxGiHVKnYw= Subject key identifier: B3:4A:F7:1C:C9:A9:15:B2:03:18:03:68:D1:FF:C5:16:6F:17:0E:58 Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft Manifest number: D1 Signing time: Wed 23 Sep 2026 06:30:06 +0000 Manifest this update: Wed 23 Sep 2026 06:30:06 +0000 Manifest next update: Wed 30 Sep 2026 06:30:06 +0000 Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: VFijbVeqNDYtXgOfoysq8CFSRlI69t1JnGIli9hlW+g=) 2: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: XQ0jrIDzzz795V8KPlS4sud0mU6PKmlJGnI9QUYw0ts=) 3: BAC878D0799511F098E98265C4F9AE02.roa (hash: vSD6IyL+ue3ZLZzccvCuToSIT7hSnAMM8CW/FNe82/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Sep 23 06:30:06 2026 GMT Not After : Sep 30 06:30:06 2026 GMT Subject: CN=6ab371ee-a791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:8e:20:93:ed:dc:f1:6a:ca:cb:61:24:28: f2:bd:8e:49:4b:6c:42:2a:1d:ba:bd:20:d8:9d:19: 93:8e:d6:72:c5:5b:bb:c9:40:67:f6:fe:4d:e6:d9: dd:1b:c8:f1:35:c2:15:12:79:06:d3:06:b6:11:50: 4e:b6:59:11:fc:20:b0:0e:38:d5:e2:71:38:32:05: d2:95:b1:4b:25:49:0a:ba:d7:8b:11:da:96:02:e9: 95:5f:47:17:cd:46:3d:30:0c:da:df:1d:5b:26:cc: 17:3f:11:07:45:4f:ed:0b:16:1c:02:87:8e:ae:f4: 0b:e6:82:bf:f2:8a:d6:02:c5:9b:d5:b5:fd:d1:68: b6:de:14:f5:b0:e7:5b:75:96:91:55:61:2a:f9:c1: de:7a:87:54:12:5f:93:da:bb:43:32:21:59:55:06: 90:89:19:21:ac:64:00:27:c9:4b:47:13:e6:e7:cd: 7c:b3:f9:a0:9a:c1:6d:ee:8f:4d:a9:0c:6d:7b:83: 67:9f:06:7e:79:13:12:fb:9b:8f:99:ac:d2:a7:5f: 5c:6c:5d:60:56:ec:9f:97:8f:58:17:a6:56:90:2b: 06:0f:33:9c:0f:8b:cd:e7:58:f0:58:e7:d6:a9:7d: 0a:27:18:34:0b:05:97:12:09:0e:8a:da:be:f6:af: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4A:F7:1C:C9:A9:15:B2:03:18:03:68:D1:FF:C5:16:6F:17:0E:58 X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c8:0c:8a:93:80:a5:2b:3a:17:e7:a1:7d:3e:74:0c:37:b4: 72:ea:7e:17:6f:35:34:f0:62:0b:58:33:d5:87:62:f6:f8:3c: bf:fd:3b:4e:67:1e:ac:af:40:9e:0d:59:41:bc:04:12:75:c1: 8b:1a:ae:b0:1a:f5:47:b8:38:01:f1:db:ae:2c:49:35:86:1e: d0:28:d2:a3:09:c9:0f:2c:3c:e2:17:6c:6d:fc:b8:7d:24:4a: e6:df:5a:6c:a5:ab:9b:a4:b6:51:83:4a:ad:81:06:16:80:f6: 65:bc:cc:4a:6e:6c:61:d7:fd:d6:bd:f2:8f:1a:5b:5b:38:b6: 51:8d:55:67:2a:43:cc:05:f1:be:a2:4a:3e:ed:f3:41:80:bb: 20:36:46:39:79:4f:20:bb:d8:db:f8:a6:9d:39:2f:6b:47:0f: 9f:89:08:0d:11:d2:aa:ed:ff:6e:a9:af:be:be:e9:b9:55:61: 6d:5b:67:02:4a:09:48:61:9d:fb:f6:bc:4b:fc:ba:15:cc:3f: bd:7e:25:0e:b6:5d:a8:37:4a:67:f6:eb:aa:83:5e:fb:3c:c5: f7:50:8d:26:1b:eb:d3:fe:db:46:8e:be:4e:1e:31:d6:84:68: b3:80:ac:49:2c:e8:c8:7a:2e:da:80:65:b3:8b:b6:9a:d9:2d: 5d:77:6e:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD NzdDNERCMzcwHhcNMjYwOTIzMDYzMDA2WhcNMjYwOTMwMDYzMDA2WjAYMRYwFAYD VQQDEw02YWIzNzFlZS1hNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mKOIJPt3PFqysthJCjyvY5JS2xCKh26vSDYnRmTjtZyxVu7yUBn9v5N5tnd G8jxNcIVEnkG0wa2EVBOtlkR/CCwDjjV4nE4MgXSlbFLJUkKuteLEdqWAumVX0cX zUY9MAza3x1bJswXPxEHRU/tCxYcAoeOrvQL5oK/8orWAsWb1bX90Wi23hT1sOdb dZaRVWEq+cHeeodUEl+T2rtDMiFZVQaQiRkhrGQAJ8lLRxPm5818s/mgmsFt7o9N qQxte4NnnwZ+eRMS+5uPmazSp19cbF1gVuyfl49YF6ZWkCsGDzOcD4vN51jwWOfW qX0KJxg0CwWXEgkOitq+9q+GgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNK9xzJ qRWyAxgDaNH/xRZvFw5YMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5 OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STcz S1FzUkFqSTFpSlRIZkUyemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOsgMipOApSs6F+ehfT50DDe0cup+F281NPBiC1gz1Ydi9vg8v/07TmcerK9A ng1ZQbwEEnXBixqusBr1R7g4AfHbrixJNYYe0CjSownJDyw84hdsbfy4fSRK5t9a bKWrm6S2UYNKrYEGFoD2ZbzMSm5sYdf91r3yjxpbWzi2UY1VZypDzAXxvqJKPu3z QYC7IDZGOXlPILvY2/imnTkva0cPn4kIDRHSqu3/bqmvvr7puVVhbVtnAkoJSGGd +/a8S/y6Fcw/vX4lDrZdqDdKZ/brqoNe+zzF91CNJhvr0/7bRo6+Th4x1oRos4Cs SSzoyHou2oBls4u2mtktXXdujg== -----END CERTIFICATE-----Generated at Thu Sep 24 12:19:59 2026 by rpki-client