$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: tX9A+eBexPZ8obQfcn6X3PwxmDX1sqv3I+l/vYYZ/Uo= Subject key identifier: 40:C9:A5:FA:EE:A1:27:75:36:AC:71:EF:6D:46:1A:05:04:D2:39:32 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0272 Signing time: Fri 25 Sep 2026 02:02:32 +0000 Manifest this update: Fri 25 Sep 2026 02:02:32 +0000 Manifest next update: Fri 02 Oct 2026 02:02:32 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: 1RWnAspPKRoGYJ3BNoTF+GdS/H2FD7ttxqeteSbURJQ=) 2: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) 3: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Sep 25 02:02:32 2026 GMT Not After : Oct 2 02:02:32 2026 GMT Subject: CN=6ab5d638-7f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:9d:ae:42:88:a8:c0:d2:1f:a5:be:a9:f2: 89:e9:96:ef:63:e3:0b:f3:d7:fc:c1:65:7c:63:03: 28:76:37:70:4a:8c:f0:fb:a0:f4:af:2f:56:ec:fe: 9c:1a:e1:96:06:d6:15:05:e2:5f:5a:c7:59:d5:8d: c0:7b:3f:a9:da:96:5b:e2:67:be:95:12:18:73:2f: 94:9a:77:35:6a:6c:0f:c8:38:b7:ec:3b:79:99:61: 93:d1:e4:2e:18:f9:93:75:8a:72:c5:8d:84:34:d3: bf:4f:81:c5:5d:15:18:1a:24:4a:2b:3d:98:d7:9a: 67:cd:6f:3d:13:21:cf:88:d6:ae:74:e0:9d:a9:5b: 05:66:d6:2e:c1:7b:5e:5b:76:7e:f6:18:da:34:12: 4b:e3:5d:c6:27:84:1d:66:1a:32:7f:f7:ed:d3:75: e3:96:99:e7:b2:06:fc:46:1f:51:c2:56:86:7f:07: 7d:62:e4:e3:14:99:ba:03:2e:30:72:9f:5c:f2:9c: f0:04:c6:29:6e:b7:10:55:f7:22:1e:f3:43:6b:9e: 97:5f:e4:66:cb:65:1c:f8:f5:7a:20:ba:fe:06:cd: 5a:b0:0a:1e:3e:b5:3c:12:c1:be:02:3a:65:74:a5: 0b:dc:f6:96:10:12:e4:d7:3a:8a:b3:f5:b3:e8:a3: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C9:A5:FA:EE:A1:27:75:36:AC:71:EF:6D:46:1A:05:04:D2:39:32 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:49:c6:c6:b2:fd:de:ab:5e:10:04:c4:fd:e3:c5:f4:01:0d: b4:1c:96:f8:62:61:8c:da:9c:66:1f:1f:12:4d:23:f3:11:0b: a3:aa:be:5e:f3:4d:ef:48:ca:24:dd:a4:c9:a5:d0:27:e7:fa: 21:df:f4:8a:09:04:56:45:4d:ad:3f:f0:8b:39:a8:ad:ac:45: 2c:71:f5:a5:1f:e7:ad:bf:77:4a:64:c4:9e:1b:8c:01:26:4c: b3:49:63:0e:43:53:02:71:bb:23:cf:a5:3c:8c:37:6b:5a:e7: ad:df:3e:53:7e:c2:43:76:b8:dc:ff:e9:9c:23:9e:3f:31:c6: dd:ff:43:42:ea:d3:db:8d:a6:09:d6:9b:fb:68:4b:9d:8f:f1: 57:95:28:c3:e9:ce:f4:40:09:a9:2f:9a:eb:82:05:76:6e:16: 19:bd:4d:85:dd:b5:e8:0b:26:4b:ee:af:59:b3:cb:dc:e5:2a: 8a:14:f1:07:31:27:14:db:a9:8b:db:a9:13:78:73:88:21:5d: 71:ff:a4:c7:2e:ed:6f:9a:a3:a5:08:3e:80:7d:07:af:47:ea: ee:a2:ef:a3:51:01:07:b9:99:4e:d3:36:a5:ea:6b:b8:b8:94: 28:2a:c1:58:a9:ac:5d:21:87:d2:a4:7c:d4:da:67:04:a6:ee: b6:28:b5:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwOTI1MDIwMjMyWhcNMjYxMDAyMDIwMjMyWjAYMRYwFAYD VQQDEw02YWI1ZDYzOC03ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+ydrkKIqMDSH6W+qfKJ6ZbvY+ML89f8wWV8YwModjdwSozw+6D0ry9W7P6c GuGWBtYVBeJfWsdZ1Y3Aez+p2pZb4me+lRIYcy+Umnc1amwPyDi37Dt5mWGT0eQu GPmTdYpyxY2ENNO/T4HFXRUYGiRKKz2Y15pnzW89EyHPiNaudOCdqVsFZtYuwXte W3Z+9hjaNBJL413GJ4QdZhoyf/ft03Xjlpnnsgb8Rh9RwlaGfwd9YuTjFJm6Ay4w cp9c8pzwBMYpbrcQVfciHvNDa56XX+Rmy2Uc+PV6ILr+Bs1asAoePrU8EsG+Ajpl dKUL3PaWEBLk1zqKs/Wz6KNSFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDJpfru oSd1Nqxx721GGgUE0jkyMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXEnGxrL93qteEATE/ePF9AENtByW+GJhjNqcZh8fEk0j8xELo6q+XvNN70jK JN2kyaXQJ+f6Id/0igkEVkVNrT/wizmoraxFLHH1pR/nrb93SmTEnhuMASZMs0lj DkNTAnG7I8+lPIw3a1rnrd8+U37CQ3a43P/pnCOePzHG3f9DQurT242mCdab+2hL nY/xV5Uow+nO9EAJqS+a64IFdm4WGb1Nhd216AsmS+6vWbPL3OUqihTxBzEnFNup i9upE3hziCFdcf+kxy7tb5qjpQg+gH0Hr0fq7qLvo1EBB7mZTtM2pepruLiUKCrB WKmsXSGH0qR81NpnBKbutii1pg== -----END CERTIFICATE-----Generated at Sat Sep 26 08:21:42 2026 by rpki-client