$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: YSdLOHq0AmrImdLtjZU5fclvuBczE+U5BZUO5jnXtgA= Subject key identifier: A2:95:F2:4B:A0:B3:5D:59:49:7A:E0:65:F0:AE:F1:B4:C5:A5:67:D0 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 35A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 358E Signing time: Tue 22 Sep 2026 15:13:19 +0000 Manifest this update: Tue 22 Sep 2026 15:13:18 +0000 Manifest next update: Tue 29 Sep 2026 15:13:18 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: /5z88JTaaTECo0yZ1Yl1CZYiu+BA4bKIY8wSME3saoc=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13735 (0x35a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Sep 22 15:13:18 2026 GMT Not After : Sep 29 15:13:18 2026 GMT Subject: CN=6ab29b0f-5ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:f8:e3:d6:40:6d:3a:78:19:ea:1a:98:50: 42:4c:fb:2d:c3:01:27:73:f6:bf:ab:eb:3e:33:de: 63:35:45:37:39:ab:ee:1e:c2:dd:51:d9:7e:7c:00: 3b:5b:21:b1:7a:d0:72:70:d6:e5:b6:a9:f0:14:dd: 69:76:7e:a3:72:27:7e:7f:65:2f:c7:62:56:8b:93: 2c:80:b1:20:31:12:6c:5d:bf:d2:10:73:23:e3:07: 43:a0:74:a9:9f:ab:74:01:de:4e:c9:48:2e:3c:a0: 02:dc:4d:1d:6d:3a:4d:6a:62:05:0a:46:10:3d:43: de:9f:0e:ce:be:8a:a3:e1:07:62:65:09:4b:72:7f: 11:e4:ad:45:e0:66:3e:f1:ce:b9:58:c2:28:26:11: a4:d0:61:03:66:3d:fe:cc:de:dc:f2:18:25:c4:34: 55:02:0b:20:cc:c2:53:d3:60:c1:ce:55:cf:33:c9: f8:34:ad:a0:39:d8:d3:11:13:d2:81:11:2b:03:26: 80:88:41:a7:32:03:05:89:0f:fb:e1:b6:e3:9d:2e: b0:2a:7b:4f:9f:c3:9e:37:d8:77:a6:58:b5:7a:4a: 81:41:27:29:ae:1b:ff:6b:fa:d8:22:be:2f:19:cd: ee:83:ee:98:6e:82:d8:cc:4b:54:e0:14:32:2b:d0: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:F2:4B:A0:B3:5D:59:49:7A:E0:65:F0:AE:F1:B4:C5:A5:67:D0 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:73:63:8a:85:8f:72:db:33:f5:00:55:8d:7b:6e:b9:4f:c9: 0a:b5:42:4c:27:03:5f:3a:3e:6e:77:b3:44:b3:16:18:17:09: c6:1e:4b:aa:a3:8f:32:04:20:63:3e:6e:b5:be:15:53:b3:de: b7:af:f2:bc:de:c4:63:7d:08:f3:97:ce:03:8d:d4:f4:a5:7a: a5:63:72:3d:e9:48:46:ca:97:e5:e4:12:53:80:46:7f:c2:87: c3:16:5e:1e:63:14:f0:ab:f7:39:c1:98:12:ce:5a:f6:4c:9e: 0a:56:a1:ed:c8:8d:a6:2c:07:9d:a6:5a:8f:fc:61:de:52:d5: e6:16:06:e7:b8:61:db:99:7a:cf:b4:12:5c:22:bb:bb:32:b8: 48:18:b0:21:69:87:9b:36:23:28:d8:22:98:14:d7:62:dd:af: 97:a6:bb:08:ba:c7:18:40:f8:d3:e6:03:c4:aa:68:fc:c7:ff: db:5a:db:5e:17:d2:42:62:5e:55:ca:f1:1f:c7:4d:91:11:fa: 97:8a:d6:ea:e3:b3:c0:4e:c6:71:cb:45:d4:8a:d0:5a:c1:b9: 07:b5:63:10:78:8f:f4:5f:a0:cb:d0:18:5f:3b:ab:8a:8d:d8: 35:d7:70:8d:9f:d5:06:db:0d:35:c5:dc:f1:63:ef:b6:70:cb: 5b:70:f0:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYwOTIyMTUxMzE4WhcNMjYwOTI5MTUxMzE4WjAYMRYwFAYD VQQDEw02YWIyOWIwZi01Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupv449ZAbTp4GeoamFBCTPstwwEnc/a/q+s+M95jNUU3OavuHsLdUdl+fAA7 WyGxetBycNbltqnwFN1pdn6jcid+f2Uvx2JWi5MsgLEgMRJsXb/SEHMj4wdDoHSp n6t0Ad5OyUguPKAC3E0dbTpNamIFCkYQPUPenw7Ovoqj4QdiZQlLcn8R5K1F4GY+ 8c65WMIoJhGk0GEDZj3+zN7c8hglxDRVAgsgzMJT02DBzlXPM8n4NK2gOdjTERPS gRErAyaAiEGnMgMFiQ/74bbjnS6wKntPn8OeN9h3pli1ekqBQScprhv/a/rYIr4v Gc3ug+6YboLYzEtU4BQyK9BjPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKV8kug s11ZSXrgZfCu8bTFpWfQMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXNjioWPctsz9QBVjXtuuU/JCrVCTCcDXzo+bnezRLMWGBcJxh5LqqOPMgQg Yz5utb4VU7Pet6/yvN7EY30I85fOA43U9KV6pWNyPelIRsqX5eQSU4BGf8KHwxZe HmMU8Kv3OcGYEs5a9kyeClah7ciNpiwHnaZaj/xh3lLV5hYG57hh25l6z7QSXCK7 uzK4SBiwIWmHmzYjKNgimBTXYt2vl6a7CLrHGED40+YDxKpo/Mf/21rbXhfSQmJe VcrxH8dNkRH6l4rW6uOzwE7GcctF1IrQWsG5B7VjEHiP9F+gy9AYXzurio3YNddw jZ/VBtsNNcXc8WPvtnDLW3DwFA== -----END CERTIFICATE-----Generated at Thu Sep 24 14:22:58 2026 by rpki-client