$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json) Hash identifier: tkkcrqFPOCZIM4CZYISfGPyNdmW7p6X2lU5K93UbVTI= Subject key identifier: 7F:2F:37:CC:6F:8E:52:B7:15:5B:3A:F7:20:DE:F7:ED:DC:50:4B:56 Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft Manifest number: 70 Signing time: Thu 01 Oct 2026 09:22:12 +0000 Manifest this update: Thu 01 Oct 2026 09:22:12 +0000 Manifest next update: Thu 08 Oct 2026 09:22:12 +0000 Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: BPA/qA15yjZKItKD8pd17ZWIEqYxFS4x4/fGU38aLNQ=) 2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 09:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Validity Not Before: Oct 1 09:22:12 2026 GMT Not After : Oct 8 09:22:12 2026 GMT Subject: CN=6abe2644-54c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:49:48:11:3a:83:d2:72:9d:52:41:fb:86: 81:05:86:44:d7:1f:ce:6c:d8:fc:72:3e:30:3e:89: 47:21:cd:7e:39:0c:a5:00:a2:30:30:28:3a:01:55: 9c:28:89:79:d6:50:76:54:63:d5:19:c4:43:d1:12: 4a:5e:99:76:00:04:3a:85:62:87:58:a6:48:a6:e1: 83:93:ef:37:5c:1b:30:48:79:8a:4f:8a:66:11:17: a7:c8:92:ba:ba:01:f1:13:71:0e:1e:37:3a:bc:6a: ef:5a:97:b6:55:12:b1:68:c2:04:09:c6:d1:b5:20: 6e:4b:27:54:0d:93:f5:92:84:31:12:c8:29:32:8e: 04:75:2f:9b:dd:e3:94:18:62:d3:53:c4:55:07:a9: 61:0f:29:a5:48:c8:92:63:54:78:e3:6d:33:49:5c: 92:08:dc:3d:ee:2c:75:1a:41:72:c0:f1:79:ad:61: 74:9e:7f:0a:54:09:62:b5:67:76:8a:44:8f:05:7e: f1:ae:4c:2f:4c:ee:e7:d7:e8:12:f9:22:e6:e8:ff: c3:f5:90:57:05:77:91:fe:77:34:37:f0:4d:62:80: 02:23:fd:d9:bc:c5:67:02:16:15:69:9c:ca:2a:a2: 70:76:fa:b6:0a:f8:6e:9f:51:b3:f4:31:e2:9b:d9: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2F:37:CC:6F:8E:52:B7:15:5B:3A:F7:20:DE:F7:ED:DC:50:4B:56 X509v3 Authority Key Identifier: keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:be:8e:d3:84:13:64:15:c5:12:63:42:dc:8c:da:1a:f7: c4:6c:67:21:90:92:c3:98:ed:51:1e:34:18:5e:27:54:69:2d: b2:50:3a:0f:f7:3b:2a:a7:1f:21:ac:c8:21:d4:e4:5f:bc:e9: b8:af:d3:3b:bb:67:69:19:3a:69:da:6b:85:c3:b4:a1:15:09: 30:16:41:c5:cb:68:fe:e5:ff:2d:be:27:18:08:66:a9:85:99: 11:ec:73:44:18:fa:d7:03:6d:aa:1c:d9:a3:f1:0a:6c:c4:8a: ff:ab:36:06:ae:61:39:ab:af:b9:7e:7c:39:21:49:06:13:04: 21:11:5e:75:40:c2:92:fd:f8:d7:c6:e0:d7:d3:d8:98:bb:fc: 9e:26:ab:21:f7:c6:1b:16:c5:4b:5d:48:e7:73:81:39:6a:6f: 4e:9c:f9:f2:f8:0c:ed:e7:29:9d:b8:5c:97:2f:41:ab:3e:fc: 0f:bd:c3:5a:9a:e9:51:16:de:08:31:45:27:26:44:80:ea:1e: 00:83:61:64:fc:28:ed:56:8d:80:c6:c2:8f:30:a5:2b:48:81: 23:ec:cb:c2:03:b6:c5:6e:a1:7b:41:34:cd:d2:c7:0a:7e:37: 5c:55:cb:5d:a2:21:f8:67:d7:45:d0:1e:85:d4:15:00:14:02: 3d:ad:49:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoQjJFM0M2RjdBOTA0NTRBMjI3NDczN0IwNTJDQkEzNUYx OUY1RDVBMDAeFw0yNjEwMDEwOTIyMTJaFw0yNjEwMDgwOTIyMTJaMBgxFjAUBgNV BAMTDTZhYmUyNjQ0LTU0YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjIElIETqD0nKdUkH7hoEFhkTXH85s2PxyPjA+iUchzX45DKUAojAwKDoBVZwo iXnWUHZUY9UZxEPREkpemXYABDqFYodYpkim4YOT7zdcGzBIeYpPimYRF6fIkrq6 AfETcQ4eNzq8au9al7ZVErFowgQJxtG1IG5LJ1QNk/WShDESyCkyjgR1L5vd45QY YtNTxFUHqWEPKaVIyJJjVHjjbTNJXJII3D3uLHUaQXLA8XmtYXSefwpUCWK1Z3aK RI8FfvGuTC9M7ufX6BL5Iubo/8P1kFcFd5H+dzQ38E1igAIj/dm8xWcCFhVpnMoq onB2+rYK+G6fUbP0MeKb2ZsnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfy83zG+O UrcVWzr3IN737dxQS1YwHwYDVR0jBBgwFoAUsuPG96kEVKInRzewUsujXxn11aAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzBENzMxREI4MTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJblJ6ZXdVc3VqWHhuMTFh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3VQRzk2a0VWS0luUnpld1VzdWpYeG4xMWFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzBENzMxREI4MTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJ blJ6ZXdVc3VqWHhuMTFhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfFL6O04QTZBXFEmNC3IzaGvfEbGchkJLDmO1RHjQYXidUaS2yUDoP9zsqpx8h rMgh1ORfvOm4r9M7u2dpGTpp2muFw7ShFQkwFkHFy2j+5f8tvicYCGaphZkR7HNE GPrXA22qHNmj8QpsxIr/qzYGrmE5q6+5fnw5IUkGEwQhEV51QMKS/fjXxuDX09iY u/yeJqsh98YbFsVLXUjnc4E5am9OnPny+Azt5ymduFyXL0GrPvwPvcNamulRFt4I MUUnJkSA6h4Ag2Fk/CjtVo2AxsKPMKUrSIEj7MvCA7bFbqF7QTTN0scKfjdcVctd oiH4Z9dF0B6F1BUAFAI9rUna -----END CERTIFICATE-----Generated at Fri Oct 2 20:44:43 2026 by rpki-client