$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json) Hash identifier: 6px9paWklR2SussOxNZnMlBDjZEaM4osWVlY7pDrHRM= Subject key identifier: B8:E5:44:3D:5E:D6:96:8E:D9:24:70:11:ED:DF:70:B3:3F:97:2F:D2 Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft Manifest number: AF Signing time: Wed 23 Sep 2026 06:55:02 +0000 Manifest this update: Wed 23 Sep 2026 06:55:02 +0000 Manifest next update: Wed 30 Sep 2026 06:55:02 +0000 Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: LZxWua6FRGjwjTuaCf4Kh1gb8EceVN4px1mj1mRD9/Q=) 2: 3B2923CEA59311F1BFA29E7E6111F970.roa (hash: zc/NW/dPGEzjO8NVANWmITjbMxQww0CXhaNhPAuHH4Q=) 3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: CYXzP8o6swk/peEjdB2z3uAC7jwSVj36GUM/F+voWoY=) 4: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: YFh8kkG+QLXCGW9AKwhLAh1lcjT3x4DocAw0SQLluL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Sep 23 06:55:02 2026 GMT Not After : Sep 30 06:55:02 2026 GMT Subject: CN=6ab377c6-8211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d0:da:33:4b:a8:0b:37:6b:20:97:68:28:d0: 5b:b5:81:56:d6:d6:77:c4:33:6c:30:af:7d:25:53: 96:59:67:19:34:85:6e:72:ce:c3:f7:ce:c1:fd:ad: 8f:9a:cd:81:ad:3b:37:d3:22:b2:b2:40:df:06:0b: 16:b0:be:a5:13:81:17:7b:4f:b6:10:c3:4a:a8:df: cb:94:5b:77:da:b5:a3:43:9f:42:5a:f2:34:64:d6: ea:15:48:3a:4c:4a:d7:80:f4:f2:5a:8e:9f:af:36: 8e:bf:e4:4b:23:a0:86:6a:e1:c4:05:88:d1:d8:37: d0:c3:c7:62:16:be:28:d5:d7:f6:b6:53:90:db:dc: d4:0c:1b:e1:1f:20:3b:1a:59:ee:a6:04:9b:32:0f: b9:01:e6:7d:c7:e0:41:dc:92:72:ff:76:91:18:47: 04:5e:2e:5c:03:e8:d1:8a:10:90:f7:bf:5b:f7:ab: d0:dd:23:d6:04:a4:db:79:e8:2b:8a:4f:98:3d:d3: 67:88:e1:c6:9a:81:32:dd:cb:e1:42:17:3c:27:d5: 34:d7:2b:97:55:2b:18:5b:5e:6f:65:b2:6b:47:a0: a2:7c:20:a8:06:3d:6e:9a:85:bb:e6:2c:f5:f3:2d: e4:0d:6f:78:6c:b7:fc:8f:49:8c:14:ab:47:23:2f: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:44:3D:5E:D6:96:8E:D9:24:70:11:ED:DF:70:B3:3F:97:2F:D2 X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:2e:43:a3:6d:d9:97:da:3b:0d:48:f1:3d:6a:79:40:3e:50: cc:ff:eb:8e:c7:f2:e6:7c:ec:a5:22:8d:a2:13:ca:d7:9c:06: 1b:b9:1d:28:73:ae:f9:b9:1c:5d:77:f9:9a:08:01:cc:c9:64: 9e:a7:02:ad:3d:84:0b:1d:bd:15:75:90:01:79:f5:14:5f:31: 68:13:90:61:a3:77:90:85:3e:1e:7d:de:1b:3d:7a:c8:9e:3e: df:24:46:66:3d:90:f9:e0:33:60:c0:6f:20:8c:d5:ab:f3:62: 85:a1:79:31:9f:4d:91:d7:a4:e9:6d:27:8f:ab:61:43:8a:cb: ed:23:80:91:01:7b:88:82:2c:40:b7:f4:85:bd:3d:5a:4b:d6: c0:f5:37:88:d1:86:91:1d:97:7c:6b:dc:09:40:f8:1c:87:0d: 97:07:4c:a9:38:af:59:92:c9:d3:f4:6f:5b:75:b9:e3:c9:17: 90:71:95:0c:d1:59:7c:7f:94:72:01:bb:ff:b4:04:86:fa:85: f6:8c:d8:a0:8a:6e:5f:90:d2:e9:6e:d6:94:83:c9:dd:08:36: ad:18:e0:8f:21:e1:e2:3b:06:ac:d5:d3:81:b0:6c:a4:c9:10: 70:e3:df:69:f5:28:1a:78:8f:fc:de:d8:15:1c:9c:8e:d9:5e: 53:57:31:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNzYxMTAvBgNVBAUTKEJEOEUzQ0MyQTkzRDVEQkNEODQyNzUwOTczOEEzMTRC RjkwQzg4N0QwHhcNMjYwOTIzMDY1NTAyWhcNMjYwOTMwMDY1NTAyWjAYMRYwFAYD VQQDEw02YWIzNzdjNi04MjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89DaM0uoCzdrIJdoKNBbtYFW1tZ3xDNsMK99JVOWWWcZNIVucs7D987B/a2P ms2BrTs30yKyskDfBgsWsL6lE4EXe0+2EMNKqN/LlFt32rWjQ59CWvI0ZNbqFUg6 TErXgPTyWo6frzaOv+RLI6CGauHEBYjR2DfQw8diFr4o1df2tlOQ29zUDBvhHyA7 GlnupgSbMg+5AeZ9x+BB3JJy/3aRGEcEXi5cA+jRihCQ979b96vQ3SPWBKTbeegr ik+YPdNniOHGmoEy3cvhQhc8J9U01yuXVSsYW15vZbJrR6CifCCoBj1umoW75iz1 8y3kDW94bLf8j0mMFKtHIy99eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjlRD1e 1paO2SRwEe3fcLM/ly/SMB8GA1UdIwQYMBaAFL2OPMKpPV282EJ1CXOKMUv5DIh9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU3Ni9EOUU0QzRDQ0I5 MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhiellRblVKYzRveFNfa01p SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU3Ni9EOUU0QzRDQ0I5MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhi ellRblVKYzRveFNfa01pSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvC5Do23Zl9o7DUjxPWp5QD5QzP/rjsfy5nzspSKNohPK15wGG7kdKHOu+bkc XXf5mggBzMlknqcCrT2ECx29FXWQAXn1FF8xaBOQYaN3kIU+Hn3eGz16yJ4+3yRG Zj2Q+eAzYMBvIIzVq/NihaF5MZ9Nkdek6W0nj6thQ4rL7SOAkQF7iIIsQLf0hb09 WkvWwPU3iNGGkR2XfGvcCUD4HIcNlwdMqTivWZLJ0/RvW3W548kXkHGVDNFZfH+U cgG7/7QEhvqF9ozYoIpuX5DS6W7WlIPJ3Qg2rRjgjyHh4jsGrNXTgbBspMkQcOPf afUoGniP/N7YFRycjtleU1cx6Q== -----END CERTIFICATE-----Generated at Wed Sep 23 10:48:56 2026 by rpki-client