$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: OtKBbvWAaXI5SRt5duXNd1FiL5p65og3o0Th9DklnBc= Subject key identifier: 00:41:F0:1D:A4:9F:EA:E9:8B:BF:6B:DD:BB:B5:25:5A:B8:1B:65:09 Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0C7A Signing time: Thu 24 Sep 2026 18:37:22 +0000 Manifest this update: Thu 24 Sep 2026 18:37:21 +0000 Manifest next update: Thu 01 Oct 2026 18:37:21 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: JqvaMioR4rkFXeiPyQjRCihJ1E4u261F4QCe2AcVt7w=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: Sep 24 18:37:21 2026 GMT Not After : Oct 1 18:37:21 2026 GMT Subject: CN=6ab56de1-cfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:1b:7b:de:63:20:bd:2e:73:d3:66:e5:02: ed:9b:29:63:6b:65:54:9a:4a:91:b3:3a:ec:b1:18: 94:bd:ba:37:17:a1:20:33:01:22:71:03:b4:86:04: 3e:51:8c:57:ec:9c:41:14:a2:62:f2:f0:6d:90:d7: 13:b4:1c:0e:c2:ba:18:3c:5f:46:96:40:f6:72:44: 88:7f:6b:ed:04:11:0c:02:76:c7:5e:fc:b2:e0:d9: c8:8f:3d:bb:6e:35:26:5c:58:94:4b:f6:64:bf:b9: 21:78:db:46:c8:c5:65:55:e5:4f:d3:81:54:d8:4b: 5a:e6:44:ba:95:67:ec:96:71:9c:53:fc:ce:1e:00: 84:2e:86:a0:04:46:ef:d4:40:e0:0a:19:8e:c3:1a: f3:4f:e2:58:92:3f:a0:5d:1b:05:05:4b:58:3b:bd: a4:72:a3:0d:1b:1f:3b:5d:0a:16:dd:d2:26:b1:de: 87:1e:f6:c0:64:a5:20:15:cf:0c:e3:5e:da:b1:d0: 32:8c:fa:0b:55:57:9a:12:d3:13:fd:15:dd:77:b3: 97:da:b1:d4:9e:9e:c8:c6:4e:81:14:01:70:c1:0d: 15:62:66:2c:cd:bf:67:ec:9b:0e:33:52:2a:55:bc: 42:7e:76:66:c9:b3:b4:2f:e7:f7:22:5e:7c:85:1e: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:F0:1D:A4:9F:EA:E9:8B:BF:6B:DD:BB:B5:25:5A:B8:1B:65:09 X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:1a:bd:6a:67:d1:1c:a8:1c:a6:84:f2:e7:49:12:75:59: 09:ac:a7:8b:0a:88:a5:b1:53:65:d1:48:44:64:e9:74:b8:dd: 7b:71:20:7d:67:32:64:7b:70:d7:99:aa:2c:f6:67:77:af:81: 22:a4:e3:bc:a1:8e:f1:f2:0f:5a:6c:b5:c7:62:f1:7e:23:16: f4:89:a0:ea:c6:bc:f9:09:72:30:19:52:e4:4f:17:93:3d:4a: a0:f2:51:cf:db:c7:7d:5b:6a:7f:d1:75:18:7e:d1:d1:78:18: 45:28:d3:26:4e:f2:68:3e:3b:5d:41:e5:10:1d:52:fc:34:99: 84:b1:cb:19:99:02:b9:20:d7:6a:6a:1f:85:20:c7:22:7f:dd: 07:51:96:a8:86:2b:77:67:f5:f0:cc:aa:0d:2c:b7:b5:55:0e: 22:37:a2:a2:95:e3:35:ac:67:4a:ca:86:96:ca:bb:26:06:a9: ad:0e:b0:db:47:2f:4c:25:c9:80:ce:34:c4:b1:92:b3:2e:09: 42:42:46:71:b7:fc:b9:59:37:93:84:92:53:cd:c4:12:32:96: 4f:c1:ae:ac:4f:21:3e:46:fc:68:53:b1:49:ef:92:96:7b:e9: ef:e5:b2:8d:db:ea:60:85:e9:cc:c2:e4:a9:68:15:00:0a:49: dc:01:a0:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjYwOTI0MTgzNzIxWhcNMjYxMDAxMTgzNzIxWjAYMRYwFAYD VQQDEw02YWI1NmRlMS1jZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlIbe95jIL0uc9Nm5QLtmylja2VUmkqRszrssRiUvbo3F6EgMwEicQO0hgQ+ UYxX7JxBFKJi8vBtkNcTtBwOwroYPF9GlkD2ckSIf2vtBBEMAnbHXvyy4NnIjz27 bjUmXFiUS/Zkv7kheNtGyMVlVeVP04FU2Eta5kS6lWfslnGcU/zOHgCELoagBEbv 1EDgChmOwxrzT+JYkj+gXRsFBUtYO72kcqMNGx87XQoW3dImsd6HHvbAZKUgFc8M 417asdAyjPoLVVeaEtMT/RXdd7OX2rHUnp7Ixk6BFAFwwQ0VYmYszb9n7JsOM1Iq VbxCfnZmybO0L+f3Il58hR5oEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABB8B2k n+rpi79r3bu1JVq4G2UJMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkn4avWpn0RyoHKaE8udJEnVZCayniwqIpbFTZdFIRGTpdLjde3EgfWcyZHtw 15mqLPZnd6+BIqTjvKGO8fIPWmy1x2LxfiMW9Img6sa8+QlyMBlS5E8Xkz1KoPJR z9vHfVtqf9F1GH7R0XgYRSjTJk7yaD47XUHlEB1S/DSZhLHLGZkCuSDXamofhSDH In/dB1GWqIYrd2f18MyqDSy3tVUOIjeiopXjNaxnSsqGlsq7JgaprQ6w20cvTCXJ gM40xLGSsy4JQkJGcbf8uVk3k4SSU83EEjKWT8GurE8hPkb8aFOxSe+Slnvp7+Wy jdvqYIXpzMLkqWgVAApJ3AGggA== -----END CERTIFICATE-----Generated at Fri Sep 25 01:30:34 2026 by rpki-client