$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft File: F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft (raw, json) Hash identifier: AyA9+1KBxS6+yJCh38sV8Qh6gHHwzuxPepuTDcfp8sQ= Subject key identifier: 52:0B:4E:DF:B0:F8:7C:03:1D:BC:5F:E3:A0:2F:6B:63:25:0A:4A:17 Authority key identifier: 17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3 Certificate issuer: /CN=A91C3809/serialNumber=17506B92B863377320BDB2E306F48C8500918FB3 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft Manifest number: 1C Signing time: Wed 23 Sep 2026 08:40:10 +0000 Manifest this update: Wed 23 Sep 2026 08:40:10 +0000 Manifest next update: Wed 30 Sep 2026 08:40:10 +0000 Files and hashes: 1: F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl (hash: HBuwzxsv8PcWjgR9aUbTsl/GWq4rJgF5ZY2g6ckMLOc=) 2: 39CD26E88EEA11F18D5914636411F970.roa (hash: +/GsjYmLP1MJ0UBnltZuLmnLB7EDcP7VF/Red6/k4FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3809, serialNumber=17506B92B863377320BDB2E306F48C8500918FB3 Validity Not Before: Sep 23 08:40:10 2026 GMT Not After : Sep 30 08:40:10 2026 GMT Subject: CN=6ab3906a-b476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:1d:16:01:03:41:47:fb:3a:85:f7:1c:6e: c4:40:5a:e7:ab:de:36:31:b1:f9:29:ab:1b:51:4b: 08:bf:9e:ae:21:3f:c1:67:15:c4:81:d4:07:ee:e4: 9e:f6:f8:05:52:f0:3c:bd:7e:e5:8a:f7:66:8c:9d: d9:3f:df:52:09:e2:47:d6:eb:a9:c1:e2:03:5d:bd: 85:13:13:00:d4:cc:37:68:09:ab:bc:39:08:21:09: 88:0f:d4:d1:be:30:a1:7d:60:bb:ce:c2:60:96:8e: 16:d5:e3:e6:e1:e5:f4:1d:5d:d5:2b:2f:94:b5:ff: c0:0b:7d:01:a5:22:a1:89:a3:2d:2e:2e:33:39:99: 38:f0:cf:b7:03:2a:e5:43:57:a7:5d:4a:12:74:25: 63:54:47:56:05:b8:c1:8d:69:1d:92:98:6e:40:da: 51:2c:59:51:31:18:e1:15:22:17:00:7f:91:f2:f3: 81:6d:be:4f:dd:fd:ce:30:07:6f:9e:b4:35:1a:88: fb:37:6e:f0:f8:12:0f:2f:6b:73:ee:e8:e1:10:80: 3b:65:b2:89:04:91:ec:d8:2b:00:96:a8:72:dc:77: ce:92:b6:18:b2:0e:7b:82:e3:d6:bc:85:ad:c8:3c: 14:d8:20:6b:4f:2d:3b:95:4f:62:ce:84:e1:78:59: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:4E:DF:B0:F8:7C:03:1D:BC:5F:E3:A0:2F:6B:63:25:0A:4A:17 X509v3 Authority Key Identifier: keyid:17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ee:5b:d6:a0:a8:10:6a:8b:c7:5c:7e:d3:60:7a:8a:d7:4c: 52:a2:a7:01:96:0f:65:97:50:f3:68:01:61:8d:6b:0d:c4:f9: 02:08:7b:40:d1:7b:c6:d0:76:04:d7:26:0c:6f:59:30:0c:53: 44:32:ed:e2:5d:ed:3b:51:cb:9e:03:58:09:d3:1c:09:b2:ea: 3a:a5:9c:a1:e7:f9:18:f9:96:ed:7e:3e:a4:d8:3f:ed:4f:66: 7d:d8:87:d7:b8:ff:02:f9:e1:33:e8:15:1a:05:62:d4:35:40: 6d:b9:41:52:20:a8:09:a6:aa:7e:f3:2a:71:9e:81:c8:5c:55: 84:c4:60:dd:3a:a4:cd:32:c4:de:b0:d4:95:6b:4f:8a:4d:ee: 2f:a7:97:30:1b:57:2a:c7:90:c5:6d:2e:d0:f1:7d:6f:d1:6f: cd:85:bb:15:8f:ad:5c:f0:06:f5:c1:70:9a:74:c0:96:57:9e: 0c:be:ff:0d:ef:15:15:f2:dd:9a:55:80:25:95:1e:07:1c:ee: 7b:6c:e1:0a:e2:58:8a:d4:b5:de:19:c8:26:d0:6d:f9:d4:8e: 38:91:5a:c3:19:51:5e:75:7b:30:6f:f5:58:45:aa:6a:75:ae: bd:5a:f4:1e:3b:c4:a2:15:e6:84:9e:81:a1:6c:34:81:48:d1: d8:0a:07:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzgwOTExMC8GA1UEBRMoMTc1MDZCOTJCODYzMzc3MzIwQkRCMkUzMDZGNDhDODUw MDkxOEZCMzAeFw0yNjA5MjMwODQwMTBaFw0yNjA5MzAwODQwMTBaMBgxFjAUBgNV BAMTDTZhYjM5MDZhLWI0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG0h0WAQNBR/s6hfccbsRAWuer3jYxsfkpqxtRSwi/nq4hP8FnFcSB1Afu5J72 +AVS8Dy9fuWK92aMndk/31IJ4kfW66nB4gNdvYUTEwDUzDdoCau8OQghCYgP1NG+ MKF9YLvOwmCWjhbV4+bh5fQdXdUrL5S1/8ALfQGlIqGJoy0uLjM5mTjwz7cDKuVD V6ddShJ0JWNUR1YFuMGNaR2SmG5A2lEsWVExGOEVIhcAf5Hy84Ftvk/d/c4wB2+e tDUaiPs3bvD4Eg8va3Pu6OEQgDtlsokEkezYKwCWqHLcd86SthiyDnuC49a8ha3I PBTYIGtPLTuVT2LOhOF4Wa5xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUgtO37D4 fAMdvF/joC9rYyUKShcwHwYDVR0jBBgwFoAUF1BrkrhjN3MgvbLjBvSMhQCRj7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzODA5L0I3QzNEQTJBOEVF OTExRjE4MTEwMzc5NDYzMTFGOTcwL0YxQnJrcmhqTjNNZ3ZiTGpCdlNNaFFDUmo3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRjFCcmtyaGpOM01ndmJMakJ2U01oUUNSajdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz ODA5L0I3QzNEQTJBOEVFOTExRjE4MTEwMzc5NDYzMTFGOTcwL0YxQnJrcmhqTjNN Z3ZiTGpCdlNNaFFDUmo3TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCx7lvWoKgQaovHXH7TYHqK10xSoqcBlg9ll1DzaAFhjWsNxPkCCHtA0XvG0HYE 1yYMb1kwDFNEMu3iXe07UcueA1gJ0xwJsuo6pZyh5/kY+Zbtfj6k2D/tT2Z92IfX uP8C+eEz6BUaBWLUNUBtuUFSIKgJpqp+8ypxnoHIXFWExGDdOqTNMsTesNSVa0+K Te4vp5cwG1cqx5DFbS7Q8X1v0W/NhbsVj61c8Ab1wXCadMCWV54Mvv8N7xUV8t2a VYAllR4HHO57bOEK4liK1LXeGcgm0G351I44kVrDGVFedXswb/VYRapqda69WvQe O8SiFeaEnoGhbDSBSNHYCgel -----END CERTIFICATE-----Generated at Fri Sep 25 09:42:27 2026 by rpki-client