$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: 9Du0fz4IaCSyFwnvvTSost6lw15cO+LdZNMCxugJxRc= Subject key identifier: 60:71:53:DF:77:DE:6B:E7:0E:BD:7D:C0:3E:51:6F:E7:58:1E:F4:8E Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0DA2 Signing time: Sat 26 Sep 2026 18:00:37 +0000 Manifest this update: Sat 26 Sep 2026 18:00:36 +0000 Manifest next update: Sat 03 Oct 2026 18:00:36 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: MdnKar7BLabRNvhaz6YcK5r6fWeUNBokt56Kt8AWR88=) 2: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: NXbiSnXZUjh8e0dCBVaR6mjHDOPkzJYQhnCA/dP5jgQ=) 3: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: OutccXiBEL/sQ024xr5UNL0COLFnkxGkB0q/nROLFaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Sep 26 18:00:36 2026 GMT Not After : Oct 3 18:00:36 2026 GMT Subject: CN=6ab80845-925b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:d7:c2:e6:9c:a6:25:24:d6:e3:c6:4f:4b: 1c:fc:af:93:45:4f:b3:e4:84:71:b3:ab:6d:53:a6: b3:29:8b:d8:87:7a:10:47:1e:5b:2f:fc:f5:72:14: 03:47:d3:f1:fc:1c:0c:f2:9f:d2:ef:39:e3:62:22: 36:f4:8a:14:d9:31:df:14:9d:61:e8:fb:10:81:69: c6:4a:e0:2b:98:d2:e2:2d:41:8c:ba:41:42:a6:b8: e3:7f:71:cc:21:5c:52:d9:1a:92:d1:82:8d:9d:e8: 07:b6:18:17:35:eb:d2:85:6d:25:83:48:65:99:5d: aa:5e:8c:34:12:7e:a3:73:80:38:53:d1:ad:33:57: 2b:ad:65:c0:39:d2:15:b8:61:b0:7d:97:46:47:c8: 8d:31:ea:5f:1d:c5:b1:a4:75:d1:c7:9a:c3:01:2f: e0:ac:96:94:2a:30:e9:8a:14:c3:17:db:bc:cb:0f: b3:0e:e3:91:98:d7:0b:3d:e3:b5:ef:c0:a4:42:c7: 6e:db:0a:12:7d:c9:8a:54:74:1a:94:c5:ed:89:03: 5b:4b:27:9a:71:9f:b4:a9:f4:e2:27:c9:4f:ca:e8: 48:85:6b:b2:f4:c5:51:f7:94:68:35:e0:23:18:76: 7d:bf:76:2e:3d:82:e4:c8:1c:92:da:41:b5:bc:16: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:71:53:DF:77:DE:6B:E7:0E:BD:7D:C0:3E:51:6F:E7:58:1E:F4:8E X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ef:cd:d6:02:dc:5e:15:8e:d6:3b:0f:86:cc:c3:b8:df:81: d7:46:6d:9f:06:65:3c:a3:7b:b5:c9:bc:90:13:bb:72:c2:b1: af:8c:ce:9f:a4:dd:be:a9:7d:49:ff:44:a9:78:b2:86:98:43: ea:9a:f6:81:2a:74:82:41:64:b9:25:e5:8f:5a:bf:13:63:66: ab:07:80:fb:21:2f:c8:89:7a:82:94:0b:bb:b9:e6:3f:74:7d: 68:26:8f:3e:78:c2:aa:60:76:9d:0d:ce:61:fd:c4:8b:4e:6d: fb:ba:c2:91:93:6b:f8:1d:e3:03:58:98:33:68:60:5c:06:d4: 8e:f7:92:9b:12:62:cb:1f:90:9c:79:9f:94:eb:45:7f:2c:fc: 9f:58:06:55:35:b9:f5:1f:74:63:ff:b3:1e:35:01:0d:29:b7: 9b:de:4a:4c:2f:3e:8c:e1:9f:b0:66:32:29:27:c1:b0:42:40: 27:1b:69:bc:45:01:76:99:bd:4a:fa:bd:60:ce:9f:f2:7e:45: da:db:12:40:c7:73:ec:0b:56:20:64:1b:5c:00:4c:c2:67:dd: a7:a9:70:6e:80:68:24:de:cb:8f:27:15:bb:a5:f8:1b:89:8d: 40:31:ce:94:5e:b0:89:22:3d:d2:dc:1e:f5:75:a2:d2:a2:9f: 91:ae:5b:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjYwOTI2MTgwMDM2WhcNMjYxMDAzMTgwMDM2WjAYMRYwFAYD VQQDEw02YWI4MDg0NS05MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNvXwuacpiUk1uPGT0sc/K+TRU+z5IRxs6ttU6azKYvYh3oQRx5bL/z1chQD R9Px/BwM8p/S7znjYiI29IoU2THfFJ1h6PsQgWnGSuArmNLiLUGMukFCprjjf3HM IVxS2RqS0YKNnegHthgXNevShW0lg0hlmV2qXow0En6jc4A4U9GtM1crrWXAOdIV uGGwfZdGR8iNMepfHcWxpHXRx5rDAS/grJaUKjDpihTDF9u8yw+zDuORmNcLPeO1 78CkQsdu2woSfcmKVHQalMXtiQNbSyeacZ+0qfTiJ8lPyuhIhWuy9MVR95RoNeAj GHZ9v3YuPYLkyByS2kG1vBYDtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBxU993 3mvnDr19wD5Rb+dYHvSOMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFO/N1gLcXhWO1jsPhszDuN+B10ZtnwZlPKN7tcm8kBO7csKxr4zOn6Tdvql9 Sf9EqXiyhphD6pr2gSp0gkFkuSXlj1q/E2NmqweA+yEvyIl6gpQLu7nmP3R9aCaP PnjCqmB2nQ3OYf3Ei05t+7rCkZNr+B3jA1iYM2hgXAbUjveSmxJiyx+QnHmflOtF fyz8n1gGVTW59R90Y/+zHjUBDSm3m95KTC8+jOGfsGYyKSfBsEJAJxtpvEUBdpm9 Svq9YM6f8n5F2tsSQMdz7AtWIGQbXABMwmfdp6lwboBoJN7LjycVu6X4G4mNQDHO lF6wiSI90twe9XWi0qKfka5bdA== -----END CERTIFICATE-----Generated at Sun Sep 27 11:29:29 2026 by rpki-client