$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: tPqmjLtXhuPXAYzPWAZ0voV32jpckEeoAkZBIwFkVz8= Subject key identifier: 61:CB:0F:72:0D:F6:90:2F:CF:16:11:4C:97:30:4E:1C:15:98:83:8B Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 0398 Signing time: Mon 21 Sep 2026 00:35:29 +0000 Manifest this update: Mon 21 Sep 2026 00:35:28 +0000 Manifest next update: Mon 28 Sep 2026 00:35:28 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: MXFDhN1r2YSxeY5yv6VHLrOBYpDJZoRNxyygjbSYP2I=) 2: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: ocfm0632GkIQFqFPtClJ7d+H9AJy5vbW5Lcs0qelByk=) 3: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: MI7imB1oUQ+nBhE/F9pWSqwhaGqPvMCUwnO5mooHgWA=) 4: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: pu6SoMWB6txH7Ha4WwK43mwzGqVFweaoNNhIGVki79Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Sep 21 00:35:28 2026 GMT Not After : Sep 28 00:35:28 2026 GMT Subject: CN=6ab07bd1-2834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:41:6c:a9:0e:cb:73:5e:11:c9:b7:15:d5: 06:5e:9e:a0:d0:9a:ac:d0:18:2a:12:72:ed:f6:bb: b1:49:94:9a:7a:2d:70:d7:c0:77:99:73:dc:83:ab: 1a:25:05:44:78:ef:a2:7e:14:c8:cc:89:1f:7c:77: c7:13:ab:e3:ac:74:10:de:a0:13:9b:20:6d:17:66: ff:7b:f7:04:38:98:5e:3e:3a:7c:e0:72:87:f7:45: b3:b4:ae:af:50:b0:4d:c2:36:12:9d:c7:17:1a:8c: d1:4a:4a:9c:ae:3a:91:f1:d2:2e:44:9b:59:d6:44: c3:d0:47:76:e1:89:60:24:01:48:ee:e0:28:72:e7: 15:15:b4:11:5e:0d:f4:8e:ae:4d:67:1d:33:8a:94: 63:05:a4:85:d8:d6:7c:2e:e3:da:05:24:95:b7:c6: 76:d9:db:de:19:6f:e8:61:32:1e:7e:9b:bd:3e:85: f2:8f:5e:88:02:a3:d8:a9:66:88:7d:61:b3:10:28: 99:78:24:ce:bb:17:a3:4c:35:05:bf:d8:2a:bc:28: 32:6a:25:dd:ed:6e:69:1c:28:a0:89:70:83:77:72: e7:ca:20:76:3e:00:34:49:e5:cd:ac:a8:85:e5:6a: 24:5b:26:b1:16:df:85:d9:80:77:a9:a0:c7:1e:b0: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:0F:72:0D:F6:90:2F:CF:16:11:4C:97:30:4E:1C:15:98:83:8B X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:99:72:98:4d:a4:08:6b:c8:85:3b:87:6c:f9:0e:81:73:5d: cb:e2:84:e5:34:dd:1a:6d:2c:79:32:d3:68:52:03:1c:3a:01: 9c:15:e0:da:04:90:75:69:9a:58:48:ac:5f:fe:fb:5b:01:15: 21:cd:6f:0a:fe:7e:fe:ba:a3:41:28:44:3c:06:77:86:55:b7: a8:1d:db:34:5f:ec:78:61:ff:05:d7:c1:cd:c4:d1:79:4e:97: 2e:89:34:73:6f:77:65:a5:28:c2:93:8f:ae:f7:56:c8:2b:c6: 3f:fe:27:7c:46:36:96:58:07:c3:04:6d:0b:d5:25:c9:7a:6a: ef:65:4c:6e:39:22:75:e0:61:11:44:82:df:59:4c:60:29:81: 55:28:1b:df:22:ec:8c:e0:b8:01:8f:d6:dd:ff:c7:1b:00:89: 39:c2:02:b2:96:c6:14:8a:b6:ab:01:43:77:bc:7f:d1:7d:95: ca:c4:ee:a4:91:0d:4a:7a:a2:a4:31:80:31:1f:a3:5d:1d:0d: b9:ce:88:ca:18:23:9e:e3:17:d8:e1:2e:1d:3f:b7:76:f0:51: 69:a5:5d:36:a5:a6:f4:aa:4c:51:4e:85:9a:69:71:64:1e:6f: 19:2e:b3:78:f4:da:b0:03:3d:ab:61:99:38:8c:21:94:07:4b: 2b:42:36:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjYwOTIxMDAzNTI4WhcNMjYwOTI4MDAzNTI4WjAYMRYwFAYD VQQDEw02YWIwN2JkMS0yODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskRBbKkOy3NeEcm3FdUGXp6g0Jqs0BgqEnLt9ruxSZSaei1w18B3mXPcg6sa JQVEeO+ifhTIzIkffHfHE6vjrHQQ3qATmyBtF2b/e/cEOJhePjp84HKH90WztK6v ULBNwjYSnccXGozRSkqcrjqR8dIuRJtZ1kTD0Ed24YlgJAFI7uAocucVFbQRXg30 jq5NZx0zipRjBaSF2NZ8LuPaBSSVt8Z22dveGW/oYTIefpu9PoXyj16IAqPYqWaI fWGzECiZeCTOuxejTDUFv9gqvCgyaiXd7W5pHCigiXCDd3LnyiB2PgA0SeXNrKiF 5WokWyaxFt+F2YB3qaDHHrANGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHLD3IN 9pAvzxYRTJcwThwVmIOLMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5lymE2kCGvIhTuHbPkOgXNdy+KE5TTdGm0seTLTaFIDHDoBnBXg2gSQdWma WEisX/77WwEVIc1vCv5+/rqjQShEPAZ3hlW3qB3bNF/seGH/BdfBzcTReU6XLok0 c293ZaUowpOPrvdWyCvGP/4nfEY2llgHwwRtC9UlyXpq72VMbjkideBhEUSC31lM YCmBVSgb3yLsjOC4AY/W3f/HGwCJOcICspbGFIq2qwFDd7x/0X2VysTupJENSnqi pDGAMR+jXR0Nuc6IyhgjnuMX2OEuHT+3dvBRaaVdNqWm9KpMUU6FmmlxZB5vGS6z ePTasAM9q2GZOIwhlAdLK0I29A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:21:27 2026 by rpki-client