$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: Ya79+zPw3uv5vHIPtE7dGW1em5o1OV4lXU450PLQ2jA= Subject key identifier: 99:2D:8A:BA:10:8A:C3:43:A9:1F:C1:12:C4:95:15:72:30:BB:02:5E Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 155E Signing time: Thu 24 Sep 2026 16:46:33 +0000 Manifest this update: Thu 24 Sep 2026 16:46:33 +0000 Manifest next update: Thu 01 Oct 2026 16:46:33 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: 1Bk8Yn8tWk4tSHRsga8HZvYOub5EDO+pXPZYFz2Fvn0=) 2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg=) 3: A0375A56964511EF9481CA74C4F9AE02.roa (hash: iHRpBY8mTgfogKkV6RLUH1pT9Rubnqiw6gX0z2kYfjk=) 4: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5506 (0x1582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Sep 24 16:46:33 2026 GMT Not After : Oct 1 16:46:33 2026 GMT Subject: CN=6ab553e9-d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:2c:36:c4:a0:fd:0a:1b:d4:69:61:31:a4: 1c:c9:66:74:0c:92:43:6b:97:27:8a:65:12:6a:f1: 33:5d:69:49:42:b3:00:e1:f8:a3:75:e1:9d:81:38: f2:7e:16:f9:6c:d4:3d:e8:22:98:61:87:56:af:3f: 41:9b:16:98:83:55:72:bc:d3:6c:73:7e:7f:6c:79: 08:d8:49:d3:c8:c4:78:f0:0f:06:10:5c:db:8e:00: e2:37:1e:13:26:9b:4c:e7:c4:f0:85:1d:7b:bb:0c: 00:37:88:b9:9e:57:de:88:16:c5:2c:04:0c:d5:41: 91:58:bd:49:50:d1:bc:37:c2:b5:fe:35:d5:f6:53: 0e:f1:2b:25:74:2f:37:20:95:26:fe:eb:37:aa:43: 7c:4b:26:e8:a5:71:c4:18:2e:2a:ba:37:6b:3b:1a: 30:b6:79:a4:4a:93:30:1d:93:79:06:02:40:a1:f6: cc:38:f5:a9:a6:20:b1:5f:68:23:93:fa:3d:b0:18: 2b:65:0d:08:3a:24:2c:8e:d4:26:fb:90:60:af:47: d6:20:32:69:9e:35:89:d9:fa:7b:76:8e:d1:7d:d2: fd:62:d3:c9:e6:ba:c2:74:65:db:1f:0b:30:6e:9e: 06:51:05:fc:66:b5:f6:9b:86:ff:17:52:b7:ac:53: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2D:8A:BA:10:8A:C3:43:A9:1F:C1:12:C4:95:15:72:30:BB:02:5E X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6b:d2:0a:cf:59:37:04:af:1d:62:b6:32:27:5e:91:4e:5c: 91:f3:94:a6:d8:08:94:70:06:40:d6:e8:5e:f9:76:98:b9:64: 49:60:f7:90:5b:d9:4e:91:0d:e2:e3:cb:ad:a9:39:72:16:59: f7:c9:ff:91:b5:2c:0c:e8:d5:a2:66:65:20:79:5a:a1:33:d9: d4:bd:2a:78:b5:8c:66:88:63:36:33:01:5d:16:d4:19:46:ef: c0:f7:25:09:6e:ce:f0:45:0e:34:43:1f:be:61:41:66:aa:b7: e3:92:d3:6a:d0:64:94:8d:97:6f:a7:22:13:f9:5b:ac:56:19: b0:ad:64:f6:e5:a6:b2:84:4e:7e:bb:1c:8b:9f:1a:c2:b7:26: 2a:24:d6:bf:6f:d9:db:37:3e:1a:f6:5b:47:f7:d9:00:06:1f: 78:04:f7:8b:d3:3b:5b:49:d9:dd:e3:15:47:48:b2:98:03:35: 94:21:9a:9b:0b:96:a7:ce:a2:de:0a:01:70:3e:78:cf:38:15: 58:65:0a:95:58:bd:83:82:4f:97:08:6c:33:34:b2:16:d6:8d: 50:fc:a5:cd:fa:03:13:ef:85:13:cc:cc:95:3f:16:6e:9c:45: 1c:4a:5e:10:d2:50:e5:81:a2:a9:1a:2e:cc:c4:fc:52:fc:96: 5b:d1:e5:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjYwOTI0MTY0NjMzWhcNMjYxMDAxMTY0NjMzWjAYMRYwFAYD VQQDEw02YWI1NTNlOS1kNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GIsNsSg/Qob1GlhMaQcyWZ0DJJDa5cnimUSavEzXWlJQrMA4fijdeGdgTjy fhb5bNQ96CKYYYdWrz9BmxaYg1VyvNNsc35/bHkI2EnTyMR48A8GEFzbjgDiNx4T JptM58TwhR17uwwAN4i5nlfeiBbFLAQM1UGRWL1JUNG8N8K1/jXV9lMO8SsldC83 IJUm/us3qkN8SybopXHEGC4qujdrOxowtnmkSpMwHZN5BgJAofbMOPWppiCxX2gj k/o9sBgrZQ0IOiQsjtQm+5Bgr0fWIDJpnjWJ2fp7do7RfdL9YtPJ5rrCdGXbHwsw bp4GUQX8ZrX2m4b/F1K3rFPaNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJktiroQ isNDqR/BEsSVFXIwuwJeMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2vSCs9ZNwSvHWK2MidekU5ckfOUptgIlHAGQNboXvl2mLlkSWD3kFvZTpEN 4uPLrak5chZZ98n/kbUsDOjVomZlIHlaoTPZ1L0qeLWMZohjNjMBXRbUGUbvwPcl CW7O8EUONEMfvmFBZqq345LTatBklI2Xb6ciE/lbrFYZsK1k9uWmsoROfrsci58a wrcmKiTWv2/Z2zc+GvZbR/fZAAYfeAT3i9M7W0nZ3eMVR0iymAM1lCGamwuWp86i 3goBcD54zzgVWGUKlVi9g4JPlwhsMzSyFtaNUPylzfoDE++FE8zMlT8WbpxFHEpe ENJQ5YGiqRouzMT8UvyWW9Hl3A== -----END CERTIFICATE-----Generated at Fri Sep 25 02:25:15 2026 by rpki-client