$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json) Hash identifier: 14Ebnv1U3zv8CJsmp6XhK2kaZE8pQJe2j65qdy0zPFI= Subject key identifier: 0A:32:73:60:F7:7A:34:7C:32:B4:7F:4B:3E:3A:CC:4C:DD:38:67:75 Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Certificate serial: 1C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft Manifest number: 1C3D Signing time: Tue 22 Sep 2026 16:09:04 +0000 Manifest this update: Tue 22 Sep 2026 16:09:03 +0000 Manifest next update: Tue 29 Sep 2026 16:09:03 +0000 Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: gF4s7ZHr0d8/jo9W3Yx2nq8C7r/NkwfsAe6q5lMD8Pc=) 2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7241 (0x1c49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Validity Not Before: Sep 22 16:09:03 2026 GMT Not After : Sep 29 16:09:03 2026 GMT Subject: CN=6ab2a81f-3cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:9a:bf:89:2e:47:b0:9a:da:5a:18:a4:c2: 3a:b5:c1:37:cc:d2:e1:9b:b7:f1:c9:0c:db:be:eb: 5f:c4:20:a6:3a:a9:18:2d:66:77:9b:a2:0e:0a:f8: fa:a6:55:39:2e:9f:bc:9f:ca:61:2b:c9:5a:1f:6c: 42:f4:42:03:e2:55:d5:ee:f4:3c:9b:92:d9:6f:38: 74:43:0f:d7:26:fa:7b:28:7a:9b:da:33:06:df:b4: f4:17:4f:a1:81:df:57:34:2c:7d:a6:ed:c4:3e:09: 13:57:10:dc:64:4b:fb:a9:6a:1e:6b:4b:6d:2b:da: 03:aa:fa:8a:7c:1f:37:e8:62:62:2b:ae:95:3a:57: 1b:2f:bf:54:c5:9a:ee:b6:41:56:70:08:53:cc:0d: 11:d1:bd:d8:3b:13:ac:48:bb:1a:53:a8:98:a6:10: 0d:f0:21:0d:40:14:83:40:64:7b:3e:5b:de:a3:8d: a6:5f:6f:74:b4:89:b5:b0:25:f6:51:d3:ed:48:48: 02:a1:c9:b8:ba:5e:28:bd:9c:99:c0:1a:71:59:60: 25:35:c2:32:9b:df:9b:a4:2e:da:dd:ca:1e:08:b5: 97:35:59:ce:05:dc:0c:44:3d:b4:d9:eb:76:7e:8a: 52:6a:0b:df:8d:0e:eb:d0:60:f1:14:45:3f:3c:02: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:73:60:F7:7A:34:7C:32:B4:7F:4B:3E:3A:CC:4C:DD:38:67:75 X509v3 Authority Key Identifier: keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7c:b6:97:8b:fb:f0:24:95:f0:4c:b6:a2:19:f7:81:5b:8b: f8:44:99:45:3e:63:42:11:1b:01:84:94:17:bf:40:b6:5a:38: 08:09:44:35:ec:cb:b3:d6:86:e3:01:3e:9d:77:bd:7c:df:8e: b9:3c:64:b6:7d:0f:0f:dc:0a:7d:15:38:86:27:43:32:a1:5f: 37:00:7e:c9:d9:31:71:5b:04:90:84:1e:db:05:93:4e:86:65: 36:b6:e7:f1:d1:ec:d6:f1:12:cb:25:a6:2c:9c:52:21:2f:71: e5:42:d7:e0:7f:a0:9e:24:47:95:26:96:52:73:f6:77:ad:2f: 0e:c5:d5:4b:d6:e2:2c:97:db:9f:d8:de:c3:b6:ff:cd:6f:fc: 83:7d:ca:44:f0:a4:4c:75:b9:b7:f6:02:fd:8f:c5:32:8a:87: bd:47:88:ee:2f:60:87:2e:34:76:2c:00:fc:90:fd:b7:ec:59: d0:72:8e:b4:c9:3e:6e:eb:2b:a1:d3:52:23:af:c6:d1:b3:2d: dd:ae:e0:f6:08:7b:3b:2d:26:b5:7b:b8:fa:a6:45:7d:e5:94: 5d:d1:12:9f:17:b9:8e:57:ea:ff:da:74:1f:24:83:e8:f1:b2: d7:6f:de:e4:ea:4c:7d:39:37:57:4c:39:38:bb:c5:65:cd:70: 35:02:76:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD NzgwRTBGN0IwHhcNMjYwOTIyMTYwOTAzWhcNMjYwOTI5MTYwOTAzWjAYMRYwFAYD VQQDEw02YWIyYTgxZi0zY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouGav4kuR7Ca2loYpMI6tcE3zNLhm7fxyQzbvutfxCCmOqkYLWZ3m6IOCvj6 plU5Lp+8n8phK8laH2xC9EID4lXV7vQ8m5LZbzh0Qw/XJvp7KHqb2jMG37T0F0+h gd9XNCx9pu3EPgkTVxDcZEv7qWoea0ttK9oDqvqKfB836GJiK66VOlcbL79UxZru tkFWcAhTzA0R0b3YOxOsSLsaU6iYphAN8CENQBSDQGR7Plveo42mX290tIm1sCX2 UdPtSEgCocm4ul4ovZyZwBpxWWAlNcIym9+bpC7a3coeCLWXNVnOBdwMRD202et2 fopSagvfjQ7r0GDxFEU/PAIxHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoyc2D3 ejR8MrR/Sz46zEzdOGd1MB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OERENS9ENUExQTFDNjEyQTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZB QjR1bm1VUXU3YjdIZ09EM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiny2l4v78CSV8Ey2ohn3gVuL+ESZRT5jQhEbAYSUF79Atlo4CAlENezLs9aG 4wE+nXe9fN+OuTxktn0PD9wKfRU4hidDMqFfNwB+ydkxcVsEkIQe2wWTToZlNrbn 8dHs1vESyyWmLJxSIS9x5ULX4H+gniRHlSaWUnP2d60vDsXVS9biLJfbn9jew7b/ zW/8g33KRPCkTHW5t/YC/Y/FMoqHvUeI7i9ghy40diwA/JD9t+xZ0HKOtMk+busr odNSI6/G0bMt3a7g9gh7Oy0mtXu4+qZFfeWUXdESnxe5jlfq/9p0HySD6PGy12/e 5OpMfTk3V0w5OLvFZc1wNQJ2Wg== -----END CERTIFICATE-----Generated at Tue Sep 22 23:45:39 2026 by rpki-client