$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: VoZHqXpOoxk4p5338SPakgjG1HZ0BiTyS2z91lLBXX8= Subject key identifier: BF:74:8D:53:05:58:15:B5:27:31:C8:AB:27:B5:BD:EC:B9:2B:0B:9D Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 0A19 Signing time: Tue 22 Sep 2026 19:42:07 +0000 Manifest this update: Tue 22 Sep 2026 19:42:07 +0000 Manifest next update: Tue 29 Sep 2026 19:42:07 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: 5U/oiMOuQopiFVamomzDJxe/YKHeNyy68Rgh/2vfoK0=) 2: 5B0320A08B4411F1945A06324611F970.roa (hash: Da4zwaxvzw5gNNRbJ84b/uhlFao3ehlVxBi7a6sytcM=) 3: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=) 4: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=) 5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Sep 22 19:42:07 2026 GMT Not After : Sep 29 19:42:07 2026 GMT Subject: CN=6ab2da0f-e785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:79:61:0b:45:17:11:74:df:49:87:3e:64: bf:54:7a:3d:43:4d:be:52:31:5b:f8:1a:53:77:ad: 8f:02:9a:cc:c1:b3:e2:d8:1f:9a:0f:e0:d3:52:b9: fd:ed:3e:cb:e9:d0:86:d1:39:24:f6:4d:80:10:37: 44:03:6a:a9:f4:b3:ea:76:26:47:df:c2:b3:01:fc: c7:39:e2:be:47:00:37:54:c8:90:0d:4b:29:24:d4: e1:30:c6:46:73:00:bd:61:36:27:15:b9:fc:04:25: 69:93:44:0f:c8:df:5a:1e:65:47:9a:9a:57:f7:f1: 27:86:c9:52:b5:7e:bd:7d:79:37:74:60:49:a7:2c: 64:9a:51:87:d6:f5:d2:cb:50:78:3c:1f:77:c7:0f: c6:d4:da:39:ea:9b:19:d8:04:bb:25:57:23:a9:0e: cc:26:0e:7b:c2:83:d9:24:cc:96:c3:e3:43:4c:35: 3d:17:8a:b5:8e:fd:dd:81:73:0c:c8:55:10:14:27: 44:3e:d1:4a:9b:ee:d2:e8:2a:b8:18:7a:62:1e:94: 07:19:98:5b:8d:51:1c:66:8c:18:c9:e9:1a:a3:78: 22:80:ba:f0:9b:c1:19:f0:b4:9d:30:48:6a:6b:55: ae:5c:6e:67:e3:c9:21:a0:92:fb:9b:01:c3:0b:2a: 2d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:74:8D:53:05:58:15:B5:27:31:C8:AB:27:B5:BD:EC:B9:2B:0B:9D X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a0:82:d3:db:6b:67:a1:68:b7:1a:84:32:bd:37:12:79:cb: 8a:d0:82:ff:5c:d9:34:b5:45:e6:72:55:2b:eb:cd:cf:c3:c9: 27:75:05:6f:7b:e0:99:ca:4f:44:d0:c3:0d:d4:5b:af:ee:a4: 28:0e:f7:3e:48:28:45:d7:90:e9:7f:c5:e7:19:19:ee:ec:af: 7b:d1:58:ec:01:dd:a8:ac:3d:a8:ab:6e:4c:a2:ab:d5:52:20: 40:af:9b:3a:d3:e5:30:9a:be:75:09:b6:4e:54:8f:4f:dc:92: 87:05:dd:45:bc:73:ca:2e:3f:fb:60:c6:c8:8b:d7:0d:5a:10: 85:ff:ec:2e:f1:3c:93:25:5b:14:b2:22:49:44:bb:7e:f1:58: 0a:86:7d:5c:31:c7:b6:cb:26:6b:c3:9e:cf:cc:d7:66:ad:d4: f3:cd:61:4d:ce:55:19:34:4b:ca:97:23:91:bc:97:d9:88:84: ea:05:49:5e:b2:c7:63:4c:11:15:ee:a9:82:d0:ec:99:37:68: d7:48:dd:67:b0:bf:2f:ee:19:65:7e:3a:0b:0d:92:b5:93:cc: 93:0e:6c:91:64:0b:5d:c0:f9:ad:6e:ca:03:91:44:36:85:0d: 12:f1:cf:14:39:d7:de:83:ea:ec:df:57:4b:4a:c0:9d:a6:58: 42:59:f5:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjYwOTIyMTk0MjA3WhcNMjYwOTI5MTk0MjA3WjAYMRYwFAYD VQQDEw02YWIyZGEwZi1lNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAl5YQtFFxF030mHPmS/VHo9Q02+UjFb+BpTd62PAprMwbPi2B+aD+DTUrn9 7T7L6dCG0Tkk9k2AEDdEA2qp9LPqdiZH38KzAfzHOeK+RwA3VMiQDUspJNThMMZG cwC9YTYnFbn8BCVpk0QPyN9aHmVHmppX9/EnhslStX69fXk3dGBJpyxkmlGH1vXS y1B4PB93xw/G1No56psZ2AS7JVcjqQ7MJg57woPZJMyWw+NDTDU9F4q1jv3dgXMM yFUQFCdEPtFKm+7S6Cq4GHpiHpQHGZhbjVEcZowYyekao3gigLrwm8EZ8LSdMEhq a1WuXG5n48khoJL7mwHDCyotVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL90jVMF WBW1JzHIqye1vey5KwudMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmKCC09trZ6FotxqEMr03EnnLitCC/1zZNLVF5nJVK+vNz8PJJ3UFb3vgmcpP RNDDDdRbr+6kKA73PkgoRdeQ6X/F5xkZ7uyve9FY7AHdqKw9qKtuTKKr1VIgQK+b OtPlMJq+dQm2TlSPT9yShwXdRbxzyi4/+2DGyIvXDVoQhf/sLvE8kyVbFLIiSUS7 fvFYCoZ9XDHHtssma8Oez8zXZq3U881hTc5VGTRLypcjkbyX2YiE6gVJXrLHY0wR Fe6pgtDsmTdo10jdZ7C/L+4ZZX46Cw2StZPMkw5skWQLXcD5rW7KA5FENoUNEvHP FDnX3oPq7N9XS0rAnaZYQln19Q== -----END CERTIFICATE-----Generated at Thu Sep 24 00:40:23 2026 by rpki-client