$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: 1uOIzyInN0Z4ennGsHFIOdTOmWT9hauB7QKi7xYeDnM= Subject key identifier: 4E:FF:C9:D0:66:D5:BA:6C:56:98:AB:BA:18:7F:23:25:1B:B1:16:14 Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 0944 Signing time: Sat 26 Sep 2026 20:15:14 +0000 Manifest this update: Sat 26 Sep 2026 20:15:13 +0000 Manifest next update: Sat 03 Oct 2026 20:15:13 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: 6ALrJLPNwpDTNPCSP4xVqpRafJxVtvM0wN1JjCv0Tdw=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: 4jcjYW/0FMetLdx19LfkYx1V1hLHWxOLQGODOyvAQC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Sep 26 20:15:13 2026 GMT Not After : Oct 3 20:15:13 2026 GMT Subject: CN=6ab827d2-da33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:17:e9:c0:34:64:dd:52:9d:a2:32:09:de: 9a:cf:7e:89:c1:0f:87:32:5a:5c:46:8b:e0:57:ed: 97:27:a6:19:6a:22:4d:7b:d9:e0:b3:24:c2:c0:4a: e8:ef:6f:65:df:d0:78:39:b7:61:45:3f:32:3f:58: f2:1a:fe:0a:b1:a8:f8:06:61:45:fb:d6:00:93:91: 1a:ad:31:39:8f:ae:ee:ee:d1:6b:00:ae:01:db:0c: fb:2a:46:60:0b:9e:81:99:ee:e4:7e:7f:9c:69:38: 34:36:10:58:70:be:5d:08:e7:8a:db:fb:c8:a2:14: 98:79:08:dd:4c:88:ac:24:10:b5:e6:4b:87:bf:f4: 6e:9b:88:b5:5c:32:83:72:17:fb:7c:7f:7d:ef:45: c0:3c:30:39:f2:75:7d:95:ea:8e:c9:72:59:cd:00: 81:46:f3:d1:a6:b4:ab:6e:7e:dc:1b:f5:b6:50:06: 87:d1:d2:28:c6:af:94:49:c7:5b:8e:e9:7a:d4:54: ff:10:1a:83:d0:24:8c:22:df:38:90:2c:db:7e:43: dd:40:2c:b0:80:27:b9:3b:94:56:60:83:34:b8:a9: 68:c3:43:fd:62:43:28:68:ec:1f:72:c9:d8:c0:f1: b7:66:f3:c1:95:6f:0f:41:07:89:56:5e:66:32:1b: 27:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:C9:D0:66:D5:BA:6C:56:98:AB:BA:18:7F:23:25:1B:B1:16:14 X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:ca:75:6f:44:5a:8b:45:28:a0:d4:c8:db:d8:4a:1d:ac:46: a6:9a:4e:47:29:95:84:f5:1f:96:b5:fc:eb:91:00:a1:97:13: 1f:e6:65:05:b4:47:e5:21:b7:ff:d4:bb:b2:ae:b4:03:34:39: 59:cf:fe:7e:71:c9:86:0d:88:24:b2:36:6b:a4:a9:82:67:c9: 0e:5f:d6:97:8e:6b:01:5e:1a:2b:95:5c:bb:e7:2e:dc:5c:c3: d8:ff:44:97:d2:7d:62:de:f4:e2:1e:26:54:33:a7:ac:32:c8: bf:79:c9:07:5b:f6:a4:7d:65:cd:2c:7d:a3:fb:b6:67:62:60: fc:ea:06:09:de:22:66:87:7d:c4:6e:15:a0:e1:fc:a4:35:a0: 04:78:75:6a:6a:7b:65:b2:89:b8:c2:c1:7c:51:12:52:a1:fd: 25:cb:06:e0:46:7b:cd:6f:44:a4:9d:e4:05:44:0d:c1:63:d7: 4e:ee:72:9a:c4:17:ae:e5:cb:8c:46:a3:49:2a:55:67:10:10: 60:df:48:46:d2:de:24:91:e4:ce:12:dd:d6:bb:16:cf:06:5f: 6b:6f:94:56:cf:ba:db:03:18:1b:99:6a:44:9b:3c:c5:d0:e8: c6:15:e5:f5:df:35:27:8e:af:59:1c:33:4c:a0:c0:fe:df:43: 62:f0:67:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjYwOTI2MjAxNTEzWhcNMjYxMDAzMjAxNTEzWjAYMRYwFAYD VQQDEw02YWI4MjdkMi1kYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoQX6cA0ZN1SnaIyCd6az36JwQ+HMlpcRovgV+2XJ6YZaiJNe9ngsyTCwEro 729l39B4ObdhRT8yP1jyGv4Ksaj4BmFF+9YAk5EarTE5j67u7tFrAK4B2wz7KkZg C56Bme7kfn+caTg0NhBYcL5dCOeK2/vIohSYeQjdTIisJBC15kuHv/Rum4i1XDKD chf7fH9970XAPDA58nV9leqOyXJZzQCBRvPRprSrbn7cG/W2UAaH0dIoxq+UScdb jul61FT/EBqD0CSMIt84kCzbfkPdQCywgCe5O5RWYIM0uKlow0P9YkMoaOwfcsnY wPG3ZvPBlW8PQQeJVl5mMhsnlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7/ydBm 1bpsVpiruhh/IyUbsRYUMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA38p1b0Rai0UooNTI29hKHaxGpppORymVhPUflrX865EAoZcTH+ZlBbRH5SG3 /9S7sq60AzQ5Wc/+fnHJhg2IJLI2a6SpgmfJDl/Wl45rAV4aK5Vcu+cu3FzD2P9E l9J9Yt704h4mVDOnrDLIv3nJB1v2pH1lzSx9o/u2Z2Jg/OoGCd4iZod9xG4VoOH8 pDWgBHh1amp7ZbKJuMLBfFESUqH9JcsG4EZ7zW9EpJ3kBUQNwWPXTu5ymsQXruXL jEajSSpVZxAQYN9IRtLeJJHkzhLd1rsWzwZfa2+UVs+62wMYG5lqRJs8xdDoxhXl 9d81J46vWRwzTKDA/t9DYvBnrg== -----END CERTIFICATE-----Generated at Sun Sep 27 16:52:04 2026 by rpki-client