$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json) Hash identifier: pZcVTCNcFXNAuq88Cs1NCEyKDGQkkMxgoxvkwXdlZl8= Subject key identifier: 40:BC:5B:AC:77:BC:D4:58:3B:F1:13:4C:C2:4F:F8:4B:86:3A:D4:B7 Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Certificate serial: 1F53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft Manifest number: 1F52 Signing time: Tue 22 Sep 2026 15:57:20 +0000 Manifest this update: Tue 22 Sep 2026 15:57:20 +0000 Manifest next update: Tue 29 Sep 2026 15:57:20 +0000 Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: XvcopaoiTq3w1T1GBftcl4ODSGQ4yypstSLInNisDzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8019 (0x1f53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Validity Not Before: Sep 22 15:57:20 2026 GMT Not After : Sep 29 15:57:20 2026 GMT Subject: CN=6ab2a560-ebb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:d1:c8:d7:e1:3a:4c:3d:f5:38:93:95:97: 77:8b:6d:33:1a:2c:ee:56:5c:33:9a:ac:7a:4d:b9: 09:89:63:2e:31:cc:50:c9:c0:62:e1:e6:64:bb:1d: 87:da:f3:28:5a:c2:ad:3b:a4:52:51:50:5a:17:a4: 2e:cd:7d:a2:b1:cf:2e:c2:e2:a8:a7:47:b8:3b:20: 0e:83:2e:9f:7e:45:ea:a0:8a:76:8f:50:cd:3a:2b: 3d:f5:d0:45:05:c7:58:4d:52:f2:89:b9:f6:50:dd: 1f:f2:23:b2:39:aa:4f:e8:a4:29:29:df:9b:ab:f5: a2:54:a8:2e:0a:07:49:82:2a:c2:f3:8b:9d:2d:c9: fb:a6:49:dd:36:32:1a:d4:78:9e:2f:ff:ff:7d:11: b5:e6:fe:46:cf:5e:ca:99:b0:38:c7:8a:2b:8c:55: 0a:17:84:e2:71:91:39:59:59:29:3f:13:e8:79:f8: b5:65:d1:df:f0:fc:00:9c:66:83:b0:e2:a3:2e:33: 9f:85:6e:57:47:c7:25:25:c6:1b:2e:d6:24:9e:6d: b7:86:1e:83:97:f5:32:d7:20:0e:ab:06:e1:74:a9: af:1e:f1:c1:06:8f:aa:12:65:f1:62:8e:4a:99:ac: bc:c3:86:3a:e4:0d:44:60:12:6d:89:1c:70:2d:e9: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BC:5B:AC:77:BC:D4:58:3B:F1:13:4C:C2:4F:F8:4B:86:3A:D4:B7 X509v3 Authority Key Identifier: keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:33:44:74:6a:3b:cf:cf:75:11:a7:41:2a:8e:7c:db:fe:f3: 24:b6:8a:32:48:0b:b0:fd:08:a5:ef:68:86:3f:b8:6b:eb:8a: da:86:2d:5a:28:a5:97:c0:1d:38:ee:33:95:ce:44:f3:19:9d: 41:09:42:2e:9e:8d:00:00:88:4f:7d:83:52:1e:11:74:85:58: 0e:fd:47:7f:ab:e8:1f:8c:72:30:e0:38:7d:c7:a3:99:85:07: e8:ea:7b:33:a5:43:c8:a1:e8:a9:1f:bd:c3:2a:f4:e8:87:31: 1d:12:d5:a3:41:1a:c6:1f:ad:af:8d:1f:53:f8:6e:91:a7:aa: ce:f4:d5:6e:3f:df:19:c6:ce:88:a3:57:e7:d5:7a:7b:5a:79: f3:91:e9:ce:2e:89:62:4c:da:16:80:af:be:00:d5:df:b8:ce: ac:bb:fb:e9:91:2e:b7:a9:2c:80:ef:33:fc:ec:c3:d7:6a:ec: a7:c8:d4:75:e6:63:ee:13:63:b5:7f:b7:af:50:7a:c4:00:49: 60:b6:56:39:af:6e:fd:8d:8f:ea:8b:85:e4:b1:5e:43:4d:41: 06:2e:71:bf:6b:e2:12:1a:85:59:37:84:9e:cd:6a:61:2d:ad: 95:47:0c:89:84:95:23:1a:3d:4a:49:30:00:b8:14:5b:c8:b7: 91:55:f2:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2 Rjc2MjVFNjcwHhcNMjYwOTIyMTU1NzIwWhcNMjYwOTI5MTU1NzIwWjAYMRYwFAYD VQQDEw02YWIyYTU2MC1lYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6XRyNfhOkw99TiTlZd3i20zGizuVlwzmqx6TbkJiWMuMcxQycBi4eZkux2H 2vMoWsKtO6RSUVBaF6QuzX2isc8uwuKop0e4OyAOgy6ffkXqoIp2j1DNOis99dBF BcdYTVLyibn2UN0f8iOyOapP6KQpKd+bq/WiVKguCgdJgirC84udLcn7pkndNjIa 1HieL///fRG15v5Gz17KmbA4x4orjFUKF4TicZE5WVkpPxPoefi1ZdHf8PwAnGaD sOKjLjOfhW5XR8clJcYbLtYknm23hh6Dl/Uy1yAOqwbhdKmvHvHBBo+qEmXxYo5K may8w4Y65A1EYBJtiRxwLelfGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEC8W6x3 vNRYO/ETTMJP+EuGOtS3MB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2 M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAljNEdGo7z891EadBKo582/7zJLaKMkgLsP0Ipe9ohj+4a+uK2oYtWiill8Ad OO4zlc5E8xmdQQlCLp6NAACIT32DUh4RdIVYDv1Hf6voH4xyMOA4fcejmYUH6Op7 M6VDyKHoqR+9wyr06IcxHRLVo0Eaxh+tr40fU/hukaeqzvTVbj/fGcbOiKNX59V6 e1p585Hpzi6JYkzaFoCvvgDV37jOrLv76ZEut6ksgO8z/OzD12rsp8jUdeZj7hNj tX+3r1B6xABJYLZWOa9u/Y2P6ouF5LFeQ01BBi5xv2viEhqFWTeEns1qYS2tlUcM iYSVIxo9SkkwALgUW8i3kVXy1g== -----END CERTIFICATE-----Generated at Tue Sep 22 22:44:22 2026 by rpki-client