$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: kd5rFahg0XwPUHUsaGR+LNjK7PASXmN5Md6prOxtzmM= Subject key identifier: E8:90:C0:7F:A9:86:54:E1:AD:D1:93:7A:A8:9A:18:5D:DE:07:31:96 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 19EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 19B4 Signing time: Thu 24 Sep 2026 16:22:25 +0000 Manifest this update: Thu 24 Sep 2026 16:22:24 +0000 Manifest next update: Thu 01 Oct 2026 16:22:24 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: p6D63VO/aG2O6XzlPiMHi0pnvf4Zb/wrKb0khGk06PI=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6634 (0x19ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Sep 24 16:22:24 2026 GMT Not After : Oct 1 16:22:24 2026 GMT Subject: CN=6ab54e41-9bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:31:c1:83:a3:9a:55:89:f3:82:4a:10:8d: 1b:cd:23:8a:62:3e:34:3c:b6:3c:a6:e2:57:44:5f: 50:1a:36:ce:68:47:2d:da:be:bb:be:dd:25:05:f8: 30:b3:ce:85:e7:a9:71:87:30:ea:8b:ce:27:50:fd: eb:3e:91:db:d9:da:f8:70:86:95:98:0e:c0:ae:c1: 19:c4:47:6e:79:d4:ea:7b:a7:8a:dd:a3:d2:78:28: d2:06:c2:6f:7b:88:0b:14:da:c4:87:b7:93:56:27: d3:e5:4e:c3:35:aa:42:55:f4:90:61:9e:ad:df:44: 90:4a:31:3f:b1:43:48:1d:e0:d8:da:15:51:09:98: 61:7a:b2:ef:24:1f:1f:60:e9:cb:7c:a8:0c:49:d8: 6c:be:dc:ce:5b:61:7c:d1:e6:34:dc:16:31:20:6d: d6:14:34:8f:11:31:61:f2:ca:d7:a6:8a:e9:cf:b5: ef:70:21:09:04:cf:ba:49:75:8f:1b:04:d2:e8:9d: b6:f9:46:8b:7f:09:0b:09:3d:9f:67:dc:d6:36:5b: 88:a3:59:eb:27:04:5b:62:b4:58:19:c2:9c:fc:16: 1e:1c:b0:65:df:b3:ab:c9:65:bc:9f:c1:70:f9:e3: 63:e5:f2:d3:5d:1b:ab:37:d6:5d:5d:4f:12:5a:f0: 7e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:90:C0:7F:A9:86:54:E1:AD:D1:93:7A:A8:9A:18:5D:DE:07:31:96 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8c:c6:73:1b:35:f8:13:9f:d8:a1:ce:b9:cf:63:41:87:bf: f2:0b:23:e0:9e:b7:90:c2:fd:eb:ad:9e:99:78:2d:cd:c5:1e: be:61:67:b7:dd:c4:4a:f4:1b:a0:63:bc:2e:13:ef:60:19:83: 31:65:f7:2a:d2:7b:33:c5:a0:ff:c8:26:7d:62:06:14:65:d6: 44:2d:cf:61:a6:b4:a8:88:e8:b7:30:2d:c6:ba:93:5a:ff:84: a9:a2:b4:ab:12:65:03:89:34:ac:de:25:92:be:b9:ff:60:a6: 1f:e9:e0:f8:d5:06:a0:6e:4b:b4:1e:3e:a0:bc:2f:bd:66:4e: b4:ab:fd:cd:55:cd:0a:ec:f0:59:2b:5a:60:13:27:1b:16:30: 61:37:0c:11:ae:35:aa:f5:c3:8f:b5:ca:56:d8:2e:07:67:b6: d5:04:e9:51:f8:11:60:80:4f:47:32:f3:01:f9:27:64:06:ff: fb:7b:df:e5:d3:dc:0e:e6:56:a4:b3:b0:c8:e0:47:90:65:08: e6:e0:c3:b0:d4:c3:6f:e1:df:ba:75:30:04:25:73:59:6a:d8: 52:dd:96:e3:9b:9c:b3:08:3e:68:1e:4f:dc:c5:4e:c3:f7:a8: 60:aa:3f:1b:2b:2d:e7:e3:b9:d9:5a:ba:4c:66:d5:00:3a:c2: 93:ea:79:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjYwOTI0MTYyMjI0WhcNMjYxMDAxMTYyMjI0WjAYMRYwFAYD VQQDEw02YWI1NGU0MS05YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1s4xwYOjmlWJ84JKEI0bzSOKYj40PLY8puJXRF9QGjbOaEct2r67vt0lBfgw s86F56lxhzDqi84nUP3rPpHb2dr4cIaVmA7ArsEZxEduedTqe6eK3aPSeCjSBsJv e4gLFNrEh7eTVifT5U7DNapCVfSQYZ6t30SQSjE/sUNIHeDY2hVRCZhherLvJB8f YOnLfKgMSdhsvtzOW2F80eY03BYxIG3WFDSPETFh8srXporpz7XvcCEJBM+6SXWP GwTS6J22+UaLfwkLCT2fZ9zWNluIo1nrJwRbYrRYGcKc/BYeHLBl37OryWW8n8Fw +eNj5fLTXRurN9ZdXU8SWvB+CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiQwH+p hlThrdGTeqiaGF3eBzGWMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiozGcxs1+BOf2KHOuc9jQYe/8gsj4J63kML9662emXgtzcUevmFnt93ESvQb oGO8LhPvYBmDMWX3KtJ7M8Wg/8gmfWIGFGXWRC3PYaa0qIjotzAtxrqTWv+EqaK0 qxJlA4k0rN4lkr65/2CmH+ng+NUGoG5LtB4+oLwvvWZOtKv9zVXNCuzwWStaYBMn GxYwYTcMEa41qvXDj7XKVtguB2e21QTpUfgRYIBPRzLzAfknZAb/+3vf5dPcDuZW pLOwyOBHkGUI5uDDsNTDb+HfunUwBCVzWWrYUt2W45ucswg+aB5P3MVOw/eoYKo/ Gyst5+O52Vq6TGbVADrCk+p5Gw== -----END CERTIFICATE-----Generated at Sat Sep 26 01:56:35 2026 by rpki-client