$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json) Hash identifier: p6HjkT7qRLC2BbIJBPeCZSBKZAPMQVIc6cu8Jr7M4+E= Subject key identifier: CB:F5:64:F1:F5:6C:DB:1B:46:AF:36:39:06:49:3B:B7:13:58:93:67 Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft Manifest number: 042B Signing time: Fri 25 Sep 2026 00:08:15 +0000 Manifest this update: Fri 25 Sep 2026 00:08:14 +0000 Manifest next update: Fri 02 Oct 2026 00:08:14 +0000 Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: spMm+uL/H0ee02DUGcbB308VXQ2w6szmypRNsPQD1aA=) 2: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=) 3: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Validity Not Before: Sep 25 00:08:14 2026 GMT Not After : Oct 2 00:08:14 2026 GMT Subject: CN=6ab5bb6e-29fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:e2:09:09:ae:2e:8d:97:4e:bc:af:8e:03: ef:0b:3f:a6:dc:b1:76:5e:bf:b9:89:b3:01:06:fc: 4f:2e:ed:c8:c3:11:ed:63:6e:9b:55:3b:1a:bf:b7: 10:55:31:e1:1f:77:cc:8d:b0:d8:f1:a3:38:e7:78: a5:9d:3f:db:d9:b4:2a:d3:40:8f:6f:6f:91:32:19: c4:51:c6:0b:fe:38:60:24:0e:d3:1f:74:5b:f9:10: 9f:6a:58:31:eb:88:d5:04:d3:b7:15:ef:b1:ef:20: 4e:c2:9c:58:a7:ee:b4:20:00:9c:ce:2b:5a:f4:3b: 77:4d:10:07:2a:d3:b1:ed:9c:d0:18:dc:98:64:b7: fa:e7:8a:ef:27:88:e1:a8:be:85:3b:20:17:5f:91: 42:e0:80:c5:2e:a5:e0:1d:39:bd:8b:0d:5d:53:de: fc:c2:1f:9f:f6:f5:ee:43:12:2f:22:53:f4:37:60: 32:76:f8:35:a9:3f:75:a5:e2:f6:f3:96:c9:33:66: 0d:74:5f:16:c7:8c:31:56:a1:64:f7:d7:bc:cf:42: 03:47:f8:39:9a:09:13:68:4b:2a:16:42:ba:1b:76: b6:97:ba:a9:1b:85:5b:7b:af:47:4d:8e:21:3b:5e: 0c:54:f0:0b:ad:11:66:18:b4:aa:8b:7d:da:0a:13: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F5:64:F1:F5:6C:DB:1B:46:AF:36:39:06:49:3B:B7:13:58:93:67 X509v3 Authority Key Identifier: keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d2:16:36:f6:35:51:1a:b6:69:07:a9:cd:1d:9c:95:27:df: 70:2e:38:8e:7f:0d:95:d1:10:b1:24:ff:bc:e8:0e:de:97:e7: 6d:04:06:40:c2:c8:77:63:04:7e:d6:77:36:4e:6c:70:ae:ff: 8a:1a:dc:56:83:e9:d9:db:98:f3:6b:11:f5:6d:29:16:fd:c7: 15:07:8a:c5:88:5c:b9:25:db:00:7c:69:a3:00:41:b8:e5:fd: 88:8f:34:f4:1e:85:5f:25:01:a4:34:6f:01:e8:54:23:5b:1d: aa:3c:15:84:81:55:ec:6e:eb:5b:57:95:79:98:81:8f:e4:89: a1:46:29:ae:ab:e1:f1:9d:b4:e7:d9:e1:aa:09:6b:d4:c5:a3: 95:9c:bd:06:33:9e:fb:17:fe:21:4b:7c:2d:74:d2:31:53:b9: 76:cf:fd:8a:df:e2:d5:d6:cb:ce:99:4d:1c:bf:c9:d5:f8:15: f3:2d:10:93:aa:33:70:b2:12:c8:79:c9:06:1a:b3:b6:65:13: 1b:e7:f6:76:f6:fe:6e:e5:69:72:d0:20:63:e9:b3:c2:0f:2b: d0:7e:83:6a:5a:9b:65:71:35:e8:ef:8c:7c:7e:11:6c:8a:0c: 5d:f5:9b:fb:d2:fa:47:65:3c:c8:5b:9a:4e:25:f9:f6:f0:73: bb:63:87:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5MjIyMEYyOTNF MTc5MUI2QkMwHhcNMjYwOTI1MDAwODE0WhcNMjYxMDAyMDAwODE0WjAYMRYwFAYD VQQDEw02YWI1YmI2ZS0yOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMfiCQmuLo2XTryvjgPvCz+m3LF2Xr+5ibMBBvxPLu3IwxHtY26bVTsav7cQ VTHhH3fMjbDY8aM453ilnT/b2bQq00CPb2+RMhnEUcYL/jhgJA7TH3Rb+RCfalgx 64jVBNO3Fe+x7yBOwpxYp+60IACczita9Dt3TRAHKtOx7ZzQGNyYZLf654rvJ4jh qL6FOyAXX5FC4IDFLqXgHTm9iw1dU978wh+f9vXuQxIvIlP0N2Aydvg1qT91peL2 85bJM2YNdF8Wx4wxVqFk99e8z0IDR/g5mgkTaEsqFkK6G3a2l7qpG4Vbe69HTY4h O14MVPALrRFmGLSqi33aChOMVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMv1ZPH1 bNsbRq82OQZJO7cTWJNnMB8GA1UdIwQYMBaAFNUo+tS4dqv7cK84kiIPKT4Xkba8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZDNS9FODI2NjAyMEM2 QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFfdHdyemlTSWc4cFBoZVJ0 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTajYxTGgycV90d3J6aVNJZzhwUGhlUnRydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZDNS9FODI2NjAyMEM2QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFf dHdyemlTSWc4cFBoZVJ0cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9IWNvY1URq2aQepzR2clSffcC44jn8NldEQsST/vOgO3pfnbQQGQMLId2ME ftZ3Nk5scK7/ihrcVoPp2duY82sR9W0pFv3HFQeKxYhcuSXbAHxpowBBuOX9iI80 9B6FXyUBpDRvAehUI1sdqjwVhIFV7G7rW1eVeZiBj+SJoUYprqvh8Z2059nhqglr 1MWjlZy9BjOe+xf+IUt8LXTSMVO5ds/9it/i1dbLzplNHL/J1fgV8y0Qk6ozcLIS yHnJBhqztmUTG+f2dvb+buVpctAgY+mzwg8r0H6DalqbZXE16O+MfH4RbIoMXfWb +9L6R2U8yFuaTiX59vBzu2OHJQ== -----END CERTIFICATE-----Generated at Fri Sep 25 16:59:20 2026 by rpki-client