$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: SfXpJxuxPlWgm+KpQnpJ0gHi/j8ZPXJIlSLApVd8FpQ= Subject key identifier: 27:90:0A:AF:F0:CE:80:D2:92:CD:41:14:A0:D5:17:99:BF:85:18:94 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 35D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 359C Signing time: Tue 22 Sep 2026 14:53:17 +0000 Manifest this update: Tue 22 Sep 2026 14:53:16 +0000 Manifest next update: Tue 29 Sep 2026 14:53:16 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: CkpCY/e9HtgHSdJfrFrEjjsh8NFKRvkcVn0Skp9ZLeU=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: vf7yinj1S9cWrGMf1fGP8uJmMGRAcRT+S6wc+GqOAfM=) 3: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: oZ6+TXbsKzCb1H31cqRGHknA2NY+Q5lG0k3cYCJhmRg=) 4: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 3RMRBjMY5rIEnAXqqJa1OtU6bMq0UxFTQ4CaQEQ/7hk=) 5: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: EjjdhavOBifQ/TWD+ksl2xyIA2vVpvp6HiibsqNwUc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13782 (0x35d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Sep 22 14:53:16 2026 GMT Not After : Sep 29 14:53:16 2026 GMT Subject: CN=6ab2965c-d1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:8e:8c:53:86:d1:4f:e2:d2:bb:a6:f7:b9: 67:2b:e9:d2:bf:62:01:81:41:83:eb:3c:7c:4b:8b: b2:df:97:3b:79:be:d3:26:ba:71:75:7d:ab:a8:cc: 0e:c4:82:81:e7:3f:71:eb:d2:29:b2:bb:12:08:3e: c4:cd:8b:54:14:48:5d:f5:e9:f9:05:81:81:79:83: 03:8d:f1:20:90:86:25:12:67:ee:c0:1a:b1:fd:bc: 72:19:3e:09:5f:6f:a6:f0:ad:b5:d1:20:ab:71:e6: 7a:31:02:1d:4f:47:25:5d:cd:86:f2:a4:86:a3:31: 6a:c2:36:b3:76:74:ae:b6:30:23:33:c4:69:22:b8: 50:6f:1d:71:ab:34:30:1e:9d:67:9e:02:62:08:49: 1f:b8:bf:d2:84:8d:f6:4a:49:76:24:fb:8d:4c:57: c9:9f:df:fc:aa:26:d0:47:f3:81:15:31:a6:e0:b3: e8:e8:fe:b6:27:27:27:ec:5b:04:f5:4a:eb:db:ea: e3:09:2f:ec:b4:af:38:96:56:c0:e1:3e:4a:63:30: 37:5e:c2:48:57:46:80:fd:e5:0d:28:90:09:e1:cc: 04:46:ee:41:d6:d6:55:5b:fc:45:3f:03:5d:76:3f: f2:1c:56:67:80:b8:f7:7c:92:25:92:35:46:f3:42: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:90:0A:AF:F0:CE:80:D2:92:CD:41:14:A0:D5:17:99:BF:85:18:94 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:36:5a:f9:95:d5:a2:71:cb:ce:82:d7:58:30:fd:14:11:18: 6e:e4:63:87:70:7d:b2:13:9f:62:92:46:10:83:c7:a2:31:35: c4:0c:a4:0e:c2:e6:45:88:5e:69:39:76:6f:fa:42:1f:52:62: 12:a7:92:1c:a3:98:fe:7c:e5:b3:66:7b:bc:f4:40:8f:77:e1: 62:bd:96:2e:4d:99:02:54:f3:19:bc:c0:70:06:4f:12:77:b2: 50:6d:ca:b8:ca:eb:ce:0f:09:e7:4f:25:fb:1b:db:80:7e:6d: 30:ed:a1:c9:ca:d7:e2:73:3d:a5:ec:b9:9f:bd:30:67:a6:2e: 04:9b:ae:31:1d:b1:62:7c:5f:12:e2:9e:9b:f7:36:c6:f5:32: df:c2:34:31:b9:a6:3c:14:e7:71:8c:59:d2:0c:b6:54:23:59: 42:8f:e0:1c:2b:49:52:78:6c:40:26:7f:5e:fb:ed:46:68:90: b4:43:f6:d5:ff:fc:4f:68:a7:e3:05:ee:5f:73:9d:68:cb:5c: 52:3f:e9:b1:a4:c4:89:c9:fc:7f:68:b4:6a:7f:3e:f0:98:f9: 81:0a:56:f3:92:4d:92:90:aa:c4:65:fe:27:e9:b1:4f:f3:9c: dd:94:ab:21:67:4e:22:c1:d6:93:29:17:f7:9f:6e:dd:ce:76: ed:56:e3:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwOTIyMTQ1MzE2WhcNMjYwOTI5MTQ1MzE2WjAYMRYwFAYD VQQDEw02YWIyOTY1Yy1kMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/aOjFOG0U/i0rum97lnK+nSv2IBgUGD6zx8S4uy35c7eb7TJrpxdX2rqMwO xIKB5z9x69IpsrsSCD7EzYtUFEhd9en5BYGBeYMDjfEgkIYlEmfuwBqx/bxyGT4J X2+m8K210SCrceZ6MQIdT0clXc2G8qSGozFqwjazdnSutjAjM8RpIrhQbx1xqzQw Hp1nngJiCEkfuL/ShI32Skl2JPuNTFfJn9/8qibQR/OBFTGm4LPo6P62Jycn7FsE 9Urr2+rjCS/stK84llbA4T5KYzA3XsJIV0aA/eUNKJAJ4cwERu5B1tZVW/xFPwNd dj/yHFZngLj3fJIlkjVG80IHAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCeQCq/w zoDSks1BFKDVF5m/hRiUMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYTZa+ZXVonHLzoLXWDD9FBEYbuRjh3B9shOfYpJGEIPHojE1xAykDsLmRYhe aTl2b/pCH1JiEqeSHKOY/nzls2Z7vPRAj3fhYr2WLk2ZAlTzGbzAcAZPEneyUG3K uMrrzg8J508l+xvbgH5tMO2hycrX4nM9pey5n70wZ6YuBJuuMR2xYnxfEuKem/c2 xvUy38I0MbmmPBTncYxZ0gy2VCNZQo/gHCtJUnhsQCZ/XvvtRmiQtEP21f/8T2in 4wXuX3OdaMtcUj/psaTEicn8f2i0an8+8Jj5gQpW85JNkpCqxGX+J+mxT/Oc3ZSr IWdOIsHWkykX959u3c527VbjSA== -----END CERTIFICATE-----Generated at Wed Sep 23 07:20:28 2026 by rpki-client