$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: YxIbzNPlVs2Y3rmBHCSteZB3OHggT/VjcMFeoboIPxs= Subject key identifier: 4C:4C:E4:D0:65:5B:1E:07:E0:DD:8D:0C:66:B7:31:A1:8E:49:3C:A0 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: 01A0 Signing time: Mon 21 Sep 2026 04:18:18 +0000 Manifest this update: Mon 21 Sep 2026 04:18:17 +0000 Manifest next update: Mon 28 Sep 2026 04:18:17 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: DGurVmIy4Ou7qtOBQHU8FLP+mCUVNlWzeKyzbPrlf6M=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: m3Jo8FCeaELT1I3nJBgJYkzF+itVMTxAlpjgG+4EtAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Sep 21 04:18:17 2026 GMT Not After : Sep 28 04:18:17 2026 GMT Subject: CN=6ab0b00a-947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:37:3e:3a:cc:8d:c0:d8:0d:26:3c:5e:1c: 74:37:3d:42:57:c5:9c:43:c1:57:9b:4f:9e:80:51: 05:da:06:2b:b0:dd:79:ca:a4:18:5d:4d:81:22:59: f5:77:17:74:42:a6:06:49:96:8a:40:2f:82:6e:9d: ba:27:cf:c3:23:44:d5:23:cf:df:56:e9:2a:4f:ac: b7:60:83:08:d9:6a:55:aa:a3:f0:09:4b:4e:a8:d6: e0:fc:51:aa:c2:79:f8:97:d4:3f:b7:ed:f5:53:a7: 40:bf:4f:fd:13:44:a3:16:08:df:b9:13:ef:1a:a0: d8:e5:be:d3:b1:fa:0e:3b:d8:fd:df:b2:77:0b:6d: 3a:c6:2d:d1:08:f9:e9:14:eb:37:3d:ab:79:01:ca: ee:63:c0:c3:99:5a:e7:d9:aa:50:4c:6d:e7:63:6a: 9a:d2:bd:64:49:de:b6:4e:2b:f6:28:84:20:52:69: db:dd:91:67:7f:aa:45:6e:af:7d:5e:6d:b6:6e:af: 6e:8c:4d:33:9d:19:ff:2d:5a:c9:95:65:a3:f7:73: d9:17:f4:ff:25:5a:38:9c:70:69:37:77:32:7e:66: d1:c4:40:b4:90:2a:88:df:ab:a8:f4:69:51:e5:0a: 60:1f:d0:f5:af:c4:e4:8f:fb:80:b5:de:63:fa:fb: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4C:E4:D0:65:5B:1E:07:E0:DD:8D:0C:66:B7:31:A1:8E:49:3C:A0 X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:75:8a:50:8c:08:ad:6e:86:19:14:e0:18:b1:31:c5:87:68: 42:64:a3:16:f2:38:98:9b:e3:23:be:54:18:54:26:b9:27:09: ab:2b:ba:1a:97:64:4c:d1:ae:69:fd:1a:55:ed:30:5d:cf:26: 25:e2:a4:25:3b:92:e4:c1:5e:bd:2e:08:8c:68:01:f4:00:52: 58:ad:7c:85:bd:75:bb:f9:33:45:23:a9:d0:c0:19:73:c4:b7: 31:01:b1:69:8e:d1:1f:fc:a3:b8:48:d2:57:02:dd:34:ef:e2: 42:4a:e6:95:90:be:db:a1:5a:f7:be:3e:c8:d2:c2:24:2c:f5: 8b:b2:66:93:4a:93:fe:e9:51:d2:9f:4d:c1:19:73:37:45:f2: aa:b8:a5:43:26:80:aa:5c:84:8a:19:7c:7e:14:e9:e7:99:56: 6e:93:cc:67:70:cc:f6:b8:65:37:18:d6:ac:99:cb:87:93:8b: 42:ba:2e:8a:2c:a2:17:50:83:66:2e:37:87:35:c6:8f:ac:16: 24:f2:fa:77:de:e1:38:e0:55:2f:08:4c:af:dd:f4:af:50:fb: f5:91:1f:8d:af:d3:95:af:9f:2d:54:9e:29:ae:bf:e0:03:ed: 3d:ac:37:c0:44:ca:9b:48:48:7c:33:59:6c:4c:40:15:76:2f: 31:e5:da:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjYwOTIxMDQxODE3WhcNMjYwOTI4MDQxODE3WjAYMRYwFAYD VQQDEw02YWIwYjAwYS05NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx03PjrMjcDYDSY8Xhx0Nz1CV8WcQ8FXm0+egFEF2gYrsN15yqQYXU2BIln1 dxd0QqYGSZaKQC+Cbp26J8/DI0TVI8/fVukqT6y3YIMI2WpVqqPwCUtOqNbg/FGq wnn4l9Q/t+31U6dAv0/9E0SjFgjfuRPvGqDY5b7TsfoOO9j937J3C206xi3RCPnp FOs3Pat5AcruY8DDmVrn2apQTG3nY2qa0r1kSd62Tiv2KIQgUmnb3ZFnf6pFbq99 Xm22bq9ujE0znRn/LVrJlWWj93PZF/T/JVo4nHBpN3cyfmbRxEC0kCqI36uo9GlR 5QpgH9D1r8Tkj/uAtd5j+vtylwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExM5NBl Wx4H4N2NDGa3MaGOSTygMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJHWKUIwIrW6GGRTgGLExxYdoQmSjFvI4mJvjI75UGFQmuScJqyu6GpdkTNGu af0aVe0wXc8mJeKkJTuS5MFevS4IjGgB9ABSWK18hb11u/kzRSOp0MAZc8S3MQGx aY7RH/yjuEjSVwLdNO/iQkrmlZC+26Fa974+yNLCJCz1i7Jmk0qT/ulR0p9NwRlz N0XyqrilQyaAqlyEihl8fhTp55lWbpPMZ3DM9rhlNxjWrJnLh5OLQrouiiyiF1CD Zi43hzXGj6wWJPL6d97hOOBVLwhMr930r1D79ZEfja/Tla+fLVSeKa6/4APtPaw3 wETKm0hIfDNZbExAFXYvMeXapg== -----END CERTIFICATE-----Generated at Wed Sep 23 03:03:55 2026 by rpki-client