$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft File: rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft (raw, json) Hash identifier: MtdOzKj4qtZl+2r7qoMIQdL3bkiTsiXF3nP6HJvEEbc= Subject key identifier: B4:73:F0:DE:C9:03:22:E7:C8:1B:B0:2F:0D:55:ED:D4:3A:BA:D8:72 Authority key identifier: AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0 Certificate issuer: /CN=A91D0ECA/serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft Manifest number: 29 Signing time: Fri 25 Sep 2026 08:56:45 +0000 Manifest this update: Fri 25 Sep 2026 08:56:45 +0000 Manifest next update: Fri 02 Oct 2026 08:56:45 +0000 Files and hashes: 1: rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl (hash: oAFhBzaCL2cJ/lk1RvA5/FKqxYK/FiM4y84DoKV5iHA=) 2: BD22BBE0819111F19E01271496A30FBC.roa (hash: 8ErZg6ohMcZyXajrV7ek0726t8ekgrrUiQOSg+s1XoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0ECA, serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0 Validity Not Before: Sep 25 08:56:45 2026 GMT Not After : Oct 2 08:56:45 2026 GMT Subject: CN=6ab6374d-e67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:ff:a9:f4:66:e3:d4:5e:4d:b7:ff:ff:e9: 33:71:40:fb:64:7c:d8:31:90:a3:31:48:a0:93:37: 40:e0:b0:9a:06:40:c9:f7:ed:f1:de:6d:90:9c:6f: 1a:5d:5d:6a:ee:ac:90:59:14:75:ce:fe:8e:03:9d: 7e:8e:c6:76:2a:1d:72:8c:55:c3:4a:a5:4c:09:7f: da:a1:04:b2:00:9f:0d:4e:75:a8:6b:75:03:1e:59: 1e:93:59:fe:b9:06:2c:0b:e2:96:e9:09:8f:4a:9f: 77:42:4b:64:13:1d:55:60:4d:0a:d0:a9:e0:f5:1a: 88:f8:b2:dd:0b:4f:c9:b3:c4:ab:9a:cc:8d:5d:27: f1:66:a5:cb:22:78:a4:89:d9:46:ba:71:bf:b7:e6: 79:9b:57:79:45:6f:5d:f3:dd:f2:1a:fc:62:0f:ef: bd:79:cb:a8:d7:06:02:12:75:8c:2d:43:05:35:f8: a1:00:73:8d:90:f2:a2:21:05:ce:86:a8:eb:f1:b2: 29:9d:4e:0b:64:e3:b5:f0:f0:f5:d5:4e:82:72:e8: 76:25:65:1c:c1:bf:08:e6:4c:59:e7:9a:39:83:2b: 5a:70:b1:e8:38:29:5e:9e:89:8c:c8:95:88:96:9e: 65:8d:fd:5f:b3:01:95:57:25:87:35:e4:6e:d0:07: 21:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:73:F0:DE:C9:03:22:E7:C8:1B:B0:2F:0D:55:ED:D4:3A:BA:D8:72 X509v3 Authority Key Identifier: keyid:AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d5:2a:18:5a:c5:8d:fc:20:ca:3f:6d:cb:92:72:f1:0f:04: 84:c2:18:9b:9e:80:77:c1:a7:6c:48:20:ab:55:5e:5d:58:c8: 20:81:54:17:f6:89:b1:aa:60:ed:57:67:f9:d9:92:54:90:0d: f4:5c:74:17:dc:4a:17:a1:01:67:23:25:b4:c0:cc:8e:a6:9d: 0e:cf:8b:d0:34:3b:31:b6:24:78:e3:72:f7:05:ea:b1:c1:c1: 91:c7:5d:38:7b:53:50:50:1e:59:95:50:56:36:00:81:e0:19: e2:d8:9e:d2:99:18:c2:14:f6:85:42:41:2a:12:5b:b5:58:6d: ae:04:db:ad:c8:b0:b1:f1:da:f1:a0:61:c6:6c:a7:77:d2:97: 9e:35:d3:13:3e:93:64:83:a6:72:e5:5b:d4:78:d0:74:01:cb: 35:4e:2d:51:9c:64:db:b7:6e:38:04:8b:2d:32:e8:08:b2:10: a0:24:6d:9a:8a:22:d4:a2:36:04:89:65:72:e1:81:7c:60:03: db:fc:3d:14:76:aa:dd:22:56:8c:6e:1b:7b:a9:bd:fc:a6:d6: 26:d6:78:d3:64:3e:48:b9:d8:d6:84:5a:bc:d6:f1:c2:57:43: 15:d6:10:a8:21:41:44:96:db:59:c7:1c:bc:64:bf:3a:21:6e: 4f:a7:81:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEVDQTExMC8GA1UEBRMoQUYwM0QwNTBBOTg5M0M3MzEwQ0FEREI0MEFFREFDREFC NUUyMzhFMDAeFw0yNjA5MjUwODU2NDVaFw0yNjEwMDIwODU2NDVaMBgxFjAUBgNV BAMTDTZhYjYzNzRkLWU2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWCv+p9Gbj1F5Nt///6TNxQPtkfNgxkKMxSKCTN0DgsJoGQMn37fHebZCcbxpd XWrurJBZFHXO/o4DnX6OxnYqHXKMVcNKpUwJf9qhBLIAnw1OdahrdQMeWR6TWf65 BiwL4pbpCY9Kn3dCS2QTHVVgTQrQqeD1Goj4st0LT8mzxKuazI1dJ/FmpcsieKSJ 2Ua6cb+35nmbV3lFb13z3fIa/GIP7715y6jXBgISdYwtQwU1+KEAc42Q8qIhBc6G qOvxsimdTgtk47Xw8PXVToJy6HYlZRzBvwjmTFnnmjmDK1pwseg4KV6eiYzIlYiW nmWN/V+zAZVXJYc15G7QByHFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtHPw3skD IufIG7AvDVXt1Dq62HIwHwYDVR0jBBgwFoAUrwPQUKmJPHMQyt20Cu2s2rXiOOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRUNBL0VCMkMxQjg2ODE5 MDExRjE5QkQ0QkFGQjk1QTMwRkJDL3J3UFFVS21KUEhNUXl0MjBDdTJzMnJYaU9P QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcndQUVVLbUpQSE1ReXQyMEN1MnMyclhpT09BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RUNBL0VCMkMxQjg2ODE5MDExRjE5QkQ0QkFGQjk1QTMwRkJDL3J3UFFVS21KUEhN UXl0MjBDdTJzMnJYaU9PQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBh1SoYWsWN/CDKP23LknLxDwSEwhibnoB3wadsSCCrVV5dWMgggVQX9omxqmDt V2f52ZJUkA30XHQX3EoXoQFnIyW0wMyOpp0Oz4vQNDsxtiR443L3BeqxwcGRx104 e1NQUB5ZlVBWNgCB4Bni2J7SmRjCFPaFQkEqElu1WG2uBNutyLCx8drxoGHGbKd3 0peeNdMTPpNkg6Zy5VvUeNB0Acs1Ti1RnGTbt244BIstMugIshCgJG2aiiLUojYE iWVy4YF8YAPb/D0UdqrdIlaMbht7qb38ptYm1njTZD5IudjWhFq81vHCV0MV1hCo IUFElttZxxy8ZL86IW5Pp4F9 -----END CERTIFICATE-----Generated at Fri Sep 25 23:48:26 2026 by rpki-client