$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft File: 9ezJNiwdO3OCT11Cma2_q0r4TY0.mft (raw, json) Hash identifier: jYgjie0f9jRCa0to/RHI5pAvrmrmVtqelsrXuuy0GQE= Subject key identifier: 09:7F:AF:D2:AD:BC:C4:46:27:2C:37:3C:AA:19:DF:9C:74:41:66:3C Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft Manifest number: 2F Signing time: Sun 27 Sep 2026 09:23:19 +0000 Manifest this update: Sun 27 Sep 2026 09:23:19 +0000 Manifest next update: Sun 04 Oct 2026 09:23:19 +0000 Files and hashes: 1: 9ezJNiwdO3OCT11Cma2_q0r4TY0.crl (hash: bqbpCySvtXFKBiARKEL5lpeRDn7CFjillvkAGKEjwEE=) 2: 8197428E8A2F11F1979432C96D11F970.roa (hash: 3agLE6eYwjBLKD73jdTnpcDMyC6z3gyTK8QJXd1hgRY=) 3: D07522FE831D11F1B418DC1191A30FBC.roa (hash: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Validity Not Before: Sep 27 09:23:19 2026 GMT Not After : Oct 4 09:23:19 2026 GMT Subject: CN=6ab8e087-8f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:92:6c:63:86:1b:f4:0e:b8:51:d8:32:5a: fb:4d:8a:bd:09:e2:38:48:57:f9:64:3c:75:eb:35: 88:60:6e:1a:aa:d5:15:76:f4:c8:d3:6b:85:4e:ef: 59:ae:de:79:ca:df:a6:cb:6d:51:d8:4e:c0:e7:73: 97:2f:5c:3d:11:78:7b:9b:c5:05:71:cd:4b:e8:20: 23:30:2d:92:75:6d:88:6b:c5:1a:8a:8b:ac:13:b9: 21:86:ff:5e:3d:da:f9:b5:83:0f:c2:a1:19:d5:56: 14:25:50:ab:82:ca:76:a2:1e:f8:64:10:1c:64:98: 92:cf:9c:50:50:84:eb:b7:e2:10:f1:36:ab:d5:a1: 01:ff:b1:eb:c2:14:bb:ef:68:1b:7a:3d:fb:2e:1f: f8:31:46:ab:7b:98:85:4b:c9:71:27:7e:0c:41:b6: 26:b4:6e:15:47:38:c8:46:51:bb:68:b0:64:99:44: b0:0e:03:2e:ec:f6:6a:09:0e:fe:d9:63:1d:83:0f: 25:90:7f:d6:93:16:b2:65:b4:ae:30:b8:3f:55:af: 01:7c:e1:f6:f2:5a:6e:6c:37:51:2d:6e:db:7a:a4: f2:af:c6:4c:89:a1:db:e3:e4:35:b4:fb:d5:6d:76: 70:c1:60:4b:e0:b6:ce:45:c6:62:7a:ec:4f:8c:5c: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7F:AF:D2:AD:BC:C4:46:27:2C:37:3C:AA:19:DF:9C:74:41:66:3C X509v3 Authority Key Identifier: keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f3:99:e5:05:ef:08:56:5f:d9:f7:c4:1a:b2:45:f4:4b:e5: 6c:9a:d9:0d:a0:62:b8:c4:8f:31:59:ef:95:56:c2:3c:4b:0b: 3d:25:55:53:63:4f:1a:e1:f8:d0:00:2d:2d:2d:29:55:4f:74: e1:f0:8d:0e:b1:d6:c3:03:bc:36:73:43:c0:e0:d2:c4:9d:b0: 3e:26:ee:81:71:9d:2d:8c:d8:b3:69:05:61:46:df:4c:51:68: 89:11:19:44:ba:d0:a4:38:a5:90:e0:e7:f5:e8:40:59:6d:3d: 15:06:e5:56:7a:56:71:78:25:ab:37:dc:2c:7a:54:20:1e:74: 75:4b:1e:62:57:07:39:44:65:cf:55:73:b5:0c:0c:1d:d1:71: 52:5b:76:06:f7:80:6a:92:52:73:78:b3:e7:2d:5b:bf:7a:c9: 1c:11:0f:57:37:c0:59:14:2c:89:06:a8:5a:81:b7:2e:1f:b6: cf:89:9d:a9:36:70:e6:32:b6:28:d1:3c:25:38:d0:de:d7:77: 1f:cd:73:2e:1a:74:4e:e4:d2:b7:97:17:bd:0f:60:c6:00:41: 21:d7:ac:d5:82:61:67:c1:ff:f9:26:b3:40:64:d9:97:a0:c7: e1:8d:60:f6:5b:d8:ff:9c:5c:4c:e9:6d:aa:e4:2f:47:52:ff: 9d:16:14:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzMjExMC8GA1UEBRMoRjVFQ0M5MzYyQzFEM0I3MzgyNEY1RDQyOTlBREJGQUI0 QUY4NEQ4RDAeFw0yNjA5MjcwOTIzMTlaFw0yNjEwMDQwOTIzMTlaMBgxFjAUBgNV BAMTDTZhYjhlMDg3LThmNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVlJJsY4Yb9A64UdgyWvtNir0J4jhIV/lkPHXrNYhgbhqq1RV29MjTa4VO71mu 3nnK36bLbVHYTsDnc5cvXD0ReHubxQVxzUvoICMwLZJ1bYhrxRqKi6wTuSGG/149 2vm1gw/CoRnVVhQlUKuCynaiHvhkEBxkmJLPnFBQhOu34hDxNqvVoQH/sevCFLvv aBt6PfsuH/gxRqt7mIVLyXEnfgxBtia0bhVHOMhGUbtosGSZRLAOAy7s9moJDv7Z Yx2DDyWQf9aTFrJltK4wuD9VrwF84fbyWm5sN1Etbtt6pPKvxkyJodvj5DW0+9Vt dnDBYEvgts5FxmJ67E+MXFT5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCX+v0q28 xEYnLDc8qhnfnHRBZjwwHwYDVR0jBBgwFoAU9ezJNiwdO3OCT11Cma2/q0r4TY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDMyL0E3MDc2NEY2ODJD QjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNPQ1QxMUNtYTJfcTByNFRZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWV6Sk5pd2RPM09DVDExQ21hMl9xMHI0VFkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDMyL0E3MDc2NEY2ODJDQjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNP Q1QxMUNtYTJfcTByNFRZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBv85nlBe8IVl/Z98QaskX0S+VsmtkNoGK4xI8xWe+VVsI8Sws9JVVTY08a4fjQ AC0tLSlVT3Th8I0OsdbDA7w2c0PA4NLEnbA+Ju6BcZ0tjNizaQVhRt9MUWiJERlE utCkOKWQ4Of16EBZbT0VBuVWelZxeCWrN9wselQgHnR1Sx5iVwc5RGXPVXO1DAwd 0XFSW3YG94BqklJzeLPnLVu/eskcEQ9XN8BZFCyJBqhagbcuH7bPiZ2pNnDmMrYo 0TwlONDe13cfzXMuGnRO5NK3lxe9D2DGAEEh16zVgmFnwf/5JrNAZNmXoMfhjWD2 W9j/nFxM6W2q5C9HUv+dFhRA -----END CERTIFICATE-----Generated at Sun Sep 27 19:03:37 2026 by rpki-client