$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: gJ9bJkPGjyVjIoi4WMLqSxWXJi3pmcG3h9nhyX0zx9A= Subject key identifier: D4:75:77:1D:47:64:D7:F4:77:D7:69:5D:A4:E5:76:E1:17:D3:94:57 Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 0364 Signing time: Fri 25 Sep 2026 00:53:38 +0000 Manifest this update: Fri 25 Sep 2026 00:53:38 +0000 Manifest next update: Fri 02 Oct 2026 00:53:38 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: x0+Zi72wjOS24BzzLGAxnEZPIRDgcBMC9PxLtBcGNMA=) 2: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: TdcGUCFXzXTItt/U5FsMFNX2z6RTRrQyU46xfxrbahk=) 3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: GDZokXpZ+niO8zKz7vtzfAEOG0XN49j5ArWRaowNtqg=) 4: 826A614C16D911F183D175C0323D8C67.roa (hash: vzlm2lNsNkYyqc9HraEI88fz4qcYmcDAB/JqH0Rt1J4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Sep 25 00:53:38 2026 GMT Not After : Oct 2 00:53:38 2026 GMT Subject: CN=6ab5c612-c821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:aa:e5:dc:87:8b:a6:c8:ab:4e:36:d0:6d: 26:d9:3d:85:eb:a2:eb:1e:01:c0:eb:ce:28:9d:d3: b3:dc:1c:c7:7a:38:73:20:ef:61:fc:cd:b1:13:5f: 08:5f:f9:85:8d:3e:d9:ca:2e:3e:f3:95:49:67:a6: 82:2a:98:16:55:5a:8f:69:7e:1c:a0:3f:0b:67:a1: 21:1f:e8:df:0f:dd:ae:0d:c5:58:dd:9b:74:41:f5: 58:32:44:d7:6c:c5:17:e2:38:53:61:39:f3:f0:d2: c4:c6:c6:0b:1b:a8:f8:ab:ac:a8:38:c9:89:7f:2e: b2:7c:9e:0a:50:57:b4:40:51:8b:a9:42:7e:82:ed: fc:28:4d:b9:92:21:22:e5:bc:71:52:7e:d6:9c:6d: 70:8a:0a:0f:18:df:32:f8:9d:b6:b4:a2:2c:c9:91: 79:58:ab:36:58:22:ac:38:dd:bd:ba:cd:d3:0d:af: e3:aa:bb:8b:d7:2c:c6:ff:03:6d:c4:25:b3:15:d9: 15:08:9e:d5:bd:46:93:98:26:d5:f3:a0:b5:32:a7: 30:4e:4f:57:da:5c:85:ee:91:b0:60:dc:ae:b8:35: 6d:34:c3:c6:8b:e7:b5:bf:f9:4f:69:a9:59:2c:65: d6:f0:73:76:1b:77:7f:02:49:a2:a5:82:a6:07:fc: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:77:1D:47:64:D7:F4:77:D7:69:5D:A4:E5:76:E1:17:D3:94:57 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:67:b6:1a:9f:b4:28:84:a1:f1:09:75:69:53:28:6e:a5:27: 02:a6:7e:8c:64:bc:1a:cf:4b:81:df:1e:44:07:04:4a:e3:bb: 92:71:34:a6:69:ef:8f:aa:5c:ba:b2:f8:b7:ef:e1:48:eb:3c: c3:cc:43:75:31:06:19:02:b2:71:93:b0:05:d5:58:71:43:44: 70:a2:69:f8:94:1d:64:07:9d:60:f7:fd:17:ec:00:f0:7d:c2: 92:24:21:f4:07:0c:77:54:ee:75:59:86:d6:51:de:ff:10:9b: d6:5a:d7:b5:bb:20:42:fb:e6:36:5b:98:dd:42:f0:0e:0d:ab: 97:eb:c0:94:d5:9d:5c:36:4f:f1:2b:0d:a7:8a:a9:9a:d0:79: cb:16:d4:47:b7:7a:05:ec:15:88:c2:e0:90:a9:0a:3c:1e:fc: f9:c8:c8:39:14:ca:72:75:61:37:01:cf:a8:90:99:2f:1e:19: 2b:f8:78:4b:d9:19:b0:af:21:d7:3c:ed:ca:c8:8a:15:a5:ee: 1b:da:1e:15:f5:9b:78:a2:45:b2:73:88:c2:49:8e:64:d5:11: 80:7c:1d:ef:5b:e5:91:bd:80:50:88:36:48:67:7d:90:08:54: cd:d1:5c:be:52:8c:23:5d:09:a9:8d:f6:23:3a:aa:c4:ae:30: b2:b2:67:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjYwOTI1MDA1MzM4WhcNMjYxMDAyMDA1MzM4WjAYMRYwFAYD VQQDEw02YWI1YzYxMi1jODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr6q5dyHi6bIq0420G0m2T2F66LrHgHA684ondOz3BzHejhzIO9h/M2xE18I X/mFjT7Zyi4+85VJZ6aCKpgWVVqPaX4coD8LZ6EhH+jfD92uDcVY3Zt0QfVYMkTX bMUX4jhTYTnz8NLExsYLG6j4q6yoOMmJfy6yfJ4KUFe0QFGLqUJ+gu38KE25kiEi 5bxxUn7WnG1wigoPGN8y+J22tKIsyZF5WKs2WCKsON29us3TDa/jqruL1yzG/wNt xCWzFdkVCJ7VvUaTmCbV86C1MqcwTk9X2lyF7pGwYNyuuDVtNMPGi+e1v/lPaalZ LGXW8HN2G3d/AkmipYKmB/yX9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNR1dx1H ZNf0d9dpXaTlduEX05RXMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQWe2Gp+0KISh8Ql1aVMobqUnAqZ+jGS8Gs9Lgd8eRAcESuO7knE0pmnvj6pc urL4t+/hSOs8w8xDdTEGGQKycZOwBdVYcUNEcKJp+JQdZAedYPf9F+wA8H3CkiQh 9AcMd1TudVmG1lHe/xCb1lrXtbsgQvvmNluY3ULwDg2rl+vAlNWdXDZP8SsNp4qp mtB5yxbUR7d6BewViMLgkKkKPB78+cjIORTKcnVhNwHPqJCZLx4ZK/h4S9kZsK8h 1zztysiKFaXuG9oeFfWbeKJFsnOIwkmOZNURgHwd71vlkb2AUIg2SGd9kAhUzdFc vlKMI10JqY32IzqqxK4wsrJn9g== -----END CERTIFICATE-----Generated at Fri Sep 25 18:29:40 2026 by rpki-client