$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: qBfBSfPtjBa/8BXPXC3XOTu2r8L/MbM5y6i6WdsQZFY= Subject key identifier: 4A:B9:D7:C7:A8:06:DE:D2:02:FE:AF:BD:6E:AF:A6:A4:8A:A2:58:66 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0281 Signing time: Wed 23 Sep 2026 02:06:27 +0000 Manifest this update: Wed 23 Sep 2026 02:06:27 +0000 Manifest next update: Wed 30 Sep 2026 02:06:27 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: 4B3v1bkHprm5LgKKfxyT+Z6r4R7BDeFSiYRxnFfjws4=) 2: F02954E694AA11F18168138B6F11F970.roa (hash: jdpMDiHc19U9B3dTcdf0OBI4UCQ8NKRYGsnZZyIR7FA=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: XhHaHdOlqWYP1wfuj95iHXOiSFz6V8DkPjaDxpfW1i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Sep 23 02:06:27 2026 GMT Not After : Sep 30 02:06:27 2026 GMT Subject: CN=6ab33423-a90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:08:17:02:e6:19:a4:da:34:29:61:47:f9: 4f:1a:be:12:7b:47:80:7f:a1:12:fe:b9:aa:dd:2a: 8f:62:db:10:4d:a4:d0:e3:8e:b1:3d:80:22:30:6c: 1f:68:4a:7f:40:2d:d5:ea:37:08:55:74:f0:4a:11: 8b:8d:91:94:bc:d0:75:9b:69:7a:b3:88:4a:fc:3b: 21:e0:4e:80:5a:3f:c0:cc:7b:cd:80:9b:e3:9c:c5: a9:cf:33:06:89:0f:9f:76:e1:dc:53:00:0d:f6:c7: e0:bf:a0:e6:66:14:9a:0b:1f:df:c0:46:6b:23:ad: d9:28:a2:cc:13:a1:99:45:94:59:fa:21:91:66:c8: c3:ae:91:f3:22:73:3e:08:70:18:b4:da:32:8f:06: 7c:e1:ba:c7:51:20:24:cd:d8:8b:19:03:1b:56:c2: 37:f0:42:46:0a:7c:aa:a8:b3:ea:59:1e:79:8c:2b: 66:a7:f4:96:3a:c4:7c:4a:14:db:0b:7f:a9:d0:07: 02:b1:05:72:a3:0b:ba:3f:38:a3:05:c0:e8:13:37: 75:f3:71:88:11:2b:83:01:10:c1:96:b4:61:44:39: a7:15:29:91:a6:fb:cd:71:2a:41:6a:62:73:8c:fb: be:4b:65:43:ca:d2:83:4a:b5:0a:ab:8e:ee:80:dc: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:D7:C7:A8:06:DE:D2:02:FE:AF:BD:6E:AF:A6:A4:8A:A2:58:66 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a5:e5:88:29:b5:39:9e:46:7a:c7:8c:21:a8:31:80:47:2a: ac:7f:05:a4:45:7f:32:7d:0a:8b:dc:fa:8f:69:dd:50:c5:d0: ae:8a:74:bf:56:2b:5c:59:05:58:89:c6:43:8f:fa:87:0a:8a: 20:1f:e4:aa:13:9f:31:66:93:08:25:fb:13:c8:70:1c:ad:d6: 9a:e3:f1:a6:a9:b3:8d:6e:f5:ce:21:35:d6:e0:43:f3:4d:03: d9:01:93:33:c1:74:d6:14:37:92:e7:29:13:d6:9a:ee:10:88: ad:75:70:8f:e6:6f:78:8d:d4:02:08:19:69:9c:27:28:92:18: e5:dd:ce:57:b3:7b:10:86:78:6b:ec:3c:3c:e6:00:f0:c4:ea: e6:a5:2d:e1:5f:6f:a9:7c:6b:0e:cf:82:46:27:47:13:31:e2: 31:bf:05:46:a2:38:57:07:af:db:84:70:44:6c:f7:e7:bf:5a: 85:76:22:86:d3:79:3c:ba:c0:5c:51:13:21:2e:72:2d:69:8b: c1:c0:a6:64:d6:8d:4a:fa:cf:28:33:5d:a1:e3:9a:9d:0b:6d: 07:fc:33:27:47:dd:2d:35:19:a6:f9:da:91:01:48:1a:3c:dd: b0:5b:b1:91:4f:59:c4:65:82:8b:85:6b:8e:b7:54:c7:b0:28: 04:90:ad:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjYwOTIzMDIwNjI3WhcNMjYwOTMwMDIwNjI3WjAYMRYwFAYD VQQDEw02YWIzMzQyMy1hOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GoIFwLmGaTaNClhR/lPGr4Se0eAf6ES/rmq3SqPYtsQTaTQ446xPYAiMGwf aEp/QC3V6jcIVXTwShGLjZGUvNB1m2l6s4hK/Dsh4E6AWj/AzHvNgJvjnMWpzzMG iQ+fduHcUwAN9sfgv6DmZhSaCx/fwEZrI63ZKKLME6GZRZRZ+iGRZsjDrpHzInM+ CHAYtNoyjwZ84brHUSAkzdiLGQMbVsI38EJGCnyqqLPqWR55jCtmp/SWOsR8ShTb C3+p0AcCsQVyowu6PzijBcDoEzd183GIESuDARDBlrRhRDmnFSmRpvvNcSpBamJz jPu+S2VDytKDSrUKq47ugNxHfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEq518eo Bt7SAv6vvW6vpqSKolhmMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT6XliCm1OZ5GeseMIagxgEcqrH8FpEV/Mn0Ki9z6j2ndUMXQrop0v1YrXFkF WInGQ4/6hwqKIB/kqhOfMWaTCCX7E8hwHK3WmuPxpqmzjW71ziE11uBD800D2QGT M8F01hQ3kucpE9aa7hCIrXVwj+ZveI3UAggZaZwnKJIY5d3OV7N7EIZ4a+w8POYA 8MTq5qUt4V9vqXxrDs+CRidHEzHiMb8FRqI4Vwev24RwRGz3579ahXYihtN5PLrA XFETIS5yLWmLwcCmZNaNSvrPKDNdoeOanQttB/wzJ0fdLTUZpvnakQFIGjzdsFux kU9ZxGWCi4VrjrdUx7AoBJCtpg== -----END CERTIFICATE-----Generated at Thu Sep 24 08:40:43 2026 by rpki-client