$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: xxfmgg+CNyP4wx4v0Uvq3z+ROmhLJdxPFpRRjFGnjPc= Subject key identifier: 41:12:C6:84:A8:2A:E0:9A:DC:E5:B8:E2:60:7A:8F:5A:8E:1F:DC:64 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 04BF Signing time: Tue 22 Sep 2026 23:30:00 +0000 Manifest this update: Tue 22 Sep 2026 23:29:59 +0000 Manifest next update: Tue 29 Sep 2026 23:29:59 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: MIqeg0SQW9JqIN0e3+8dG8sbYx5jWtXWgFWUIbT/VYo=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Sep 22 23:29:59 2026 GMT Not After : Sep 29 23:29:59 2026 GMT Subject: CN=6ab30f78-f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:36:b1:c4:19:ac:17:1f:6f:8c:76:c7:8b: a0:0a:df:3a:82:75:1b:82:c7:af:3f:0b:76:d7:c6: 3c:d9:be:f9:4d:b0:b1:45:4a:a9:81:ae:53:75:28: cf:28:b1:f5:b0:e0:ad:9f:51:2a:3c:94:2e:d5:cc: 12:ad:75:36:9f:06:98:51:4b:8f:fe:f3:9f:c7:24: ca:21:76:a3:07:08:01:d5:ed:c2:a0:9f:af:ac:8d: 68:d7:4b:13:48:86:41:25:29:59:f1:e0:0a:f7:52: 7f:a6:d2:8b:f8:07:c1:5d:ed:e1:e2:c8:3d:bc:82: 1c:06:44:6e:59:31:6d:8a:e4:ae:07:3b:9e:d4:2f: a4:46:9e:cc:98:d4:ba:32:0b:87:af:d7:70:f0:b5: f2:96:31:39:20:2c:b8:f6:89:d5:43:89:45:37:89: 1c:24:98:1d:cb:9c:cf:7b:0c:57:5d:d6:06:a8:aa: ac:00:bd:90:33:26:85:06:58:05:49:85:4a:6d:7e: e1:fe:f3:83:d2:2c:b9:28:05:59:67:73:32:36:37: 01:4e:21:c4:c6:32:79:76:8f:db:9a:c2:4e:b9:b1: 90:84:a9:e4:6f:22:97:76:7b:c2:1c:ad:a5:87:71: 5f:fb:1d:22:05:4c:0e:76:b8:c6:e4:94:36:e4:5a: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:12:C6:84:A8:2A:E0:9A:DC:E5:B8:E2:60:7A:8F:5A:8E:1F:DC:64 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e3:4e:25:00:b1:7d:f4:41:da:33:19:01:f8:b7:b8:61:db: f7:cd:f5:3e:52:a8:23:01:df:1e:8c:25:f2:8c:4b:9a:69:ff: fa:e5:83:72:20:b4:04:8f:72:cb:62:d4:99:8f:1b:aa:77:8b: c5:34:8c:4c:85:09:e3:91:dc:7d:f5:ce:d8:9a:2b:13:97:3a: 39:d3:71:9d:59:8e:1c:55:98:bc:31:79:9c:39:06:42:ee:b0: 65:16:84:8f:4c:de:af:71:0d:e9:de:7d:26:dd:71:a4:79:fe: e1:05:90:fa:d0:67:31:14:fe:a3:77:e8:4a:e4:f9:33:87:7a: 4a:e9:06:8d:7a:db:00:35:d8:7c:50:19:4f:86:b4:b9:07:ee: 20:46:dc:80:33:4c:ce:a2:49:db:90:2a:ce:7a:96:c8:f3:1f: f3:e6:1f:1e:3c:95:b0:63:79:e4:87:f0:3c:6c:c6:e1:5e:99: bb:03:f5:aa:09:6a:b0:f0:6e:14:f9:5e:61:63:95:f0:d7:44: f5:98:14:cd:80:07:56:d1:cd:4f:92:4e:f3:5e:55:d1:ce:20: 5f:3f:9f:09:5e:77:b7:7d:d1:3d:0e:0f:b5:0d:d8:18:a0:cc: 5f:df:71:68:aa:dd:47:83:18:21:81:31:b1:de:5d:66:5d:39: db:f1:d0:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwOTIyMjMyOTU5WhcNMjYwOTI5MjMyOTU5WjAYMRYwFAYD VQQDEw02YWIzMGY3OC1mNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g42scQZrBcfb4x2x4ugCt86gnUbgsevPwt218Y82b75TbCxRUqpga5TdSjP KLH1sOCtn1EqPJQu1cwSrXU2nwaYUUuP/vOfxyTKIXajBwgB1e3CoJ+vrI1o10sT SIZBJSlZ8eAK91J/ptKL+AfBXe3h4sg9vIIcBkRuWTFtiuSuBzue1C+kRp7MmNS6 MguHr9dw8LXyljE5ICy49onVQ4lFN4kcJJgdy5zPewxXXdYGqKqsAL2QMyaFBlgF SYVKbX7h/vOD0iy5KAVZZ3MyNjcBTiHExjJ5do/bmsJOubGQhKnkbyKXdnvCHK2l h3Ff+x0iBUwOdrjG5JQ25FoR6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEESxoSo KuCa3OW44mB6j1qOH9xkMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZONOJQCxffRB2jMZAfi3uGHb9831PlKoIwHfHowl8oxLmmn/+uWDciC0BI9y y2LUmY8bqneLxTSMTIUJ45HcffXO2JorE5c6OdNxnVmOHFWYvDF5nDkGQu6wZRaE j0zer3EN6d59Jt1xpHn+4QWQ+tBnMRT+o3foSuT5M4d6SukGjXrbADXYfFAZT4a0 uQfuIEbcgDNMzqJJ25AqznqWyPMf8+YfHjyVsGN55IfwPGzG4V6ZuwP1qglqsPBu FPleYWOV8NdE9ZgUzYAHVtHNT5JO815V0c4gXz+fCV53t33RPQ4PtQ3YGKDMX99x aKrdR4MYIYExsd5dZl052/HQ5A== -----END CERTIFICATE-----Generated at Wed Sep 23 23:49:40 2026 by rpki-client