$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: 41iOJy3AjCw/TR61SnG1XXt/s2QPGqF6hlGFMpDZfkI= Subject key identifier: CC:D5:FA:83:5A:72:19:85:C5:58:4C:8E:91:FD:3E:CA:04:1F:57:05 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 01C8 Signing time: Wed 23 Sep 2026 03:45:15 +0000 Manifest this update: Wed 23 Sep 2026 03:45:15 +0000 Manifest next update: Wed 30 Sep 2026 03:45:15 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: Q8BaxIYzWEkbLCCDS6xbnS6JobsZGFvyR/w1LjjemEU=) 2: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=) 3: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Sep 23 03:45:15 2026 GMT Not After : Sep 30 03:45:15 2026 GMT Subject: CN=6ab34b4b-2c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:c1:59:b6:54:b2:89:d0:29:5a:a4:7a:f4: 4a:73:6b:67:ae:0b:84:a5:e4:00:e5:6d:2e:de:22: 45:1a:54:71:f2:3c:a9:35:0f:bc:27:d9:5f:2e:74: e7:75:ae:1b:59:3b:91:73:ff:c0:23:1b:46:d6:15: dc:0d:b8:85:42:18:6a:ba:00:95:1f:f2:49:4b:ed: 56:dd:4e:e6:12:87:64:2a:11:a8:12:95:d1:a9:20: a3:bf:90:5d:0e:5a:85:1e:21:30:1c:17:4a:c3:16: 33:b7:1f:d7:04:79:52:7c:97:cb:94:8b:ae:e7:9f: ed:c3:a1:c2:6e:4f:92:17:c3:a3:9a:4e:54:a5:5a: 4d:d5:fe:00:d3:83:69:47:d0:72:02:c5:9d:19:96: 3c:8b:7b:9c:9f:af:4f:fb:91:eb:b9:d8:5a:2a:16: ff:ef:66:f0:b6:e7:82:e7:9a:18:60:a8:8a:2b:66: 47:62:3e:93:e1:4d:70:d3:ea:12:c3:db:47:09:c1: f2:29:44:2b:b8:5b:56:35:10:ef:7c:50:0b:93:66: 49:42:58:fb:9b:c7:98:98:56:5a:ad:6e:ed:bc:63: 26:db:a4:23:b8:7c:84:d4:0b:e7:03:58:45:75:96: 0b:88:99:0f:57:7c:1a:c7:67:50:9d:71:09:db:e9: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D5:FA:83:5A:72:19:85:C5:58:4C:8E:91:FD:3E:CA:04:1F:57:05 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:10:d9:95:1c:44:3b:7b:83:3e:d2:b2:40:06:72:37:6f:0c: b7:70:55:38:c1:74:94:4d:2f:18:7e:3c:16:d5:8b:c3:3b:39: 48:08:4f:c4:92:07:e2:dc:1a:fd:31:9b:c8:f4:ef:f4:7d:e3: 82:83:70:a6:52:f3:3e:96:38:a1:9e:8b:d7:4c:2c:a6:50:64: 11:ed:44:e7:1d:bf:17:41:37:ee:99:ca:c1:98:49:43:59:70: 34:5d:f0:d5:a4:c2:c1:12:50:da:6f:98:13:3d:41:be:34:25: dc:50:dd:ba:c3:83:5a:f8:5b:7e:23:c0:23:27:15:ba:c7:b6: f1:63:30:c4:d9:5d:7f:c7:91:d4:d2:ea:27:8a:35:cd:ff:65: 9e:f2:1d:5d:22:08:5c:30:37:0a:71:b1:e7:1d:73:58:61:0b: 2e:14:25:1e:48:46:3e:c9:dd:53:43:6f:b0:26:d3:b5:1c:bf: 72:e2:f3:3a:c0:fa:71:17:4c:db:de:38:3e:7a:d9:0c:1c:50: 32:18:f1:f3:16:44:19:7a:b4:43:19:b5:6c:98:f2:77:ed:fc: 72:85:5c:70:67:77:b6:b8:cb:63:d7:a7:1a:b1:7b:dd:af:ff: f1:2a:74:74:e9:6c:3a:c7:8e:c1:8c:b6:50:87:e5:6e:ef:51: 46:f2:d0:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjYwOTIzMDM0NTE1WhcNMjYwOTMwMDM0NTE1WjAYMRYwFAYD VQQDEw02YWIzNGI0Yi0yYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hPBWbZUsonQKVqkevRKc2tnrguEpeQA5W0u3iJFGlRx8jypNQ+8J9lfLnTn da4bWTuRc//AIxtG1hXcDbiFQhhqugCVH/JJS+1W3U7mEodkKhGoEpXRqSCjv5Bd DlqFHiEwHBdKwxYztx/XBHlSfJfLlIuu55/tw6HCbk+SF8Ojmk5UpVpN1f4A04Np R9ByAsWdGZY8i3ucn69P+5HrudhaKhb/72bwtueC55oYYKiKK2ZHYj6T4U1w0+oS w9tHCcHyKUQruFtWNRDvfFALk2ZJQlj7m8eYmFZarW7tvGMm26QjuHyE1AvnA1hF dZYLiJkPV3wax2dQnXEJ2+kNzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzV+oNa chmFxVhMjpH9PsoEH1cFMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhDZlRxEO3uDPtKyQAZyN28Mt3BVOMF0lE0vGH48FtWLwzs5SAhPxJIH4twa /TGbyPTv9H3jgoNwplLzPpY4oZ6L10wsplBkEe1E5x2/F0E37pnKwZhJQ1lwNF3w 1aTCwRJQ2m+YEz1BvjQl3FDdusODWvhbfiPAIycVuse28WMwxNldf8eR1NLqJ4o1 zf9lnvIdXSIIXDA3CnGx5x1zWGELLhQlHkhGPsndU0NvsCbTtRy/cuLzOsD6cRdM 2944PnrZDBxQMhjx8xZEGXq0Qxm1bJjyd+38coVccGd3trjLY9enGrF73a//8Sp0 dOlsOseOwYy2UIflbu9RRvLQHw== -----END CERTIFICATE-----Generated at Thu Sep 24 22:06:55 2026 by rpki-client