$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: oeZ5DklNpENe7q0ngZHYoDNFhBdElyxTz199l+SPd0A= Subject key identifier: A9:B6:C1:43:CB:DE:13:E7:36:20:3F:21:6D:03:B1:89:D2:04:83:68 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 01A4 Signing time: Fri 25 Sep 2026 04:16:07 +0000 Manifest this update: Fri 25 Sep 2026 04:16:06 +0000 Manifest next update: Fri 02 Oct 2026 04:16:06 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: tj60YO/FZNNsj6KA9j1z2mrPbjQJfxzXYVBx5Ep+/Cc=) 2: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: qVzuwc8GJJLc1M+VCPFsl93UzK3diqKkMLNcNf9VMmc=) 3: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: 7D2o9V8B+THFZdf2H4zmO2ZxT2tryY6dqnAujMyrW8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Sep 25 04:16:06 2026 GMT Not After : Oct 2 04:16:06 2026 GMT Subject: CN=6ab5f586-f49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:54:80:c5:40:8f:1c:5c:01:e3:d9:50:35: d3:69:aa:cf:5e:0e:29:f3:49:c2:bc:dd:9f:bc:b1: 8b:8d:52:e3:0d:31:cd:aa:9d:39:75:85:0a:c8:dc: 19:1a:89:ce:30:0e:8e:92:dc:ef:a7:ab:50:2a:e6: be:80:7e:2c:23:4e:05:5c:4c:9e:94:6c:9f:55:5d: 23:82:86:af:85:6d:5b:6b:7a:0d:6a:61:bb:77:1c: 8f:6b:e3:42:b3:bf:a9:84:ca:99:3c:10:2b:b7:ef: 4f:64:37:17:91:8e:76:a5:c2:96:e9:ed:43:76:0b: 67:3b:df:d4:4e:79:5a:7c:76:1d:ed:93:8d:85:e0: 7e:19:cb:ac:7b:51:f6:bf:60:8b:58:00:55:ba:2f: 24:0d:1b:38:be:6e:de:d2:3e:53:d0:51:79:ec:a3: 96:ec:d7:6c:b5:4c:a4:a9:c1:5c:76:02:af:27:9e: 82:0a:bf:f8:6d:4c:57:f5:a4:a8:4d:42:09:55:20: af:03:04:c9:38:a2:55:f1:86:cf:ac:a8:4b:64:15: ea:bc:b8:9a:ad:3c:5b:d1:c6:fd:31:e7:7f:a9:d0: a2:cf:cd:04:4f:40:4d:85:64:c5:4c:66:b1:e8:27: 17:f1:37:69:e9:2b:6c:5d:54:69:bd:2c:f1:72:b0: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:C1:43:CB:DE:13:E7:36:20:3F:21:6D:03:B1:89:D2:04:83:68 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a8:c8:92:c9:40:21:d1:1a:89:b1:ca:45:23:de:bc:74:5a: 2f:c1:cc:2e:2a:be:af:b5:97:6d:d5:3b:bc:1f:5e:ed:b2:d7: 16:58:6b:21:d1:fb:a6:49:d5:38:0c:d6:52:41:25:a2:7e:3d: c5:80:75:5e:3a:dd:84:b1:57:78:6b:36:49:56:41:0b:00:0a: 05:19:0a:b8:80:32:a3:63:a5:95:fe:d1:ef:67:95:17:35:e5: b5:62:95:ee:de:ec:ee:07:91:f7:f6:19:1c:eb:e9:ca:ff:8e: 7a:e2:3d:d8:33:48:29:47:38:ce:db:99:b7:c9:a1:b5:90:46: 23:e3:39:63:b2:be:ea:48:be:90:63:2f:64:66:92:52:bb:66: ba:e9:c3:d9:0a:a2:35:61:d8:5c:2a:84:4f:35:ce:50:41:a8: 98:0d:4e:6c:d6:d8:9a:9a:a3:aa:37:2e:e4:7c:93:cd:8e:94: 10:51:0a:f7:0d:fd:55:49:af:11:69:0d:24:2f:19:6e:53:db: 64:ef:c5:35:2a:47:ba:0f:d3:bd:5e:29:af:6e:3f:56:89:72: 2e:10:c6:6e:49:bd:32:f8:e1:cc:79:b5:a6:9d:48:0b:ef:4e: e6:94:30:d1:00:d8:9f:f8:a3:c1:d6:d3:7b:f8:1b:52:7f:f9: bc:5a:f0:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjYwOTI1MDQxNjA2WhcNMjYxMDAyMDQxNjA2WjAYMRYwFAYD VQQDEw02YWI1ZjU4Ni1mNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspZUgMVAjxxcAePZUDXTaarPXg4p80nCvN2fvLGLjVLjDTHNqp05dYUKyNwZ GonOMA6Oktzvp6tQKua+gH4sI04FXEyelGyfVV0jgoavhW1ba3oNamG7dxyPa+NC s7+phMqZPBArt+9PZDcXkY52pcKW6e1DdgtnO9/UTnlafHYd7ZONheB+Gcuse1H2 v2CLWABVui8kDRs4vm7e0j5T0FF57KOW7NdstUykqcFcdgKvJ56CCr/4bUxX9aSo TUIJVSCvAwTJOKJV8YbPrKhLZBXqvLiarTxb0cb9Med/qdCiz80ET0BNhWTFTGax 6CcX8Tdp6StsXVRpvSzxcrCWbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKm2wUPL 3hPnNiA/IW0DsYnSBINoMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKjIkslAIdEaibHKRSPevHRaL8HMLiq+r7WXbdU7vB9e7bLXFlhrIdH7pknV OAzWUkElon49xYB1XjrdhLFXeGs2SVZBCwAKBRkKuIAyo2Ollf7R72eVFzXltWKV 7t7s7geR9/YZHOvpyv+OeuI92DNIKUc4ztuZt8mhtZBGI+M5Y7K+6ki+kGMvZGaS UrtmuunD2QqiNWHYXCqETzXOUEGomA1ObNbYmpqjqjcu5HyTzY6UEFEK9w39VUmv EWkNJC8ZblPbZO/FNSpHug/TvV4pr24/VolyLhDGbkm9MvjhzHm1pp1IC+9O5pQw 0QDYn/ijwdbTe/gbUn/5vFrwow== -----END CERTIFICATE-----Generated at Fri Sep 25 22:39:58 2026 by rpki-client