$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: srbdpzOP2lPfmXpwyPOoYZd6O0L/Jie+va2unc3KAJY= Subject key identifier: 3E:3F:0C:B3:05:7B:2A:05:44:A9:E2:06:07:38:47:5D:1C:B1:CF:1F Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 0140 Signing time: Tue 22 Sep 2026 14:36:13 +0000 Manifest this update: Tue 22 Sep 2026 14:36:13 +0000 Manifest next update: Tue 29 Sep 2026 14:36:13 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: WpxmyEpAJiSdUkNKqdi+LiTzpOIKYZugoQFHqAjCU+0=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: I8tb2z2Hm/oVZ+/EtUi2cTvMADHbbnwoMnZaKJ+3/z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Sep 22 14:36:13 2026 GMT Not After : Sep 29 14:36:13 2026 GMT Subject: CN=6ab2925d-6b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:cd:c1:9a:6a:98:9a:a3:e8:f1:17:d5:af: 8b:e2:62:ee:ad:8d:9e:54:e2:d0:4c:05:a7:92:e1: fe:89:36:e1:ed:4a:80:4c:7a:db:9b:b6:09:3d:d5: 18:00:e2:1a:7f:6c:df:19:c8:9f:15:cd:0d:af:d0: bc:9c:44:7b:6a:91:87:75:02:9c:62:de:9c:3e:60: 43:04:64:b8:db:8c:45:75:2e:d1:9a:a3:af:dc:36: b6:9f:07:ba:3c:6e:e8:d9:97:ab:db:81:a5:7c:fc: eb:55:9e:df:e4:ed:f3:79:12:95:5f:80:94:f0:5f: 49:17:91:01:05:9e:59:87:eb:0d:9c:fc:db:b6:34: 3f:e9:bf:93:19:c7:1c:f9:3e:29:7e:84:ee:c8:c3: ff:36:cc:e0:06:99:f4:3f:31:f4:5b:58:f5:a4:bf: 17:83:b0:0a:ce:0a:95:9d:54:9c:47:d6:65:91:24: 95:15:32:f5:9c:74:4a:5c:9a:93:57:10:01:6c:39: d2:9d:95:bc:9d:1a:74:21:40:79:30:04:45:f1:9a: b5:be:23:9c:38:7f:07:d1:3f:06:22:1f:30:88:56: 22:e2:47:0e:55:f2:62:88:c4:db:2b:0f:39:40:f0: 02:2a:c8:bc:d4:ea:1e:1c:bb:4b:29:0a:a3:95:27: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:0C:B3:05:7B:2A:05:44:A9:E2:06:07:38:47:5D:1C:B1:CF:1F X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:eb:7a:51:25:16:0d:d5:60:e8:cb:72:64:38:13:b2:65: 64:8c:7e:d6:e2:61:d6:86:d4:08:2a:30:56:4c:b8:5c:8d:ed: 00:f5:da:49:f7:dc:dc:9e:8b:ca:df:42:b7:a6:dd:34:88:e4: d1:9d:ed:38:1e:b4:ad:3d:e5:b6:7c:34:b9:ab:23:ec:fd:cb: 40:c6:8d:ec:a5:63:ab:14:57:0c:95:28:69:f6:23:91:a6:69: 16:73:0f:9a:65:ec:ee:4b:2d:31:8a:9e:07:4b:c1:f5:0f:d0: c1:c4:35:d8:77:f2:d1:e8:a2:cd:85:d8:3c:59:d8:99:f8:3e: 23:b4:64:16:75:f0:31:11:b8:6d:f4:51:f5:5a:43:14:70:78: e6:83:26:b0:47:46:5c:b3:68:d8:ae:14:37:e8:a6:6a:79:49: d3:9c:fe:0a:29:56:0a:a9:9a:8d:5a:e6:90:8c:80:87:62:e5: b2:67:75:e8:b7:2f:71:7e:7e:97:c3:58:0d:06:0b:f9:e0:50: b7:8b:2c:89:44:e4:7d:2d:c6:87:04:dc:74:be:a0:99:dd:dc: 5b:8e:89:20:96:a4:0a:5f:c5:5f:3f:62:29:e5:54:5a:31:3e: 16:ef:66:29:ff:74:8b:b5:2c:59:1f:a0:88:12:c3:d0:68:50: 32:90:a2:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjYwOTIyMTQzNjEzWhcNMjYwOTI5MTQzNjEzWjAYMRYwFAYD VQQDEw02YWIyOTI1ZC02YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWjNwZpqmJqj6PEX1a+L4mLurY2eVOLQTAWnkuH+iTbh7UqATHrbm7YJPdUY AOIaf2zfGcifFc0Nr9C8nER7apGHdQKcYt6cPmBDBGS424xFdS7RmqOv3Da2nwe6 PG7o2Zer24GlfPzrVZ7f5O3zeRKVX4CU8F9JF5EBBZ5Zh+sNnPzbtjQ/6b+TGccc +T4pfoTuyMP/NszgBpn0PzH0W1j1pL8Xg7AKzgqVnVScR9ZlkSSVFTL1nHRKXJqT VxABbDnSnZW8nRp0IUB5MARF8Zq1viOcOH8H0T8GIh8wiFYi4kcOVfJiiMTbKw85 QPACKsi81OoeHLtLKQqjlSfS8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4/DLMF eyoFRKniBgc4R10csc8fMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArhDrelElFg3VYOjLcmQ4E7JlZIx+1uJh1obUCCowVky4XI3tAPXaSffc3J6L yt9Ct6bdNIjk0Z3tOB60rT3ltnw0uasj7P3LQMaN7KVjqxRXDJUoafYjkaZpFnMP mmXs7kstMYqeB0vB9Q/QwcQ12Hfy0eiizYXYPFnYmfg+I7RkFnXwMRG4bfRR9VpD FHB45oMmsEdGXLNo2K4UN+imanlJ05z+CilWCqmajVrmkIyAh2Llsmd16LcvcX5+ l8NYDQYL+eBQt4ssiUTkfS3GhwTcdL6gmd3cW46JIJakCl/FXz9iKeVUWjE+Fu9m Kf90i7UsWR+giBLD0GhQMpCiHA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:12:17 2026 by rpki-client