$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: sW6liIMcMygbicup7UFSxV4WoAVaclw2+jskQ2KY4Hg= Subject key identifier: 06:7F:E6:45:3C:4C:DF:84:9E:03:64:F7:72:1A:D9:DA:DD:69:CB:19 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: AC Signing time: Tue 22 Sep 2026 14:44:54 +0000 Manifest this update: Tue 22 Sep 2026 14:44:54 +0000 Manifest next update: Tue 29 Sep 2026 14:44:54 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: 99d9RheuJssv6TWZIzuKS0PHM1Rbhpnufrzxk4XfSrU=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: N+AjEat6kkgxUWydiRZM9AqAylRYPPRcAECxuvM7gb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Sep 22 14:44:54 2026 GMT Not After : Sep 29 14:44:54 2026 GMT Subject: CN=6ab29466-5a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:c3:e1:52:69:e9:8c:83:93:c9:f3:69:09: b1:05:7c:24:ef:b5:6c:57:5a:ce:5c:fc:fe:aa:ec: 9c:59:6d:06:47:bd:ab:6f:7b:c1:08:1b:6f:0c:3d: a4:c5:ba:94:ad:1a:57:18:61:02:78:25:e0:f7:37: 5a:34:3c:52:ad:51:75:4e:40:c9:7b:db:17:16:44: b3:d2:7d:3e:5c:08:55:a6:3c:00:8e:4a:3b:a9:7a: 78:90:a7:fa:57:0d:5e:40:3f:0d:b7:4d:c5:b8:e4: 98:8f:b6:43:68:09:30:b9:c0:94:bb:e2:9d:8e:44: 34:1d:1c:01:f4:fe:1d:21:4f:28:77:b8:30:16:f7: b3:bc:e4:21:5e:05:bb:4a:c1:4c:63:c0:6c:1c:f4: 64:0b:9d:0d:37:3a:9d:15:1d:fa:29:aa:0c:06:cd: 35:7b:2f:34:31:78:5c:17:b1:74:25:a2:47:90:1a: 24:fb:b8:fe:bb:ff:b9:4f:33:c5:69:da:4f:4c:00: d2:0d:b5:3c:27:6c:49:f0:41:ea:e7:cb:6a:b7:78: 69:53:98:d4:e2:b4:a4:9c:ec:75:6b:ea:cf:cc:2e: 06:74:30:b4:11:44:b7:9f:1b:f3:16:02:39:03:65: 34:97:94:c5:31:d8:24:15:a5:a8:c5:6e:28:82:d7: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7F:E6:45:3C:4C:DF:84:9E:03:64:F7:72:1A:D9:DA:DD:69:CB:19 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d9:62:49:2c:46:bc:24:b4:fb:83:23:f2:5a:e2:31:0d:e6: 17:5e:45:1f:7f:59:39:ec:64:c5:56:c5:a1:71:32:dc:3d:81: 50:28:60:b5:3e:4f:f2:82:ad:ab:c5:c9:11:ab:2a:71:25:50: 27:01:b3:a4:b1:06:aa:dd:a4:ed:0b:38:30:77:20:7f:4c:64: 88:7b:97:64:bc:d2:4b:68:9f:66:9a:47:2a:5d:cf:53:a2:e7: 11:4d:e9:31:48:56:f1:a3:64:3f:7f:c6:0d:7b:d4:a6:a5:d6: 68:5b:7f:7e:65:d7:85:7d:6e:af:7a:b5:de:9e:d2:60:4a:5e: a4:9f:06:95:58:76:df:41:4b:26:f0:b6:09:d5:53:49:a0:08: 60:24:97:f6:09:4a:a4:c0:22:13:f2:a8:ae:fd:79:df:15:55: 97:61:ed:a3:04:bb:ff:04:20:9a:65:89:58:f4:22:8b:da:0e: d5:9f:04:6b:8b:21:80:e9:84:e8:06:c6:cb:d4:70:6e:13:09: 9a:4f:c2:f1:18:59:4c:dc:65:fb:c1:a3:d1:16:f7:66:7d:76: 5a:c4:8d:78:bf:05:ac:e2:51:d9:bc:71:06:49:28:94:96:98: 9d:ef:5b:0c:77:cb:83:40:e1:ef:66:f4:79:82:dd:70:c6:6e: 00:2c:30:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKDY4NDU5N0U5OThBM0EwQzY5ODczNjFCN0M1NzIwNDNB ODE2QzFDNTIwHhcNMjYwOTIyMTQ0NDU0WhcNMjYwOTI5MTQ0NDU0WjAYMRYwFAYD VQQDEw02YWIyOTQ2Ni01YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszrD4VJp6YyDk8nzaQmxBXwk77VsV1rOXPz+quycWW0GR72rb3vBCBtvDD2k xbqUrRpXGGECeCXg9zdaNDxSrVF1TkDJe9sXFkSz0n0+XAhVpjwAjko7qXp4kKf6 Vw1eQD8Nt03FuOSYj7ZDaAkwucCUu+KdjkQ0HRwB9P4dIU8od7gwFvezvOQhXgW7 SsFMY8BsHPRkC50NNzqdFR36KaoMBs01ey80MXhcF7F0JaJHkBok+7j+u/+5TzPF adpPTADSDbU8J2xJ8EHq58tqt3hpU5jU4rSknOx1a+rPzC4GdDC0EUS3nxvzFgI5 A2U0l5TFMdgkFaWoxW4ogteZwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ/5kU8 TN+EngNk93Ia2drdacsZMB8GA1UdIwQYMBaAFGhFl+mYo6DGmHNht8VyBDqBbBxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC8zRjdFMjU3NEJF MDcxMUYwOUZGMDQ0NjlDNEY5QUUwMi9hRVdYNlppam9NYVljMkczeFhJRU9vRnNI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC8zRjdFMjU3NEJFMDcxMUYwOUZGMDQ0NjlDNEY5QUUwMi9hRVdYNlppam9N YVljMkczeFhJRU9vRnNIRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt9liSSxGvCS0+4Mj8lriMQ3mF15FH39ZOexkxVbFoXEy3D2BUChgtT5P8oKt q8XJEasqcSVQJwGzpLEGqt2k7Qs4MHcgf0xkiHuXZLzSS2ifZppHKl3PU6LnEU3p MUhW8aNkP3/GDXvUpqXWaFt/fmXXhX1ur3q13p7SYEpepJ8GlVh230FLJvC2CdVT SaAIYCSX9glKpMAiE/Korv153xVVl2HtowS7/wQgmmWJWPQii9oO1Z8Ea4shgOmE 6AbGy9RwbhMJmk/C8RhZTNxl+8Gj0Rb3Zn12WsSNeL8FrOJR2bxxBkkolJaYne9b DHfLg0Dh72b0eYLdcMZuACwwpA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:45:34 2026 by rpki-client