$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: nnB9E2lhITi0HL2b6JLKrw+u4Zpj7Ej7gDtC6r3Xfks= Subject key identifier: D0:79:3C:EB:D1:1A:7F:B0:BA:FE:BD:54:FA:4E:18:44:37:63:AF:B9 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 0608 Signing time: Thu 24 Sep 2026 16:16:34 +0000 Manifest this update: Thu 24 Sep 2026 16:16:34 +0000 Manifest next update: Thu 01 Oct 2026 16:16:34 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: 4YeMa4B9TrGMCU2DX/iqVPo/YXCqhsGxlhF6mnTyFTw=) 2: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=) 3: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=) 4: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=) 5: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=) 6: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Sep 24 16:16:34 2026 GMT Not After : Oct 1 16:16:34 2026 GMT Subject: CN=6ab54ce2-227e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:14:76:5d:66:b3:0c:e2:5c:7e:f4:aa:b1: 0f:4a:dc:27:bb:92:9b:ea:1a:5e:9a:7f:64:0d:46: 1b:e5:d3:98:2b:1a:d1:f2:c5:61:0d:62:95:aa:03: a9:74:e4:0f:bd:f8:2e:ed:45:c1:82:9f:94:36:2d: 93:ef:ee:5a:ba:f3:5d:c1:ae:da:e6:9c:58:f5:4b: c5:01:74:c7:8c:cf:e9:2c:60:cc:39:13:9d:0d:c3: 13:8b:1b:8d:bb:51:ff:2c:6a:02:28:24:46:a1:24: 10:28:5b:f3:84:f4:61:8c:72:fc:27:7d:dd:31:33: 4a:d8:45:03:4a:e7:a1:fb:62:ea:0b:bb:a4:74:a3: db:89:9e:1b:a8:fa:53:ac:3a:44:94:4b:69:bf:86: 4d:10:fe:ee:2c:3c:50:b5:3d:be:93:b7:46:7c:49: 7e:0e:1a:9b:26:af:7b:d0:43:d3:af:99:d8:b4:e8: c4:73:7e:9e:0e:24:cf:51:65:38:0c:97:21:19:ae: 60:8e:eb:f0:68:02:15:12:e4:9b:33:85:12:8c:2e: 5a:ee:e6:a7:6a:3e:60:e1:3b:53:b5:44:2b:f6:3f: 5b:a8:d9:2e:9f:4a:8d:e0:de:d5:18:30:71:f2:d8: 29:a3:03:3f:b3:4c:42:8a:a1:e8:bc:70:2c:e5:6e: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:3C:EB:D1:1A:7F:B0:BA:FE:BD:54:FA:4E:18:44:37:63:AF:B9 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c3:71:d1:98:c5:af:ab:27:31:2c:a5:52:cf:2b:13:5b:3d: d5:97:05:95:b9:6b:76:47:bf:00:1b:23:4f:0a:a7:52:c8:ac: 7c:de:b6:75:99:d9:57:c5:44:1d:37:69:90:41:22:b0:53:05: 9b:4e:e5:b3:bd:84:7d:c4:fe:69:ca:af:1f:99:06:1e:5b:4c: 76:4b:58:e3:ca:24:83:67:d0:96:30:42:8d:78:8d:80:cb:6e: 87:be:26:67:bf:2b:e9:27:5c:17:6d:42:11:27:93:2e:72:72: 72:0a:41:62:35:a2:66:75:64:e3:5a:b4:63:57:13:f8:4b:59: 16:dc:37:53:69:8d:52:1f:47:29:42:8c:00:3e:c8:1e:81:17: e0:68:5d:e7:83:69:20:87:99:0d:95:3e:8c:f7:a7:8d:23:b0: e1:11:be:3e:7b:f9:22:b8:22:6b:45:f3:a7:1c:bd:8d:6d:8e: ff:fc:5f:2e:b9:9e:21:9f:70:09:73:f1:5c:73:0d:79:b7:60: aa:dc:21:9d:f3:0f:0a:60:14:5f:53:77:6f:5d:c3:d5:00:c4: 51:08:42:c1:8f:1b:96:db:45:94:c5:d8:4b:11:1f:1d:94:25: 10:50:9b:a4:c4:2e:59:9e:81:74:62:3e:f9:94:f5:de:9f:c1: 8d:e4:d3:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjYwOTI0MTYxNjM0WhcNMjYxMDAxMTYxNjM0WjAYMRYwFAYD VQQDEw02YWI1NGNlMi0yMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UIUdl1mswziXH70qrEPStwnu5Kb6hpemn9kDUYb5dOYKxrR8sVhDWKVqgOp dOQPvfgu7UXBgp+UNi2T7+5auvNdwa7a5pxY9UvFAXTHjM/pLGDMOROdDcMTixuN u1H/LGoCKCRGoSQQKFvzhPRhjHL8J33dMTNK2EUDSueh+2LqC7ukdKPbiZ4bqPpT rDpElEtpv4ZNEP7uLDxQtT2+k7dGfEl+DhqbJq970EPTr5nYtOjEc36eDiTPUWU4 DJchGa5gjuvwaAIVEuSbM4USjC5a7uanaj5g4TtTtUQr9j9bqNkun0qN4N7VGDBx 8tgpowM/s0xCiqHovHAs5W7OWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNB5POvR Gn+wuv69VPpOGEQ3Y6+5MB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvMNx0ZjFr6snMSylUs8rE1s91ZcFlblrdke/ABsjTwqnUsisfN62dZnZV8VE HTdpkEEisFMFm07ls72EfcT+acqvH5kGHltMdktY48okg2fQljBCjXiNgMtuh74m Z78r6SdcF21CESeTLnJycgpBYjWiZnVk41q0Y1cT+EtZFtw3U2mNUh9HKUKMAD7I HoEX4Ghd54NpIIeZDZU+jPenjSOw4RG+Pnv5Irgia0Xzpxy9jW2O//xfLrmeIZ9w CXPxXHMNebdgqtwhnfMPCmAUX1N3b13D1QDEUQhCwY8blttFlMXYSxEfHZQlEFCb pMQuWZ6BdGI++ZT13p/BjeTTpg== -----END CERTIFICATE-----Generated at Fri Sep 25 22:03:37 2026 by rpki-client