$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: Ik7tm3ipTFfWW/afMjSBWSsYxsga8JfB1QA0A9rcH9I= Subject key identifier: C8:75:4D:A1:01:EF:80:31:3E:19:37:27:67:30:BF:49:2D:C4:29:A3 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 35A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 3591 Signing time: Tue 22 Sep 2026 14:57:20 +0000 Manifest this update: Tue 22 Sep 2026 14:57:20 +0000 Manifest next update: Tue 29 Sep 2026 14:57:20 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: NSv17HqwRXkE074X4WJ42hzff6lB2WBS9SJk+MKKf+Y=) 2: 97CD303CB0B711F19DEAFA5A6511F970.roa (hash: 1+Rv0xwcT8FH4Wpx62qgzDGLt6pRohITLkn3FYQIkHQ=) 3: rAkH9NztVWOAjgr7fOh5wRfAIAo.asa (hash: EDATT7ZWSBHFpg3As45BGrAoL581ApENXO/q9sdKlLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13731 (0x35a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Sep 22 14:57:20 2026 GMT Not After : Sep 29 14:57:20 2026 GMT Subject: CN=6ab29750-6300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:32:d9:04:6a:d9:a6:e6:69:ad:33:56:0d: 1b:84:cb:1c:47:a4:a2:a7:4f:83:fb:da:41:95:b8: 7d:80:1f:46:36:99:17:4e:0d:3c:5a:45:ab:ca:d5: 48:fa:4d:cd:5c:7b:81:01:0b:ae:ac:f1:77:64:57: 9a:ac:9c:8d:e5:ea:57:6a:d9:69:88:9c:7c:4c:4d: e4:3b:fb:7b:1d:33:a1:90:5b:01:d0:00:a6:a9:a5: 88:70:60:9b:75:b8:07:8d:45:64:5d:13:78:b8:55: dc:20:15:6a:12:da:40:9d:a3:63:c3:54:3d:ca:3c: 2b:53:d7:0b:31:a9:62:d7:90:2c:18:df:4e:1c:35: 57:86:64:da:2e:44:f8:7e:a0:d2:1e:b2:7c:ae:a9: 4f:63:f5:6d:49:0a:9e:87:79:e9:44:9d:63:c4:7c: 7a:fc:1f:d9:e8:3a:5f:28:6d:0e:68:b9:12:78:d8: e9:7e:d9:41:38:e5:c2:0f:69:79:91:db:6e:d8:7b: 94:5b:25:a6:f4:97:30:b8:39:99:07:9c:03:43:73: 75:bf:42:42:89:d3:fd:ad:19:94:c0:f3:53:2b:f5: 8d:69:8a:b4:4f:f9:41:db:b6:94:04:1e:87:1a:f7: 9c:84:62:ef:a1:db:8f:92:8b:dd:5c:03:4d:b5:e1: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:4D:A1:01:EF:80:31:3E:19:37:27:67:30:BF:49:2D:C4:29:A3 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3a:fe:90:61:9e:35:d1:56:55:15:71:cb:14:0a:d7:56:f9: 9b:7e:79:0b:b4:97:a8:52:40:92:7c:93:06:66:48:21:c3:cd: c7:bc:2c:d8:3c:61:7c:ba:f2:a8:b1:0d:22:27:f3:08:14:55: d9:48:e4:d0:bf:dc:4c:b3:3d:7e:65:34:5a:66:6c:05:27:59: f0:c6:8b:e6:c6:8a:89:66:b4:2d:12:c8:93:e7:91:4e:f3:dc: d3:44:83:0d:36:22:cf:c3:6a:85:90:3a:03:98:7b:bc:cd:1b: 38:11:cf:c6:fd:a9:fe:79:b4:62:fb:a2:ab:7e:46:0b:d9:a3: 58:08:d1:7b:c6:75:f5:45:69:bb:30:44:1f:ca:98:53:7e:fd: d1:d1:d5:c2:5b:87:bf:35:e0:ce:c1:1d:41:e5:e7:69:5b:71: 66:7c:34:b5:7a:5d:5c:2c:82:dc:6c:b7:f2:22:ae:58:94:74: 8a:f0:ed:ef:75:51:0f:5b:76:67:29:e3:31:b5:c8:f0:e7:19: a0:d7:d8:c0:70:a6:f9:5d:e2:ab:63:8f:75:9d:0f:25:76:4e: a5:47:85:06:c7:39:92:c6:b9:1f:1b:1c:66:b1:fa:b0:0a:ad: b5:2e:8e:26:57:f9:cb:c4:28:2b:53:f3:68:d5:77:d3:79:b4: d2:37:40:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjYwOTIyMTQ1NzIwWhcNMjYwOTI5MTQ1NzIwWjAYMRYwFAYD VQQDEw02YWIyOTc1MC02MzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFgy2QRq2abmaa0zVg0bhMscR6Sip0+D+9pBlbh9gB9GNpkXTg08WkWrytVI +k3NXHuBAQuurPF3ZFearJyN5epXatlpiJx8TE3kO/t7HTOhkFsB0ACmqaWIcGCb dbgHjUVkXRN4uFXcIBVqEtpAnaNjw1Q9yjwrU9cLMali15AsGN9OHDVXhmTaLkT4 fqDSHrJ8rqlPY/VtSQqeh3npRJ1jxHx6/B/Z6DpfKG0OaLkSeNjpftlBOOXCD2l5 kdtu2HuUWyWm9JcwuDmZB5wDQ3N1v0JCidP9rRmUwPNTK/WNaYq0T/lB27aUBB6H GvechGLvoduPkovdXANNteGEeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMh1TaEB 74AxPhk3J2cwv0ktxCmjMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZjr+kGGeNdFWVRVxyxQK11b5m355C7SXqFJAknyTBmZIIcPNx7ws2DxhfLry qLENIifzCBRV2Ujk0L/cTLM9fmU0WmZsBSdZ8MaL5saKiWa0LRLIk+eRTvPc00SD DTYiz8NqhZA6A5h7vM0bOBHPxv2p/nm0Yvuiq35GC9mjWAjRe8Z19UVpuzBEH8qY U3790dHVwluHvzXgzsEdQeXnaVtxZnw0tXpdXCyC3Gy38iKuWJR0ivDt73VRD1t2 ZynjMbXI8OcZoNfYwHCm+V3iq2OPdZ0PJXZOpUeFBsc5ksa5HxscZrH6sAqttS6O Jlf5y8QoK1PzaNV303m00jdAtQ== -----END CERTIFICATE-----Generated at Wed Sep 23 07:28:31 2026 by rpki-client