$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft File: We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json) Hash identifier: wmTq9yX1GiVNsfSku2BUnMpnA8qYUwvy3kBm7TmCmq8= Subject key identifier: 2D:12:E1:3D:43:E4:C4:48:F9:F4:B5:F3:54:A1:61:99:AC:1A:D5:FD Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 Certificate issuer: /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft Manifest number: 07FC Signing time: Tue 22 Sep 2026 21:03:40 +0000 Manifest this update: Tue 22 Sep 2026 21:03:39 +0000 Manifest next update: Tue 29 Sep 2026 21:03:39 +0000 Files and hashes: 1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: oGizeLlVmDYRxVBucTlhP+khXfCIRSIEGp4olEVhrtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Validity Not Before: Sep 22 21:03:39 2026 GMT Not After : Sep 29 21:03:39 2026 GMT Subject: CN=6ab2ed2b-5aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:39:2d:ef:aa:85:19:96:89:89:f0:d0:59:e7: a7:16:cd:52:b9:24:1c:d2:e2:f0:da:77:38:f9:2f: 20:9b:d3:48:d9:b2:01:e5:de:7d:ed:62:06:f4:a5: 7c:bd:80:2c:94:fa:c9:b9:10:6a:c9:d2:ab:5d:9e: c1:95:0d:38:9b:5e:e3:35:a0:eb:e3:13:ac:68:df: c6:41:f7:58:89:6b:3d:a2:ff:fe:53:65:23:5a:83: 96:1e:e7:b0:2b:b9:e3:4c:52:0b:6b:fe:8c:2c:ee: 90:c5:67:42:4f:14:00:67:0b:18:80:77:34:a5:e2: e6:b5:96:05:0e:4b:0c:00:8a:f0:3b:ae:b4:69:f4: 94:d2:62:0c:77:2c:14:47:cf:20:dc:39:75:b1:65: 8f:01:03:6a:3b:e5:16:52:51:f2:32:3c:97:9c:bd: 07:13:19:8c:c2:54:66:c0:24:1b:f4:c1:c8:83:6b: 7a:e9:0a:a5:80:48:47:a4:e6:72:30:b8:28:dd:2e: f5:17:84:07:47:f4:4d:50:41:0d:31:77:e1:99:00: 62:4b:32:f6:81:b0:98:16:db:e2:fb:24:d8:e3:ca: a6:f7:2a:b3:6c:06:dd:70:4f:6b:46:81:ae:40:fd: 90:52:3b:3d:8d:58:b2:02:af:73:66:a0:8e:0b:ba: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:12:E1:3D:43:E4:C4:48:F9:F4:B5:F3:54:A1:61:99:AC:1A:D5:FD X509v3 Authority Key Identifier: keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1f:60:79:06:95:0e:2d:0f:fb:43:d1:02:f8:a2:dd:6e:dd: 46:ff:f2:70:ae:f7:d9:c3:79:b6:5f:15:bc:87:be:87:4b:2c: c4:aa:fb:a5:86:63:e6:31:f2:a9:82:e2:19:0b:d9:5d:2b:e9: b0:ca:e8:95:bc:15:ca:57:09:b6:15:8d:7e:98:9c:52:a3:4b: 1a:1a:f5:cd:a5:02:82:42:2b:49:69:aa:a2:ea:d4:e4:20:cb: 1c:24:eb:6f:49:24:17:3c:8d:fc:cc:51:f8:54:a8:f1:11:a0: 10:59:2c:c5:de:5a:4d:fb:ef:aa:4d:c0:3b:5e:95:43:f6:e6: d8:b7:d2:73:ca:a6:05:cb:47:06:8e:f4:35:0d:ee:09:7a:99: 43:38:ee:ae:18:96:0b:38:04:80:5c:b2:80:d9:95:7a:16:ee: 14:ce:35:97:55:4d:1c:3d:3b:48:fc:e6:e6:ce:c1:27:ea:0e: 69:e9:b6:64:b4:9e:a7:1c:64:67:9a:0e:53:f6:ba:64:25:d3: c0:dd:49:f8:7e:ad:b7:6b:e5:ee:4c:d0:1b:ca:b0:f0:d6:80: 10:69:65:0e:ea:05:51:06:8e:74:b2:96:bb:60:96:f6:b4:dc: b8:f7:0d:f3:93:75:b2:45:06:77:74:50:fc:5b:f1:e9:02:ce: 29:1f:cd:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGQUYxMTAvBgNVBAUTKDU5RURFODE2OUIwQTJDMzIxNDY5RkYxMUIxNjI4QkRF MEMxRjJDNDEwHhcNMjYwOTIyMjEwMzM5WhcNMjYwOTI5MjEwMzM5WjAYMRYwFAYD VQQDEw02YWIyZWQyYi01YWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzkt76qFGZaJifDQWeenFs1SuSQc0uLw2nc4+S8gm9NI2bIB5d597WIG9KV8 vYAslPrJuRBqydKrXZ7BlQ04m17jNaDr4xOsaN/GQfdYiWs9ov/+U2UjWoOWHuew K7njTFILa/6MLO6QxWdCTxQAZwsYgHc0peLmtZYFDksMAIrwO660afSU0mIMdywU R88g3Dl1sWWPAQNqO+UWUlHyMjyXnL0HExmMwlRmwCQb9MHIg2t66QqlgEhHpOZy MLgo3S71F4QHR/RNUEENMXfhmQBiSzL2gbCYFtvi+yTY48qm9yqzbAbdcE9rRoGu QP2QUjs9jViyAq9zZqCOC7qu7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0S4T1D 5MRI+fS181ShYZmsGtX9MB8GA1UdIwQYMBaAFFnt6BabCiwyFGn/EbFii94MHyxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUZBRi8wNzE3NjI0MDQ5 MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xESVVhZjhSc1dLTDNnd2ZM RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dlM29GcHNLTERJVWFmOFJzV0tMM2d3ZkxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUZBRi8wNzE3NjI0MDQ5MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xE SVVhZjhSc1dLTDNnd2ZMRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArx9geQaVDi0P+0PRAvii3W7dRv/ycK732cN5tl8VvIe+h0ssxKr7pYZj5jHy qYLiGQvZXSvpsMrolbwVylcJthWNfpicUqNLGhr1zaUCgkIrSWmqourU5CDLHCTr b0kkFzyN/MxR+FSo8RGgEFksxd5aTfvvqk3AO16VQ/bm2LfSc8qmBctHBo70NQ3u CXqZQzjurhiWCzgEgFyygNmVehbuFM41l1VNHD07SPzm5s7BJ+oOaem2ZLSepxxk Z5oOU/a6ZCXTwN1J+H6tt2vl7kzQG8qw8NaAEGllDuoFUQaOdLKWu2CW9rTcuPcN 85N1skUGd3RQ/Fvx6QLOKR/N+Q== -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:40 2026 by rpki-client