$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft File: b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft (raw, json) Hash identifier: tEuS79q2g6eBGEIQD8V9kg+vOEoCFP4RP+aXJlB22zo= Subject key identifier: D6:F2:5E:A0:F4:C5:E6:A0:9B:C5:04:60:13:2A:3F:04:35:27:0E:C7 Authority key identifier: 6F:6A:B5:0E:8A:A4:2B:E8:F1:77:FD:EC:3A:87:0C:D6:10:7C:4F:37 Certificate issuer: /CN=A91E1FC4/serialNumber=6F6AB50E8AA42BE8F177FDEC3A870CD6107C4F37 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft Manifest number: 04 Signing time: Wed 23 Sep 2026 09:03:15 +0000 Manifest this update: Wed 23 Sep 2026 09:03:15 +0000 Manifest next update: Wed 30 Sep 2026 09:03:15 +0000 Files and hashes: 1: b2q1DoqkK-jxd_3sOocM1hB8Tzc.crl (hash: rjJ2fAglttEfwR2J6TO0qf6Ccwa3j5beiyXqDnwGteI=) 2: C08F5282B62C11F193035DF56011F970.roa (hash: MGL8VfCm0hjEtcX0+xPYCLXG3QK86ejrAfr1f/uNSIo=) 3: 5-vd7NQqnv_ev978dogXob6KCrI.asa (hash: txaO/MHR6ARH0o6eUGzy6xXr7j11fJuA1imV7ff9QiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.crl rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1FC4, serialNumber=6F6AB50E8AA42BE8F177FDEC3A870CD6107C4F37 Validity Not Before: Sep 23 09:03:15 2026 GMT Not After : Sep 30 09:03:15 2026 GMT Subject: CN=6ab395d3-cd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:7e:55:78:b4:c8:d4:8d:d6:4d:66:23:7a: 99:96:90:55:72:27:98:87:43:df:d3:79:00:4c:11: 79:dc:0d:40:36:b3:ec:b7:1a:ce:3a:7e:8f:ee:0f: ac:28:fe:5b:47:c5:bd:da:92:7b:cb:3d:de:b9:46: c6:95:06:b4:41:2c:37:07:d8:b6:3c:d5:bb:91:dc: 4b:b3:3a:cd:79:ca:ae:44:74:be:08:3b:f4:d6:21: ec:3b:eb:d6:54:db:ac:3d:eb:12:d7:be:ee:07:0b: b0:f1:fd:b4:61:05:2d:c3:4d:a2:bc:9e:0d:6e:bf: b5:64:42:ae:db:23:9a:5c:57:ab:f0:e3:d9:bc:e9: 62:bd:63:d5:01:98:8b:a5:d1:26:31:d9:4a:1b:0f: 1e:b0:a2:3e:6c:90:f3:56:09:05:e2:52:cd:45:16: 71:07:18:13:65:29:d5:c5:0c:ce:50:ef:1d:11:58: c0:7e:ff:aa:f4:87:21:af:49:2a:3a:68:87:34:d1: 2d:89:64:ab:29:da:db:bd:86:85:a6:00:d1:cd:51: 77:94:88:cb:be:46:04:9c:c4:c1:c0:17:cf:46:b3: 63:8b:22:65:9c:a8:07:12:0c:04:73:45:0e:ca:ef: e8:0a:e3:46:39:b5:5d:00:66:41:50:74:9e:ff:8d: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F2:5E:A0:F4:C5:E6:A0:9B:C5:04:60:13:2A:3F:04:35:27:0E:C7 X509v3 Authority Key Identifier: keyid:6F:6A:B5:0E:8A:A4:2B:E8:F1:77:FD:EC:3A:87:0C:D6:10:7C:4F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f7:bc:c6:0f:44:0e:45:8a:49:b7:f2:ba:43:df:ba:c0:5b: 17:d7:50:8c:1b:64:57:79:0d:25:58:31:9b:df:6f:61:6a:10: a7:18:e9:c9:9d:72:e6:02:d7:2a:3c:5f:4b:5c:f8:ed:8e:c2: 1e:3f:38:76:61:da:b4:d4:c1:d2:11:86:c3:9c:ab:3b:84:5f: b9:78:ce:02:9c:f6:75:ca:1e:65:b6:52:69:e7:ef:96:22:a6: 52:0a:1e:2d:52:74:a3:d8:33:de:da:e0:72:8e:7f:c5:e1:6b: 89:13:f7:bd:fe:5e:af:2a:f2:09:61:c2:b9:ef:b0:52:3a:fb: 00:9f:a3:36:95:8d:55:92:cd:86:7b:a0:4a:bc:3b:e5:b8:22: 34:21:a3:d6:20:59:e6:50:db:dc:3e:1e:27:4c:4a:b3:0e:ce: 58:71:02:2a:69:46:56:d9:b0:a2:2e:00:d7:20:20:aa:31:4c: 42:44:32:91:b6:d0:1d:ef:36:10:62:72:47:61:ae:72:47:73: 0b:95:7d:8c:38:52:5b:18:81:20:0c:57:96:19:d9:16:c4:b0: 64:99:af:cb:34:65:36:55:f6:86:4d:75:8c:56:2d:a4:87:2f: 8b:92:ba:5a:51:97:d4:b6:e1:04:74:81:1a:ec:75:6b:79:a2: 9e:d5:79:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUZDNDExMC8GA1UEBRMoNkY2QUI1MEU4QUE0MkJFOEYxNzdGREVDM0E4NzBDRDYx MDdDNEYzNzAeFw0yNjA5MjMwOTAzMTVaFw0yNjA5MzAwOTAzMTVaMBgxFjAUBgNV BAMTDTZhYjM5NWQzLWNkMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkgX5VeLTI1I3WTWYjepmWkFVyJ5iHQ9/TeQBMEXncDUA2s+y3Gs46fo/uD6wo /ltHxb3aknvLPd65RsaVBrRBLDcH2LY81buR3EuzOs15yq5EdL4IO/TWIew769ZU 26w96xLXvu4HC7Dx/bRhBS3DTaK8ng1uv7VkQq7bI5pcV6vw49m86WK9Y9UBmIul 0SYx2UobDx6woj5skPNWCQXiUs1FFnEHGBNlKdXFDM5Q7x0RWMB+/6r0hyGvSSo6 aIc00S2JZKsp2tu9hoWmANHNUXeUiMu+RgScxMHAF89Gs2OLImWcqAcSDARzRQ7K 7+gK40Y5tV0AZkFQdJ7/jXwDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1vJeoPTF 5qCbxQRgEyo/BDUnDscwHwYDVR0jBBgwFoAUb2q1DoqkK+jxd/3sOocM1hB8Tzcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRkM0LzY2MzMyMEFDQjYy QzExRjFCRURFNUM4NTYwMTFGOTcwL2IycTFEb3FrSy1qeGRfM3NPb2NNMWhCOFR6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjJxMURvcWtLLWp4ZF8zc09vY00xaEI4VHpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RkM0LzY2MzMyMEFDQjYyQzExRjFCRURFNUM4NTYwMTFGOTcwL2IycTFEb3FrSy1q eGRfM3NPb2NNMWhCOFR6Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAe97zGD0QORYpJt/K6Q9+6wFsX11CMG2RXeQ0lWDGb329hahCnGOnJnXLmAtcq PF9LXPjtjsIePzh2Ydq01MHSEYbDnKs7hF+5eM4CnPZ1yh5ltlJp5++WIqZSCh4t UnSj2DPe2uByjn/F4WuJE/e9/l6vKvIJYcK577BSOvsAn6M2lY1Vks2Ge6BKvDvl uCI0IaPWIFnmUNvcPh4nTEqzDs5YcQIqaUZW2bCiLgDXICCqMUxCRDKRttAd7zYQ YnJHYa5yR3MLlX2MOFJbGIEgDFeWGdkWxLBkma/LNGU2VfaGTXWMVi2khy+Lkrpa UZfUtuEEdIEa7HVreaKe1Xlm -----END CERTIFICATE-----Generated at Thu Sep 24 01:00:38 2026 by rpki-client