$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: JMFypLXbNsZ3rLjVVO/kyG+2UVhdAsr1aAOE4mmN+gc= Subject key identifier: A5:7C:02:3C:C2:9B:52:AF:3E:4B:7F:FA:55:92:BC:7F:AE:82:7A:8B Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0C27 Signing time: Thu 24 Sep 2026 18:45:43 +0000 Manifest this update: Thu 24 Sep 2026 18:45:43 +0000 Manifest next update: Thu 01 Oct 2026 18:45:43 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: NjCLzDkv2s6ZkzW1+zgr43k0zk51Wq5a2oEgMlOcQc0=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Sep 24 18:45:43 2026 GMT Not After : Oct 1 18:45:43 2026 GMT Subject: CN=6ab56fd7-d87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b4:f4:65:f7:e5:21:67:d5:c0:dd:69:ba:63: a5:c1:73:c8:3d:50:9d:59:1a:66:b3:67:02:86:97: 6f:00:f4:e8:d0:ea:47:de:37:b3:3c:14:05:f7:73: 83:3d:5b:cd:8b:8c:15:b3:e6:6a:6e:ed:bd:2e:29: 79:80:21:25:d8:23:56:3d:90:bb:96:0b:ca:66:fa: 0d:14:7c:00:c6:e1:4e:0a:57:3e:50:83:d9:2e:64: c7:2e:29:71:a1:db:f2:8d:34:4b:4f:17:07:11:47: a1:4b:68:a4:2e:14:de:0b:36:66:16:8f:f1:e9:1f: 8b:4e:30:a8:c6:f2:9f:6c:9c:86:de:30:49:43:75: d8:fd:ab:15:c3:05:d6:77:70:08:76:df:72:f9:ec: a1:6e:6e:bb:21:a8:b0:a0:96:21:49:d1:e4:4f:91: 21:7a:64:f4:19:54:8b:38:5f:78:c5:28:39:e6:d7: 56:4f:03:5f:2d:95:61:45:b5:ba:dd:18:39:2d:d4: b1:a4:b1:d6:c1:fe:f7:34:f7:b8:c6:aa:e3:89:95: 05:db:17:82:b5:43:4d:2e:00:20:d8:83:a8:b1:4d: 9d:fb:12:ce:a1:1b:56:11:0c:24:c8:f8:88:ae:e1: 06:1c:f6:41:18:56:c3:2d:29:53:07:a0:2c:67:57: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7C:02:3C:C2:9B:52:AF:3E:4B:7F:FA:55:92:BC:7F:AE:82:7A:8B X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a7:27:e4:c8:af:62:f8:5d:59:e6:ea:07:8e:5f:30:f3:13: 28:22:d8:c8:e0:7f:71:d6:2f:5f:83:3f:9d:d7:21:48:bf:28: d4:c6:b7:9c:ae:8a:32:aa:a7:cb:8e:23:ce:d0:dd:98:23:64: b3:54:4b:3d:92:6a:b2:b6:90:f0:35:7e:97:4f:af:b3:8b:21: 20:1a:67:8d:48:b0:5a:05:26:d8:d1:94:af:03:f9:32:59:1e: dd:f6:6b:5f:99:dd:09:c4:f3:80:ed:a2:3d:e0:b7:d6:76:61: a6:4f:de:80:94:eb:41:18:2a:35:0b:fd:f8:dd:f0:f7:dc:d2: 00:8d:17:5c:31:3c:98:43:24:36:56:7f:e6:02:e9:c0:01:2d: eb:d6:ae:f8:ce:e1:17:8a:ca:41:01:7b:e5:be:30:a2:50:d5: a6:f2:9c:95:ba:63:08:99:17:d5:73:03:14:dd:13:7e:fc:d1: 96:7e:b8:ac:24:38:50:d7:59:7d:3c:1b:3d:7d:0d:b2:6f:b7: eb:f6:51:a4:4b:cc:00:25:a1:06:e5:6d:8b:9a:eb:67:b8:db: 09:b0:f9:96:7f:5b:3d:54:bd:cc:c5:c6:09:09:4e:54:b3:dc: f8:0a:4b:fe:ea:53:54:56:16:2e:cf:a3:f8:e6:3e:63:f9:6e: 11:98:35:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjYwOTI0MTg0NTQzWhcNMjYxMDAxMTg0NTQzWjAYMRYwFAYD VQQDEw02YWI1NmZkNy1kODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rT0ZfflIWfVwN1pumOlwXPIPVCdWRpms2cChpdvAPTo0OpH3jezPBQF93OD PVvNi4wVs+Zqbu29Lil5gCEl2CNWPZC7lgvKZvoNFHwAxuFOClc+UIPZLmTHLilx odvyjTRLTxcHEUehS2ikLhTeCzZmFo/x6R+LTjCoxvKfbJyG3jBJQ3XY/asVwwXW d3AIdt9y+eyhbm67IaiwoJYhSdHkT5EhemT0GVSLOF94xSg55tdWTwNfLZVhRbW6 3Rg5LdSxpLHWwf73NPe4xqrjiZUF2xeCtUNNLgAg2IOosU2d+xLOoRtWEQwkyPiI ruEGHPZBGFbDLSlTB6AsZ1edPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKV8AjzC m1KvPkt/+lWSvH+ugnqLMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANKcn5MivYvhdWebqB45fMPMTKCLYyOB/cdYvX4M/ndchSL8o1Ma3nK6KMqqn y44jztDdmCNks1RLPZJqsraQ8DV+l0+vs4shIBpnjUiwWgUm2NGUrwP5Mlke3fZr X5ndCcTzgO2iPeC31nZhpk/egJTrQRgqNQv9+N3w99zSAI0XXDE8mEMkNlZ/5gLp wAEt69au+M7hF4rKQQF75b4wolDVpvKclbpjCJkX1XMDFN0TfvzRln64rCQ4UNdZ fTwbPX0Nsm+36/ZRpEvMACWhBuVti5rrZ7jbCbD5ln9bPVS9zMXGCQlOVLPc+ApL /upTVFYWLs+j+OY+Y/luEZg1yQ== -----END CERTIFICATE-----Generated at Fri Sep 25 01:30:51 2026 by rpki-client