$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json) Hash identifier: TIAQIOzKk+577BHT0z8KJmrjqftqN09m24mlT5EzNRk= Subject key identifier: B6:64:2E:F1:68:45:F0:99:6C:F8:D9:CA:10:B8:F0:CD:A1:1B:48:97 Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft Manifest number: 0947 Signing time: Mon 28 Sep 2026 20:18:19 +0000 Manifest this update: Mon 28 Sep 2026 20:18:18 +0000 Manifest next update: Mon 05 Oct 2026 20:18:18 +0000 Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: PbiSWv9tEmuH5qIvv0/HeSEZ/lhg007YYWFOP7yBgC0=) 2: zOyHyOrTP8BYGAohXNo4Kgj8cVI.asa (hash: WefVujjKNEcGOlSqWteiU/Pcigx69pnqtQuxdpmbUA4=) 3: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: p/WvE2tM9oWtFSPqsDTw38TfwFRB6bi66/O6CMRedgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Validity Not Before: Sep 28 20:18:18 2026 GMT Not After : Oct 5 20:18:18 2026 GMT Subject: CN=6abacb8b-b17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:3e:69:9c:9a:4e:6d:6d:24:0a:77:c9:13: d1:d9:15:97:0b:69:ce:06:dc:c1:62:8d:3b:75:78: 77:6f:97:9e:a4:ad:06:26:52:c1:24:29:00:c5:8f: a2:bf:40:e9:7b:2c:7f:3d:88:95:8b:3b:90:29:91: 22:4e:2c:f2:30:a2:ea:33:27:ac:22:1d:39:e6:c6: 17:ba:61:49:8b:3b:33:58:8e:d6:7c:fb:8c:fb:50: bb:ba:e1:27:67:ba:de:15:19:51:2d:3d:85:bb:46: 4f:96:50:3b:6a:70:88:0a:06:66:df:b9:fb:13:b8: d5:3e:83:db:a3:7d:42:48:98:fd:0e:a6:4f:36:25: d5:ed:bf:9c:1f:be:ff:5e:f4:4f:c6:b3:66:17:66: 37:b2:76:15:3c:40:c8:2a:4a:74:4e:9c:2d:d6:71: 94:5b:64:83:62:82:7f:3f:36:f4:02:5e:99:e2:b4: 42:f5:93:c5:36:6e:93:24:73:d6:c5:1b:5d:c0:9e: a7:7d:61:d4:16:b9:e3:05:94:74:8c:ce:50:0d:55: 69:88:34:b5:31:b4:51:94:43:b1:f2:d3:ca:b8:7d: 98:c4:de:91:da:57:89:11:ab:f2:5e:bb:3a:89:9b: 96:f3:0f:96:9a:16:25:cc:a6:d4:f4:c2:2b:4a:84: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:64:2E:F1:68:45:F0:99:6C:F8:D9:CA:10:B8:F0:CD:A1:1B:48:97 X509v3 Authority Key Identifier: keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:19:a3:d8:f8:2b:6d:2e:1e:6a:45:c9:18:3c:cf:d9:86:97: fe:a0:89:71:d4:4f:a6:bd:af:02:6f:ca:ea:dc:5e:be:f6:40: d6:ce:f2:28:dc:b8:9e:84:46:28:4f:01:89:e0:4f:01:3a:2c: cd:47:74:1d:e4:44:58:24:1e:05:45:14:dd:f0:3c:3c:22:a0: 07:04:01:3b:8a:c2:3d:38:12:d3:62:97:47:fa:24:f7:80:58: 20:3f:04:99:17:75:3c:c8:41:77:3e:95:72:5d:76:7b:db:52: 14:f9:86:ec:86:49:21:e0:d1:9f:f7:89:07:3f:5d:27:b8:29: 97:66:ef:da:3a:d5:43:1b:8a:eb:b0:6e:ff:d2:ea:c2:0b:db: 77:48:cd:7d:46:3b:76:84:6e:89:28:d1:15:20:00:02:dd:c0: a7:3d:b6:a7:5c:1e:57:85:9f:7f:48:ee:33:40:1d:84:a0:ce: 53:14:69:3d:b7:06:7e:6e:d6:a5:fa:bc:e8:8f:e6:68:0d:77: 5e:d6:3a:30:5d:cf:63:c9:da:0a:16:26:ba:17:03:bd:f1:ad: 0d:89:e5:b6:f2:b1:ec:4c:e3:fc:c6:60:c2:74:67:bc:4c:8f: a8:43:c7:c6:94:a4:80:6f:a9:60:31:08:4c:28:81:7d:f5:ec: f0:b8:c6:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCQjMxMTAvBgNVBAUTKDNDREY0M0Q3MTdGQzU4NDlGMjNBOTRFMjlBNzcyQjI4 QTVENzAxRTMwHhcNMjYwOTI4MjAxODE4WhcNMjYxMDA1MjAxODE4WjAYMRYwFAYD VQQDEw02YWJhY2I4Yi1iMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6Y+aZyaTm1tJAp3yRPR2RWXC2nOBtzBYo07dXh3b5eepK0GJlLBJCkAxY+i v0Dpeyx/PYiVizuQKZEiTizyMKLqMyesIh055sYXumFJizszWI7WfPuM+1C7uuEn Z7reFRlRLT2Fu0ZPllA7anCICgZm37n7E7jVPoPbo31CSJj9DqZPNiXV7b+cH77/ XvRPxrNmF2Y3snYVPEDIKkp0Tpwt1nGUW2SDYoJ/Pzb0Al6Z4rRC9ZPFNm6TJHPW xRtdwJ6nfWHUFrnjBZR0jM5QDVVpiDS1MbRRlEOx8tPKuH2YxN6R2leJEavyXrs6 iZuW8w+WmhYlzKbU9MIrSoREIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZkLvFo RfCZbPjZyhC48M2hG0iXMB8GA1UdIwQYMBaAFDzfQ9cX/FhJ8jqU4pp3Kyil1wHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JCMy85NUFFQTlFOENC RTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdFbnlPcFRpbW5jcktLWFhB ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOOUQxeGY4V0VueU9wVGltbmNyS0tYWEFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JCMy85NUFFQTlFOENCRTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdF bnlPcFRpbW5jcktLWFhBZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASRmj2PgrbS4eakXJGDzP2YaX/qCJcdRPpr2vAm/K6txevvZA1s7yKNy4noRG KE8BieBPAToszUd0HeREWCQeBUUU3fA8PCKgBwQBO4rCPTgS02KXR/ok94BYID8E mRd1PMhBdz6Vcl12e9tSFPmG7IZJIeDRn/eJBz9dJ7gpl2bv2jrVQxuK67Bu/9Lq wgvbd0jNfUY7doRuiSjRFSAAAt3Apz22p1weV4Wff0juM0AdhKDOUxRpPbcGfm7W pfq86I/maA13XtY6MF3PY8naChYmuhcDvfGtDYnltvKx7Ezj/MZgwnRnvEyPqEPH xpSkgG+pYDEITCiBffXs8LjGHw== -----END CERTIFICATE-----Generated at Tue Sep 29 13:49:20 2026 by rpki-client