$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: e48h+bVOMdG6z0wEsJTwJfqQT/6hBMspc2nS6O9SkLs= Subject key identifier: 50:98:B3:08:B4:46:76:DB:D9:5E:33:8D:17:F0:15:87:7F:28:24:14 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 23B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 2339 Signing time: Thu 24 Sep 2026 15:48:57 +0000 Manifest this update: Thu 24 Sep 2026 15:48:57 +0000 Manifest next update: Thu 01 Oct 2026 15:48:57 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: wc7aeZJ07a5z1a2kdlajZ+hwaVzojsKVKKM0kJszKbo=) 2: 268B977AA0B211F18E86806D5E11F970.roa (hash: q6uS83KtWRB+S8CNlYFejf8nUtq//hKO3iV9xGtCJh4=) 3: 3736866EA81B11F19B70C7FC6E11F970.roa (hash: Gy8zeWlYneBEMTPlG7Em3pA+12mNaAJULJr8YDWVCbA=) 4: 6DC8637AAAEE11F1832CC90C5111F970.roa (hash: kR6+8ndsB9zjZ4uRoK+mEqxx/f3Ivyfw5NM4XbETjFs=) 5: 9EFE48D0A69B11F1A765D2433411F970.roa (hash: 2UrnpJXet7VCklAYIcXnXQOboG+3YKzzoeIW7h4GmNY=) 6: D74CEB52A81B11F1B02B10086F11F970.roa (hash: M0cTyj4lFmPKhOXsfFgyoviHfDiXK423YeJJGnMTa4w=) 7: 80BFC9C0A69B11F19B5CE4323411F970.roa (hash: hSBb6yOl3I7oLDTq8wvA9Qk9AO6CNu5FP3RGDVCavF0=) 8: 0EB9C488501611F1BCA6FB50C1833773.roa (hash: hjLor0naDuB1MHE0ASMpLEp5N2HxCBYq1jwBVQbTUI4=) 9: 99161C06ADC411F194F1D1A63711F970.roa (hash: GsotaUbH2sML4fG2Cc2b4rOqx2RgTKogQEdObQ+bT9w=) 10: BCEB94DAA81A11F18448F1EC6E11F970.roa (hash: 7Ouv3JUrLICKOKUbAA1JzJHGvf72CwEZSx8VXOX0LQ0=) 11: 1wCS5DJcIinTxHbHRJ2-yCTbz5U.asa (hash: UC6v3B2MnVwTQPTxLuVGR2sUYP85iKwH8oYHkiiTra8=) 12: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9144 (0x23b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Sep 24 15:48:57 2026 GMT Not After : Oct 1 15:48:57 2026 GMT Subject: CN=6ab54669-e70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:54:6f:67:0b:98:b5:26:75:4c:1b:4d:89: 09:3f:f5:61:19:fe:85:e7:e7:55:52:ac:3b:e5:19: 7c:f4:87:5e:a1:cc:75:84:0e:32:e6:72:f1:e1:a9: 08:04:34:8f:3b:ab:db:8f:88:e0:95:30:d6:22:d1: 42:e4:3d:55:e6:7f:d2:01:70:e7:da:b7:c4:d8:62: 38:38:e3:8c:b1:d1:53:ab:e7:8c:26:6b:c5:c8:5e: ad:de:b9:7c:b8:4e:9d:f4:68:89:42:a8:3a:1a:a7: a0:c4:22:03:c4:4a:d3:91:b6:41:43:0c:16:0e:82: 22:24:26:a3:09:c5:6a:fa:43:d5:5d:57:43:46:63: 1f:a0:2b:91:cc:56:e9:00:bf:b6:de:43:9d:53:55: 1a:fe:40:30:97:c3:a1:71:26:ce:88:7d:9b:83:38: 11:a4:5d:77:98:5f:7d:d2:7b:db:df:43:b2:0d:77: d0:db:db:0f:3b:fe:6f:ab:ac:0f:db:3a:50:91:d6: cc:bd:66:46:37:6d:a7:6d:cd:19:32:a3:fa:14:ae: fd:9e:27:28:04:c3:02:3b:90:13:9d:92:a8:37:2f: a6:c3:b0:05:5b:67:70:b3:c2:6b:b1:71:59:a5:42: fc:14:bb:fa:39:15:1b:95:4f:ca:fd:b0:dc:c4:89: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:98:B3:08:B4:46:76:DB:D9:5E:33:8D:17:F0:15:87:7F:28:24:14 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:39:22:c2:2a:fe:45:c8:be:dc:7c:62:40:d9:35:ea:34:e5: b1:ac:ed:c5:72:6c:f9:34:3f:b5:be:e8:f6:94:ef:8e:0c:37: ca:10:68:22:c3:57:74:97:24:33:51:d8:72:19:c1:b6:00:c0: b6:ca:04:6c:0b:89:04:3a:75:80:33:0b:3a:1d:05:5f:3c:f1: d1:9c:de:a3:08:8f:36:c4:d0:10:6a:af:8b:89:5c:68:ee:f5: 40:c9:6f:7b:15:b4:c2:5b:0e:18:fd:5a:7f:76:86:2f:6e:e2: 3e:18:4e:49:35:0e:53:ec:1f:90:30:09:96:a1:45:09:20:97: ed:11:c8:5b:3e:67:1f:76:64:7a:5a:d6:59:f3:e6:9b:41:7d: 43:d9:38:17:69:a0:6a:19:1b:25:a7:fe:1b:00:10:c3:f2:1c: be:0d:75:2e:89:50:39:c2:1d:09:b8:8d:00:95:7c:80:c3:57: 63:f5:16:97:0c:86:76:0d:65:20:c7:c3:e0:b2:52:7f:83:25: bc:a5:9e:c0:5c:ba:33:44:9d:c1:2e:49:52:c9:c0:a9:4b:ac: d9:c6:fe:81:73:a0:8f:9b:78:ae:3e:09:8a:3a:a7:43:09:42: e6:31:97:1d:6c:7f:1d:1a:5e:28:dd:2d:79:93:00:95:0c:1a: e7:fa:f6:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwOTI0MTU0ODU3WhcNMjYxMDAxMTU0ODU3WjAYMRYwFAYD VQQDEw02YWI1NDY2OS1lNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqopUb2cLmLUmdUwbTYkJP/VhGf6F5+dVUqw75Rl89Ideocx1hA4y5nLx4akI BDSPO6vbj4jglTDWItFC5D1V5n/SAXDn2rfE2GI4OOOMsdFTq+eMJmvFyF6t3rl8 uE6d9GiJQqg6GqegxCIDxErTkbZBQwwWDoIiJCajCcVq+kPVXVdDRmMfoCuRzFbp AL+23kOdU1Ua/kAwl8OhcSbOiH2bgzgRpF13mF990nvb30OyDXfQ29sPO/5vq6wP 2zpQkdbMvWZGN22nbc0ZMqP6FK79nicoBMMCO5ATnZKoNy+mw7AFW2dws8JrsXFZ pUL8FLv6ORUblU/K/bDcxIlr9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCYswi0 Rnbb2V4zjRfwFYd/KCQUMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlzkiwir+Rci+3HxiQNk16jTlsaztxXJs+TQ/tb7o9pTvjgw3yhBoIsNXdJck M1HYchnBtgDAtsoEbAuJBDp1gDMLOh0FXzzx0ZzeowiPNsTQEGqvi4lcaO71QMlv exW0wlsOGP1af3aGL27iPhhOSTUOU+wfkDAJlqFFCSCX7RHIWz5nH3ZkelrWWfPm m0F9Q9k4F2mgahkbJaf+GwAQw/Icvg11LolQOcIdCbiNAJV8gMNXY/UWlwyGdg1l IMfD4LJSf4MlvKWewFy6M0SdwS5JUsnAqUus2cb+gXOgj5t4rj4JijqnQwlC5jGX HWx/HRpeKN0teZMAlQwa5/r24A== -----END CERTIFICATE-----Generated at Thu Sep 24 17:50:58 2026 by rpki-client