$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: sbWAA59PHfvTh8uOMQJXBfeBA5yTl7MwHNP79IvFSPc= Subject key identifier: AB:1C:03:22:03:D2:DD:1A:66:E0:2F:6F:52:0A:AF:DA:DE:2C:C1:95 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0C4B Signing time: Sat 26 Sep 2026 18:49:17 +0000 Manifest this update: Sat 26 Sep 2026 18:49:17 +0000 Manifest next update: Sat 03 Oct 2026 18:49:17 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: QOoZIOl6tLoY3jmwb0B4NYczwvmbNTE/KCxZymjbNiQ=) 2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: LDiFdNaZoZIrEKZ4J2tu1FR/lQxHX7nyvF7xLwKiOpI=) 3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: ay4GIuiEnpuYZETBZhn2rjkhmfn883sJShryuS/KCcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Sep 26 18:49:17 2026 GMT Not After : Oct 3 18:49:17 2026 GMT Subject: CN=6ab813ad-fed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:27:bd:2a:c0:22:e1:e1:8f:0b:be:ec:c4: b2:90:88:cd:97:fa:49:44:12:fa:65:aa:35:d4:98: 6c:42:c2:ce:3b:91:67:9a:87:e1:d4:4c:3c:1d:d1: dd:3d:5c:17:89:a7:3c:e2:c9:9f:05:35:71:c0:e5: 3a:c1:7b:6b:db:fa:ad:c1:a3:c8:09:ab:5a:96:16: 3a:81:d6:d6:18:55:3d:71:f0:03:6f:b3:8a:1c:51: 3f:e6:67:d2:10:d8:4e:8e:c3:e0:de:5d:47:1b:ed: 17:79:a5:a5:8b:67:9c:70:1a:92:11:ed:d9:10:ad: 02:bb:cc:c4:0a:64:51:7f:05:ac:af:46:28:42:94: 53:46:56:52:8c:9b:3b:d8:68:16:23:c8:a3:4b:da: 16:bc:45:c2:9e:01:7f:37:81:84:7a:68:36:06:27: 93:51:1b:12:61:67:04:06:38:ab:b7:e8:e6:86:91: 27:15:83:6c:ad:43:fb:4b:85:5e:be:4f:3f:b5:a1: 45:ea:46:ce:11:d2:6f:73:6c:ac:44:b1:6d:cb:e2: 21:0d:ce:d4:61:89:aa:99:58:2d:a7:78:40:23:ab: 33:d7:48:1a:e5:91:66:68:7b:c2:ff:8e:32:37:f5: 24:e7:b4:60:7e:09:da:c6:a2:3f:0c:87:24:06:c9: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1C:03:22:03:D2:DD:1A:66:E0:2F:6F:52:0A:AF:DA:DE:2C:C1:95 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6c:6f:43:fd:09:00:ff:e9:ed:b3:40:23:82:2f:1b:f9:3e: f4:c7:7c:3f:c4:1d:b4:63:76:aa:ad:30:51:34:fe:14:a7:db: 9a:0c:7d:d5:0d:66:5f:de:b6:f1:fd:9d:a6:f9:ce:b1:77:76: 0b:03:a6:2d:40:41:1d:62:1d:0e:cc:bf:3e:94:69:00:bf:fd: d2:69:ae:8a:91:bd:f8:86:05:33:fc:8e:a1:bf:09:d4:fb:e2: 3a:da:d1:85:ae:2e:7d:d4:ce:b8:66:ca:2d:94:af:05:0b:1a: 82:a8:bf:e9:ab:e5:bd:79:7f:58:87:65:5e:c2:b9:93:55:69: a2:3c:7a:0d:68:6a:a6:1e:a9:cc:a7:16:27:b0:d0:d0:ab:f5: 75:26:66:62:fb:c5:cc:72:3a:af:b0:79:eb:55:73:cf:14:39: b9:d4:4c:93:58:b9:a2:57:d5:3f:f2:f7:57:a2:9d:ee:ce:b1: 63:98:cd:c0:f7:60:4b:74:d9:e0:57:23:d4:5c:3d:bd:45:8a: 8b:a3:20:1f:07:28:e9:38:c0:26:f9:ce:a7:36:8c:c0:09:dd: 4b:d8:10:60:0c:de:57:dc:3e:14:2a:0d:ab:9f:d5:9d:57:13: 4f:d7:7d:92:39:18:ab:46:ac:c8:39:81:65:7f:8c:a7:6f:25: 2d:bb:f7:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjYwOTI2MTg0OTE3WhcNMjYxMDAzMTg0OTE3WjAYMRYwFAYD VQQDEw02YWI4MTNhZC1mZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2knvSrAIuHhjwu+7MSykIjNl/pJRBL6Zao11JhsQsLOO5Fnmofh1Ew8HdHd PVwXiac84smfBTVxwOU6wXtr2/qtwaPICatalhY6gdbWGFU9cfADb7OKHFE/5mfS ENhOjsPg3l1HG+0XeaWli2eccBqSEe3ZEK0Cu8zECmRRfwWsr0YoQpRTRlZSjJs7 2GgWI8ijS9oWvEXCngF/N4GEemg2BieTURsSYWcEBjirt+jmhpEnFYNsrUP7S4Ve vk8/taFF6kbOEdJvc2ysRLFty+IhDc7UYYmqmVgtp3hAI6sz10ga5ZFmaHvC/44y N/Uk57RgfgnaxqI/DIckBsmxmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKscAyID 0t0aZuAvb1IKr9reLMGVMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHWxvQ/0JAP/p7bNAI4IvG/k+9Md8P8QdtGN2qq0wUTT+FKfbmgx91Q1mX962 8f2dpvnOsXd2CwOmLUBBHWIdDsy/PpRpAL/90mmuipG9+IYFM/yOob8J1PviOtrR ha4ufdTOuGbKLZSvBQsagqi/6avlvXl/WIdlXsK5k1Vpojx6DWhqph6pzKcWJ7DQ 0Kv1dSZmYvvFzHI6r7B561VzzxQ5udRMk1i5olfVP/L3V6Kd7s6xY5jNwPdgS3TZ 4Fcj1Fw9vUWKi6MgHwco6TjAJvnOpzaMwAndS9gQYAzeV9w+FCoNq5/VnVcTT9d9 kjkYq0asyDmBZX+Mp28lLbv3Vw== -----END CERTIFICATE-----Generated at Sun Sep 27 21:24:46 2026 by rpki-client