$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: 4HfYC9KfLHib8g3cyOuiJPu/9tFfEg+cm3zi+DlyLg0= Subject key identifier: 22:A3:E5:35:D8:CA:E5:57:4A:71:F1:5B:E4:0B:AB:C5:BB:3A:F9:D8 Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 9B Signing time: Thu 01 Oct 2026 08:44:49 +0000 Manifest this update: Thu 01 Oct 2026 08:44:48 +0000 Manifest next update: Thu 08 Oct 2026 08:44:48 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: HfX3kRwQwrC3XZb5m3C6q/bO5AHZZuYt0dqrc7YQQlc=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 08:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Oct 1 08:44:48 2026 GMT Not After : Oct 8 08:44:48 2026 GMT Subject: CN=6abe1d81-7874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:7b:76:dd:8f:9e:e1:5e:0c:8d:d0:2d:b4: 52:28:20:ec:74:f3:bf:90:7e:32:68:85:42:17:2e: b6:2a:bf:49:d1:46:d5:49:84:29:e0:bf:3b:0c:35: 4d:ed:72:e6:53:2d:a4:c7:66:9d:9c:22:10:70:1d: ff:d6:44:81:5b:08:d6:20:61:4f:e1:3a:15:5c:a1: 16:11:f3:17:9f:b6:27:4f:bc:62:75:75:4d:a9:d2: 9f:b2:e8:a4:32:d3:32:a5:5b:bb:0b:b9:7e:dc:52: 30:2c:db:35:29:20:8c:65:a3:b0:31:c1:61:11:76: 35:bc:a4:6f:d8:e2:c3:94:60:04:7f:0b:4b:c7:0a: 11:24:0c:e3:1f:70:00:d7:dd:10:87:3b:4d:91:63: f7:fe:8b:ca:59:07:2f:f0:b3:f9:76:19:16:91:c4: 07:0c:db:34:20:fb:9b:4f:4a:83:f3:71:ef:05:34: 8c:b8:b4:41:85:12:3d:cb:59:2e:db:53:06:14:9f: aa:11:10:e7:6a:e4:50:20:bd:87:09:79:8d:53:fb: ab:94:f6:f0:f5:ca:98:f0:67:4d:db:ad:ad:e2:a2: a5:79:f7:92:15:ff:78:72:db:b2:10:b0:f9:c4:b1: 24:ad:e2:87:f0:33:73:4b:ec:37:88:93:87:35:72: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:E5:35:D8:CA:E5:57:4A:71:F1:5B:E4:0B:AB:C5:BB:3A:F9:D8 X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c8:10:14:03:a0:97:2e:96:88:f5:a4:93:e5:fe:e8:75:58: 48:e3:79:1b:c4:50:d8:4d:34:92:e6:03:2b:d8:60:7a:f3:a8: d9:59:eb:d7:a3:56:af:21:89:4e:cd:1f:1c:e2:a8:f2:0f:20: 61:34:d4:42:39:69:26:08:11:fa:e7:cb:8d:29:2a:d4:f9:87: d9:f4:0d:2f:0b:08:d8:7e:7c:2e:bd:b7:d4:e1:5e:68:74:d7: 1e:f6:9c:cc:37:51:33:88:8f:c6:55:66:d5:bd:86:e2:27:64: 6f:a8:e5:01:01:47:5e:f3:d5:e3:a2:60:7a:57:47:71:b2:31: b7:42:29:d1:73:e3:9b:c6:63:22:8f:f1:b1:c2:b2:df:f0:04: da:37:e3:e2:a3:c2:c0:e1:af:e6:9b:e2:07:ff:9f:f0:e8:56: 82:7f:f7:c7:81:07:fd:a2:1e:24:b7:8b:f9:cd:6b:90:aa:5f: 52:7f:ed:09:b3:e3:45:71:bd:e2:fc:e1:24:e8:74:fc:d4:98: 57:76:59:45:78:ea:ef:b4:a5:7a:83:1d:f3:6b:78:d3:1b:6a: 4e:ef:a2:c1:d2:54:f5:af:99:00:34:39:57:c5:fa:44:4c:68: f7:54:a2:10:e8:ae:1a:ff:b1:a9:4e:6d:e3:7c:60:cc:15:9a: 80:f6:d2:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCMzkxMTAvBgNVBAUTKDcwRDhEODJCMjIxQTcxMjIwRUZENTgzRDkyRjczNjE3 NUU1RDAyRjEwHhcNMjYxMDAxMDg0NDQ4WhcNMjYxMDA4MDg0NDQ4WjAYMRYwFAYD VQQDEw02YWJlMWQ4MS03ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4p7dt2PnuFeDI3QLbRSKCDsdPO/kH4yaIVCFy62Kr9J0UbVSYQp4L87DDVN 7XLmUy2kx2adnCIQcB3/1kSBWwjWIGFP4ToVXKEWEfMXn7YnT7xidXVNqdKfsuik MtMypVu7C7l+3FIwLNs1KSCMZaOwMcFhEXY1vKRv2OLDlGAEfwtLxwoRJAzjH3AA 190QhztNkWP3/ovKWQcv8LP5dhkWkcQHDNs0IPubT0qD83HvBTSMuLRBhRI9y1ku 21MGFJ+qERDnauRQIL2HCXmNU/urlPbw9cqY8GdN262t4qKlefeSFf94ctuyELD5 xLEkreKH8DNzS+w3iJOHNXKOfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKj5TXY yuVXSnHxW+QLq8W7OvnYMB8GA1UdIwQYMBaAFHDY2CsiGnEiDv1YPZL3NhdeXQLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUIzOS81QUVGMjIyQ0Qy OTMxMUYwOENBNjVENzdDNEY5QUUwMi9jTmpZS3lJYWNTSU9fVmc5a3ZjMkYxNWRB dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUIzOS81QUVGMjIyQ0QyOTMxMUYwOENBNjVENzdDNEY5QUUwMi9jTmpZS3lJYWNT SU9fVmc5a3ZjMkYxNWRBdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABsgQFAOgly6WiPWkk+X+6HVYSON5G8RQ2E00kuYDK9hgevOo2Vnr16NWryGJ Ts0fHOKo8g8gYTTUQjlpJggR+ufLjSkq1PmH2fQNLwsI2H58Lr231OFeaHTXHvac zDdRM4iPxlVm1b2G4idkb6jlAQFHXvPV46JgeldHcbIxt0Ip0XPjm8ZjIo/xscKy 3/AE2jfj4qPCwOGv5pviB/+f8OhWgn/3x4EH/aIeJLeL+c1rkKpfUn/tCbPjRXG9 4vzhJOh0/NSYV3ZZRXjq77SleoMd82t40xtqTu+iwdJU9a+ZADQ5V8X6RExo91Si EOiuGv+xqU5t43xgzBWagPbSBw== -----END CERTIFICATE-----Generated at Fri Oct 2 21:40:37 2026 by rpki-client