$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: dcGP3THyOSWdhsm+6ZWpHpJqJaY4LFZB8y+RsSMBWNc= Subject key identifier: 2E:9D:DA:21:AF:FE:A1:A1:B9:D5:AD:97:B4:62:35:2E:97:A9:91:E9 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 017E Signing time: Wed 23 Sep 2026 04:29:45 +0000 Manifest this update: Wed 23 Sep 2026 04:29:45 +0000 Manifest next update: Wed 30 Sep 2026 04:29:45 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: JIii4ToIYbbKsmiCDQ2gps9ebhLsStm0AdiGVzvr9ho=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: of9gDmyx98htPYcM2lAvW1XGnxUh1bmJa4MFK/pfI3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Sep 23 04:29:45 2026 GMT Not After : Sep 30 04:29:45 2026 GMT Subject: CN=6ab355b9-d26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:23:1f:7c:5b:2d:74:18:52:4f:54:5a:56: b6:6a:ac:6a:b1:98:cd:dc:c0:50:82:4b:6e:d0:14: a5:52:93:29:65:3e:6c:0f:df:85:3f:a9:66:5d:fc: 4a:a6:a4:be:b4:7a:68:e0:ec:42:74:3b:a8:64:5d: 11:0c:a7:a5:4d:b0:2b:9a:7d:18:c2:3c:2e:96:8d: 33:e6:a0:bc:a7:04:f7:05:88:be:44:7f:24:74:6e: 51:f1:fd:fe:4f:f3:1d:4a:ef:cd:cf:f5:16:4c:c5: c2:ac:46:9f:26:d5:a7:a2:06:af:f7:67:1e:ea:c2: 2d:1b:0d:be:fb:1d:20:bf:7c:ed:7b:d4:7b:cb:e4: 83:51:e7:31:d3:94:80:5b:5d:00:72:ea:25:d6:bd: 36:fa:13:35:f3:77:a7:9c:6f:f4:4e:a5:be:9e:ba: 62:9c:bb:ce:3c:07:ce:a9:3c:c2:7d:ab:fc:4b:6e: cc:31:8c:d9:c5:7a:82:c4:03:2a:dc:c2:be:66:70: 68:f0:9d:64:d9:c8:93:31:c7:7c:47:56:10:af:1d: 3f:05:17:0b:52:8d:d3:a6:98:1a:fb:6a:58:8a:98: f3:34:55:6e:ed:8c:ee:8c:96:e7:6b:b0:10:fc:24: 66:76:78:68:6f:e7:16:e1:85:6f:6b:e9:c7:da:d6: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9D:DA:21:AF:FE:A1:A1:B9:D5:AD:97:B4:62:35:2E:97:A9:91:E9 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c4:a9:44:4f:23:4e:a2:a4:8f:12:07:89:8a:d8:ef:50:db: 4b:9e:f6:f0:ef:e1:6f:f2:72:e1:6b:c7:34:90:57:a6:9a:cc: f4:80:da:5d:f2:81:bb:32:f8:56:85:8c:9b:75:6a:d2:bc:92: 1a:20:4e:4f:f7:40:e5:87:c5:ba:21:f6:1e:21:dd:15:df:78: 39:e2:61:97:83:6a:c7:ee:ed:26:c4:3b:9b:87:da:33:7a:9f: 08:18:49:e1:54:07:18:91:a1:01:59:93:2c:40:c6:e0:b3:b7: e2:be:b0:0d:da:51:5a:cc:2b:01:38:f0:7c:d6:67:35:f8:aa: f4:70:40:31:ec:6d:9f:b9:15:4a:78:fc:da:c3:75:71:1a:4d: 80:ce:13:ca:b8:9a:fc:46:c3:d7:2f:8d:a8:08:fa:fe:47:ef: d8:aa:24:cb:5f:d0:7a:bc:f9:ce:23:70:49:4b:2a:ce:b2:4c: 57:18:2d:aa:4e:a5:54:3e:bb:11:01:c2:75:73:5d:bc:fa:c3: cc:3c:b8:cb:96:a5:57:06:80:de:ef:c3:ac:b2:6f:e1:30:fc: 3a:37:21:89:22:96:8c:38:d1:c4:64:52:57:43:48:0a:28:7c: da:16:23:61:63:f2:cc:62:ff:ad:b8:a0:a1:37:2d:d5:d5:8e: d7:11:cf:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjYwOTIzMDQyOTQ1WhcNMjYwOTMwMDQyOTQ1WjAYMRYwFAYD VQQDEw02YWIzNTViOS1kMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqQjH3xbLXQYUk9UWla2aqxqsZjN3MBQgktu0BSlUpMpZT5sD9+FP6lmXfxK pqS+tHpo4OxCdDuoZF0RDKelTbArmn0Ywjwulo0z5qC8pwT3BYi+RH8kdG5R8f3+ T/MdSu/Nz/UWTMXCrEafJtWnogav92ce6sItGw2++x0gv3zte9R7y+SDUecx05SA W10Acuol1r02+hM183ennG/0TqW+nrpinLvOPAfOqTzCfav8S27MMYzZxXqCxAMq 3MK+ZnBo8J1k2ciTMcd8R1YQrx0/BRcLUo3Tppga+2pYipjzNFVu7YzujJbna7AQ /CRmdnhob+cW4YVva+nH2taXVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6d2iGv /qGhudWtl7RiNS6XqZHpMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmsSpRE8jTqKkjxIHiYrY71DbS5728O/hb/Jy4WvHNJBXpprM9IDaXfKBuzL4 VoWMm3Vq0rySGiBOT/dA5YfFuiH2HiHdFd94OeJhl4Nqx+7tJsQ7m4faM3qfCBhJ 4VQHGJGhAVmTLEDG4LO34r6wDdpRWswrATjwfNZnNfiq9HBAMextn7kVSnj82sN1 cRpNgM4Tyria/EbD1y+NqAj6/kfv2Koky1/Qerz5ziNwSUsqzrJMVxgtqk6lVD67 EQHCdXNdvPrDzDy4y5alVwaA3u/DrLJv4TD8OjchiSKWjDjRxGRSV0NICih82hYj YWPyzGL/rbigoTct1dWO1xHPvg== -----END CERTIFICATE-----Generated at Fri Sep 25 02:43:56 2026 by rpki-client