$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json) Hash identifier: +sMTwsRgWSNl36ytC856WBCVmZNrOodp6tugxZWeDns= Subject key identifier: 52:83:B5:5C:FE:7D:31:32:76:1D:43:AC:74:78:AC:3D:D8:5A:5F:1C Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Certificate serial: 31B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft Manifest number: 31AA Signing time: Thu 24 Sep 2026 15:23:52 +0000 Manifest this update: Thu 24 Sep 2026 15:23:51 +0000 Manifest next update: Thu 01 Oct 2026 15:23:51 +0000 Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: +9ZQvn7aKUnftsl4peJX5q2apnB4V8E2BHOTgCoIyqk=) 2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: Ws4kXOycMxQBTaXBEjmznoXyRi5PYCjorSZYTJcdYNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12722 (0x31b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Validity Not Before: Sep 24 15:23:51 2026 GMT Not After : Oct 1 15:23:51 2026 GMT Subject: CN=6ab54088-663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:f6:cd:38:c6:f5:2a:7a:39:79:57:33:4d: d3:c8:a7:33:cb:59:5f:20:ba:a2:24:3f:f2:d1:71: 7d:00:fe:8c:2d:4e:8f:fb:d3:d5:ca:31:a4:58:1e: 29:6c:d4:95:2b:e3:e7:9d:c4:10:6c:39:46:20:fb: 5e:91:ad:a3:01:79:83:73:21:74:d3:85:69:0b:e5: 6b:55:4b:2a:2b:75:6d:26:0f:23:e5:ee:99:5c:58: 2e:24:2f:f7:2c:3e:c4:f8:9e:c3:ca:67:18:35:99: 5a:72:ef:7e:69:df:0e:76:6c:22:cf:4d:a4:2e:e1: 3b:c8:f6:46:df:36:c3:7e:42:6e:83:c5:a6:c4:26: 12:b0:8a:ff:e0:4b:e7:c8:e3:f4:8b:7d:cd:b0:d7: 10:1b:ce:cc:44:8d:e7:5e:e0:09:a1:ca:1d:fe:f4: af:23:13:81:7c:6f:66:28:4e:40:7c:32:b2:2f:19: a1:5d:00:cc:7c:e7:5d:91:26:c4:44:2b:67:be:13: aa:2f:4d:c2:ab:d1:4e:8c:4b:4a:9b:8f:0c:c9:da: 73:38:09:55:e5:26:9f:78:1a:59:02:92:e8:d2:5d: 75:7b:08:ae:03:32:34:d4:e2:7a:88:05:a2:da:ef: 9e:50:02:ec:55:16:18:bc:de:12:c8:21:42:12:3b: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:B5:5C:FE:7D:31:32:76:1D:43:AC:74:78:AC:3D:D8:5A:5F:1C X509v3 Authority Key Identifier: keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1b:41:27:2c:5f:7f:3d:6a:54:4f:22:9e:b6:67:be:be:30: 9b:5b:76:30:cf:f0:e4:ad:e9:1b:61:2a:40:c7:8c:ec:4c:96: 9a:ff:4d:62:cf:f5:a0:83:c9:3c:60:62:1d:90:fe:e1:db:13: a9:87:20:b5:68:c8:6d:a8:c0:7f:51:81:0f:ce:55:54:8f:ee: 93:25:2a:5d:03:0b:d0:62:12:38:75:38:57:5d:8b:fd:93:49: f7:fe:8a:95:11:fb:cb:e8:55:d9:1a:0e:f5:36:8f:e7:fc:f1: 58:24:2f:0e:be:1d:ff:4a:15:fe:0b:d7:60:4c:3a:1e:11:ac: d5:1f:87:10:08:31:ae:8a:7f:d2:a9:a7:4b:ff:b7:6b:f6:bf: 05:7d:7a:1d:24:49:0b:29:17:74:7f:a1:53:40:ed:2e:81:96: a9:c8:82:ec:b7:eb:6a:74:9f:75:1c:7b:ea:0f:58:6b:7d:6c: 4a:31:a9:9a:bd:36:86:0f:fa:16:f5:f4:e9:d3:27:6c:16:de: 01:05:20:16:76:aa:dd:de:e2:28:19:85:1c:fd:77:b0:1c:c8: 95:89:4f:00:45:f7:7d:88:3c:a5:c7:d4:48:ba:e1:81:50:02: 5c:79:5a:82:2a:6f:48:a2:96:d4:97:7f:28:a3:48:1b:80:41: 6e:9d:14:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2 NUZEODI5QzcwHhcNMjYwOTI0MTUyMzUxWhcNMjYxMDAxMTUyMzUxWjAYMRYwFAYD VQQDEw02YWI1NDA4OC02NjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2X2zTjG9Sp6OXlXM03TyKczy1lfILqiJD/y0XF9AP6MLU6P+9PVyjGkWB4p bNSVK+PnncQQbDlGIPteka2jAXmDcyF004VpC+VrVUsqK3VtJg8j5e6ZXFguJC/3 LD7E+J7DymcYNZlacu9+ad8Odmwiz02kLuE7yPZG3zbDfkJug8WmxCYSsIr/4Evn yOP0i33NsNcQG87MRI3nXuAJocod/vSvIxOBfG9mKE5AfDKyLxmhXQDMfOddkSbE RCtnvhOqL03Cq9FOjEtKm48MydpzOAlV5SafeBpZApLo0l11ewiuAzI01OJ6iAWi 2u+eUALsVRYYvN4SyCFCEjsiTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKDtVz+ fTEydh1DrHR4rD3YWl8cMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE anNXVmh0cUxxbFJsX1lLY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxtBJyxffz1qVE8inrZnvr4wm1t2MM/w5K3pG2EqQMeM7EyWmv9NYs/1oIPJ PGBiHZD+4dsTqYcgtWjIbajAf1GBD85VVI/ukyUqXQML0GISOHU4V12L/ZNJ9/6K lRH7y+hV2RoO9TaP5/zxWCQvDr4d/0oV/gvXYEw6HhGs1R+HEAgxrop/0qmnS/+3 a/a/BX16HSRJCykXdH+hU0DtLoGWqciC7LfranSfdRx76g9Ya31sSjGpmr02hg/6 FvX06dMnbBbeAQUgFnaq3d7iKBmFHP13sBzIlYlPAEX3fYg8pcfUSLrhgVACXHla gipvSKKW1Jd/KKNIG4BBbp0UXQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:35:06 2026 by rpki-client