$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: bsZFG8MO3ZOSLQRJ51w4jyKBViNNx1gW/qN9sQgYbFk= Subject key identifier: C1:AC:D6:64:0C:05:17:CD:24:4D:C6:C8:4B:9E:CA:16:EE:B3:24:5D Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 12BD Signing time: Thu 24 Sep 2026 05:33:43 +0000 Manifest this update: Thu 24 Sep 2026 05:33:43 +0000 Manifest next update: Thu 01 Oct 2026 05:33:43 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: Comjr7wf5UUQZImsgzVUU+qzN+m8LB6N9TObwaz8BFw=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: IkNZoaRzi6fB9RRMWn5BH65RrfY+xv1Hx872Jrr8QIw=) 3: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) 4: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 05:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4831 (0x12df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Sep 24 05:33:43 2026 GMT Not After : Oct 1 05:33:43 2026 GMT Subject: CN=6ab4b637-3a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:a2:a9:ac:05:18:a7:f3:fd:88:12:31:de: 7e:3e:f2:4f:51:44:75:7b:eb:0a:2b:66:38:02:d8: 19:bd:2a:76:04:f5:f9:0e:39:24:8b:58:5a:b8:ef: 36:42:34:5b:af:14:38:b5:1d:6c:cf:2f:a7:93:c3: 86:6a:51:0a:c6:a2:52:a5:bc:a4:b8:5f:6f:8f:9d: 30:7f:25:c6:e2:95:86:a1:b6:b1:2e:96:d8:83:ae: 31:b7:ee:65:b0:fb:d3:b4:31:20:c2:6c:2b:de:13: 08:7f:c4:d1:55:73:2a:4d:ac:d8:74:e2:ca:01:e2: 65:67:e6:80:1f:a7:d7:c4:c7:66:52:08:9b:4e:85: e8:33:fa:4d:db:ea:fd:a6:ed:25:b6:96:22:ca:45: 4d:3c:57:84:32:49:28:49:c5:ce:20:11:7d:05:6d: 45:58:60:35:8b:02:03:23:a5:dc:2d:1a:f0:e5:00: fe:0e:6c:48:6b:fa:f6:86:5b:74:a3:74:64:3a:99: fc:0b:70:e3:18:4b:cd:5d:58:41:5f:f5:c3:db:b5: 6f:21:37:c8:23:12:38:a1:f1:ff:e9:39:31:b5:81: 21:f2:82:68:4e:49:50:79:41:7a:34:95:81:85:17: cf:64:76:cc:81:f5:c2:11:87:8b:3c:59:c9:21:87: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AC:D6:64:0C:05:17:CD:24:4D:C6:C8:4B:9E:CA:16:EE:B3:24:5D X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:54:38:1d:05:1f:f3:30:ee:e4:6f:ac:c1:97:9b:55:70:31: ef:c1:6d:e3:71:aa:13:35:83:40:0f:59:16:ff:27:30:60:84: 16:11:78:09:25:61:85:33:6b:31:e5:75:37:5e:92:e8:48:20: a1:0a:28:22:2b:f8:75:cd:6a:3a:8a:ca:9b:06:6a:7a:22:7b: 2c:00:7d:5b:1f:50:9f:a4:cd:d1:59:de:30:92:71:ac:67:41: 87:48:ff:d5:73:dc:f0:0d:79:e6:92:ef:f7:5e:ca:8e:c0:a0: 46:c2:44:a0:cc:60:ad:5b:ce:8e:1c:5b:1a:b6:77:35:cf:58: c7:44:15:0b:c6:af:40:2c:b3:61:f0:05:c1:f7:17:76:c2:f1: 04:11:21:9c:2c:3d:ca:69:d6:63:f4:87:63:e0:83:13:b5:bd: f8:79:66:36:90:19:b0:0b:b9:c1:d4:4e:01:d4:aa:1e:5d:1d: c8:c2:96:b3:7f:2d:7c:07:b6:06:db:a0:48:9b:f8:f5:7f:7f: 78:72:1c:32:71:12:c5:4f:f1:71:08:ba:43:3b:53:76:44:2d: 14:e7:5a:16:91:fc:46:28:13:a0:6f:05:b7:4a:0a:63:21:01: 60:16:6e:ac:67:8d:ac:28:cd:96:f7:ec:e8:ea:7e:af:a8:47: 78:de:a9:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwOTI0MDUzMzQzWhcNMjYxMDAxMDUzMzQzWjAYMRYwFAYD VQQDEw02YWI0YjYzNy0zYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dKiqawFGKfz/YgSMd5+PvJPUUR1e+sKK2Y4AtgZvSp2BPX5Djkki1hauO82 QjRbrxQ4tR1szy+nk8OGalEKxqJSpbykuF9vj50wfyXG4pWGobaxLpbYg64xt+5l sPvTtDEgwmwr3hMIf8TRVXMqTazYdOLKAeJlZ+aAH6fXxMdmUgibToXoM/pN2+r9 pu0ltpYiykVNPFeEMkkoScXOIBF9BW1FWGA1iwIDI6XcLRrw5QD+DmxIa/r2hlt0 o3RkOpn8C3DjGEvNXVhBX/XD27VvITfIIxI4ofH/6TkxtYEh8oJoTklQeUF6NJWB hRfPZHbMgfXCEYeLPFnJIYfeNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGs1mQM BRfNJE3GyEueyhbusyRdMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnVQ4HQUf8zDu5G+swZebVXAx78Ft43GqEzWDQA9ZFv8nMGCEFhF4CSVhhTNr MeV1N16S6EggoQooIiv4dc1qOorKmwZqeiJ7LAB9Wx9Qn6TN0VneMJJxrGdBh0j/ 1XPc8A155pLv917KjsCgRsJEoMxgrVvOjhxbGrZ3Nc9Yx0QVC8avQCyzYfAFwfcX dsLxBBEhnCw9ymnWY/SHY+CDE7W9+HlmNpAZsAu5wdROAdSqHl0dyMKWs38tfAe2 BtugSJv49X9/eHIcMnESxU/xcQi6QztTdkQtFOdaFpH8RigToG8Ft0oKYyEBYBZu rGeNrCjNlvfs6Op+r6hHeN6pAw== -----END CERTIFICATE-----Generated at Thu Sep 24 10:53:19 2026 by rpki-client