$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: txfgOCIE50Z8NWMdHWz4gFQwt99i1muLRZAv48twdto= Subject key identifier: 9C:85:DD:FE:A2:03:29:0D:27:0A:AE:F0:D1:30:87:8D:75:76:FD:63 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 02E5 Signing time: Wed 23 Sep 2026 01:01:45 +0000 Manifest this update: Wed 23 Sep 2026 01:01:45 +0000 Manifest next update: Wed 30 Sep 2026 01:01:45 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: WINpTRskUfpy6PIV3pN20xthfFHGDGTdKx2arXQIDVY=) 2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: dd4j1cMkfoQqlhKoNo5RMn6HGz5LML1C2NvGVZLqSDY=) 3: D3aCoPqKblQAIav7yYafPjAa_gw.asa (hash: 1aVy+bgOfWAPzgo5W1iz+66XID+mqsX5CTmdSYDd+3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Sep 23 01:01:45 2026 GMT Not After : Sep 30 01:01:45 2026 GMT Subject: CN=6ab324f9-41f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:e3:7f:f2:df:68:3e:02:25:ac:46:38:aa: ac:6b:0a:68:9e:cb:9f:17:dc:aa:3c:74:d3:6f:4c: 17:57:dc:72:71:b4:6f:6a:8f:1d:6f:5e:51:68:8a: 81:b8:f0:b5:8d:b0:c2:60:8f:bb:0e:7b:9b:9e:2c: 84:3a:78:4e:a1:00:7a:fa:47:d7:86:0e:b6:e0:bc: 77:0b:6c:9c:d9:46:42:93:a8:1e:5c:6f:c9:51:81: 13:9a:79:fd:4e:40:1f:9d:48:63:c0:09:e6:28:f9: 8b:70:13:3d:d0:05:2d:8b:86:e2:d5:74:0f:be:3f: 41:8b:4c:2e:ae:86:91:51:0f:28:01:67:07:20:ad: b3:f1:8d:77:a6:92:e7:ac:fa:0a:1e:88:eb:7a:04: 25:56:5a:06:db:06:06:c7:d5:f1:82:5d:38:54:e6: b2:ec:06:9a:9e:14:c1:70:80:36:9c:f2:98:ec:84: 7c:bb:00:a2:5c:bd:81:74:0e:9a:56:e1:d4:6f:d6: 5b:0b:0c:6d:71:76:b0:9e:37:a2:ce:b4:2f:32:fa: 77:a6:eb:27:39:cc:18:a0:b7:87:6e:d7:7d:7b:17: 3e:22:b0:6b:41:8c:be:38:92:0c:e7:56:66:f6:1d: 86:b9:b9:87:f8:9f:65:85:88:67:78:c3:71:5f:7d: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:DD:FE:A2:03:29:0D:27:0A:AE:F0:D1:30:87:8D:75:76:FD:63 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2d:62:13:1a:62:73:ae:3b:7f:ba:b0:71:87:f9:05:78:78: 54:0a:42:52:7c:99:ad:f8:b0:77:0b:74:67:2d:3a:03:20:f1: b1:b8:65:f7:87:1a:83:dc:9f:65:48:c5:89:e7:81:9d:38:5f: 88:cd:70:9f:af:f6:f0:e4:16:e1:34:78:57:00:95:c9:a1:63: 5a:f5:25:07:5c:ac:f4:77:24:b6:46:ba:ff:58:78:e4:2e:5a: e1:b1:fb:6c:0a:cb:d1:12:74:ee:7f:60:ec:36:f9:70:19:b3: ba:77:c0:33:c0:c1:3a:f6:c3:b3:16:81:1e:87:6e:ce:d7:b5: 1d:24:73:35:e7:57:83:e2:6a:a3:02:c1:d9:17:96:39:7f:d9: ff:18:e2:58:e0:5f:9a:93:2a:3e:bd:45:ef:f4:67:ff:e0:48: 3c:a8:3b:d2:a7:b3:31:db:95:c6:4b:0b:30:9c:d2:dc:7a:70: 52:74:1c:c2:44:ee:7b:18:a5:27:c7:04:62:2c:63:af:be:6d: 21:2b:ab:ba:90:c0:6d:d4:55:95:4d:60:28:35:2e:50:bb:92: 62:4d:44:b7:06:29:b5:38:44:9c:03:d6:36:50:34:dc:ea:a0: b9:ad:41:b6:34:32:4b:69:bb:e3:2f:d1:ba:b6:f0:ab:08:bc: 06:fa:7f:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjYwOTIzMDEwMTQ1WhcNMjYwOTMwMDEwMTQ1WjAYMRYwFAYD VQQDEw02YWIzMjRmOS00MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHbjf/LfaD4CJaxGOKqsawponsufF9yqPHTTb0wXV9xycbRvao8db15RaIqB uPC1jbDCYI+7DnubniyEOnhOoQB6+kfXhg624Lx3C2yc2UZCk6geXG/JUYETmnn9 TkAfnUhjwAnmKPmLcBM90AUti4bi1XQPvj9Bi0wuroaRUQ8oAWcHIK2z8Y13ppLn rPoKHojregQlVloG2wYGx9Xxgl04VOay7AaanhTBcIA2nPKY7IR8uwCiXL2BdA6a VuHUb9ZbCwxtcXawnjeizrQvMvp3pusnOcwYoLeHbtd9exc+IrBrQYy+OJIM51Zm 9h2GubmH+J9lhYhneMNxX33mvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyF3f6i AykNJwqu8NEwh411dv1jMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfi1iExpic647f7qwcYf5BXh4VApCUnyZrfiwdwt0Zy06AyDxsbhl94cag9yf ZUjFieeBnThfiM1wn6/28OQW4TR4VwCVyaFjWvUlB1ys9Hcktka6/1h45C5a4bH7 bArL0RJ07n9g7Db5cBmzunfAM8DBOvbDsxaBHoduzte1HSRzNedXg+JqowLB2ReW OX/Z/xjiWOBfmpMqPr1F7/Rn/+BIPKg70qezMduVxksLMJzS3HpwUnQcwkTuexil J8cEYixjr75tISurupDAbdRVlU1gKDUuULuSYk1EtwYptThEnAPWNlA03Oqgua1B tjQyS2m74y/Rurbwqwi8Bvp/kA== -----END CERTIFICATE-----Generated at Thu Sep 24 04:48:58 2026 by rpki-client