$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: fmGzDvqNqkmv9Dvdf/5MIXJDRWuc2YQdYswsm79MT7w= Subject key identifier: 4F:78:8A:7F:C3:97:45:84:CF:D6:61:12:88:51:24:88:E7:7B:8B:84 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0E5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0E52 Signing time: Tue 22 Sep 2026 17:39:57 +0000 Manifest this update: Tue 22 Sep 2026 17:39:56 +0000 Manifest next update: Tue 29 Sep 2026 17:39:56 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: s1YTzMgcckJcrrpNdWAlLeDLTARAm5fMJAMVNotxQ20=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Sep 22 17:39:56 2026 GMT Not After : Sep 29 17:39:56 2026 GMT Subject: CN=6ab2bd6d-c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:b3:aa:b6:bc:6d:d3:a4:60:0c:6a:c3:45: ba:bd:2c:f3:fb:93:d8:5f:7b:a2:0a:58:9a:38:ae: ab:00:a4:b9:8f:a7:40:05:3e:4d:ea:03:b6:d6:ef: 27:74:29:4f:e2:b5:96:e1:4c:12:11:ef:c3:87:4a: 2f:19:ee:dd:eb:d9:fa:49:f5:36:46:53:fe:a3:12: 19:50:ed:bd:75:4c:32:59:a5:7f:7f:d3:88:63:20: ea:04:2e:79:55:29:4b:36:b7:d4:86:a0:d9:06:67: 0d:3a:68:2f:ba:87:a8:4b:cf:c8:2c:0a:07:22:ee: 45:56:30:a1:cb:da:8c:e2:ad:f7:65:92:7a:55:90: ce:13:4c:37:55:32:d2:ea:c3:29:2f:4d:96:b8:9c: 30:07:00:df:1f:1e:49:d3:57:4e:5f:9a:c0:68:a5: ed:f4:7a:7d:95:97:a4:67:d0:95:14:56:71:66:df: 50:e9:0f:f9:f0:10:b7:13:f0:8f:25:20:95:5f:0f: ef:6f:a9:40:6a:8b:a4:1b:3d:d7:7d:0f:86:e1:b9: dd:f6:9b:86:8d:98:52:fe:c4:57:a4:2d:22:8f:c0: 5a:cb:a7:b8:88:b2:bd:be:d6:cf:07:40:9d:2e:32: 8c:57:e6:3d:ba:c9:8e:62:0a:5e:fd:8f:e6:b0:63: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:78:8A:7F:C3:97:45:84:CF:D6:61:12:88:51:24:88:E7:7B:8B:84 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ce:1a:81:8e:d6:ac:b9:0b:b6:d1:ef:91:15:70:30:0f:89: ae:75:54:f2:8c:2d:ad:64:be:ac:b9:9a:9a:29:05:93:ec:4c: 11:cd:be:51:dd:d8:36:f0:3f:78:33:a6:8a:39:f8:72:74:3c: 83:8e:9c:62:87:30:b0:12:97:2e:99:59:51:09:9f:ac:b6:ef: 6d:18:b5:c0:c2:da:33:f4:84:1f:12:83:cf:56:3a:5e:a7:40: 55:8c:03:86:46:3a:e7:32:9f:6f:5b:b7:74:77:2d:6c:0c:f4: c0:65:a8:48:6c:82:ea:7d:b4:88:6e:05:99:90:e9:e3:f9:f8: 2e:d3:e3:d8:73:eb:02:c9:1a:4f:4a:cc:9e:1a:b5:48:af:a7: 4e:e8:de:f4:c7:4a:59:e0:2e:cd:08:ab:ad:a9:dc:a2:17:a8: 45:13:54:96:b9:23:14:39:8f:5d:57:4e:54:58:a0:2c:ec:63: 04:7a:67:e8:4e:6a:5d:50:53:7c:3f:14:44:71:5d:91:08:64: d5:b9:fc:33:3c:a2:f3:c6:96:76:9c:1d:1e:da:a8:53:64:d2: 25:93:7c:a5:8b:89:a7:d3:af:f7:b8:c2:08:55:6f:36:5a:40: 74:3a:6a:65:41:c2:c7:ba:b4:36:4f:3a:9c:07:a7:c4:75:62: 8f:2c:fb:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwOTIyMTczOTU2WhcNMjYwOTI5MTczOTU2WjAYMRYwFAYD VQQDEw02YWIyYmQ2ZC1jNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX2zqra8bdOkYAxqw0W6vSzz+5PYX3uiCliaOK6rAKS5j6dABT5N6gO21u8n dClP4rWW4UwSEe/Dh0ovGe7d69n6SfU2RlP+oxIZUO29dUwyWaV/f9OIYyDqBC55 VSlLNrfUhqDZBmcNOmgvuoeoS8/ILAoHIu5FVjChy9qM4q33ZZJ6VZDOE0w3VTLS 6sMpL02WuJwwBwDfHx5J01dOX5rAaKXt9Hp9lZekZ9CVFFZxZt9Q6Q/58BC3E/CP JSCVXw/vb6lAaoukGz3XfQ+G4bnd9puGjZhS/sRXpC0ij8Bay6e4iLK9vtbPB0Cd LjKMV+Y9usmOYgpe/Y/msGMPSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE94in/D l0WEz9ZhEohRJIjne4uEMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAas4agY7WrLkLttHvkRVwMA+JrnVU8owtrWS+rLmamikFk+xMEc2+Ud3YNvA/ eDOmijn4cnQ8g46cYocwsBKXLplZUQmfrLbvbRi1wMLaM/SEHxKDz1Y6XqdAVYwD hkY65zKfb1u3dHctbAz0wGWoSGyC6n20iG4FmZDp4/n4LtPj2HPrAskaT0rMnhq1 SK+nTuje9MdKWeAuzQirrancoheoRRNUlrkjFDmPXVdOVFigLOxjBHpn6E5qXVBT fD8URHFdkQhk1bn8Mzyi88aWdpwdHtqoU2TSJZN8pYuJp9Ov97jCCFVvNlpAdDpq ZUHCx7q0Nk86nAenxHVijyz78A== -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:15 2026 by rpki-client