$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: 6jClRzbZUNm4Wl2CG32bwd5QlWStSR877h41NQSk38w= Subject key identifier: 7A:F0:0D:89:13:11:9D:3C:B8:74:F8:43:07:A5:9B:5D:4C:80:AC:3D Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 0830 Signing time: Tue 22 Sep 2026 20:53:28 +0000 Manifest this update: Tue 22 Sep 2026 20:53:28 +0000 Manifest next update: Tue 29 Sep 2026 20:53:28 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: n2pV2LL7sd8Hzj1G/u/NRv0c43xYFnfyPsiu9DQhMWM=) 2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: Rlc9tIFJ76w9w+Q182kiW0dYBgbYcuIIgNLuRF6VH4A=) 3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: 9LuZa38M86RpuIBtOyu8RxTzdNFpAwgeI57izlLPJgA=) 4: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: tT41B0xJ+RDXXvQx3CB/Ui5y+1aA7lb07rB6KtZUBJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: Sep 22 20:53:28 2026 GMT Not After : Sep 29 20:53:28 2026 GMT Subject: CN=6ab2eac8-758f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:7d:c2:64:9a:25:81:fc:1c:07:e4:7c:c1: 32:fc:b4:fe:7b:32:7e:aa:4e:36:84:0d:2a:5c:5a: e9:bd:dd:46:38:25:0e:6f:d7:ee:c5:e3:32:92:c1: aa:76:50:e6:71:3f:ec:10:e2:3f:e4:be:5b:ab:64: 7b:85:40:88:f5:e7:d1:4b:5b:46:9e:4f:35:be:3e: f3:ac:4c:77:87:9a:65:9a:22:a3:5a:ce:f9:5b:55: db:09:21:f3:c3:1c:02:78:ec:d8:40:d2:6d:f6:67: 89:55:e3:a8:d0:44:eb:89:4a:73:76:4c:65:77:24: 02:0f:f6:ad:ae:52:67:7d:dd:94:6e:97:74:2d:9f: 79:5c:72:b0:96:61:6c:d2:ec:06:91:8d:b3:cb:0e: 03:c4:e1:66:0b:76:bb:60:c3:31:0c:e4:5b:17:15: 75:0b:26:95:60:5f:3c:15:18:ae:24:ed:1c:56:f5: 51:43:91:fd:5a:ea:ae:f4:9c:e2:64:ea:3b:20:b5: 4f:cb:66:ed:e2:e0:22:73:32:6c:ee:63:2c:ba:8d: da:64:e2:be:cf:35:ac:60:d5:ba:36:8d:a4:72:7a: 65:c2:dc:62:56:b4:c2:c8:16:fe:78:52:30:41:99: ed:89:14:19:e5:75:43:75:ab:45:53:ca:10:e5:6c: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F0:0D:89:13:11:9D:3C:B8:74:F8:43:07:A5:9B:5D:4C:80:AC:3D X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ea:4c:a7:0b:c0:ae:61:ea:43:a0:f2:60:5e:6c:13:11:03: f5:65:cf:f8:f3:3c:73:e9:c6:67:62:ca:ff:0e:e4:e1:af:83: 5e:e8:26:79:4c:49:cf:39:f7:f3:44:6c:5b:dc:9b:14:38:c2: 4a:33:d4:b6:08:7b:7d:58:de:51:3a:a9:00:d9:0d:10:79:d3: d9:c0:ef:1b:2e:61:67:ec:1f:bd:53:38:60:d8:16:ed:48:8a: 5a:29:fd:cd:12:d7:ac:b1:02:06:67:f5:7f:fd:4d:69:3a:65: 62:8e:ac:ca:e7:1c:2f:77:00:ce:6d:94:cd:3d:b5:be:52:a3: d5:81:40:c0:54:52:67:24:a9:f4:8f:5d:44:c1:cb:0d:4c:35: d8:4a:df:1d:5f:9c:68:6a:19:0b:50:7d:31:67:ec:4d:78:06: 1f:a9:33:37:23:51:40:ed:d8:73:d5:c4:c5:50:90:4f:a9:48: 87:17:b1:e1:64:ac:55:73:ec:31:9a:59:10:af:7c:30:38:f1: 89:b0:63:1d:36:60:ff:38:97:65:bf:9a:a3:5e:46:18:f1:41: 2e:9b:81:ba:e6:fe:36:24:f2:f7:9a:8e:5d:17:63:5b:0d:df: 2a:73:d1:53:2c:55:d8:f7:9a:ed:54:b9:ce:dd:20:4f:54:9e: cd:49:bc:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjYwOTIyMjA1MzI4WhcNMjYwOTI5MjA1MzI4WjAYMRYwFAYD VQQDEw02YWIyZWFjOC03NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmR9wmSaJYH8HAfkfMEy/LT+ezJ+qk42hA0qXFrpvd1GOCUOb9fuxeMyksGq dlDmcT/sEOI/5L5bq2R7hUCI9efRS1tGnk81vj7zrEx3h5plmiKjWs75W1XbCSHz wxwCeOzYQNJt9meJVeOo0ETriUpzdkxldyQCD/atrlJnfd2Ubpd0LZ95XHKwlmFs 0uwGkY2zyw4DxOFmC3a7YMMxDORbFxV1CyaVYF88FRiuJO0cVvVRQ5H9Wuqu9Jzi ZOo7ILVPy2bt4uAiczJs7mMsuo3aZOK+zzWsYNW6No2kcnplwtxiVrTCyBb+eFIw QZntiRQZ5XVDdatFU8oQ5WxuXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrwDYkT EZ08uHT4Qwelm11MgKw9MB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXepMpwvArmHqQ6DyYF5sExED9WXP+PM8c+nGZ2LK/w7k4a+DXugmeUxJzzn3 80RsW9ybFDjCSjPUtgh7fVjeUTqpANkNEHnT2cDvGy5hZ+wfvVM4YNgW7UiKWin9 zRLXrLECBmf1f/1NaTplYo6syuccL3cAzm2UzT21vlKj1YFAwFRSZySp9I9dRMHL DUw12ErfHV+caGoZC1B9MWfsTXgGH6kzNyNRQO3Yc9XExVCQT6lIhxex4WSsVXPs MZpZEK98MDjxibBjHTZg/ziXZb+ao15GGPFBLpuBuub+NiTy95qOXRdjWw3fKnPR UyxV2Pea7VS5zt0gT1SezUm8Lg== -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:54 2026 by rpki-client