$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: NTwza7pNOL/F4uDWO9rRXiiyyi9h3zcNGe72Z+PNEt0= Subject key identifier: A5:E7:5C:E0:4E:F7:7F:06:20:5D:3A:34:B6:37:B9:CF:A0:B4:5B:7B Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: 0289 Signing time: Mon 21 Sep 2026 03:46:24 +0000 Manifest this update: Mon 21 Sep 2026 03:46:24 +0000 Manifest next update: Mon 28 Sep 2026 03:46:24 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: svf8UEwnD05+81eweXq8hQcr9S6NcAuXsU67KQnB3ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Sep 21 03:46:24 2026 GMT Not After : Sep 28 03:46:24 2026 GMT Subject: CN=6ab0a890-d433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:11:41:d5:6d:3a:bf:f4:5d:d7:e7:35:47: 65:05:fd:68:c9:3e:be:a0:0a:df:8c:dd:63:87:f5: df:02:d0:de:63:7e:5d:72:8c:a0:16:36:98:d0:d1: 6f:0b:35:b8:48:ac:a7:2d:6a:9e:f1:18:10:c0:9d: 2d:d2:1e:a8:31:6f:54:87:82:bc:4c:a8:6f:4f:3f: c9:3d:c6:1b:ea:27:4e:ce:3e:cb:72:e4:ee:1f:7a: 66:63:39:67:cd:fc:51:fd:ac:8c:a7:4e:78:d0:63: 2e:2a:72:07:7a:c3:a9:b8:36:52:4d:a4:fa:de:6e: 2b:1a:c3:22:ab:89:fc:5c:07:10:b5:58:f1:71:d8: bd:8d:12:8e:c8:a5:5f:21:0c:3b:e5:54:21:8c:1c: 15:b2:24:7e:c8:32:40:8d:ac:8e:68:f3:3d:23:9a: 81:35:5b:4a:e0:b1:69:60:22:8a:2e:1f:75:91:67: 49:23:78:3e:90:a8:47:ab:86:bb:5c:1b:7b:76:98: 0c:59:8e:0b:48:0b:c8:ad:c1:58:f1:ba:39:16:8b: 12:de:9a:d2:c7:20:e0:ba:ec:b6:72:2c:af:26:7e: 99:a5:1c:08:66:49:05:60:7b:be:c2:d5:63:a4:a9: 91:1b:19:1b:42:95:55:c8:85:ac:e7:e2:c4:cf:37: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E7:5C:E0:4E:F7:7F:06:20:5D:3A:34:B6:37:B9:CF:A0:B4:5B:7B X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:10:7c:ed:a5:8b:02:87:47:8c:0f:5d:d2:7c:9a:9f:20:19: 70:df:2b:d2:45:74:cf:d4:02:4e:d7:70:da:b7:d3:18:30:50: a3:74:ac:9b:b7:4b:6d:20:7d:33:5b:90:a6:7d:c0:0b:cd:cd: 1e:cb:ca:2b:63:74:7e:6b:6a:c5:9d:1e:36:3a:2f:4d:17:f5: 33:05:fd:4a:f1:e7:b3:49:73:60:5a:61:85:38:4f:68:eb:a0: 1d:a1:80:bf:27:22:ef:14:5c:11:42:aa:9d:85:f5:b3:5a:44: 3d:3a:b5:de:ef:b1:ad:fa:f3:23:e3:1b:5b:d8:4c:40:98:41: f8:c2:ad:7e:a3:40:93:66:ad:df:0c:ad:ef:3f:84:e9:b8:11: 4e:f5:8d:d3:4b:58:5d:cf:0d:99:28:c7:de:ce:95:ac:a5:ca: 62:f9:f9:32:26:20:73:d9:38:73:c7:d7:ae:04:f5:f5:0e:6d: c7:48:d7:de:d0:cd:7c:16:15:40:1f:de:a0:89:bb:9c:e8:6e: ae:77:6c:bd:d2:cb:d8:92:6f:3d:47:4e:c9:cc:ac:49:c6:b9: 69:45:1a:44:24:d9:9d:d2:dd:04:87:58:1f:a4:ea:76:d9:0b: 08:b6:d8:ce:b6:78:05:dd:fe:9e:68:5d:5b:0e:57:cf:6f:05: 6a:3a:ef:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjYwOTIxMDM0NjI0WhcNMjYwOTI4MDM0NjI0WjAYMRYwFAYD VQQDEw02YWIwYTg5MC1kNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn8RQdVtOr/0XdfnNUdlBf1oyT6+oArfjN1jh/XfAtDeY35dcoygFjaY0NFv CzW4SKynLWqe8RgQwJ0t0h6oMW9Uh4K8TKhvTz/JPcYb6idOzj7LcuTuH3pmYzln zfxR/ayMp0540GMuKnIHesOpuDZSTaT63m4rGsMiq4n8XAcQtVjxcdi9jRKOyKVf IQw75VQhjBwVsiR+yDJAjayOaPM9I5qBNVtK4LFpYCKKLh91kWdJI3g+kKhHq4a7 XBt7dpgMWY4LSAvIrcFY8bo5FosS3prSxyDguuy2ciyvJn6ZpRwIZkkFYHu+wtVj pKmRGxkbQpVVyIWs5+LEzze/LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXnXOBO 938GIF06NLY3uc+gtFt7MB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQxB87aWLAodHjA9d0nyanyAZcN8r0kV0z9QCTtdw2rfTGDBQo3Ssm7dLbSB9 M1uQpn3AC83NHsvKK2N0fmtqxZ0eNjovTRf1MwX9SvHns0lzYFphhThPaOugHaGA vyci7xRcEUKqnYX1s1pEPTq13u+xrfrzI+MbW9hMQJhB+MKtfqNAk2at3wyt7z+E 6bgRTvWN00tYXc8NmSjH3s6VrKXKYvn5MiYgc9k4c8fXrgT19Q5tx0jX3tDNfBYV QB/eoIm7nOhurndsvdLL2JJvPUdOycysSca5aUUaRCTZndLdBIdYH6TqdtkLCLbY zrZ4Bd3+nmhdWw5Xz28FajrvOg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:14:32 2026 by rpki-client