$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft File: eHnvTZd9yKcBAzr1eKtUikC2lOE.mft (raw, json) Hash identifier: T6GxKu6CrbmhxkLKo+MnlDK8maZ7998W7MA/blTx0sw= Subject key identifier: B6:4C:F1:E5:E7:13:A2:F7:6B:37:F9:7B:C1:75:1A:89:AC:23:29:41 Authority key identifier: 78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 Certificate issuer: /CN=A91F0EF9/serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft Manifest number: 20 Signing time: Fri 25 Sep 2026 09:01:34 +0000 Manifest this update: Fri 25 Sep 2026 09:01:33 +0000 Manifest next update: Fri 02 Oct 2026 09:01:33 +0000 Files and hashes: 1: eHnvTZd9yKcBAzr1eKtUikC2lOE.crl (hash: K+y4ITCwipGxEPLxvulMYWHHwrBlYhrlO+dcO4a3e5I=) 2: 2C9C69108A9A11F1AFC3D80E4E11F970.roa (hash: uSqkn8LIl8mlBYrH3ffPd4fErtRj9+veTGhqeaUcpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EF9, serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Validity Not Before: Sep 25 09:01:33 2026 GMT Not After : Oct 2 09:01:33 2026 GMT Subject: CN=6ab6386e-0134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:8a:ea:f2:f6:7b:87:7a:93:dd:7e:f2:9e: c8:b5:89:41:b7:ac:35:9a:78:27:70:a1:ed:f9:cc: 23:36:e2:fb:47:6f:e9:ec:6d:76:db:1d:5b:86:dd: 12:bd:25:78:c8:87:90:bf:22:aa:3c:5f:71:4a:c2: a1:82:cb:ad:fb:cd:91:5a:ad:92:02:06:21:b6:4d: 91:1a:92:ec:5f:8a:fb:a3:7e:9a:19:53:0a:55:4c: d2:bd:4a:92:d2:cb:b7:04:f5:c1:43:03:6e:d1:f1: a4:d2:28:c8:46:8b:44:1e:d1:25:77:16:28:e1:eb: 97:cb:c5:37:01:c3:f7:15:a1:83:66:7e:a0:c9:1b: b8:ac:e4:68:6a:48:38:f0:7f:12:33:78:e0:67:61: 2a:bd:11:37:55:85:fa:3c:47:a1:47:5b:21:a4:64: df:65:8c:90:33:6e:70:10:1d:d9:08:51:0f:54:ca: a5:cc:ec:c7:2f:ff:ca:f7:6b:74:73:83:dd:bb:82: 26:82:0e:2e:ac:77:b7:28:66:b3:f9:b6:c0:89:77: a2:c9:3c:b6:d3:9c:be:3c:15:eb:24:ef:fd:08:18: 15:50:bc:42:e8:9b:6f:0c:07:63:e9:b0:6d:36:f0: 8c:a9:26:db:df:55:d0:1c:a4:af:6d:ff:c3:a3:d8: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4C:F1:E5:E7:13:A2:F7:6B:37:F9:7B:C1:75:1A:89:AC:23:29:41 X509v3 Authority Key Identifier: keyid:78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a7:8d:9f:67:eb:f2:01:88:31:73:1f:b7:89:ec:1f:cc:92: 6d:25:c9:73:8a:e9:1d:c9:0e:e7:96:06:04:cd:ca:2b:f6:b6: 18:09:0d:a3:0f:b6:d9:3d:70:fe:10:99:ed:74:a6:e0:ae:06: 1b:b1:29:a7:a2:11:06:ef:17:9c:f0:0d:b4:54:46:ce:8a:cf: b2:75:33:e8:4d:99:d5:b0:78:10:82:d9:31:62:f0:cd:09:68: cd:2c:4d:e5:b5:23:1f:3b:e8:97:d1:eb:e5:8f:56:f6:16:58: ae:46:04:2c:85:17:ff:68:95:6f:83:ac:72:5c:14:52:03:3e: 2f:06:c6:b9:81:f4:ea:01:c3:4a:3b:4f:73:90:68:a8:f3:bd: dc:f1:9a:c5:16:fe:95:57:5e:ec:c9:22:e7:43:e5:96:47:68: 85:1c:a3:22:fc:53:5b:54:71:3c:32:5b:52:dd:24:71:e2:64: 8c:da:46:86:4b:70:cc:13:62:28:5f:4d:9a:3b:3b:ce:cb:0f: df:13:49:83:a0:83:2f:3f:f0:07:f4:01:5e:fd:62:56:d1:ac: e4:23:f6:dd:29:61:de:5a:5c:33:35:6a:6e:aa:ed:52:c7:45: 72:f8:75:c9:e5:96:47:36:a5:ab:cf:96:5a:9b:ee:11:60:5a: 32:2f:4f:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEVGOTExMC8GA1UEBRMoNzg3OUVGNEQ5NzdEQzhBNzAxMDMzQUY1NzhBQjU0OEE0 MEI2OTRFMTAeFw0yNjA5MjUwOTAxMzNaFw0yNjEwMDIwOTAxMzNaMBgxFjAUBgNV BAMTDTZhYjYzODZlLTAxMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCWorq8vZ7h3qT3X7ynsi1iUG3rDWaeCdwoe35zCM24vtHb+nsbXbbHVuG3RK9 JXjIh5C/Iqo8X3FKwqGCy637zZFarZICBiG2TZEakuxfivujfpoZUwpVTNK9SpLS y7cE9cFDA27R8aTSKMhGi0Qe0SV3Fijh65fLxTcBw/cVoYNmfqDJG7is5GhqSDjw fxIzeOBnYSq9ETdVhfo8R6FHWyGkZN9ljJAzbnAQHdkIUQ9UyqXM7Mcv/8r3a3Rz g927giaCDi6sd7coZrP5tsCJd6LJPLbTnL48Fesk7/0IGBVQvELom28MB2PpsG02 8IypJtvfVdAcpK9t/8Oj2DJZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtkzx5ecT ovdrN/l7wXUaiawjKUEwHwYDVR0jBBgwFoAUeHnvTZd9yKcBAzr1eKtUikC2lOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwRUY5L0UyOTA2QUFDOEE5 ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtjQkF6cjFlS3RVaWtDMmxP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUhudlRaZDl5S2NCQXpyMWVLdFVpa0MybE9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw RUY5L0UyOTA2QUFDOEE5ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtj QkF6cjFlS3RVaWtDMmxPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0p42fZ+vyAYgxcx+3iewfzJJtJclziukdyQ7nlgYEzcor9rYYCQ2jD7bZPXD+ EJntdKbgrgYbsSmnohEG7xec8A20VEbOis+ydTPoTZnVsHgQgtkxYvDNCWjNLE3l tSMfO+iX0evlj1b2FliuRgQshRf/aJVvg6xyXBRSAz4vBsa5gfTqAcNKO09zkGio 873c8ZrFFv6VV17sySLnQ+WWR2iFHKMi/FNbVHE8MltS3SRx4mSM2kaGS3DME2Io X02aOzvOyw/fE0mDoIMvP/AH9AFe/WJW0azkI/bdKWHeWlwzNWpuqu1Sx0Vy+HXJ 5ZZHNqWrz5Zam+4RYFoyL0+Q -----END CERTIFICATE-----Generated at Fri Sep 25 15:34:05 2026 by rpki-client