$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: Yfe9IrbkUv7Pp1+Z0/eUUmF1rVPCsovFiycML5ljr4c= Subject key identifier: 2D:30:44:F5:43:E7:1A:E9:AB:91:6A:F7:01:53:78:25:52:62:2D:D9 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 0900 Signing time: Tue 22 Sep 2026 20:06:59 +0000 Manifest this update: Tue 22 Sep 2026 20:06:58 +0000 Manifest next update: Tue 29 Sep 2026 20:06:58 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: 1kxGmezUu2962CTyYYfddiXOhKYl65d344dxkbc9siA=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: ExKqdydhojznLUa2qTmZ090PQ3IkD20WWF5a7geuqAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Sep 22 20:06:58 2026 GMT Not After : Sep 29 20:06:58 2026 GMT Subject: CN=6ab2dfe3-8b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:ef:fb:2d:99:55:05:ec:f8:0f:e0:8c:7e: ab:d3:7e:a3:e9:ab:77:a8:19:8e:cf:39:79:1d:4a: 60:9e:7a:04:de:30:7e:c2:08:dd:9a:a4:0f:67:18: 2a:92:47:5e:8f:48:4c:26:bd:e7:e1:77:da:18:b4: 13:6a:ca:05:be:38:e3:41:84:9b:c0:a3:74:ae:cb: 42:f9:cf:bb:5d:d1:d2:42:25:fe:b9:17:37:0c:f3: 7c:36:39:7b:ba:bc:0b:9a:33:ed:8b:09:80:e2:bf: 24:0a:e6:bb:35:48:d2:d1:dc:00:9a:2d:6f:82:e7: 5f:b8:34:27:fd:16:82:51:4f:9a:1b:b9:50:3d:04: 79:35:e3:95:c3:e9:57:6b:c7:b8:18:ab:c8:1b:b7: af:45:45:83:0d:77:af:73:d0:2e:16:7f:54:e3:eb: b1:b2:49:f6:0e:a1:4c:d4:d8:3e:5c:7b:0b:0b:e5: ba:f1:3a:be:13:53:8c:95:21:26:d7:81:c7:f5:58: 46:3a:81:3c:aa:42:b2:42:1c:db:f9:f6:02:56:24: 26:cb:8b:0f:c0:4e:45:62:db:35:69:22:14:83:a5: 19:f9:96:38:5a:a9:77:1d:b5:5c:f0:aa:51:74:04: ae:80:fc:c7:10:69:2e:aa:f8:5b:c0:49:87:41:ca: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:44:F5:43:E7:1A:E9:AB:91:6A:F7:01:53:78:25:52:62:2D:D9 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a3:82:80:ef:1a:a8:fe:27:ad:dc:c9:6b:c7:25:7a:12:47: 40:bd:10:ea:7b:bc:06:46:da:9c:c6:ea:e2:91:a8:76:30:fb: af:7a:e5:b6:df:eb:84:75:8a:eb:ae:29:ce:47:8e:de:49:e6: 5f:a4:7b:52:28:84:d6:d6:e6:74:f8:f0:11:cf:fd:04:22:14: 16:15:ef:40:3e:06:e0:55:59:37:a2:31:f2:85:a4:90:b6:e2: 30:86:13:09:eb:53:da:f4:ac:4d:00:0e:74:6b:33:ff:80:77: 32:16:9f:e2:c5:5f:d2:ea:4f:04:e6:e8:d3:e8:2a:a1:34:97: 9e:80:c7:67:20:93:10:79:cc:d4:ad:57:6e:67:69:c3:84:7b: f6:b1:aa:17:98:dd:17:0f:95:f8:62:ed:5c:88:f6:4f:f1:44: 77:97:be:5f:32:09:e1:17:7b:68:4b:7b:a9:c5:f1:19:23:1d: 6c:69:74:eb:54:e6:d8:44:c6:75:a2:82:c2:b6:00:c8:7c:55: ab:f8:49:78:eb:ad:42:2f:c5:c8:14:7b:04:6d:38:8e:7f:ea: a9:5a:08:f4:70:a4:98:9d:55:d7:bf:43:d8:d6:51:c9:1b:a5: 86:31:38:1a:00:be:a7:2c:67:4b:86:db:92:75:26:7c:4f:b1: 8f:51:e9:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjYwOTIyMjAwNjU4WhcNMjYwOTI5MjAwNjU4WjAYMRYwFAYD VQQDEw02YWIyZGZlMy04YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6J/v+y2ZVQXs+A/gjH6r036j6at3qBmOzzl5HUpgnnoE3jB+wgjdmqQPZxgq kkdej0hMJr3n4XfaGLQTasoFvjjjQYSbwKN0rstC+c+7XdHSQiX+uRc3DPN8Njl7 urwLmjPtiwmA4r8kCua7NUjS0dwAmi1vgudfuDQn/RaCUU+aG7lQPQR5NeOVw+lX a8e4GKvIG7evRUWDDXevc9AuFn9U4+uxskn2DqFM1Ng+XHsLC+W68Tq+E1OMlSEm 14HH9VhGOoE8qkKyQhzb+fYCViQmy4sPwE5FYts1aSIUg6UZ+ZY4Wql3HbVc8KpR dASugPzHEGkuqvhbwEmHQcp8AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0wRPVD 5xrpq5Fq9wFTeCVSYi3ZMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQqOCgO8aqP4nrdzJa8clehJHQL0Q6nu8BkbanMbq4pGodjD7r3rltt/rhHWK 664pzkeO3knmX6R7UiiE1tbmdPjwEc/9BCIUFhXvQD4G4FVZN6Ix8oWkkLbiMIYT CetT2vSsTQAOdGsz/4B3Mhaf4sVf0upPBObo0+gqoTSXnoDHZyCTEHnM1K1Xbmdp w4R79rGqF5jdFw+V+GLtXIj2T/FEd5e+XzIJ4Rd7aEt7qcXxGSMdbGl061Tm2ETG daKCwrYAyHxVq/hJeOutQi/FyBR7BG04jn/qqVoI9HCkmJ1V179D2NZRyRulhjE4 GgC+pyxnS4bbknUmfE+xj1Hpkg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:30:23 2026 by rpki-client