$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: IxpoWRVe4p9LbJxD7awWeKELkdc9lqk5dSca1TJ8eic= Subject key identifier: 94:4B:2E:00:CD:EA:39:EC:3B:6F:48:B3:45:2F:66:D4:08:C6:BC:E0 Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0A7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0A7E Signing time: Tue 22 Sep 2026 14:57:33 +0000 Manifest this update: Tue 22 Sep 2026 14:57:32 +0000 Manifest next update: Tue 29 Sep 2026 14:57:32 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: 7ZntdVaQyVUM9H74rWU3qI6p4bhYFFSq1DSOe2F63m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2686 (0xa7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Sep 22 14:57:32 2026 GMT Not After : Sep 29 14:57:32 2026 GMT Subject: CN=6ab2975d-2bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:f7:7b:44:81:57:32:a9:f1:ad:4f:c5:66: 55:c1:45:1b:91:b1:e5:97:5a:7d:a0:3b:e6:5b:e4: b1:8e:ae:56:51:75:97:79:a9:95:b4:e6:84:13:78: f8:57:83:20:89:af:8c:a8:f3:07:20:e0:be:9a:9d: 6b:cd:05:6c:f5:77:f7:7d:ce:ce:00:10:b2:e2:78: 78:d3:c6:51:28:63:5c:71:96:a5:30:46:dd:56:3d: c1:7c:d2:79:69:15:15:cc:d8:32:aa:9a:f4:5a:e8: 4c:a9:27:b6:cf:9f:4c:c9:39:df:68:eb:e8:4b:28: 57:f5:e5:3a:17:37:0f:da:02:c9:60:f2:c3:8b:cc: 94:29:4d:bc:88:5f:bc:62:09:30:ab:c8:86:65:4c: 06:da:f6:e4:a1:8d:8f:74:86:67:54:4e:0d:40:4c: de:c2:72:42:f7:77:59:34:99:e4:0d:f5:d0:06:f4: 8d:b7:56:a0:aa:f6:28:46:fb:39:ae:61:4e:02:a9: 5f:6d:ed:72:9f:7e:26:a2:4b:f8:b1:e8:76:31:49: 7b:9d:35:41:4a:fa:2f:20:32:20:38:9e:a6:d7:e5: 28:36:f0:3f:23:73:58:6d:59:bd:64:26:f2:71:ac: b3:cd:f2:1e:a9:8a:ce:b3:0b:0f:32:74:3f:af:28: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:2E:00:CD:EA:39:EC:3B:6F:48:B3:45:2F:66:D4:08:C6:BC:E0 X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d4:db:a3:fb:a0:a4:1b:87:32:d7:e8:09:11:f8:26:6e:71: 95:33:e9:cd:f4:4b:b7:55:27:7f:63:a5:6e:ea:ca:08:2b:ec: 0b:d9:eb:2d:13:6f:c4:95:ea:8f:69:c0:a3:b4:6a:39:dd:c6: fe:04:d1:34:b9:30:fc:36:53:0d:fd:4b:2e:65:47:bc:c0:0e: 1e:a4:3d:a4:78:ed:20:1e:57:aa:6d:7d:01:02:2f:d5:57:1f: 5b:50:45:5e:f3:30:30:f5:ce:b2:7c:4c:62:7e:db:b3:d2:bd: 19:37:cb:50:eb:e3:b9:58:86:28:c3:90:1f:ff:47:2f:71:c1: 9a:d7:8a:77:52:e7:ad:6d:2f:c9:d1:0a:7f:86:c3:22:a3:85: c4:da:fc:33:ca:d4:0e:f3:79:29:51:93:cc:dd:2d:50:3b:c0: 00:25:c9:93:10:7d:dd:97:30:24:8f:82:81:74:30:95:bf:96: 44:3b:1a:b3:70:f6:7d:d0:3d:1c:c4:23:05:ff:41:1e:aa:49: e6:89:8e:8b:52:fc:e5:e8:7e:d1:66:49:17:08:5a:58:ca:86: d6:5c:c4:96:75:2f:93:af:4c:03:a6:98:ca:1d:d0:ca:29:32: 24:42:25:50:7d:bb:a5:42:d4:fb:18:af:66:a7:b4:66:ab:33: 4e:36:bc:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjYwOTIyMTQ1NzMyWhcNMjYwOTI5MTQ1NzMyWjAYMRYwFAYD VQQDEw02YWIyOTc1ZC0yYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAko33e0SBVzKp8a1PxWZVwUUbkbHll1p9oDvmW+Sxjq5WUXWXeamVtOaEE3j4 V4Mgia+MqPMHIOC+mp1rzQVs9Xf3fc7OABCy4nh408ZRKGNccZalMEbdVj3BfNJ5 aRUVzNgyqpr0WuhMqSe2z59MyTnfaOvoSyhX9eU6FzcP2gLJYPLDi8yUKU28iF+8 Ygkwq8iGZUwG2vbkoY2PdIZnVE4NQEzewnJC93dZNJnkDfXQBvSNt1agqvYoRvs5 rmFOAqlfbe1yn34mokv4seh2MUl7nTVBSvovIDIgOJ6m1+UoNvA/I3NYbVm9ZCby cayzzfIeqYrOswsPMnQ/ryhVRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRLLgDN 6jnsO29Is0UvZtQIxrzgMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn9Tbo/ugpBuHMtfoCRH4Jm5xlTPpzfRLt1Unf2OlburKCCvsC9nrLRNvxJXq j2nAo7RqOd3G/gTRNLkw/DZTDf1LLmVHvMAOHqQ9pHjtIB5Xqm19AQIv1VcfW1BF XvMwMPXOsnxMYn7bs9K9GTfLUOvjuViGKMOQH/9HL3HBmteKd1LnrW0vydEKf4bD IqOFxNr8M8rUDvN5KVGTzN0tUDvAACXJkxB93ZcwJI+CgXQwlb+WRDsas3D2fdA9 HMQjBf9BHqpJ5omOi1L85eh+0WZJFwhaWMqG1lzElnUvk69MA6aYyh3QyikyJEIl UH27pULU+xivZqe0ZqszTja85Q== -----END CERTIFICATE-----Generated at Thu Sep 24 17:01:08 2026 by rpki-client