$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: 4wsqQ2JGYOYqxqAm7HSK5ZyaCiD4Bx8hjcWKAa7MeWY= Subject key identifier: 9F:FD:F2:D7:07:C8:98:3C:73:BE:E4:E9:21:55:C4:78:8A:D2:5E:38 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 10C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 107D Signing time: Tue 22 Sep 2026 17:17:37 +0000 Manifest this update: Tue 22 Sep 2026 17:17:36 +0000 Manifest next update: Tue 29 Sep 2026 17:17:36 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: Kah3Feu685R4LoXAL2vSNOl2x9LlOgy292eJb7XNuag=) 2: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WR/88pfaCczDigHpfgd4GYy1P6qmyhWsOy4WabOWrlU=) 3: B3876B1821C911EB991D562EC4F9AE02.roa (hash: PAJXVnplsOIegEPXMbATwr923PfH+sXu4QP6bOY+9aU=) 4: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) 5: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: RfbqC8GS1hHzeb5ag3voBDbpoO632YWZC1e96BmW8tY=) 6: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: bx80odAXkY0MYIUdPq3Se5Z99i5ov0hqTySdt08ambI=) 7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: m1jd0Q2D9k3+2i/d4GmRzebyVctCB9sAwMGAQxkAF/8=) 8: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: j42PYjWNb/mnyEI0E6+iq6JxrFxqeSi6M5a2jMZwTdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4295 (0x10c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Sep 22 17:17:36 2026 GMT Not After : Sep 29 17:17:36 2026 GMT Subject: CN=6ab2b831-c93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:9b:a9:d3:92:73:ef:b6:29:c0:ac:9d:da: 13:35:9c:fe:83:58:af:60:6a:8f:10:ef:8c:db:ec: 80:c6:7c:81:cb:00:00:3f:da:9a:8e:e6:78:55:d2: 6a:26:89:c2:dc:e6:d2:64:f3:25:5c:d3:34:69:79: 60:48:1b:f0:a5:54:cb:c3:f4:55:aa:d8:91:60:99: ee:e2:59:63:89:02:7a:4e:b0:23:a4:80:0f:76:2b: 65:f6:b1:be:73:c9:ed:81:2b:5c:3b:16:82:f3:a4: 05:7d:fd:3e:4f:72:71:9d:f8:f7:d2:55:85:3d:67: cd:f6:49:c2:47:a5:5d:6a:9b:fb:92:e0:64:cc:77: 5c:24:68:e8:76:55:dd:d0:51:1f:af:1f:cc:21:cf: b1:65:2a:14:3c:e7:23:fc:25:47:4d:b5:4c:42:25: d5:cb:7a:cf:79:d0:8f:17:c8:c6:fc:74:a5:85:f2: 38:cd:42:bc:43:00:1b:67:1f:69:2f:b7:ba:dc:be: 0a:60:52:c8:f9:6d:25:1a:e0:9a:77:4d:33:0b:8a: 54:ca:03:69:3f:68:7b:f5:02:34:2b:a6:4a:62:04: 38:de:78:99:14:d2:b8:2d:97:14:68:9d:6d:e3:fa: 8f:6b:18:6d:d6:21:b0:43:b4:10:8f:4d:9d:2d:6e: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:F2:D7:07:C8:98:3C:73:BE:E4:E9:21:55:C4:78:8A:D2:5E:38 X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:21:ac:5a:e2:b0:71:ba:b8:00:7b:56:9e:16:06:04:a7:96: bd:9f:a4:71:d9:70:d0:c8:b7:52:9c:0c:79:d1:6c:9b:a6:fe: b8:11:8c:f9:ca:a0:80:b3:b2:e4:fe:26:b2:89:a1:eb:2e:a1: ea:80:a7:51:1d:be:02:f3:c1:d3:2c:87:bb:cf:6c:8f:0d:97: f8:f7:be:3a:af:e1:d9:8d:e1:41:73:9a:e5:c2:7a:79:78:3a: f9:05:c4:66:c1:f5:ff:55:51:85:38:d3:e7:98:4e:a4:26:e3: 8c:8b:e1:e6:fa:ac:4b:6d:97:89:70:f8:a5:36:30:32:c4:e6: a2:b1:61:c7:23:06:6d:4e:31:ad:d5:77:4c:53:e3:3d:64:34: 04:7a:d2:51:ab:87:68:f1:ee:c0:67:f4:87:34:8e:7b:65:d1: 6b:83:0d:50:fd:33:14:5d:be:4d:59:cf:c0:23:20:1d:31:d8: ed:70:3f:64:a4:98:3f:52:fa:b4:31:79:f7:48:f0:2c:df:19: 7f:9a:26:15:bf:65:6d:19:8f:fa:fa:a2:99:13:07:fd:e5:4c: 38:f4:a8:e2:6b:bb:36:a8:48:f6:f2:2e:0f:16:94:68:c5:d2: 69:0e:e6:db:39:13:cf:f4:8c:87:c8:a0:d0:94:3d:ba:20:d1: 73:73:8c:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYwOTIyMTcxNzM2WhcNMjYwOTI5MTcxNzM2WjAYMRYwFAYD VQQDEw02YWIyYjgzMS1jOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpybqdOSc++2KcCsndoTNZz+g1ivYGqPEO+M2+yAxnyBywAAP9qajuZ4VdJq JonC3ObSZPMlXNM0aXlgSBvwpVTLw/RVqtiRYJnu4lljiQJ6TrAjpIAPditl9rG+ c8ntgStcOxaC86QFff0+T3Jxnfj30lWFPWfN9knCR6Vdapv7kuBkzHdcJGjodlXd 0FEfrx/MIc+xZSoUPOcj/CVHTbVMQiXVy3rPedCPF8jG/HSlhfI4zUK8QwAbZx9p L7e63L4KYFLI+W0lGuCad00zC4pUygNpP2h79QI0K6ZKYgQ43niZFNK4LZcUaJ1t 4/qPaxht1iGwQ7QQj02dLW732QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/98tcH yJg8c77k6SFVxHiK0l44MB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnCGsWuKwcbq4AHtWnhYGBKeWvZ+kcdlw0Mi3UpwMedFsm6b+uBGM+cqggLOy 5P4msomh6y6h6oCnUR2+AvPB0yyHu89sjw2X+Pe+Oq/h2Y3hQXOa5cJ6eXg6+QXE ZsH1/1VRhTjT55hOpCbjjIvh5vqsS22XiXD4pTYwMsTmorFhxyMGbU4xrdV3TFPj PWQ0BHrSUauHaPHuwGf0hzSOe2XRa4MNUP0zFF2+TVnPwCMgHTHY7XA/ZKSYP1L6 tDF590jwLN8Zf5omFb9lbRmP+vqimRMH/eVMOPSo4mu7NqhI9vIuDxaUaMXSaQ7m 2zkTz/SMh8ig0JQ9uiDRc3OMrA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:13:59 2026 by rpki-client