$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: sWKZGDbXNQ8Q0dGr+L0jFcMDQwWDFylmNYYBx2e8hCY= Subject key identifier: 1F:97:B7:F3:50:B8:3F:05:B4:67:4D:22:B5:C0:3F:57:64:29:C0:B1 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1EC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1E99 Signing time: Sat 26 Sep 2026 16:06:00 +0000 Manifest this update: Sat 26 Sep 2026 16:05:59 +0000 Manifest next update: Sat 03 Oct 2026 16:05:59 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: NlJ6jBHszR8iInhquhL9IuPO2WN24LNwWPo+bIe97gQ=) 2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: KWWAb8DfO4jtgnLaEkzIxKcYV6WYtR19+RCj7lhTp9k=) 4: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7880 (0x1ec8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Sep 26 16:05:59 2026 GMT Not After : Oct 3 16:05:59 2026 GMT Subject: CN=6ab7ed67-dbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:3b:68:82:a2:b6:b4:d4:fc:99:7e:3f:9f: d0:00:00:82:5c:0b:b5:14:2e:b3:01:d3:b4:81:49: 26:1e:8d:18:5f:a0:9d:cc:5c:0b:76:9e:63:4b:91: e5:3a:a9:00:32:4a:13:73:25:98:ac:1c:f6:3d:93: d9:12:8c:24:27:4b:c9:c1:b3:2f:4e:31:4b:d6:94: ea:df:b2:0f:b1:90:ee:ae:85:41:41:3b:69:09:82: ad:ab:71:0e:a2:1b:09:97:3c:c8:1c:31:61:1f:41: fa:65:27:5b:aa:be:95:8e:72:bd:7c:dd:ee:67:12: a1:6b:96:64:c9:71:84:d7:46:75:ae:05:8d:5a:ae: ad:a9:68:f4:9e:75:e6:19:2c:ff:78:59:16:e9:ec: 91:ce:20:4c:1f:ca:40:f7:97:4b:ac:1f:b9:81:5e: 4b:60:3a:65:d1:af:f4:ad:32:ff:c3:e8:6a:c9:c0: 3a:26:46:15:f0:13:ec:09:75:8e:3b:85:e8:7c:97: ca:08:dc:52:5e:35:c9:58:ba:ad:ac:41:d0:7e:c9: 86:0f:9c:21:36:69:04:91:21:c3:50:90:59:20:e6: 24:8a:78:20:eb:18:3c:68:e3:a9:ea:03:2d:cc:1c: e6:7c:61:e9:f0:61:cb:e1:09:69:27:6a:41:de:e1: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:B7:F3:50:B8:3F:05:B4:67:4D:22:B5:C0:3F:57:64:29:C0:B1 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5c:2f:7e:25:12:3d:4f:cf:28:a3:5c:eb:1a:e0:bb:ed:45: ad:41:a8:98:2f:50:91:c1:1f:5a:3d:f8:e7:d5:c0:9b:dc:bc: a0:d0:ad:50:99:8c:34:58:f7:2a:a1:98:17:b1:74:db:ad:59: af:0a:a2:66:9f:a8:e5:8a:e9:fc:dd:c3:2c:5c:35:6b:d0:7c: 87:3e:0c:c7:69:12:be:39:6b:1a:4b:98:2c:63:5d:dc:12:e7: 62:16:ee:83:78:63:cc:f2:5d:2d:60:4d:ad:29:2f:10:ff:60: c5:01:17:d0:70:fd:e3:10:ae:fb:eb:95:2d:b9:a3:c8:2f:9d: 5c:f4:e2:da:be:37:e7:90:05:00:d9:e8:3c:db:bf:2e:65:99: a3:f2:ff:d0:5b:95:a7:49:63:1a:7b:b7:b6:01:9b:1e:18:9b: 10:d0:b7:28:3d:fb:13:52:ab:b9:8c:b3:04:c0:3a:e7:66:1e: 37:2f:3c:07:75:4f:76:fb:72:3d:20:5d:92:fd:44:a2:ce:68: f7:11:02:d0:95:a2:48:f5:34:1c:65:f1:9e:51:21:be:fc:40: 2d:27:62:52:a8:22:4e:12:95:70:00:9f:66:a9:9f:44:a9:1e: ef:0c:a7:7b:6f:9c:f5:d7:26:5d:49:5b:2f:86:66:74:49:51: 78:e5:80:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwOTI2MTYwNTU5WhcNMjYxMDAzMTYwNTU5WjAYMRYwFAYD VQQDEw02YWI3ZWQ2Ny1kYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5A7aIKitrTU/Jl+P5/QAACCXAu1FC6zAdO0gUkmHo0YX6CdzFwLdp5jS5Hl OqkAMkoTcyWYrBz2PZPZEowkJ0vJwbMvTjFL1pTq37IPsZDuroVBQTtpCYKtq3EO ohsJlzzIHDFhH0H6ZSdbqr6VjnK9fN3uZxKha5ZkyXGE10Z1rgWNWq6tqWj0nnXm GSz/eFkW6eyRziBMH8pA95dLrB+5gV5LYDpl0a/0rTL/w+hqycA6JkYV8BPsCXWO O4XofJfKCNxSXjXJWLqtrEHQfsmGD5whNmkEkSHDUJBZIOYkingg6xg8aOOp6gMt zBzmfGHp8GHL4QlpJ2pB3uHIDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+Xt/NQ uD8FtGdNIrXAP1dkKcCxMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT1wvfiUSPU/PKKNc6xrgu+1FrUGomC9QkcEfWj3459XAm9y8oNCtUJmMNFj3 KqGYF7F0261ZrwqiZp+o5Yrp/N3DLFw1a9B8hz4Mx2kSvjlrGkuYLGNd3BLnYhbu g3hjzPJdLWBNrSkvEP9gxQEX0HD94xCu++uVLbmjyC+dXPTi2r4355AFANnoPNu/ LmWZo/L/0FuVp0ljGnu3tgGbHhibENC3KD37E1KruYyzBMA652YeNy88B3VPdvty PSBdkv1Eos5o9xEC0JWiSPU0HGXxnlEhvvxALSdiUqgiThKVcACfZqmfRKke7wyn e2+c9dcmXUlbL4ZmdElReOWAFg== -----END CERTIFICATE-----Generated at Sat Sep 26 22:19:17 2026 by rpki-client