$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: nz5aKErOhvpr2ctTeSljtSdwwpkx/sUH3FWzGhYLVFE= Subject key identifier: A7:37:E3:F4:68:35:69:6B:EF:EC:29:8A:A8:30:8A:72:DF:A6:F1:22 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 08C1 Signing time: Tue 22 Sep 2026 20:20:29 +0000 Manifest this update: Tue 22 Sep 2026 20:20:28 +0000 Manifest next update: Tue 29 Sep 2026 20:20:28 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: Q/4MYQZFJbmuFC6gMUsPlDEo6PCM46mpaiEYuqiowp0=) 2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 99jEiPZckviVtuXJZrsVhVTNS0+5/ramRtJfm1GkHO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: Sep 22 20:20:28 2026 GMT Not After : Sep 29 20:20:28 2026 GMT Subject: CN=6ab2e30c-79ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:de:6e:6f:f1:92:d2:86:ae:f5:78:53:0c: 41:b1:50:82:04:6b:11:6d:41:9f:16:09:4c:bb:35: fd:0d:26:6d:6e:bd:2f:af:64:23:ac:a0:0b:18:36: 2a:33:12:01:a1:b9:0a:09:44:4e:8f:01:9f:f4:00: 63:53:c1:29:96:fe:35:06:ba:9c:a7:0e:57:d9:44: b8:ea:6d:6e:4f:61:de:3b:ac:80:1f:df:89:9b:46: fc:b3:2b:93:06:83:67:5b:df:b9:9e:ec:12:36:fc: d4:3d:30:e0:02:c6:9a:f0:f1:08:8a:a6:c7:84:aa: 9a:4e:1b:c2:c7:77:8c:a1:fb:b2:19:b3:9c:e6:cc: 05:b9:d0:e0:19:76:62:59:ac:ff:12:cf:06:73:73: 55:15:33:07:90:3a:c4:27:de:3d:33:ff:e1:e4:bd: a2:4b:55:c2:d4:23:e1:e7:a5:47:27:2b:51:de:58: cd:69:da:a2:96:73:e8:64:9f:65:42:e8:b6:28:68: 65:c3:3f:aa:c6:8f:ef:e5:a2:39:d6:f8:ef:86:c3: 3c:98:4d:18:cc:e8:e2:68:2b:0c:ab:d4:c5:33:bb: 79:17:6e:d0:04:0c:a4:71:19:11:37:9f:66:6c:68: 51:e4:89:c1:da:30:51:81:aa:94:07:42:35:65:c5: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:E3:F4:68:35:69:6B:EF:EC:29:8A:A8:30:8A:72:DF:A6:F1:22 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:6d:b8:75:9a:59:cf:15:2e:dd:25:c2:1b:b4:37:c8:58:59: 0d:2d:3a:f0:3a:bb:cd:8a:64:6b:a3:e6:b8:21:6d:0e:ef:38: 3f:46:1e:9d:9b:4f:0e:ac:7b:fd:04:d5:d7:74:36:e8:8f:06: b4:3e:3c:b4:6a:7f:85:9b:6d:69:e8:5a:b1:66:96:5b:36:7a: ba:85:48:55:3a:83:9f:df:14:3e:48:ab:b6:c4:4b:2d:4d:7b: 44:63:87:a8:d5:43:71:b1:66:5b:b9:9f:7d:98:0c:af:ed:43: 84:29:79:4e:3d:85:4b:17:48:b6:76:5b:b1:c2:68:60:b8:51: bc:84:05:c8:c4:65:91:b1:ef:66:4a:a7:50:3e:88:07:72:fa: 09:83:da:9f:65:11:96:0e:78:a0:a0:da:54:6f:71:dc:18:ca: 13:f6:d3:5c:ac:b0:7b:91:b4:32:86:ad:c0:7d:01:35:bd:91: 13:da:7a:92:52:9e:a4:89:48:18:a0:35:5c:1d:48:8f:c2:93: 07:a3:66:c3:bd:ec:b4:fa:f7:30:e8:e4:67:64:bf:3f:85:a3: e7:a0:0e:4b:2a:c7:6d:df:7f:8e:26:e9:91:f1:53:47:79:86: 58:59:01:fd:c6:1e:fd:96:32:47:1b:31:32:15:47:f6:88:9a: 35:20:e2:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjYwOTIyMjAyMDI4WhcNMjYwOTI5MjAyMDI4WjAYMRYwFAYD VQQDEw02YWIyZTMwYy03OWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnPebm/xktKGrvV4UwxBsVCCBGsRbUGfFglMuzX9DSZtbr0vr2QjrKALGDYq MxIBobkKCUROjwGf9ABjU8Eplv41Brqcpw5X2US46m1uT2HeO6yAH9+Jm0b8syuT BoNnW9+5nuwSNvzUPTDgAsaa8PEIiqbHhKqaThvCx3eMofuyGbOc5swFudDgGXZi Waz/Es8Gc3NVFTMHkDrEJ949M//h5L2iS1XC1CPh56VHJytR3ljNadqilnPoZJ9l Qui2KGhlwz+qxo/v5aI51vjvhsM8mE0YzOjiaCsMq9TFM7t5F27QBAykcRkRN59m bGhR5InB2jBRgaqUB0I1ZcXx2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKc34/Ro NWlr7+wpiqgwinLfpvEiMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY224dZpZzxUu3SXCG7Q3yFhZDS068Dq7zYpka6PmuCFtDu84P0YenZtPDqx7 /QTV13Q26I8GtD48tGp/hZttaehasWaWWzZ6uoVIVTqDn98UPkirtsRLLU17RGOH qNVDcbFmW7mffZgMr+1DhCl5Tj2FSxdItnZbscJoYLhRvIQFyMRlkbHvZkqnUD6I B3L6CYPan2URlg54oKDaVG9x3BjKE/bTXKywe5G0MoatwH0BNb2RE9p6klKepIlI GKA1XB1Ij8KTB6Nmw73stPr3MOjkZ2S/P4Wj56AOSyrHbd9/jibpkfFTR3mGWFkB /cYe/ZYyRxsxMhVH9oiaNSDi6A== -----END CERTIFICATE-----Generated at Thu Sep 24 03:24:57 2026 by rpki-client