$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: d70OIhiAUNjnwaONdBonnPg1U7DXjUyJQwrgNozd22s= Subject key identifier: 12:83:CB:61:CB:AC:ED:B4:27:CC:92:00:77:4A:A3:30:99:F3:C7:B1 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0423 Signing time: Tue 22 Sep 2026 23:58:31 +0000 Manifest this update: Tue 22 Sep 2026 23:58:30 +0000 Manifest next update: Tue 29 Sep 2026 23:58:30 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: GsRTCYbxsTlZasW2DgcJ5KK0G1+w2xFXBvGaOeZFVek=) 2: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: OOByC8/uw6ffnIWwfvMTnrrm+xO8XKIBxcxBWMrFOjo=) 3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: MD5jR5tpYJlNlwKY582qX3evpCpiOhexciEbOh4B16Q=) 4: EA2C5116450411F09738105FC4F9AE02.roa (hash: Xr2VYUhkH0/de+tQtfsGqNTFcSg1V81ZtLTrfEbPMyY=) 5: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: xtfMhsvCmNC/KLnIedjo12Ghs4JLU1JBpj4bKmYOfGI=) 6: EAAF7884450411F09738105FC4F9AE02.roa (hash: s7PvGMjj7mjpLP1ZkrrYQzfCt7Nowhw1ZhztentGrbk=) 7: EB1C709C450411F09738105FC4F9AE02.roa (hash: kKSTbR+tVpgjH6vhWqQI0BMVxGVtvEw6KnQiqBQIJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Sep 22 23:58:30 2026 GMT Not After : Sep 29 23:58:30 2026 GMT Subject: CN=6ab31627-cc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:cd:22:dc:d8:c1:73:14:37:49:4a:19:90: 80:07:59:89:ab:4c:b0:d4:e3:70:4d:d3:3a:11:83: 76:ee:ab:0f:d1:4f:44:5f:b6:a1:45:bc:f3:b9:2d: fd:2a:f0:b9:9e:e3:8a:f8:74:07:cd:2d:af:6e:4c: 14:52:e5:4c:cb:a7:39:ed:4c:89:54:d8:fc:e9:85: db:22:52:f4:88:1e:a8:11:31:f9:cb:d9:c5:75:ec: 90:14:1d:1b:56:48:67:68:78:dd:52:5a:90:49:86: 1d:8e:20:9b:d1:50:aa:db:55:78:da:7e:62:98:2f: db:a4:94:85:e8:0c:23:50:47:03:b0:79:af:d5:6c: d0:16:87:2b:94:ca:dd:b7:39:6f:13:cf:80:ee:1f: e1:75:dd:30:2b:4b:2e:71:87:c1:e5:a3:6a:77:da: 5c:90:f7:a3:e2:51:85:00:a9:f3:38:3d:70:65:2d: 79:14:64:ed:e3:2a:b0:35:e0:ef:86:8a:7e:e9:bf: 5e:7b:6e:f2:ea:2f:3b:24:47:a2:8a:a7:f9:01:de: 26:69:5d:81:43:b2:db:41:e0:74:72:67:9c:73:f6: 65:94:ee:e0:a7:77:82:af:00:bb:53:08:a5:82:0f: ed:7d:03:ac:b2:3c:77:00:23:f9:50:ac:94:54:7d: c4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:CB:61:CB:AC:ED:B4:27:CC:92:00:77:4A:A3:30:99:F3:C7:B1 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:aa:ed:9a:e6:2b:da:40:3e:87:ee:62:08:6a:50:15:5e:6f: 90:b0:e4:c6:54:18:f4:74:6d:66:82:9d:a5:21:5a:4e:3a:b8: 7e:20:41:e8:08:b0:91:64:04:6b:06:8d:1a:85:53:1e:2b:f9: 8a:b3:82:4e:a9:14:d5:c1:55:ae:5b:7b:6d:a8:87:3a:e7:76: ec:e8:ee:3b:df:ab:6f:64:59:62:8c:dd:96:6e:41:67:cf:4c: 28:21:ab:53:26:b3:45:32:c9:6c:2f:b8:ab:0c:3e:59:0d:b2: 4c:76:ea:a0:5a:90:dc:b4:59:33:f0:be:a9:5b:dc:c9:37:94: 62:a9:47:75:9a:16:48:ec:c2:f6:62:d4:70:90:f0:19:be:ba: 10:eb:8b:2d:c1:f4:8a:95:68:22:41:78:8a:cf:5b:c6:01:55: 0d:4b:51:ff:35:a1:96:53:54:ff:26:ae:6f:ff:f8:c3:1a:20: 43:f6:17:c1:06:08:aa:02:fd:eb:4e:0e:48:12:c7:e6:98:e6: fd:fc:f8:f7:e7:96:5e:8e:a7:33:ad:b8:ab:64:6e:36:10:eb: aa:e9:f0:c5:0e:35:0b:09:b6:84:8e:ac:56:4c:1c:76:85:ff: 85:dd:ff:84:aa:8b:b8:2d:7e:6b:ab:6f:69:37:05:4e:dc:b6: 6c:fa:3e:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjYwOTIyMjM1ODMwWhcNMjYwOTI5MjM1ODMwWjAYMRYwFAYD VQQDEw02YWIzMTYyNy1jYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmXNItzYwXMUN0lKGZCAB1mJq0yw1ONwTdM6EYN27qsP0U9EX7ahRbzzuS39 KvC5nuOK+HQHzS2vbkwUUuVMy6c57UyJVNj86YXbIlL0iB6oETH5y9nFdeyQFB0b VkhnaHjdUlqQSYYdjiCb0VCq21V42n5imC/bpJSF6AwjUEcDsHmv1WzQFocrlMrd tzlvE8+A7h/hdd0wK0sucYfB5aNqd9pckPej4lGFAKnzOD1wZS15FGTt4yqwNeDv hop+6b9ee27y6i87JEeiiqf5Ad4maV2BQ7LbQeB0cmecc/ZllO7gp3eCrwC7Uwil gg/tfQOssjx3ACP5UKyUVH3E6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKDy2HL rO20J8ySAHdKozCZ88exMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADartmuYr2kA+h+5iCGpQFV5vkLDkxlQY9HRtZoKdpSFaTjq4fiBB6AiwkWQE awaNGoVTHiv5irOCTqkU1cFVrlt7baiHOud27OjuO9+rb2RZYozdlm5BZ89MKCGr UyazRTLJbC+4qww+WQ2yTHbqoFqQ3LRZM/C+qVvcyTeUYqlHdZoWSOzC9mLUcJDw Gb66EOuLLcH0ipVoIkF4is9bxgFVDUtR/zWhllNU/yaub//4wxogQ/YXwQYIqgL9 604OSBLH5pjm/fz49+eWXo6nM624q2RuNhDrqunwxQ41Cwm2hI6sVkwcdoX/hd3/ hKqLuC1+a6tvaTcFTty2bPo+8Q== -----END CERTIFICATE-----Generated at Wed Sep 23 23:49:06 2026 by rpki-client