$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: EWv9AkYF9/RCgBUi/iOUAJUiGCK5keeGk0eLWtoekeE= Subject key identifier: 7D:F0:9B:6D:83:58:55:EA:0D:DA:6A:2B:33:04:A8:D2:22:10:FC:77 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 0187 Signing time: Wed 23 Sep 2026 04:28:58 +0000 Manifest this update: Wed 23 Sep 2026 04:28:58 +0000 Manifest next update: Wed 30 Sep 2026 04:28:58 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: R6sHkdz4JdfEMXMdGVKO8/xtFFzEdXq1XvC2xgsw7Q0=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: d+XlkZfujpDkvCo9FmKooB3nuK4tFlgynQ1hbouvf0E=) 3: gIAB1jjaEgjeslv5VMUlSsMGkDE.asa (hash: ZAOfZijOT4efohcG2CtyuIwUiE+Ceod+FhEytO0j+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Sep 23 04:28:58 2026 GMT Not After : Sep 30 04:28:58 2026 GMT Subject: CN=6ab3558a-e029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:c9:68:5f:cd:79:73:96:0a:cc:58:10:be: a5:fa:40:d6:44:54:0c:61:6b:7f:3c:ab:46:c2:06: ab:ce:93:70:47:72:3a:83:8b:35:b7:f5:d0:fa:3e: 18:ba:6d:26:be:39:b8:67:bf:d7:1c:53:3d:c0:75: 1e:01:a5:93:43:d9:d7:81:fd:f3:90:29:cc:f5:31: 9a:c3:18:5a:46:d9:20:d9:8f:ef:d1:de:1b:d7:c7: e8:7a:21:83:1e:71:d0:ee:b7:e3:d9:48:8a:a8:2f: 43:f5:79:5b:68:9f:50:73:54:d4:76:85:27:c5:6d: e5:68:aa:cb:bf:24:5e:cc:44:62:8d:48:62:65:89: 44:d4:fa:46:73:06:20:23:39:27:a3:14:45:e8:4e: cf:78:13:d3:cf:6b:e2:9a:d1:84:eb:ab:22:b9:c9: d4:92:0f:d7:4d:5c:4a:d6:48:fd:41:c4:e4:b7:f5: 2f:a2:24:61:2f:79:3a:5a:78:9f:fc:eb:3b:df:4b: c9:28:c7:db:58:cd:d3:b4:bf:bb:1a:88:2d:fa:d1: 3d:09:b6:c6:78:ec:fb:00:14:61:8a:6c:17:84:c1: 3d:c1:0d:2b:4f:72:36:5e:1f:a1:34:26:e7:e5:3d: fd:1a:22:63:a8:ab:be:d7:2d:d6:f8:46:f9:a0:f7: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F0:9B:6D:83:58:55:EA:0D:DA:6A:2B:33:04:A8:D2:22:10:FC:77 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:19:6b:a5:74:03:f7:9c:cf:c2:c6:46:64:b3:87:33:e3:12: df:b4:58:aa:af:c8:50:4e:f2:6f:d0:da:5b:23:5d:3a:99:e6: ab:12:31:40:77:3d:b8:7a:52:64:a4:90:a1:84:3f:e2:23:a2: 45:c6:e2:b8:a7:64:97:c1:b2:cb:d1:83:3f:7f:a1:f1:61:9f: f1:4b:c3:09:85:06:94:8c:ce:00:f0:b1:3e:a0:84:8b:57:d8: 06:fc:b6:bb:a8:be:41:1c:dc:f3:67:7e:4e:f3:35:fd:d4:96: d8:5f:41:37:69:5e:f8:13:31:fb:ab:39:1c:66:95:17:2d:a0: 36:b1:5e:dd:34:63:e8:49:fa:cf:b6:41:2c:aa:12:2f:c4:78: 7d:38:f5:ce:14:e5:93:55:b4:a8:b4:3f:03:46:1d:88:4c:dd: ee:af:f9:33:a3:17:78:7a:fe:80:cb:9a:c1:e8:28:54:19:de: 18:ba:3d:bf:c9:a2:67:9b:52:de:21:93:3c:1b:71:fd:6c:e5: eb:8c:3b:b5:f3:fd:25:a8:a4:e4:ec:81:ba:39:eb:27:7d:77: 47:2e:6b:76:eb:86:5a:a4:08:b3:18:bc:62:5c:7e:6f:4c:ce: a9:8a:6d:a9:8b:54:17:0f:19:22:34:51:18:16:e3:3d:8e:b5: ba:89:d6:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjYwOTIzMDQyODU4WhcNMjYwOTMwMDQyODU4WjAYMRYwFAYD VQQDEw02YWIzNTU4YS1lMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO/JaF/NeXOWCsxYEL6l+kDWRFQMYWt/PKtGwgarzpNwR3I6g4s1t/XQ+j4Y um0mvjm4Z7/XHFM9wHUeAaWTQ9nXgf3zkCnM9TGawxhaRtkg2Y/v0d4b18foeiGD HnHQ7rfj2UiKqC9D9XlbaJ9Qc1TUdoUnxW3laKrLvyRezERijUhiZYlE1PpGcwYg IzknoxRF6E7PeBPTz2vimtGE66siucnUkg/XTVxK1kj9QcTkt/UvoiRhL3k6Wnif /Os730vJKMfbWM3TtL+7Gogt+tE9CbbGeOz7ABRhimwXhME9wQ0rT3I2Xh+hNCbn 5T39GiJjqKu+1y3W+Eb5oPffBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3wm22D WFXqDdpqKzMEqNIiEPx3MB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbBlrpXQD95zPwsZGZLOHM+MS37RYqq/IUE7yb9DaWyNdOpnmqxIxQHc9uHpS ZKSQoYQ/4iOiRcbiuKdkl8Gyy9GDP3+h8WGf8UvDCYUGlIzOAPCxPqCEi1fYBvy2 u6i+QRzc82d+TvM1/dSW2F9BN2le+BMx+6s5HGaVFy2gNrFe3TRj6En6z7ZBLKoS L8R4fTj1zhTlk1W0qLQ/A0YdiEzd7q/5M6MXeHr+gMuawegoVBneGLo9v8miZ5tS 3iGTPBtx/Wzl64w7tfP9Jaik5OyBujnrJ313Ry5rduuGWqQIsxi8Ylx+b0zOqYpt qYtUFw8ZIjRRGBbjPY61uonW9w== -----END CERTIFICATE-----Generated at Wed Sep 23 13:15:17 2026 by rpki-client