$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: O4oGsisNs0qYBkzM+mSpN067P+3wFvnBQgT4mkNs+XI= Subject key identifier: BE:8F:4F:7C:63:48:EA:8E:B6:ED:F8:EF:9E:91:10:CD:B5:C3:F2:8F Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 02B8 Signing time: Wed 23 Sep 2026 01:19:01 +0000 Manifest this update: Wed 23 Sep 2026 01:19:00 +0000 Manifest next update: Wed 30 Sep 2026 01:19:00 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: vWtzzgiOLn7j/gTjkZyZtoQ87Jj146V/Gpu05H3i7+U=) 2: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: HMh0PudeObId9zudYejPSA5f+N2qiPXxo4G9qeOgkD8=) 3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: Yq+XkZnFsUBeEQv24fQGoEmIq0pC6YGTxLPonEh4+Us=) 4: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: 4uTpTxxOKcFpix9VMs0QMyQDPqJHXQEnQ2Lc7hCfmwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Sep 23 01:19:00 2026 GMT Not After : Sep 30 01:19:00 2026 GMT Subject: CN=6ab32905-8f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:29:54:1b:96:46:3e:17:ed:89:1e:e6:10: 12:1f:15:9a:65:6a:35:51:db:b8:6f:5c:6c:d2:63: b6:4a:04:37:9e:b1:12:19:57:09:f5:2c:9c:0b:bd: 51:6a:08:dc:96:e6:60:43:97:21:fb:dc:96:20:1c: 87:26:d4:5e:05:b7:56:b4:eb:94:cd:da:5b:8b:d0: 1a:ae:f0:7d:f9:1f:6f:53:20:c0:02:d5:ee:39:62: 8f:53:76:3c:79:c5:1b:11:a4:d1:6e:ce:38:20:4e: 41:ad:4e:9d:1e:67:b8:97:b1:85:5e:8b:9f:b7:e2: 40:ba:d0:91:14:e6:0b:9d:50:ba:32:88:70:73:cc: 4d:10:d0:61:23:85:6f:fc:b5:a7:bb:86:8c:2e:79: c5:0b:c3:12:8c:a1:1c:fb:1f:93:b3:97:9f:9e:8f: e5:ed:18:22:00:c5:a7:39:e3:83:47:f7:02:44:87: e7:60:ec:2d:45:c4:42:6f:c5:44:b0:ec:fb:30:8b: 41:b9:91:3e:8d:61:37:78:f2:3f:ba:33:99:98:64: a3:e9:10:bc:9e:e3:3c:6e:4a:8c:0c:d1:e1:6e:3d: 10:1d:a3:b7:67:7a:a3:a9:2f:c2:aa:58:42:25:91: fd:3e:69:d6:1e:49:fa:98:b9:71:6f:59:e3:c4:47: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:4F:7C:63:48:EA:8E:B6:ED:F8:EF:9E:91:10:CD:B5:C3:F2:8F X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:3a:86:34:d4:f0:a6:ee:13:ab:30:ab:0f:ed:ba:6f:c5:d7: 02:64:7d:8e:2e:a4:fd:f9:0c:04:83:34:bc:a8:a1:d5:06:ed: 0d:af:8b:d8:3d:10:78:ae:20:a2:d3:83:3e:df:1c:c9:58:f9: b2:1c:c5:6d:0d:29:42:5e:8b:14:56:28:95:02:ce:3a:ee:79: 88:49:74:26:36:51:15:66:62:98:ec:fb:c9:35:b6:e2:ba:b6: f4:1c:57:89:be:15:e2:64:db:9a:02:4a:1e:0f:df:d5:61:01: 9e:40:15:73:42:25:bb:d9:71:b1:08:7c:ba:95:39:ac:47:95: 75:5c:41:38:c7:51:d9:d9:97:9b:79:df:7d:bf:14:0b:f7:bf: 91:30:11:31:5c:ec:bf:cf:0f:7e:d3:85:bb:64:7a:b1:9b:76: 1a:18:b7:81:c5:64:95:45:3a:83:8e:bb:c9:e8:b1:cc:5c:24: 81:67:de:ad:43:40:d2:e0:cf:d0:e2:7e:3c:93:f3:6f:83:f1: 29:7a:08:45:d2:8a:08:e6:21:3b:a1:bb:06:74:9b:49:b9:5a: 4c:34:69:e7:fa:5e:a2:71:4c:5b:27:0e:8b:1d:55:77:ba:a5: f7:4f:34:07:37:4b:c0:82:84:72:ac:b3:33:48:02:74:37:39: 87:93:0e:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjYwOTIzMDExOTAwWhcNMjYwOTMwMDExOTAwWjAYMRYwFAYD VQQDEw02YWIzMjkwNS04ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhspVBuWRj4X7Yke5hASHxWaZWo1Udu4b1xs0mO2SgQ3nrESGVcJ9SycC71R agjcluZgQ5ch+9yWIByHJtReBbdWtOuUzdpbi9AarvB9+R9vUyDAAtXuOWKPU3Y8 ecUbEaTRbs44IE5BrU6dHme4l7GFXouft+JAutCRFOYLnVC6Mohwc8xNENBhI4Vv /LWnu4aMLnnFC8MSjKEc+x+Ts5efno/l7RgiAMWnOeODR/cCRIfnYOwtRcRCb8VE sOz7MItBuZE+jWE3ePI/ujOZmGSj6RC8nuM8bkqMDNHhbj0QHaO3Z3qjqS/CqlhC JZH9PmnWHkn6mLlxb1njxEc4pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6PT3xj SOqOtu34756REM21w/KPMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqDqGNNTwpu4TqzCrD+26b8XXAmR9ji6k/fkMBIM0vKih1QbtDa+L2D0QeK4g otODPt8cyVj5shzFbQ0pQl6LFFYolQLOOu55iEl0JjZRFWZimOz7yTW24rq29BxX ib4V4mTbmgJKHg/f1WEBnkAVc0Ilu9lxsQh8upU5rEeVdVxBOMdR2dmXm3nffb8U C/e/kTARMVzsv88PftOFu2R6sZt2Ghi3gcVklUU6g467yeixzFwkgWferUNA0uDP 0OJ+PJPzb4PxKXoIRdKKCOYhO6G7BnSbSblaTDRp5/peonFMWycOix1Vd7ql9080 BzdLwIKEcqyzM0gCdDc5h5MO8g== -----END CERTIFICATE-----Generated at Fri Sep 25 02:41:54 2026 by rpki-client