$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: JRfM6jh8SqjY5xk2asX/bv6pK+MfdJBuMwtO/9ZWHnE= Subject key identifier: 6B:68:EF:83:78:B3:EE:8C:22:B1:31:2D:3C:8F:72:04:DC:C2:36:11 Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: 01A5 Signing time: Mon 21 Sep 2026 04:09:02 +0000 Manifest this update: Mon 21 Sep 2026 04:09:01 +0000 Manifest next update: Mon 28 Sep 2026 04:09:01 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: FYd2i3d6V0BohDYGbqiLPfOAnY6VBYluzR/j+Zj0TVw=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: dMfHfrbTyibI/vfMvch+qwnCQAs6chEo73/KA4HRzas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Sep 21 04:09:01 2026 GMT Not After : Sep 28 04:09:01 2026 GMT Subject: CN=6ab0adde-2f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:85:b9:92:b4:e4:5c:5d:c1:b0:5d:e1:81: 9e:81:d1:8c:d4:5d:31:f8:d4:24:10:2e:b4:de:97: 35:54:43:49:cf:e3:1a:62:5e:b0:04:56:4b:75:4e: b7:f8:bd:40:6e:d7:05:be:78:21:9c:e7:09:6a:9b: d9:9d:50:7f:dd:64:8e:28:8e:a4:86:bf:2d:46:fd: ad:5d:d9:15:7b:73:fb:7e:a0:5b:0b:1d:18:b4:94: 17:0b:f2:38:ba:af:eb:ea:15:c2:b1:16:c9:55:be: 8b:9b:a1:18:34:65:6b:fc:ab:b1:5e:4d:3f:42:0d: f2:c2:fa:0c:7a:2d:72:63:e6:f6:60:dd:55:70:77: 00:8c:ac:1f:83:80:9d:a9:2e:0f:9c:1b:ed:3c:45: b7:46:f5:9b:32:bc:68:8d:8c:91:c1:0b:3f:85:03: 1e:b9:51:84:c8:f1:d3:b7:8e:3c:da:a0:27:8a:9d: d6:23:47:cc:b5:94:37:57:bc:1f:a2:d1:40:b0:8b: 75:0b:55:f9:c7:e2:ba:b5:5e:c2:f0:42:99:5e:7c: ea:3b:9f:75:a0:aa:d7:31:83:c3:58:a0:f5:93:32: 0c:fb:e4:cb:3e:c5:6a:7b:1f:16:f5:18:14:e0:f6: 09:6c:75:d6:e5:59:08:0f:ca:fd:2f:76:af:73:62: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:68:EF:83:78:B3:EE:8C:22:B1:31:2D:3C:8F:72:04:DC:C2:36:11 X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:53:75:d3:6c:b1:db:85:16:57:f2:67:ab:ef:f0:08:5c:08: 9b:eb:20:69:ce:f5:c3:ee:3d:91:96:91:4a:09:aa:29:8b:13: b3:fb:af:70:b5:23:09:ea:fa:d1:a6:5a:f7:e9:8c:71:fb:07: 41:2d:a1:73:e1:41:3e:97:ea:e8:61:95:35:7d:2c:e8:af:7e: 32:04:6e:95:31:9f:57:c5:16:dd:a4:aa:1d:72:14:52:3e:0a: 40:d9:c8:eb:3f:c4:ea:48:59:d1:51:c1:c1:00:bf:1e:88:3f: db:c5:73:bf:66:33:4f:73:fe:20:ef:41:01:f6:ed:01:fb:e7: cb:a0:38:9c:da:16:24:2b:82:2e:ee:ad:13:90:af:4e:3f:e4: bb:a1:97:59:87:ac:35:5a:4c:39:07:21:29:be:4b:de:9b:e6: d0:88:09:27:2e:ad:5d:e0:c5:ee:8e:3d:e2:cb:80:bc:93:cf: 98:30:37:5b:d2:92:02:61:9c:dc:b6:a1:de:86:60:33:d7:e0: 46:db:51:b4:ce:22:81:d1:8d:a6:f5:4a:68:43:ad:05:44:a0: a0:9d:45:7c:97:9a:42:dc:67:f2:b9:2f:a0:f5:51:eb:ac:76: 9b:d8:75:a7:cd:bb:46:0c:b9:bf:27:2a:ae:79:29:a0:a8:76: 2e:27:82:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjYwOTIxMDQwOTAxWhcNMjYwOTI4MDQwOTAxWjAYMRYwFAYD VQQDEw02YWIwYWRkZS0yZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1naFuZK05FxdwbBd4YGegdGM1F0x+NQkEC603pc1VENJz+MaYl6wBFZLdU63 +L1AbtcFvnghnOcJapvZnVB/3WSOKI6khr8tRv2tXdkVe3P7fqBbCx0YtJQXC/I4 uq/r6hXCsRbJVb6Lm6EYNGVr/KuxXk0/Qg3ywvoMei1yY+b2YN1VcHcAjKwfg4Cd qS4PnBvtPEW3RvWbMrxojYyRwQs/hQMeuVGEyPHTt4482qAnip3WI0fMtZQ3V7wf otFAsIt1C1X5x+K6tV7C8EKZXnzqO591oKrXMYPDWKD1kzIM++TLPsVqex8W9RgU 4PYJbHXW5VkID8r9L3avc2LpzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGto74N4 s+6MIrExLTyPcgTcwjYRMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUFN102yx24UWV/Jnq+/wCFwIm+sgac71w+49kZaRSgmqKYsTs/uvcLUjCer6 0aZa9+mMcfsHQS2hc+FBPpfq6GGVNX0s6K9+MgRulTGfV8UW3aSqHXIUUj4KQNnI 6z/E6khZ0VHBwQC/Hog/28Vzv2YzT3P+IO9BAfbtAfvny6A4nNoWJCuCLu6tE5Cv Tj/ku6GXWYesNVpMOQchKb5L3pvm0IgJJy6tXeDF7o494suAvJPPmDA3W9KSAmGc 3Lah3oZgM9fgRttRtM4igdGNpvVKaEOtBUSgoJ1FfJeaQtxn8rkvoPVR66x2m9h1 p827Rgy5vycqrnkpoKh2LieCEQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:26:11 2026 by rpki-client