$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json) Hash identifier: VrkeiUn/CWYoqXSDxBnJt/co/ECAS66wddy8sl92OvM= Subject key identifier: 59:FE:1D:15:3B:E6:C9:D7:AB:B2:29:10:25:B2:DA:94:7E:3C:64:51 Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft Manifest number: 1CD8 Signing time: Thu 24 Sep 2026 16:07:46 +0000 Manifest this update: Thu 24 Sep 2026 16:07:45 +0000 Manifest next update: Thu 01 Oct 2026 16:07:45 +0000 Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: YoFAltfLg4OlQt8nWmXrhQQ4sqcyEMBWROpizB2mXtA=) 2: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=) 3: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7406 (0x1cee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Sep 24 16:07:45 2026 GMT Not After : Oct 1 16:07:45 2026 GMT Subject: CN=6ab54ad1-da0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:da:af:1b:64:be:73:d1:cb:ea:38:24:0f: e6:0f:61:ba:3b:23:5a:49:f1:87:44:43:74:44:14: 7c:d2:af:9b:c1:97:e0:28:03:66:25:0d:61:3d:18: f1:f8:e8:f1:b6:e7:22:86:d0:8b:f9:98:cb:85:bb: ab:cb:51:10:08:f5:24:04:af:24:f6:52:0b:b7:81: 5b:de:5b:b2:f3:34:db:b4:fb:7e:30:4d:36:20:fb: d6:7f:63:01:3d:a4:0a:89:04:6c:b5:a7:1b:1b:9a: 42:0d:43:b2:c1:41:b1:95:9e:ec:6a:f2:0d:be:77: 1e:ea:d0:bf:5e:73:2e:8c:64:c4:5e:c8:56:41:15: 95:df:ad:3b:d2:13:b7:e7:df:88:45:66:83:fa:48: 20:fe:4e:bf:a1:a6:1a:33:eb:3a:25:75:4b:d2:70: c4:d2:de:61:54:38:7f:f0:a1:85:64:4e:aa:03:e2: f7:6d:1d:1e:b2:ad:da:32:9b:b5:ff:32:f2:e4:c8: 2a:59:43:13:a0:e0:b1:9a:3f:33:bb:b6:ea:a9:59: ba:9c:3a:4e:58:0b:63:9a:92:ed:a2:b7:f1:e9:c6: bb:30:de:39:78:29:50:99:35:ab:59:07:da:dd:1a: de:b4:12:bb:e0:5e:fe:a2:7d:ca:ec:71:d5:ec:ee: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:1D:15:3B:E6:C9:D7:AB:B2:29:10:25:B2:DA:94:7E:3C:64:51 X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9e:42:35:76:a5:ce:3b:9a:e4:81:db:17:94:99:45:09:dc: df:cc:ed:c0:0c:b3:48:c8:2f:21:87:8f:1e:e7:5a:e6:96:9b: f6:97:64:0b:90:f2:4e:cf:17:29:3e:05:df:1f:f0:27:05:2e: 8b:1e:31:3a:45:0f:e1:20:7f:50:8c:c6:f1:20:f7:4c:e1:a8: e1:41:60:97:43:cd:71:a5:b4:e5:50:d5:02:55:5d:3d:9a:dd: f4:c2:cb:41:c0:ab:de:45:68:6c:f2:a4:3b:cc:52:df:b2:64: a7:e4:11:7c:7a:cf:f7:98:be:90:23:cf:68:38:ac:5d:97:bc: 06:fc:7f:d8:7b:6b:fd:c3:31:13:c8:ce:23:b1:3c:2a:09:67: e2:a3:32:14:71:91:28:2d:f8:cc:8f:d1:15:a6:1c:5e:58:df: c4:2e:34:b0:18:96:f7:55:26:c0:91:5b:c5:3e:59:4d:72:e3: 1f:57:5d:83:94:b3:f2:73:4d:38:e6:07:63:d5:ad:c1:15:13: 59:cd:2e:a0:e9:f1:98:65:2b:f7:57:ec:53:f8:8e:eb:cb:a1: dd:69:ea:df:41:be:33:af:f1:59:fa:a1:00:b6:f4:91:f3:e1: 77:a3:03:56:ab:b7:98:22:f6:4e:e0:2d:54:12:aa:cd:0f:ce: 42:0b:13:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjYwOTI0MTYwNzQ1WhcNMjYxMDAxMTYwNzQ1WjAYMRYwFAYD VQQDEw02YWI1NGFkMS1kYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa7arxtkvnPRy+o4JA/mD2G6OyNaSfGHREN0RBR80q+bwZfgKANmJQ1hPRjx +OjxtucihtCL+ZjLhbury1EQCPUkBK8k9lILt4Fb3luy8zTbtPt+ME02IPvWf2MB PaQKiQRstacbG5pCDUOywUGxlZ7savINvnce6tC/XnMujGTEXshWQRWV36070hO3 59+IRWaD+kgg/k6/oaYaM+s6JXVL0nDE0t5hVDh/8KGFZE6qA+L3bR0esq3aMpu1 /zLy5MgqWUMToOCxmj8zu7bqqVm6nDpOWAtjmpLtorfx6ca7MN45eClQmTWrWQfa 3RretBK74F7+on3K7HHV7O7TVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFn+HRU7 5snXq7IpECWy2pR+PGRRMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUYyMC82NUE5QTI0MkY1QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9l eWhsRnhodHlrZzlhb09sR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn55CNXalzjua5IHbF5SZRQnc38ztwAyzSMgvIYePHuda5pab9pdkC5DyTs8X KT4F3x/wJwUuix4xOkUP4SB/UIzG8SD3TOGo4UFgl0PNcaW05VDVAlVdPZrd9MLL QcCr3kVobPKkO8xS37Jkp+QRfHrP95i+kCPPaDisXZe8Bvx/2Htr/cMxE8jOI7E8 Kgln4qMyFHGRKC34zI/RFaYcXljfxC40sBiW91UmwJFbxT5ZTXLjH1ddg5Sz8nNN OOYHY9WtwRUTWc0uoOnxmGUr91fsU/iO68uh3Wnq30G+M6/xWfqhALb0kfPhd6MD Vqu3mCL2TuAtVBKqzQ/OQgsTdg== -----END CERTIFICATE-----Generated at Fri Sep 25 09:39:20 2026 by rpki-client