$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json) Hash identifier: 3L5WME2RWgg6u5wRaxJn3gtNCoSy2wXmHhAVqkwfyx4= Subject key identifier: 1E:67:7A:13:82:13:C4:8B:A4:F1:FB:B5:D5:4F:F5:EF:A0:D8:5B:2D Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Certificate serial: 1650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft Manifest number: 1636 Signing time: Tue 22 Sep 2026 16:37:41 +0000 Manifest this update: Tue 22 Sep 2026 16:37:41 +0000 Manifest next update: Tue 29 Sep 2026 16:37:41 +0000 Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: PHmXR4j+RypKfyikylnJvi3kWBK2eosZX4QFZzEgdRU=) 2: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: A9iOSCnHXh3iJa4349r8JORSw8ym91SM/p7nkJSCSR0=) 3: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: Lo3XMSKg8agVzx55tHFzr470VZoMbp50JJLkCDFF7Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5712 (0x1650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Validity Not Before: Sep 22 16:37:41 2026 GMT Not After : Sep 29 16:37:41 2026 GMT Subject: CN=6ab2aed5-183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:f4:66:5a:83:14:aa:88:6b:47:b3:e9:1e: 8a:d2:fe:9d:57:da:4f:9d:e5:47:62:3e:28:a4:6a: d1:d4:7e:dd:7b:fc:17:fb:c7:90:83:1f:a0:61:7b: 64:59:e8:45:d8:45:e1:4b:f9:87:4a:7b:07:4a:a9: 4b:86:92:01:f9:32:3c:ac:46:c7:5d:d9:4f:ca:60: a7:7b:18:0c:04:25:e8:b8:29:29:b9:97:e6:fa:de: df:8a:1b:77:40:d5:a9:b9:5c:59:2d:d4:0a:d2:09: bb:9d:15:a8:70:a5:af:f7:6f:88:a2:9d:23:84:b7: 38:7e:7c:34:cf:e0:5a:a2:42:c0:3f:6d:69:72:06: ea:3a:1b:96:0d:81:39:6b:9f:28:f6:13:ed:6b:84: bf:01:0f:61:7e:38:95:31:64:fb:13:23:d6:c8:69: 65:14:7c:27:dc:a7:c1:a1:4a:91:75:64:5c:98:bd: cc:71:35:91:51:f3:32:52:26:89:ce:02:b5:3d:9a: e1:17:92:71:b7:a9:40:b3:b9:aa:8c:1d:35:a8:fb: 62:78:c9:cf:83:58:c7:46:78:a3:0c:25:7a:5a:ce: bd:73:55:6f:bf:53:2a:b9:8e:ae:aa:e6:21:f7:49: 40:1f:08:5a:7e:f1:0c:f5:9f:10:75:4e:73:c1:ee: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:67:7A:13:82:13:C4:8B:A4:F1:FB:B5:D5:4F:F5:EF:A0:D8:5B:2D X509v3 Authority Key Identifier: keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e3:65:69:47:63:9f:84:9e:61:b5:9d:db:b4:2c:8f:07:1f: 7f:77:32:af:46:36:d2:e1:ca:fb:4b:a1:8a:fa:03:eb:02:f7: 91:36:49:f3:78:89:12:59:fa:49:e7:fa:d3:68:fc:b1:c8:d9: 8f:d4:37:27:ae:9b:05:8f:93:03:3a:e3:4f:b4:17:f8:66:e2: 9c:23:a9:ec:80:77:b8:c7:a6:69:85:63:61:57:8a:66:3e:00: 35:4d:92:29:42:a7:9e:bd:05:b5:46:eb:51:f4:a9:b6:6e:30: f4:f6:8f:6f:6a:49:2e:60:0f:70:ef:d6:96:27:60:7f:92:cc: 1b:f1:23:63:d8:52:5a:53:d4:f6:d0:cb:0c:08:7c:dd:4a:5a: d6:d5:4f:d3:9f:88:c9:c2:e8:6a:fa:1f:91:64:31:27:56:05: b2:67:2e:df:f0:47:14:72:50:e8:db:d0:98:a1:12:1e:26:6c: 05:c8:c7:f0:51:91:8f:3e:13:60:2b:6c:ec:80:79:6d:b2:62: 9b:0c:12:8d:75:be:12:e5:5c:e9:be:62:d4:25:d0:3b:18:fe: 84:80:d1:0a:a0:6c:15:ab:18:3f:1e:8c:9d:83:98:e2:ad:27: 89:9a:b5:c7:62:f6:bf:58:fa:23:83:4d:38:de:56:4d:d2:7c: 52:e3:34:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw OUIwRTlENkQwHhcNMjYwOTIyMTYzNzQxWhcNMjYwOTI5MTYzNzQxWjAYMRYwFAYD VQQDEw02YWIyYWVkNS0xODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/r0ZlqDFKqIa0ez6R6K0v6dV9pPneVHYj4opGrR1H7de/wX+8eQgx+gYXtk WehF2EXhS/mHSnsHSqlLhpIB+TI8rEbHXdlPymCnexgMBCXouCkpuZfm+t7fiht3 QNWpuVxZLdQK0gm7nRWocKWv92+Iop0jhLc4fnw0z+BaokLAP21pcgbqOhuWDYE5 a58o9hPta4S/AQ9hfjiVMWT7EyPWyGllFHwn3KfBoUqRdWRcmL3McTWRUfMyUiaJ zgK1PZrhF5Jxt6lAs7mqjB01qPtieMnPg1jHRnijDCV6Ws69c1Vvv1MquY6uquYh 90lAHwhafvEM9Z8QdU5zwe68dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5nehOC E8SLpPH7tdVP9e+g2FstMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx OFZKdGgyMDBsQW9Kc09uVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXeNlaUdjn4SeYbWd27Qsjwcff3cyr0Y20uHK+0uhivoD6wL3kTZJ83iJEln6 Sef602j8scjZj9Q3J66bBY+TAzrjT7QX+GbinCOp7IB3uMemaYVjYVeKZj4ANU2S KUKnnr0FtUbrUfSptm4w9PaPb2pJLmAPcO/Wlidgf5LMG/EjY9hSWlPU9tDLDAh8 3Upa1tVP05+IycLoavofkWQxJ1YFsmcu3/BHFHJQ6NvQmKESHiZsBcjH8FGRjz4T YCts7IB5bbJimwwSjXW+EuVc6b5i1CXQOxj+hIDRCqBsFasYPx6MnYOY4q0niZq1 x2L2v1j6I4NNON5WTdJ8UuM0OQ== -----END CERTIFICATE-----Generated at Wed Sep 23 10:14:59 2026 by rpki-client