$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: vU+AgO1bdS0eBAFOyQo6vgHHx5b/A5zYrIyE0PvQXNE= Subject key identifier: 1F:14:E9:D4:E3:7D:24:5C:8C:31:FD:A5:54:42:B9:A4:BB:23:DE:1C Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 026D Signing time: Fri 25 Sep 2026 02:06:40 +0000 Manifest this update: Fri 25 Sep 2026 02:06:40 +0000 Manifest next update: Fri 02 Oct 2026 02:06:40 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: l3XJnOViuH7xARl63rSqbuahM0SJBdWOAsMqR2QESO8=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: nMFdDCUb4ENNKUnmKytdPmfWGdDIIdu20F9f9Lqgp3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Sep 25 02:06:40 2026 GMT Not After : Oct 2 02:06:40 2026 GMT Subject: CN=6ab5d730-a552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:41:bc:5a:c7:ed:dd:ce:f6:15:3e:a5:22:27: e9:b5:8e:e1:44:c1:5a:cf:87:71:89:4c:d9:73:7d: 10:28:55:eb:2b:6f:f1:48:90:70:58:47:c2:1e:10: 2d:8e:87:cb:ab:3a:f3:62:fa:ec:5b:cf:e0:82:2d: 4c:d9:37:60:68:ed:73:96:25:c3:17:a9:9e:41:74: ae:c9:4d:71:b8:9c:5c:ab:eb:89:f6:22:44:83:b6: b0:d6:06:d3:13:68:e0:0a:4e:57:16:29:eb:58:f6: 81:32:56:d6:64:d0:ff:a0:bc:47:ab:ec:97:ac:30: ea:57:be:37:0e:f9:64:a6:f6:5d:35:b2:a2:a1:d4: 98:08:ad:ba:a2:45:aa:cb:a2:6c:fc:01:9f:02:08: da:eb:e1:d2:87:97:89:e5:dd:9a:a9:e0:7e:1a:b9: 76:21:72:8a:6f:8c:4f:97:69:cd:fe:09:4d:9a:2d: 27:05:5b:6a:11:67:a4:1f:b2:67:e8:c4:71:c9:5a: f2:eb:83:1e:6e:94:f7:28:38:9f:88:65:3c:4d:32: bd:7b:33:80:0b:07:51:3a:a8:fd:19:33:99:1c:3c: 71:2f:0f:70:d3:db:46:65:1d:d5:7d:c1:b2:62:a9: 79:7b:ca:b4:d3:69:d0:c7:09:a4:89:6e:f6:d8:4e: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:14:E9:D4:E3:7D:24:5C:8C:31:FD:A5:54:42:B9:A4:BB:23:DE:1C X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:4c:0f:e3:86:cd:51:72:79:f6:a4:e7:e9:66:ef:b6:66: c7:6b:5d:ac:ee:b9:69:9c:7c:cf:03:a1:b8:83:11:b5:4e:63: 5e:89:a2:05:01:0e:92:0a:d2:5a:16:2c:33:da:7f:de:9c:0b: 50:5e:11:67:f4:37:bc:22:2e:ae:7e:66:4f:cc:47:d8:c4:e5: bd:54:bc:19:39:35:e3:69:c5:e3:dd:31:25:94:ad:35:72:a4: 23:69:89:b4:fc:95:ef:47:72:1d:32:88:5e:44:49:03:6c:da: ba:1d:ab:90:c4:31:3d:c8:ab:e5:8e:b1:f5:f9:ea:74:98:2a: 37:b5:3f:6e:4b:32:d4:0e:b2:f7:e0:dc:ee:2b:18:3d:89:89: c7:80:0e:7c:fa:ae:ad:6b:b4:d8:8f:80:ca:df:ad:50:9b:25: a7:82:e3:13:76:04:97:94:b1:1f:3c:77:dd:e6:af:26:ae:f3: a0:0f:89:ba:fd:43:0e:70:ff:92:b7:1a:7b:9e:19:52:66:97: f6:a1:31:47:d9:80:7f:eb:55:23:68:4a:17:d8:bc:6a:39:3c: de:57:f9:0e:35:eb:7a:f9:ca:c1:34:3d:d8:fe:33:8a:eb:40: fa:a5:eb:15:e5:5c:e2:1b:54:3e:4c:c4:9f:fe:eb:cd:45:6d: a3:91:3c:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwOTI1MDIwNjQwWhcNMjYxMDAyMDIwNjQwWjAYMRYwFAYD VQQDEw02YWI1ZDczMC1hNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEG8Wsft3c72FT6lIifptY7hRMFaz4dxiUzZc30QKFXrK2/xSJBwWEfCHhAt jofLqzrzYvrsW8/ggi1M2TdgaO1zliXDF6meQXSuyU1xuJxcq+uJ9iJEg7aw1gbT E2jgCk5XFinrWPaBMlbWZND/oLxHq+yXrDDqV743DvlkpvZdNbKiodSYCK26okWq y6Js/AGfAgja6+HSh5eJ5d2aqeB+Grl2IXKKb4xPl2nN/glNmi0nBVtqEWekH7Jn 6MRxyVry64MebpT3KDifiGU8TTK9ezOACwdROqj9GTOZHDxxLw9w09tGZR3VfcGy Yql5e8q002nQxwmkiW722E49FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8U6dTj fSRcjDH9pVRCuaS7I94cMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACAZMD+OGzVFyefak5+lm77Zmx2tdrO65aZx8zwOhuIMRtU5jXomiBQEOkgrS WhYsM9p/3pwLUF4RZ/Q3vCIurn5mT8xH2MTlvVS8GTk142nF490xJZStNXKkI2mJ tPyV70dyHTKIXkRJA2zauh2rkMQxPcir5Y6x9fnqdJgqN7U/bksy1A6y9+Dc7isY PYmJx4AOfPqurWu02I+Ayt+tUJslp4LjE3YEl5SxHzx33eavJq7zoA+Juv1DDnD/ krcae54ZUmaX9qExR9mAf+tVI2hKF9i8ajk83lf5DjXrevnKwTQ92P4ziutA+qXr FeVc4htUPkzEn/7rzUVto5E8EA== -----END CERTIFICATE-----Generated at Sat Sep 26 00:02:05 2026 by rpki-client