$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: J5FpwkC9FMmYBiVm3B4LIYbpx5RlIvVpT4U3vxDn/dc= Subject key identifier: 95:A1:B4:80:D7:96:91:4F:0C:6F:9E:52:23:6D:93:A6:B8:84:58:D2 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 01DB Signing time: Wed 23 Sep 2026 03:32:30 +0000 Manifest this update: Wed 23 Sep 2026 03:32:30 +0000 Manifest next update: Wed 30 Sep 2026 03:32:30 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: AhQ1hb6386tyRHBfGqMfyLh+mRV7ywyY+nJszafswEo=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=) 3: C6DFFAD8906B11F1A67C05D95E11F970.roa (hash: MxNcCgJXLkjB8/Q2d2fNCaIOQkKIonVn32bIfIAzNVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Sep 23 03:32:30 2026 GMT Not After : Sep 30 03:32:30 2026 GMT Subject: CN=6ab3484e-4630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:5d:33:a7:e7:75:a9:91:cf:35:3f:6c:4b: 58:9c:f9:59:58:14:95:b2:5f:64:74:81:8c:91:5c: 31:86:93:a5:9a:c2:39:c7:0c:41:34:d0:7b:b7:0d: e4:44:48:71:7c:a3:48:e0:6e:c7:9c:53:d7:01:b2: cd:1c:ff:72:6c:ae:a1:9d:a4:fe:64:78:3b:df:0e: ab:36:f8:72:df:97:aa:dd:7d:79:f4:cc:da:d3:6b: 1d:43:1c:1c:49:1e:40:91:64:13:56:da:75:a2:ac: 96:0b:e5:fb:25:11:d8:69:fc:d0:73:84:83:b8:bb: e1:a8:ed:4a:c3:a2:71:f5:b3:d2:1c:09:f8:28:2a: 00:f6:01:64:7e:bb:98:bc:a4:e3:77:cd:69:11:49: a5:13:3c:30:10:9e:a2:05:af:b7:67:41:f6:88:b7: 9a:fa:d4:4e:05:78:7e:a9:50:06:0b:c7:63:f4:10: 51:1b:d4:9c:32:dc:da:e3:00:48:11:37:54:69:6b: 96:75:51:33:d0:19:69:a0:f7:1a:8a:23:02:99:d1: 20:1c:14:9e:81:81:2b:40:4d:04:86:76:3d:26:e4: 30:69:03:ad:22:c9:73:ca:63:e1:4c:24:de:4b:c2: de:71:c5:3a:4a:0c:5d:72:c5:07:48:13:13:5d:2c: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A1:B4:80:D7:96:91:4F:0C:6F:9E:52:23:6D:93:A6:B8:84:58:D2 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fc:fa:6d:23:ac:14:ef:2e:c6:54:f2:86:65:4f:37:af:f2: f2:59:a3:24:ef:9e:8b:e7:e7:98:5c:1b:cf:e4:62:c4:49:3f: 98:76:7a:0e:92:50:25:c9:e4:19:d4:01:af:de:65:33:29:67: 2e:d8:45:61:b9:67:4c:ea:2f:d7:d1:35:18:5d:ea:e5:12:40: e0:f2:e0:2c:73:f5:79:ad:5d:53:d8:51:e6:fb:38:81:a9:6e: 93:47:be:a4:d0:a2:e7:77:47:10:15:b7:74:bb:35:27:ec:05: bb:f8:2b:cd:87:9b:ba:74:5c:16:9c:13:5a:21:bc:e9:64:af: ff:9a:e5:34:68:0d:7a:80:51:1b:c8:39:03:30:6a:e7:ac:29: 30:56:1a:f8:5a:88:4e:1a:5c:a9:74:5b:cb:c1:ae:17:d0:aa: ff:1a:0d:84:f6:fe:4c:51:2f:32:60:81:df:a2:b8:f1:76:90: 0a:0a:91:59:de:24:af:02:aa:11:46:37:96:c3:36:4d:8a:0a: 77:c2:22:ca:48:b2:d3:12:ec:b3:75:77:e6:0e:06:78:29:aa: f6:18:cd:e2:e2:f8:a9:93:95:82:fb:bf:3e:8e:42:69:3e:fb: 2f:d8:b0:7a:f8:ae:0e:a6:a9:66:65:32:47:65:8c:f5:db:f7: 6f:71:b5:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwOTIzMDMzMjMwWhcNMjYwOTMwMDMzMjMwWjAYMRYwFAYD VQQDEw02YWIzNDg0ZS00NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud5dM6fndamRzzU/bEtYnPlZWBSVsl9kdIGMkVwxhpOlmsI5xwxBNNB7tw3k REhxfKNI4G7HnFPXAbLNHP9ybK6hnaT+ZHg73w6rNvhy35eq3X159Mza02sdQxwc SR5AkWQTVtp1oqyWC+X7JRHYafzQc4SDuLvhqO1Kw6Jx9bPSHAn4KCoA9gFkfruY vKTjd81pEUmlEzwwEJ6iBa+3Z0H2iLea+tROBXh+qVAGC8dj9BBRG9ScMtza4wBI ETdUaWuWdVEz0BlpoPcaiiMCmdEgHBSegYErQE0EhnY9JuQwaQOtIslzymPhTCTe S8LeccU6SgxdcsUHSBMTXSwVnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWhtIDX lpFPDG+eUiNtk6a4hFjSMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW/z6bSOsFO8uxlTyhmVPN6/y8lmjJO+ei+fnmFwbz+RixEk/mHZ6DpJQJcnk GdQBr95lMylnLthFYblnTOov19E1GF3q5RJA4PLgLHP1ea1dU9hR5vs4galuk0e+ pNCi53dHEBW3dLs1J+wFu/grzYebunRcFpwTWiG86WSv/5rlNGgNeoBRG8g5AzBq 56wpMFYa+FqIThpcqXRby8GuF9Cq/xoNhPb+TFEvMmCB36K48XaQCgqRWd4krwKq EUY3lsM2TYoKd8Iiykiy0xLss3V35g4GeCmq9hjN4uL4qZOVgvu/Po5CaT77L9iw eviuDqapZmUyR2WM9dv3b3G15A== -----END CERTIFICATE-----Generated at Wed Sep 23 17:36:23 2026 by rpki-client