$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: fPcqzmdf+1pej+XExfPtkSrVvo7g81swrMEu/yXFa5s= Subject key identifier: AD:49:DF:F1:11:49:E1:BF:FB:6E:35:C4:1A:DE:21:9A:8D:DF:D8:9F Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0D22 Signing time: Tue 22 Sep 2026 18:09:23 +0000 Manifest this update: Tue 22 Sep 2026 18:09:23 +0000 Manifest next update: Tue 29 Sep 2026 18:09:23 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: l/AMfgrKvjL7LMGnNz1HvWHSBq2lra/jNZHkff8saA8=) 2: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=) 3: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=) 4: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Sep 22 18:09:23 2026 GMT Not After : Sep 29 18:09:23 2026 GMT Subject: CN=6ab2c453-4529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:55:23:ef:09:29:04:dc:77:fc:fa:c1:1f: da:b1:20:46:e6:66:eb:c3:99:61:c0:28:d9:3c:33: 9e:65:78:bf:b5:96:49:80:de:ab:6b:5e:3c:d1:5c: bc:c8:ac:2e:80:38:77:7e:8a:b0:cf:6c:c1:a1:99: 96:c3:d8:9c:1e:4a:04:20:ff:b4:5e:ba:35:7d:e8: a4:ec:c2:86:f5:f6:ff:fd:71:19:98:d3:b5:f4:03: 61:13:6a:3c:29:a6:1e:74:e3:3c:4d:43:55:f6:cf: a0:6a:86:88:f4:b6:3c:0f:5d:76:cb:31:6b:c3:eb: 5c:c5:87:99:91:78:25:7b:0a:41:51:fb:f0:58:55: a8:17:63:b8:0e:23:46:f5:55:74:f8:45:c0:3b:ad: da:68:86:77:1b:2e:85:41:f3:55:f9:59:a0:17:8e: cd:ee:cd:9f:fd:90:0b:63:8c:7c:c6:ac:74:33:ca: 4f:52:91:08:43:19:c6:7b:bb:25:a1:3a:cd:75:74: 60:c8:ee:9b:7d:03:cd:0d:7b:d1:bf:90:dc:c5:1d: 04:a9:f3:52:6e:44:02:52:f3:30:16:bf:84:ed:cc: ce:ea:38:af:37:15:4f:0a:17:b8:e0:65:3c:a1:61: fa:ac:c0:4e:68:ae:c0:d8:17:31:b7:16:36:14:89: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:DF:F1:11:49:E1:BF:FB:6E:35:C4:1A:DE:21:9A:8D:DF:D8:9F X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1a:82:8e:4b:a2:8c:33:07:a5:81:f4:ae:da:d7:07:35:49: c4:b7:b1:21:03:90:a5:72:ac:4f:79:46:e5:67:2f:09:6c:cd: c6:1b:9b:70:8a:ba:b7:09:15:a2:a2:38:3d:d6:7b:8a:ba:69: 0e:c7:10:36:fe:7d:dd:df:f4:29:11:af:40:3a:5c:42:89:76: f2:9c:29:2f:17:c6:86:42:ca:42:48:0d:a4:a2:35:40:a6:cb: 1a:98:9d:db:e4:09:9b:43:ed:c0:b7:9c:45:e6:8d:d7:81:9a: 5d:31:51:14:b3:26:7c:c0:b3:db:83:ca:98:35:22:d8:6f:ef: 8c:83:a7:04:ef:3d:fb:8b:26:66:72:e0:6e:6a:79:0d:ce:87: 30:b3:64:93:3c:b7:bc:92:24:64:a6:ee:92:c1:54:b7:6e:41: c8:18:52:54:74:be:13:05:3d:87:d8:2a:e4:b7:32:2e:6f:54: 41:64:6b:4c:db:7a:4d:16:f5:b8:19:6c:f9:ed:48:dd:57:67: f5:e3:87:d0:fb:e1:6d:52:fc:db:20:72:9d:fb:c1:d5:68:18: 83:ad:06:54:d6:c8:3d:bd:fc:fd:cb:1a:fb:20:86:a4:8d:27: c4:51:88:cf:87:e6:d6:2f:db:15:97:59:38:8a:29:ef:d8:dc: 5d:ec:11:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwOTIyMTgwOTIzWhcNMjYwOTI5MTgwOTIzWjAYMRYwFAYD VQQDEw02YWIyYzQ1My00NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQJVI+8JKQTcd/z6wR/asSBG5mbrw5lhwCjZPDOeZXi/tZZJgN6ra1480Vy8 yKwugDh3foqwz2zBoZmWw9icHkoEIP+0Xro1feik7MKG9fb//XEZmNO19ANhE2o8 KaYedOM8TUNV9s+gaoaI9LY8D112yzFrw+tcxYeZkXglewpBUfvwWFWoF2O4DiNG 9VV0+EXAO63aaIZ3Gy6FQfNV+VmgF47N7s2f/ZALY4x8xqx0M8pPUpEIQxnGe7sl oTrNdXRgyO6bfQPNDXvRv5DcxR0EqfNSbkQCUvMwFr+E7czO6jivNxVPChe44GU8 oWH6rMBOaK7A2BcxtxY2FIlPQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1J3/ER SeG/+241xBreIZqN39ifMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQRqCjkuijDMHpYH0rtrXBzVJxLexIQOQpXKsT3lG5WcvCWzNxhubcIq6twkV oqI4PdZ7irppDscQNv593d/0KRGvQDpcQol28pwpLxfGhkLKQkgNpKI1QKbLGpid 2+QJm0PtwLecReaN14GaXTFRFLMmfMCz24PKmDUi2G/vjIOnBO89+4smZnLgbmp5 Dc6HMLNkkzy3vJIkZKbuksFUt25ByBhSVHS+EwU9h9gq5LcyLm9UQWRrTNt6TRb1 uBls+e1I3Vdn9eOH0PvhbVL82yBynfvB1WgYg60GVNbIPb38/csa+yCGpI0nxFGI z4fm1i/bFZdZOIop79jcXewRAw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:04:08 2026 by rpki-client