$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft File: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft (raw, json) Hash identifier: F8w82fYC+fhsWwLWEFxVWxtSXQmKeabw5oBYQWtblZA= Subject key identifier: 39:68:72:B5:25:B4:F3:A4:89:9E:F2:F8:49:F4:50:AE:92:89:A0:28 Authority key identifier: 31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 Certificate issuer: /CN=A91FF21A/serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft Manifest number: 2A Signing time: Wed 23 Sep 2026 08:39:17 +0000 Manifest this update: Wed 23 Sep 2026 08:39:17 +0000 Manifest next update: Wed 30 Sep 2026 08:39:17 +0000 Files and hashes: 1: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl (hash: kkGu+gpEUMBt9n1n10c71TnKRQMXZDK06sCiJciV7E4=) 2: 5C878D268DAB11F189A852AF4511F970.roa (hash: I/jr3tgpLyEseQdfcMV7kCau5f4YQ1NsnEo0xyEHwzc=) 3: 5D1D397A8DAB11F189A852AF4511F970.roa (hash: 8SHLMBij6okm9+8J31gc2FeJFmgTdVNdbizMOipyo0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF21A, serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Validity Not Before: Sep 23 08:39:17 2026 GMT Not After : Sep 30 08:39:17 2026 GMT Subject: CN=6ab39035-54bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:fb:dc:2f:c9:67:1c:a8:b6:df:60:cb:1d: c8:51:76:ce:0a:cb:de:5d:13:9c:4c:41:84:63:dc: 04:db:09:13:b4:79:97:56:6d:7c:13:39:e8:08:fa: 97:61:68:00:79:72:3b:55:8d:86:ab:5a:fe:aa:c6: 09:fe:5e:69:e7:27:ef:6f:f5:3b:29:a4:dc:eb:6a: 3c:b9:e2:6a:8e:8d:1b:51:64:8f:d9:82:02:0a:2e: 12:bb:f8:86:4c:7e:dd:b2:96:8d:b2:70:20:20:35: a3:98:a3:bf:23:d4:78:5f:05:cd:f3:49:7f:5f:d1: 63:8d:86:7b:14:d4:4b:b3:fb:f4:52:cf:e7:bb:bb: 92:96:63:7a:8f:a5:73:60:9e:25:9a:bd:3e:1b:36: 73:46:d0:75:d5:55:2f:9a:7d:ca:bf:37:07:55:77: de:70:6d:a7:fc:2a:66:20:1d:4a:80:11:5d:e6:d2: 1e:70:3d:66:4e:13:d5:f4:4f:fa:8b:72:7b:da:07: 7e:13:11:a8:3f:56:b4:ef:f9:fc:bb:46:2f:9c:7a: e4:a7:a0:57:ed:fa:d4:0a:03:01:bf:ec:7c:c0:01: f4:fd:22:e6:05:8a:5f:52:e3:22:cc:28:9f:d5:af: ef:5f:9e:30:8b:f0:1c:1c:b7:21:9a:b3:d7:17:23: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:68:72:B5:25:B4:F3:A4:89:9E:F2:F8:49:F4:50:AE:92:89:A0:28 X509v3 Authority Key Identifier: keyid:31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:98:af:71:e8:fb:96:41:39:ef:28:ed:bf:4c:1c:eb:da:35: b0:52:70:14:45:21:11:e7:73:30:2c:3c:27:33:bb:ae:2d:51: c4:59:ec:67:08:c9:b3:46:ed:9d:7c:bf:b7:3c:5f:3b:83:ab: c3:d4:ee:01:22:7a:e0:31:f9:97:1d:c3:d6:33:d7:b8:f9:13: 7d:b1:6a:5b:d8:63:4e:ba:45:d3:5d:d4:e3:80:36:3a:ca:3c: fc:9b:c9:ee:d6:27:a5:cd:48:9c:bb:33:b5:2f:93:a5:01:da: 1a:31:d1:e3:79:4d:de:37:f5:25:1f:fd:3d:96:34:d4:a1:66: e5:eb:9d:e7:79:18:33:3b:b9:f0:aa:65:27:ef:ed:60:3a:a6: 55:ac:c0:21:d2:d0:fa:ad:42:71:e9:af:c4:4e:a8:bf:d0:81: c5:a4:90:72:85:3e:46:5c:00:0c:45:29:96:32:50:9e:fe:d7: 0e:64:6f:8b:27:01:ea:dd:8e:dc:ad:fa:b0:90:d9:19:6a:1c: 38:7d:fb:cf:ba:2f:81:13:af:58:94:66:05:4a:81:d5:9c:e9: 2c:ef:e4:71:b8:c8:d7:66:74:5e:9e:a2:ee:fa:1b:5c:b5:10: 1c:0a:ad:1b:16:4e:ec:66:cc:c1:b0:bb:04:8a:6b:bc:47:08: 4e:96:79:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjIxQTExMC8GA1UEBRMoMzE0NDAzRDA0OTFGMEQ3MjFGRDg3NzI5OEJFREVFQkFB RUJFMTE3ODAeFw0yNjA5MjMwODM5MTdaFw0yNjA5MzAwODM5MTdaMBgxFjAUBgNV BAMTDTZhYjM5MDM1LTU0YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT1vvcL8lnHKi232DLHchRds4Ky95dE5xMQYRj3ATbCRO0eZdWbXwTOegI+pdh aAB5cjtVjYarWv6qxgn+XmnnJ+9v9TsppNzrajy54mqOjRtRZI/ZggIKLhK7+IZM ft2ylo2ycCAgNaOYo78j1HhfBc3zSX9f0WONhnsU1Euz+/RSz+e7u5KWY3qPpXNg niWavT4bNnNG0HXVVS+afcq/NwdVd95wbaf8KmYgHUqAEV3m0h5wPWZOE9X0T/qL cnvaB34TEag/VrTv+fy7Ri+ceuSnoFft+tQKAwG/7HzAAfT9IuYFil9S4yLMKJ/V r+9fnjCL8BwctyGas9cXI4wDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOWhytSW0 86SJnvL4SfRQrpKJoCgwHwYDVR0jBBgwFoAUMUQD0EkfDXIf2Hcpi+3uuq6+EXgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMjFBLzc5QjlENzg4OEJG QzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJZjJIY3BpLTN1dXE2LUVY Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVVRRDBFa2ZEWElmMkhjcGktM3V1cTYtRVhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MjFBLzc5QjlENzg4OEJGQzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJ ZjJIY3BpLTN1dXE2LUVYZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFmK9x6PuWQTnvKO2/TBzr2jWwUnAURSER53MwLDwnM7uuLVHEWexnCMmzRu2d fL+3PF87g6vD1O4BInrgMfmXHcPWM9e4+RN9sWpb2GNOukXTXdTjgDY6yjz8m8nu 1ielzUicuzO1L5OlAdoaMdHjeU3eN/UlH/09ljTUoWbl653neRgzO7nwqmUn7+1g OqZVrMAh0tD6rUJx6a/ETqi/0IHFpJByhT5GXAAMRSmWMlCe/tcOZG+LJwHq3Y7c rfqwkNkZahw4ffvPui+BE69YlGYFSoHVnOks7+RxuMjXZnRenqLu+htctRAcCq0b Fk7sZszBsLsEimu8RwhOlnno -----END CERTIFICATE-----Generated at Fri Sep 25 06:19:35 2026 by rpki-client