$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft File: sfYJnZYvySdk5xe4l9ERPLfnbSk.mft (raw, json) Hash identifier: e3F4ImkOEw59Oc1Jz4L9IEbt4S9SypH7lTyEiDR6hSU= Subject key identifier: A7:E4:A2:71:5E:26:15:C6:E8:CB:E1:59:33:DF:91:61:CF:FD:80:CA Authority key identifier: B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 Certificate issuer: /CN=A91FF8C9/serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft Manifest number: 1D Signing time: Fri 25 Sep 2026 09:09:59 +0000 Manifest this update: Fri 25 Sep 2026 09:09:59 +0000 Manifest next update: Fri 02 Oct 2026 09:09:59 +0000 Files and hashes: 1: sfYJnZYvySdk5xe4l9ERPLfnbSk.crl (hash: 4iXZGsNzG/4I+HDOp6o+oEgmzM+wiWODqyfm3K/TwpI=) 2: QuZ9RYGCB3-yFC_l3eiq8enSqsc.asa (hash: zjE9PMVv3fk5nDWUkwT5RkbI+mpS62anj+Oj4cunBqo=) 3: 0EB7317299AA11F1BAD0E41A7111F970.roa (hash: 8OuhmagAmsUG01wzlgf+KfYSs7YjWuqfz/27xcrRefY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Validity Not Before: Sep 25 09:09:59 2026 GMT Not After : Oct 2 09:09:59 2026 GMT Subject: CN=6ab63a67-9483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:e1:08:9e:22:56:aa:d1:c5:1e:01:aa:c4: dd:a9:b6:82:66:d4:60:89:08:9b:11:2e:ba:89:95: 4a:ad:e0:2e:da:ba:a4:8f:ec:7d:ea:ef:7e:61:87: 5f:a0:e1:00:c8:d2:0e:a8:50:b8:b4:33:5e:89:32: 65:c6:65:c5:89:c0:cc:93:22:31:01:82:0f:bb:69: 36:23:aa:c7:bc:08:cb:82:ce:4f:b1:17:6d:23:dd: be:79:5c:31:e9:3b:0f:49:eb:0c:62:ea:42:a3:b8: 0f:a4:25:86:3a:85:28:33:4e:f3:5f:7a:e1:5b:74: 9c:1b:fe:0b:62:1a:fc:08:f3:6b:be:5e:9d:85:53: b2:cf:b1:c0:89:d1:71:b4:c9:5e:60:af:db:b0:31: 08:6e:67:d5:be:05:73:c1:26:df:53:cf:0c:64:c1: b2:11:87:d9:51:27:5b:b0:21:2a:e7:9d:0a:e1:06: 28:90:77:33:de:00:73:ef:6b:c4:4d:aa:27:c3:28: 28:40:18:cd:04:ec:4b:53:12:3e:b6:7b:ee:ff:ce: b2:d8:50:58:5f:ad:62:dc:23:f5:99:4d:20:30:e1: 1f:0d:a7:0d:20:24:9d:37:d6:78:6b:f2:e4:21:f2: 22:b5:4e:7a:f5:c7:33:83:2f:7e:d4:3f:78:bd:66: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E4:A2:71:5E:26:15:C6:E8:CB:E1:59:33:DF:91:61:CF:FD:80:CA X509v3 Authority Key Identifier: keyid:B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:88:80:8a:9d:d7:22:9d:4a:7a:cc:45:9b:95:06:d8:c5:fa: 28:fd:b6:00:2d:c0:47:c8:31:23:ff:58:9d:66:f5:92:43:d4: 26:45:9a:cf:dd:f4:ec:2a:bb:7b:50:b1:a1:b6:e3:fd:b1:89: 43:94:6b:2f:98:8f:d4:1b:19:0e:d4:aa:f0:4d:05:49:64:ea: eb:82:fa:85:d7:52:85:ff:12:22:b6:ff:49:45:04:e0:d0:f7: 67:f0:3c:bb:d6:45:21:8f:64:a6:d8:36:4a:7b:bc:a4:b4:4b: 12:88:b6:2f:b0:a0:1d:c9:14:48:b3:a0:af:ec:bd:71:01:b6: 72:5f:f0:78:ba:58:93:09:80:5d:e9:00:80:ef:3d:8b:d0:e5: e0:d8:cd:2e:79:1b:47:9a:7c:35:e7:b0:be:a4:ba:d9:c4:56: 17:dd:86:b8:04:fb:74:d5:ab:f3:a5:e6:38:9a:d2:54:d9:6e: d9:35:77:a5:28:af:26:1f:05:8d:43:33:9e:6c:48:7b:fd:1b: 98:6f:7d:84:58:a6:23:a3:b2:3f:fb:bf:f8:6e:45:59:cb:a0: ee:17:44:f4:85:c1:e4:0d:d0:16:91:da:32:46:1b:62:b1:58: b6:fa:5e:3a:e0:70:b1:41:25:20:26:5c:bc:21:a2:c0:9f:70: f8:ac:8c:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoQjFGNjA5OUQ5NjJGQzkyNzY0RTcxN0I4OTdEMTExM0NC N0U3NkQyOTAeFw0yNjA5MjUwOTA5NTlaFw0yNjEwMDIwOTA5NTlaMBgxFjAUBgNV BAMTDTZhYjYzYTY3LTk0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK++EIniJWqtHFHgGqxN2ptoJm1GCJCJsRLrqJlUqt4C7auqSP7H3q735hh1+g 4QDI0g6oULi0M16JMmXGZcWJwMyTIjEBgg+7aTYjqse8CMuCzk+xF20j3b55XDHp Ow9J6wxi6kKjuA+kJYY6hSgzTvNfeuFbdJwb/gtiGvwI82u+Xp2FU7LPscCJ0XG0 yV5gr9uwMQhuZ9W+BXPBJt9TzwxkwbIRh9lRJ1uwISrnnQrhBiiQdzPeAHPva8RN qifDKChAGM0E7EtTEj62e+7/zrLYUFhfrWLcI/WZTSAw4R8Npw0gJJ031nhr8uQh 8iK1Tnr1xzODL37UP3i9ZkCVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp+SicV4m Fcboy+FZM9+RYc/9gMowHwYDVR0jBBgwFoAUsfYJnZYvySdk5xe4l9ERPLfnbSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzcwNjQ4RDg4OTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNkazV4ZTRsOUVSUExmbmJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2ZZSm5aWXZ5U2RrNXhlNGw5RVJQTGZuYlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzcwNjQ4RDg4OTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNk azV4ZTRsOUVSUExmbmJTay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdiICKndcinUp6zEWblQbYxfoo/bYALcBHyDEj/1idZvWSQ9QmRZrP3fTsKrt7 ULGhtuP9sYlDlGsvmI/UGxkO1KrwTQVJZOrrgvqF11KF/xIitv9JRQTg0Pdn8Dy7 1kUhj2Sm2DZKe7yktEsSiLYvsKAdyRRIs6Cv7L1xAbZyX/B4uliTCYBd6QCA7z2L 0OXg2M0ueRtHmnw157C+pLrZxFYX3Ya4BPt01avzpeY4mtJU2W7ZNXelKK8mHwWN QzOebEh7/RuYb32EWKYjo7I/+7/4bkVZy6DuF0T0hcHkDdAWkdoyRhtisVi2+l46 4HCxQSUgJly8IaLAn3D4rIwp -----END CERTIFICATE-----Generated at Sat Sep 26 16:19:11 2026 by rpki-client