$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft File: -WJTlSWdVbnjutm2QuFbY5vAe8c.mft (raw, json) Hash identifier: tu2bycgUid0kBsFd6760SP9n7Y/p8JwZkDvweJDy+eE= Subject key identifier: 07:4F:62:9F:57:CE:C3:DC:C8:D9:3D:4B:5C:8B:28:E3:F1:B1:51:03 Authority key identifier: F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 Certificate issuer: /CN=A91FFE2A/serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft Manifest number: 1F Signing time: Wed 23 Sep 2026 08:39:46 +0000 Manifest this update: Wed 23 Sep 2026 08:39:46 +0000 Manifest next update: Wed 30 Sep 2026 08:39:46 +0000 Files and hashes: 1: -WJTlSWdVbnjutm2QuFbY5vAe8c.crl (hash: JTuM6XifIe/MVcUo4CKIdW/LcMlsprF5ksFlMS5CZrs=) 2: 1E1845C88D5E11F18A7850066B11F970.roa (hash: hm1LeJzMvNJnJ0qU8ZDYrWN+bMQ1p67o2pDficVOHz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE2A, serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Validity Not Before: Sep 23 08:39:46 2026 GMT Not After : Sep 30 08:39:46 2026 GMT Subject: CN=6ab39052-0a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:e3:6b:78:f7:29:af:5c:1a:43:4c:4b:ca: fc:5a:84:77:6c:be:19:15:77:3a:14:a1:a9:18:53: d9:6a:fb:db:e0:f6:43:3d:56:0a:68:6e:7d:84:22: bd:d0:18:1f:91:4a:cc:30:bf:8a:0b:98:41:83:05: 8f:14:84:bd:bc:64:78:e9:2a:56:88:53:e5:dd:c6: b9:0a:3a:b3:f3:fe:96:a3:f6:2e:4c:63:9f:c3:f8: 50:c5:0f:cc:da:fb:84:6d:63:c7:b7:2c:c6:d8:a6: d0:75:fd:79:8f:5a:3d:05:ac:14:00:b7:66:b1:4e: 38:4c:2b:6a:94:0c:14:77:54:39:3e:fc:0c:2e:d0: af:99:05:e6:2c:0f:fa:67:fb:67:83:6c:1f:c2:6d: f1:52:72:bd:67:e2:e1:f2:bf:4c:d6:d5:20:ec:05: 82:b2:b8:b9:6d:2a:69:69:bc:0f:1f:ca:77:a0:ea: 03:db:40:5c:fd:30:fe:d8:89:e2:7a:85:8b:3a:52: ad:fa:85:00:1e:f7:d9:b6:84:4d:62:1e:25:f4:ec: 51:f1:12:f6:4a:c9:b3:df:dd:99:d3:50:bf:94:0d: 8d:15:bf:75:4d:63:be:26:4a:aa:f8:3c:66:6b:0d: fa:23:af:d2:17:91:14:8f:74:04:36:81:fb:ec:b6: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4F:62:9F:57:CE:C3:DC:C8:D9:3D:4B:5C:8B:28:E3:F1:B1:51:03 X509v3 Authority Key Identifier: keyid:F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4c:e6:52:54:ac:2b:32:ef:ee:c0:26:c6:30:61:2c:a4:2a: 91:5d:13:a9:b1:88:99:78:ed:13:1d:4c:ca:37:37:5f:6f:26: 70:c5:0c:4c:14:17:27:00:04:7b:9f:b7:39:2a:aa:99:94:59: cb:5e:4b:4b:e4:41:c8:02:1d:3f:06:e8:16:73:a0:ba:2d:e3: 14:d3:1b:1d:a7:fc:09:45:fe:95:3e:c7:2b:db:06:0c:58:79: 27:06:a2:6d:b0:3a:95:33:af:40:0a:d3:65:5c:a1:6a:9a:95: b2:74:fc:c5:2e:23:de:50:fc:d0:3b:b6:bb:07:f3:18:ef:12: fc:f1:c6:c1:25:b5:6f:5e:9a:b4:1e:2d:89:d3:03:6f:47:98: 2b:4b:aa:a2:93:04:b2:27:fb:7b:ad:e1:96:ba:3b:fe:8b:b4: 6b:90:23:7f:ef:cb:da:1a:3c:cf:2f:77:fb:6d:44:9a:0e:81: 79:0f:49:fc:99:18:7d:2e:2e:ae:29:d4:0e:59:f7:8f:3a:a6: 67:4d:d6:25:04:56:97:9c:19:74:df:7d:c8:ee:ad:50:9d:59: 9b:d0:19:31:2c:b8:ee:2b:19:68:5b:c1:7f:5c:7a:6a:24:de: 45:66:80:40:29:49:75:05:48:e5:6e:41:26:ee:a6:09:82:c3: 83:dd:12:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkUyQTExMC8GA1UEBRMoRjk2MjUzOTUyNTlENTVCOUUzQkFEOUI2NDJFMTVCNjM5 QkMwN0JDNzAeFw0yNjA5MjMwODM5NDZaFw0yNjA5MzAwODM5NDZaMBgxFjAUBgNV BAMTDTZhYjM5MDUyLTBhNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwkONrePcpr1waQ0xLyvxahHdsvhkVdzoUoakYU9lq+9vg9kM9Vgpobn2EIr3Q GB+RSswwv4oLmEGDBY8UhL28ZHjpKlaIU+XdxrkKOrPz/paj9i5MY5/D+FDFD8za +4RtY8e3LMbYptB1/XmPWj0FrBQAt2axTjhMK2qUDBR3VDk+/Awu0K+ZBeYsD/pn +2eDbB/CbfFScr1n4uHyv0zW1SDsBYKyuLltKmlpvA8fyneg6gPbQFz9MP7YieJ6 hYs6Uq36hQAe99m2hE1iHiX07FHxEvZKybPf3ZnTUL+UDY0Vv3VNY74mSqr4PGZr Dfojr9IXkRSPdAQ2gfvstoOlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB09in1fO w9zI2T1LXIso4/GxUQMwHwYDVR0jBBgwFoAU+WJTlSWdVbnjutm2QuFbY5vAe8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGRTJBLzZDODc3MzEyOEQ1 QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJuanV0bTJRdUZiWTV2QWU4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVdKVGxTV2RWYm5qdXRtMlF1RmJZNXZBZThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG RTJBLzZDODc3MzEyOEQ1QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJu anV0bTJRdUZiWTV2QWU4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzTOZSVKwrMu/uwCbGMGEspCqRXROpsYiZeO0THUzKNzdfbyZwxQxMFBcnAAR7 n7c5KqqZlFnLXktL5EHIAh0/BugWc6C6LeMU0xsdp/wJRf6VPscr2wYMWHknBqJt sDqVM69ACtNlXKFqmpWydPzFLiPeUPzQO7a7B/MY7xL88cbBJbVvXpq0Hi2J0wNv R5grS6qikwSyJ/t7reGWujv+i7RrkCN/78vaGjzPL3f7bUSaDoF5D0n8mRh9Li6u KdQOWfePOqZnTdYlBFaXnBl0333I7q1QnVmb0BkxLLjuKxloW8F/XHpqJN5FZoBA KUl1BUjlbkEm7qYJgsOD3RLi -----END CERTIFICATE-----Generated at Thu Sep 24 14:02:22 2026 by rpki-client