$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: 5QYBYmA3AxlM1TkBf1kiy+YAE+yQv+gPspoDHxIekig= Subject key identifier: 39:58:78:E0:82:BD:4F:F6:24:C2:48:F2:91:B0:46:E1:9D:19:EA:14 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1434 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1419 Signing time: Fri 04 Sep 2026 16:53:12 +0000 Manifest this update: Fri 04 Sep 2026 16:53:11 +0000 Manifest next update: Fri 11 Sep 2026 16:53:11 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: /7sBuinz6tqfX/U+LbRf1/e//IqQ47H1dhDs7onwYYA=) 2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) 3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5172 (0x1434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Sep 4 16:53:11 2026 GMT Not After : Sep 11 16:53:11 2026 GMT Subject: CN=6a9af777-2aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:64:03:3a:c2:a2:6c:0f:bc:92:a3:c2:dc: 5c:e7:49:64:99:b2:60:99:e4:7a:e9:3e:35:03:cf: 48:b4:7b:e8:d3:df:ad:ff:8f:da:1d:c9:e8:84:8f: ec:90:b1:39:f8:cf:f5:07:21:d4:13:f9:c2:94:95: 19:23:cb:b2:3d:0a:06:26:4d:ca:25:69:8f:fd:f2: ae:51:6b:f4:e2:98:30:93:51:e1:98:80:ba:d5:49: d1:24:b7:e5:fd:c9:7f:e0:de:f0:62:06:fe:cf:8f: 6c:58:b7:e7:8b:c0:dd:ac:d8:23:3c:2c:9d:d5:c4: 93:50:8f:62:7a:34:46:5e:33:5f:a8:16:32:be:b1: a0:eb:be:7d:41:aa:29:b6:a9:fd:88:e8:dd:9e:cb: e8:a8:54:43:f2:a6:77:db:1a:bf:f7:e6:5d:0e:76: 19:58:56:1e:81:e8:94:e0:74:86:f3:5c:01:cf:b5: 82:05:3b:22:db:1d:9f:67:3f:fb:c3:3e:4a:76:51: b0:f3:33:f7:12:89:16:82:20:4c:ee:61:b4:2c:94: db:57:5e:0c:9d:43:1d:90:e1:34:14:d8:02:2e:e2: 56:af:76:81:c1:b6:4d:6d:df:16:ff:a4:78:b3:f1: 1e:43:68:58:33:e5:92:1a:28:fb:c7:6b:c3:65:c7: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:58:78:E0:82:BD:4F:F6:24:C2:48:F2:91:B0:46:E1:9D:19:EA:14 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:fa:6f:4b:bc:36:44:e8:49:d0:6c:a1:55:5c:23:df:e6:35: 46:b0:b3:c3:c2:39:d3:cb:de:08:65:ab:ac:3b:03:80:2d:b4: c8:38:df:90:27:41:5a:11:7d:ee:e9:81:6c:18:37:a2:89:5f: 46:4c:1e:0a:dc:9b:2f:07:69:eb:37:55:d1:1c:2e:9e:60:19: 53:60:08:dc:ce:c1:68:6a:d1:5d:39:64:a5:20:2c:2e:9f:7e: c3:f7:78:c7:f3:35:3a:5b:19:b5:7a:ac:61:8f:a1:16:b0:4d: e7:31:92:2c:52:35:92:45:31:ab:fc:71:71:70:03:2c:eb:f7: 74:06:35:50:79:39:af:b8:54:44:ca:d8:f9:dd:6d:d2:22:9e: f2:01:b3:6d:dc:3e:15:67:2e:d4:d4:70:ed:8b:93:01:bf:86: ab:d1:bd:fe:90:88:42:78:d0:49:6b:34:02:c6:94:f3:7f:91: ad:54:e5:43:21:e7:73:7d:56:e8:1d:98:1d:e4:f7:aa:13:2b: 93:cc:1d:59:80:a0:55:28:86:fe:ba:2b:b9:69:5a:85:e4:76: 02:eb:58:e4:aa:42:0f:20:d3:e4:3b:84:32:93:07:78:27:63: 6a:42:fd:e0:d8:0a:e1:d6:36:00:54:67:e9:92:ae:93:c7:0a: 19:85:31:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwOTA0MTY1MzExWhcNMjYwOTExMTY1MzExWjAYMRYwFAYD VQQDEw02YTlhZjc3Ny0yYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8RkAzrComwPvJKjwtxc50lkmbJgmeR66T41A89ItHvo09+t/4/aHcnohI/s kLE5+M/1ByHUE/nClJUZI8uyPQoGJk3KJWmP/fKuUWv04pgwk1HhmIC61UnRJLfl /cl/4N7wYgb+z49sWLfni8DdrNgjPCyd1cSTUI9iejRGXjNfqBYyvrGg6759Qaop tqn9iOjdnsvoqFRD8qZ32xq/9+ZdDnYZWFYegeiU4HSG81wBz7WCBTsi2x2fZz/7 wz5KdlGw8zP3EokWgiBM7mG0LJTbV14MnUMdkOE0FNgCLuJWr3aBwbZNbd8W/6R4 s/EeQ2hYM+WSGij7x2vDZceEBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlYeOCC vU/2JMJI8pGwRuGdGeoUMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvPpvS7w2ROhJ0GyhVVwj3+Y1RrCzw8I508veCGWrrDsDgC20yDjfkCdBWhF9 7umBbBg3oolfRkweCtybLwdp6zdV0RwunmAZU2AI3M7BaGrRXTlkpSAsLp9+w/d4 x/M1OlsZtXqsYY+hFrBN5zGSLFI1kkUxq/xxcXADLOv3dAY1UHk5r7hURMrY+d1t 0iKe8gGzbdw+FWcu1NRw7YuTAb+Gq9G9/pCIQnjQSWs0AsaU83+RrVTlQyHnc31W 6B2YHeT3qhMrk8wdWYCgVSiG/roruWlaheR2AutY5KpCDyDT5DuEMpMHeCdjakL9 4NgK4dY2AFRn6ZKuk8cKGYUxgQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:21:29 2026 by rpki-client