$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json) Hash identifier: 8B6cTDh5zkBnRTBCIClSXUUYUCvKBP0shYggLiaPpV4= Subject key identifier: B0:90:45:3E:9A:B3:90:B8:76:38:01:E9:FD:0A:AA:C3:30:83:B4:9D Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft Manifest number: A4 Signing time: Sat 05 Sep 2026 06:58:16 +0000 Manifest this update: Sat 05 Sep 2026 06:58:15 +0000 Manifest next update: Sat 12 Sep 2026 06:58:15 +0000 Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: 5NsGZEh9WLg2pQCjqf3raV2r1eehgJoZv3Ql0OGbeKw=) 2: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: QR8q+ALVePxBSGtk9U7glKgvftSJmjU/0bwUblLugJQ=) 3: 3B2923CEA59311F1BFA29E7E6111F970.roa (hash: BGk+JAG9Q8bpLUQg39UqHykiJjuDj09FHL88WqmA/WE=) 4: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: ZuP0uWcegjrbhw4CUiK7NSueNS7Vvex1xTz8Rpwula0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Sep 5 06:58:15 2026 GMT Not After : Sep 12 06:58:15 2026 GMT Subject: CN=6a9bbd88-0a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:a5:bd:2b:e6:18:fa:1a:8f:d4:bd:7e:3e: 55:e2:eb:7a:12:8e:a4:85:f4:fc:7f:1b:a1:55:36: b3:f5:47:7c:cd:4d:87:95:31:60:16:58:d8:db:fc: 37:b2:b5:00:92:64:ed:0d:a3:b9:44:71:90:64:12: 46:b1:04:f6:93:09:06:51:05:2a:83:54:4d:6e:9f: 6d:31:e4:29:89:6c:45:3e:14:bc:e6:d5:1a:38:e6: a0:b4:f4:db:d6:5f:56:ad:ea:21:05:d1:83:d6:48: c7:60:74:8b:e5:bf:8a:c6:a1:00:4e:11:c6:3c:4a: 66:50:3e:fa:d0:85:9c:be:8d:44:16:27:61:01:a1: b1:96:93:4e:cd:33:0f:7b:b9:40:d1:d0:69:06:2c: bd:dd:22:03:a1:42:c9:d9:6c:2f:9c:32:f9:ce:a3: 22:ae:51:5d:22:58:99:50:2f:77:7a:15:25:8f:c5: da:98:1f:06:76:97:75:2c:4d:28:7d:3d:13:15:1c: 78:f1:a3:56:c2:cd:e5:e1:e3:6b:6e:bb:31:71:53: c6:a3:d5:e9:1c:ab:c6:dc:54:9a:f0:b4:d8:43:bc: e3:b1:77:d6:59:71:1b:f3:52:db:52:44:b9:07:44: ed:4c:78:47:82:95:34:8b:bf:95:99:6d:56:bc:b1: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:45:3E:9A:B3:90:B8:76:38:01:E9:FD:0A:AA:C3:30:83:B4:9D X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:dd:36:96:93:11:33:83:00:15:fa:df:89:c8:db:77:31:aa: 2f:ca:95:ee:1c:78:26:53:a2:a2:06:b3:8c:55:f9:07:c4:b3: 51:47:37:3d:06:f2:97:3e:07:e9:4d:75:2b:ef:8f:48:83:e5: d5:1c:39:a9:e9:cf:97:bb:87:5c:fe:7f:f9:c4:55:5f:ac:d3: b2:6e:06:73:1c:c9:ab:38:19:6b:dd:0e:82:63:39:7b:e5:f4: 3e:42:25:31:37:c0:b0:29:4d:5d:27:a7:c1:03:e9:3b:84:03: 1c:8c:3e:54:66:53:02:79:46:47:a2:a7:de:dc:7c:98:a0:b4: 1b:93:a6:ae:02:e8:98:b8:b7:5e:11:2b:64:d6:b0:0c:a4:ca: cc:27:9a:78:2a:cf:86:0e:6c:de:3c:4c:9e:2e:91:4d:9e:0e: ec:4b:76:f5:80:91:f3:9c:31:18:8b:46:04:f3:86:18:3c:ef: 5f:18:e2:61:fa:f1:b6:e3:b7:08:4b:9d:e9:cb:4a:2a:d6:05: 6e:63:41:16:fd:b1:b7:e9:32:eb:bb:9a:ff:88:e4:27:b4:f1: 1c:e0:49:7b:be:03:46:7f:df:3c:87:05:5d:21:72:88:d3:17: a6:e0:fb:15:54:fb:df:8b:68:c0:ab:b3:93:c5:c6:b0:d0:06: f4:72:75:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNzYxMTAvBgNVBAUTKEJEOEUzQ0MyQTkzRDVEQkNEODQyNzUwOTczOEEzMTRC RjkwQzg4N0QwHhcNMjYwOTA1MDY1ODE1WhcNMjYwOTEyMDY1ODE1WjAYMRYwFAYD VQQDEw02YTliYmQ4OC0wYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuilvSvmGPoaj9S9fj5V4ut6Eo6khfT8fxuhVTaz9Ud8zU2HlTFgFljY2/w3 srUAkmTtDaO5RHGQZBJGsQT2kwkGUQUqg1RNbp9tMeQpiWxFPhS85tUaOOagtPTb 1l9WreohBdGD1kjHYHSL5b+KxqEAThHGPEpmUD760IWcvo1EFidhAaGxlpNOzTMP e7lA0dBpBiy93SIDoULJ2WwvnDL5zqMirlFdIliZUC93ehUlj8XamB8Gdpd1LE0o fT0TFRx48aNWws3l4eNrbrsxcVPGo9XpHKvG3FSa8LTYQ7zjsXfWWXEb81LbUkS5 B0TtTHhHgpU0i7+VmW1WvLHUOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCQRT6a s5C4djgB6f0KqsMwg7SdMB8GA1UdIwQYMBaAFL2OPMKpPV282EJ1CXOKMUv5DIh9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU3Ni9EOUU0QzRDQ0I5 MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhiellRblVKYzRveFNfa01p SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU3Ni9EOUU0QzRDQ0I5MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhi ellRblVKYzRveFNfa01pSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoN02lpMRM4MAFfrficjbdzGqL8qV7hx4JlOiogazjFX5B8SzUUc3PQbylz4H 6U11K++PSIPl1Rw5qenPl7uHXP5/+cRVX6zTsm4GcxzJqzgZa90OgmM5e+X0PkIl MTfAsClNXSenwQPpO4QDHIw+VGZTAnlGR6Kn3tx8mKC0G5OmrgLomLi3XhErZNaw DKTKzCeaeCrPhg5s3jxMni6RTZ4O7Et29YCR85wxGItGBPOGGDzvXxjiYfrxtuO3 CEud6ctKKtYFbmNBFv2xt+ky67ua/4jkJ7TxHOBJe74DRn/fPIcFXSFyiNMXpuD7 FVT734towKuzk8XGsNAG9HJ1aA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:42:21 2026 by rpki-client