$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json) Hash identifier: KWOMaDmA5M+/NnaJYusbNt2jOwd3FiGqJGKSLOHedpI= Subject key identifier: D7:51:53:67:A9:48:5A:3B:BF:95:B8:F5:56:BD:83:30:61:E7:F2:B8 Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft Manifest number: 02B0 Signing time: Thu 24 Sep 2026 09:07:00 +0000 Manifest this update: Thu 24 Sep 2026 09:07:00 +0000 Manifest next update: Thu 01 Oct 2026 09:07:00 +0000 Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: 36JIzsMCQ6qmYOvyPoQaixEYfVvP5fj8LXaM/aQDCGw=) 2: 4A0A084CB7F711F1BFCDB8EA6E11F970.roa (hash: w5rbVEuozUE3vtz50NXNeGKW8yGXi2bMqugFVs2Gbgs=) 3: 1347CC90B7F711F1A35C1FD36E11F970.roa (hash: gPorrO+6sluYjKVVrP739NnOy3reTJAodftByAG0NoY=) 4: BFC2928AB50311F1A29149BC4111F970.roa (hash: 1pUmR0Iv+JSyRlcSri62+2ZlKQE8raHJCVkRfNgvUMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Sep 24 09:07:00 2026 GMT Not After : Oct 1 09:07:00 2026 GMT Subject: CN=6ab4e834-9a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:5b:61:2e:4d:b2:71:cf:5c:e6:c5:2e:8d: cd:f8:cf:01:da:44:3e:38:b8:c1:f8:ab:2a:d9:e6: 5a:db:39:71:46:cf:a1:f3:e2:4f:4b:52:47:8f:94: b0:ec:4b:63:a0:d4:78:93:43:3c:af:1f:7b:b0:60: 77:19:42:52:c0:34:8d:59:37:f2:11:0a:68:e4:33: 3a:b1:30:c9:7a:60:46:86:79:e2:05:93:6e:5a:8e: 20:ec:ea:42:bc:d2:51:59:2e:38:ab:bb:e6:71:54: 44:88:43:7b:90:1a:99:13:88:4e:93:af:a8:11:87: 6b:15:08:62:a3:61:e3:e2:f1:36:84:29:96:da:13: 8e:2b:4c:1c:e8:d3:7d:1d:d6:e5:a8:b7:82:a4:45: d7:17:6c:c3:51:ce:ec:de:f4:e1:e7:82:90:09:89: 33:47:af:30:f8:dd:e1:39:e5:3a:4a:4b:81:f2:55: 28:be:bd:ad:3f:3f:68:3f:e0:ff:42:97:0c:46:36: 83:bf:08:f3:d7:a2:45:73:a7:4f:2d:12:58:c6:f2: 01:81:3e:6c:81:9b:54:91:ed:de:23:dd:9e:31:07: d8:66:56:5e:ee:de:83:72:99:a2:e2:92:eb:d5:1d: 7e:15:3e:c8:53:ff:92:8c:85:51:ed:e9:aa:36:70: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:51:53:67:A9:48:5A:3B:BF:95:B8:F5:56:BD:83:30:61:E7:F2:B8 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:38:ba:38:73:ac:43:a7:fd:f0:fc:26:16:b0:f0:71:fb:d0: 7a:34:bf:38:9d:63:81:9d:07:28:49:c8:2c:c2:56:2a:2b:93: f8:14:b8:0f:55:fc:73:99:ff:3e:1c:f3:30:28:c5:a4:b1:9a: 7e:13:1a:24:be:f4:7a:7b:10:53:62:4d:b8:a4:71:1d:46:f7: 26:36:b1:24:aa:ad:c7:3d:fe:45:ef:14:09:7b:1d:72:cd:90: 17:0d:86:68:76:89:8b:15:a6:1b:75:09:96:37:23:0a:d5:bb: 8a:8d:a6:58:df:02:69:50:c4:0f:ad:77:94:4f:fd:88:10:ff: 97:ad:fc:7c:1c:62:16:84:66:63:e2:cb:46:45:b5:de:af:8d: 7d:7b:d2:eb:0f:d7:d6:8d:3b:de:35:e5:54:29:f5:08:c8:e5: 24:03:b4:0c:70:74:85:a1:9b:f5:28:e3:b9:2a:d0:4b:32:ad: b8:40:ba:b0:27:3f:76:1f:28:0f:78:a3:5c:d4:37:06:fa:cb: 8f:cf:96:4e:27:b2:94:35:98:cc:2b:0a:73:71:e0:bd:39:71: 37:9b:8c:70:ee:f4:e0:59:d2:3b:01:28:b4:bb:72:aa:98:f3: c5:2f:2a:34:9f:f0:fe:88:dc:cb:ea:93:8f:19:43:39:a8:06: 68:b7:75:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwOTI0MDkwNzAwWhcNMjYxMDAxMDkwNzAwWjAYMRYwFAYD VQQDEw02YWI0ZTgzNC05YTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2JbYS5NsnHPXObFLo3N+M8B2kQ+OLjB+Ksq2eZa2zlxRs+h8+JPS1JHj5Sw 7EtjoNR4k0M8rx97sGB3GUJSwDSNWTfyEQpo5DM6sTDJemBGhnniBZNuWo4g7OpC vNJRWS44q7vmcVREiEN7kBqZE4hOk6+oEYdrFQhio2Hj4vE2hCmW2hOOK0wc6NN9 HdblqLeCpEXXF2zDUc7s3vTh54KQCYkzR68w+N3hOeU6SkuB8lUovr2tPz9oP+D/ QpcMRjaDvwjz16JFc6dPLRJYxvIBgT5sgZtUke3eI92eMQfYZlZe7t6Dcpmi4pLr 1R1+FT7IU/+SjIVR7emqNnCBnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdRU2ep SFo7v5W49Va9gzBh5/K4MB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBOS8yNjE4ODQwRUIxNDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQx T1B3Wi1ZclltTUR6OEhUeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMzi6OHOsQ6f98PwmFrDwcfvQejS/OJ1jgZ0HKEnILMJWKiuT+BS4D1X8c5n/ PhzzMCjFpLGafhMaJL70ensQU2JNuKRxHUb3JjaxJKqtxz3+Re8UCXsdcs2QFw2G aHaJixWmG3UJljcjCtW7io2mWN8CaVDED613lE/9iBD/l638fBxiFoRmY+LLRkW1 3q+NfXvS6w/X1o073jXlVCn1CMjlJAO0DHB0haGb9SjjuSrQSzKtuEC6sCc/dh8o D3ijXNQ3BvrLj8+WTieylDWYzCsKc3HgvTlxN5uMcO704FnSOwEotLtyqpjzxS8q NJ/w/ojcy+qTjxlDOagGaLd1nQ== -----END CERTIFICATE-----Generated at Thu Sep 24 14:27:59 2026 by rpki-client