$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft File: 30WmAWUG35sQS3TILTbV_9LVbK0.mft (raw, json) Hash identifier: mCvsSVzq4unsJ/lMJioIJ/xbJXx3akyUotocBWjrBUw= Subject key identifier: 4F:BE:CA:05:2D:EA:BD:EF:CF:8E:2B:C6:B8:F7:71:FE:E0:38:31:44 Authority key identifier: DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD Certificate issuer: /CN=A91597B7/serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft Manifest number: 04 Signing time: Fri 11 Sep 2026 13:42:18 +0000 Manifest this update: Fri 11 Sep 2026 13:42:17 +0000 Manifest next update: Fri 18 Sep 2026 13:42:17 +0000 Files and hashes: 1: 30WmAWUG35sQS3TILTbV_9LVbK0.crl (hash: m11WYEVYK2i6D4GcL55XNdNu0YzqocmTcxRTL+qfVQ8=) 2: 6AC1F2CCADE611F1A742C8804111F970.roa (hash: pOX2bB7h73TmS7wQA5JOgBkRmL6STMduq4kjixO0aqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 13:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597B7, serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD Validity Not Before: Sep 11 13:42:17 2026 GMT Not After : Sep 18 13:42:17 2026 GMT Subject: CN=6aa40539-e172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:34:81:91:d3:a0:54:90:eb:eb:42:cd:fd: 2c:96:96:bc:16:75:b4:d1:81:00:75:96:a6:56:9c: 27:44:8a:92:15:b9:75:2b:ee:c6:fe:83:4d:e4:e2: b4:92:86:00:66:c1:f5:e2:3a:ac:2d:f0:e8:5a:53: 9a:b2:a1:37:3c:5e:b2:f2:13:da:22:81:b5:f4:5d: 54:13:7d:a3:e8:60:f4:92:84:5f:d3:3a:38:e4:61: 13:da:95:cd:06:c2:86:81:14:e5:0d:67:ce:40:4a: b3:41:c0:31:b7:70:68:95:ca:84:fa:9b:f6:46:18: 2f:fd:4d:82:73:e1:e6:d3:06:38:cd:6c:f2:36:bb: ab:40:f2:6d:a0:1e:d0:d3:ba:54:c3:2c:55:aa:90: f5:ae:5f:99:55:28:5a:ef:9d:d5:ca:be:53:f7:86: 6e:5c:70:2f:e4:55:17:f6:d5:10:e4:1e:8d:b5:55: 03:c9:4c:0e:ec:a5:f9:77:e8:8b:67:64:37:e7:59: b6:a6:02:97:6a:e0:15:db:49:35:0e:b6:1b:33:33: 67:6d:f1:a8:08:ce:15:91:5f:49:9d:d8:11:d5:e4: ab:33:db:2d:40:08:3b:0f:a6:31:53:3b:7b:eb:f3: 8a:96:91:96:5a:99:8f:d1:46:46:66:05:e5:8e:63: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BE:CA:05:2D:EA:BD:EF:CF:8E:2B:C6:B8:F7:71:FE:E0:38:31:44 X509v3 Authority Key Identifier: keyid:DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:06:aa:b7:67:f3:fd:b6:49:51:ca:d0:d4:d7:ee:ba:16:68: b1:15:71:ce:14:3e:02:ee:40:f3:2a:63:3c:73:62:97:c4:ac: fa:4d:3c:66:60:38:b5:68:1b:d4:7c:9b:18:34:ae:e8:85:64: 93:c8:30:34:55:1c:da:80:90:2c:30:c8:fc:2c:f4:98:d7:3e: d3:bd:7b:6f:8a:53:d5:77:bd:b9:b3:29:cf:2b:cf:21:83:59: 90:a8:ab:f9:75:9e:6a:51:8e:e1:89:ad:45:b9:17:3a:12:b7: 8f:d5:c5:01:99:1c:76:8d:a2:73:96:87:da:cc:c2:97:58:8d: df:3b:c0:62:5a:d6:2b:ec:a7:6c:e2:24:70:ae:d5:81:0a:0d: e7:81:74:93:5a:83:d0:84:91:0a:4a:00:12:9e:df:1f:32:e0: 8e:40:25:c2:1f:97:05:d4:a9:b2:a5:42:ab:8b:0a:be:aa:6f: 75:4a:1d:8c:f3:93:6e:df:f8:a9:7b:4b:26:b6:f1:da:0a:7b: b0:6d:16:b3:94:2f:29:04:fb:5c:c5:e0:8d:64:d8:b5:42:24: 8a:fe:00:e9:14:6d:24:3f:20:2d:ee:c5:60:79:52:36:3c:ab: e4:b8:af:10:24:f7:60:f3:fb:9b:17:79:70:01:c0:86:fa:08: 41:9e:b6:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdCNzExMC8GA1UEBRMoREY0NUE2MDE2NTA2REY5QjEwNEI3NEM4MkQzNkQ1RkZE MkQ1NkNBRDAeFw0yNjA5MTExMzQyMTdaFw0yNjA5MTgxMzQyMTdaMBgxFjAUBgNV BAMTDTZhYTQwNTM5LWUxNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy3jSBkdOgVJDr60LN/SyWlrwWdbTRgQB1lqZWnCdEipIVuXUr7sb+g03k4rSS hgBmwfXiOqwt8OhaU5qyoTc8XrLyE9oigbX0XVQTfaPoYPSShF/TOjjkYRPalc0G woaBFOUNZ85ASrNBwDG3cGiVyoT6m/ZGGC/9TYJz4ebTBjjNbPI2u6tA8m2gHtDT ulTDLFWqkPWuX5lVKFrvndXKvlP3hm5ccC/kVRf21RDkHo21VQPJTA7spfl36Itn ZDfnWbamApdq4BXbSTUOthszM2dt8agIzhWRX0md2BHV5Ksz2y1ACDsPpjFTO3vr 84qWkZZamY/RRkZmBeWOY+1TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUT77KBS3q ve/PjivGuPdx/uA4MUQwHwYDVR0jBBgwFoAU30WmAWUG35sQS3TILTbV/9LVbK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0I3LzEyQzIxNUFDQURF NjExRjFCQkE4NzkzRjQxMTFGOTcwLzMwV21BV1VHMzVzUVMzVElMVGJWXzlMVmJL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzBXbUFXVUczNXNRUzNUSUxUYlZfOUxWYkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0I3LzEyQzIxNUFDQURFNjExRjFCQkE4NzkzRjQxMTFGOTcwLzMwV21BV1VHMzVz UVMzVElMVGJWXzlMVmJLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGBqq3Z/P9tklRytDU1+66FmixFXHOFD4C7kDzKmM8c2KXxKz6TTxmYDi1aBvU fJsYNK7ohWSTyDA0VRzagJAsMMj8LPSY1z7TvXtvilPVd725synPK88hg1mQqKv5 dZ5qUY7hia1FuRc6EreP1cUBmRx2jaJzlofazMKXWI3fO8BiWtYr7Kds4iRwrtWB Cg3ngXSTWoPQhJEKSgASnt8fMuCOQCXCH5cF1KmypUKriwq+qm91Sh2M85Nu3/ip e0smtvHaCnuwbRazlC8pBPtcxeCNZNi1QiSK/gDpFG0kPyAt7sVgeVI2PKvkuK8Q JPdg8/ubF3lwAcCG+ghBnrby -----END CERTIFICATE-----Generated at Sun Sep 13 09:32:36 2026 by rpki-client