$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: 8ESk21Jzyg2S2BHYExRCZPm7zYpsea6c+4cDTwTxqH8= Subject key identifier: 48:88:5A:7C:C6:6D:D4:CE:92:C9:98:7D:9C:F1:E3:4F:0D:3C:D5:D2 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 02CF Signing time: Wed 09 Sep 2026 01:40:57 +0000 Manifest this update: Wed 09 Sep 2026 01:40:57 +0000 Manifest next update: Wed 16 Sep 2026 01:40:57 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: zxYvc+M/w9liIxKZXiv7mLnqRXHAP2qSepbd4M+2r+g=) 2: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: jj9Anb+YltSNZ7XXzklotQBXr3n/2KBa9WPb7jR7Hmc=) 3: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: D3QE+K/fDpz/3eSAi1rPfAFHFlOdI3dak+hzzYghHZo=) 4: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ=) 5: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=) 6: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI=) 7: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=) 8: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: bXMhRP5t5yXxZ38+U5zANdmRNyogxO2UTQiQkXvbZD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 01:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Sep 9 01:40:57 2026 GMT Not After : Sep 16 01:40:57 2026 GMT Subject: CN=6aa0b929-8594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7f:2b:26:a6:6a:f8:e4:0a:74:59:c6:02:b9: 8f:fa:3a:c0:54:82:9a:07:d3:ad:88:a3:17:1d:98: c8:73:5e:74:6e:ed:77:e6:49:41:fa:a8:89:e7:68: 1f:60:5d:f6:5f:01:c4:ab:aa:95:e3:f4:01:86:44: 03:c4:9a:87:fa:2a:22:80:62:0a:62:e6:f3:2f:fb: 7f:35:19:f0:9a:55:8d:3a:5f:db:b7:e4:e6:60:ed: 4d:d7:8a:fa:0d:d5:17:59:ef:99:6d:f3:94:57:d2: 75:0d:ce:01:85:ad:3e:ba:8a:5a:0b:5e:3a:b9:86: b1:ad:d2:8c:9c:56:e6:43:5f:9d:52:1b:69:a0:08: a9:a7:5c:35:6b:4a:e8:ac:5e:d3:4b:51:dd:0b:b1: 88:d1:28:ce:cf:ea:c2:fb:28:ad:94:c7:07:d4:94: ed:29:e0:ea:fb:ca:72:97:56:95:a6:3c:e3:9f:4b: 6e:3f:30:39:f7:da:cf:37:ed:9b:98:f1:77:61:49: a1:35:32:06:e0:d2:51:53:7c:77:46:e4:e4:32:39: 7b:b1:df:db:cf:6b:76:16:de:2e:e4:2e:88:7c:61: e4:99:32:4f:6c:ec:d8:0a:9a:f7:aa:a3:e5:9e:c5: 7b:39:e3:7d:f5:8f:55:6e:e9:f8:65:3f:89:e9:0e: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:88:5A:7C:C6:6D:D4:CE:92:C9:98:7D:9C:F1:E3:4F:0D:3C:D5:D2 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:03:de:f8:8d:69:71:0f:6a:dd:fe:95:32:2f:20:34:3c:07: cc:90:13:0e:56:d0:da:ba:f4:72:f6:e5:f0:19:2a:fb:7e:c3: 8c:5d:38:9a:2f:a8:81:32:55:bd:cd:c6:26:6f:a3:bd:13:b4: c6:a3:89:1c:a1:88:c6:d3:6e:3b:b5:eb:67:db:28:55:14:5c: 03:ff:eb:14:3a:ff:c5:71:ca:1f:7c:42:c0:8c:f1:af:26:4e: 77:e3:1c:a7:dd:29:1e:b2:71:22:74:11:7b:b1:dd:48:00:b1: 9e:b6:16:48:85:d6:02:11:62:a0:59:e8:82:a4:60:49:ff:0c: 15:ea:34:79:cb:b8:8b:80:eb:f5:59:51:59:24:5f:20:fe:c8: 68:2e:c3:15:c0:6d:90:66:9c:9e:1f:e9:bf:2e:b1:a1:a2:58: 67:f2:a5:be:26:8f:fb:c8:c9:23:59:ae:d5:58:2f:47:55:c3: 31:5b:9e:d4:a5:87:f5:7a:36:46:26:c1:5e:87:3c:23:84:b9: 0f:d5:22:3a:17:9a:b6:5d:5b:dd:a8:48:89:ca:d6:be:4b:8d: dc:a7:cc:0d:1e:11:a6:c9:38:c8:8e:5a:da:a1:bc:18:75:25: 30:cc:05:42:25:8e:b6:ba:4e:95:b8:2d:19:0d:9a:ab:01:99: 12:99:25:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjYwOTA5MDE0MDU3WhcNMjYwOTE2MDE0MDU3WjAYMRYwFAYD VQQDEw02YWEwYjkyOS04NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6H8rJqZq+OQKdFnGArmP+jrAVIKaB9OtiKMXHZjIc150bu135klB+qiJ52gf YF32XwHEq6qV4/QBhkQDxJqH+ioigGIKYubzL/t/NRnwmlWNOl/bt+TmYO1N14r6 DdUXWe+ZbfOUV9J1Dc4Bha0+uopaC146uYaxrdKMnFbmQ1+dUhtpoAipp1w1a0ro rF7TS1HdC7GI0SjOz+rC+yitlMcH1JTtKeDq+8pyl1aVpjzjn0tuPzA599rPN+2b mPF3YUmhNTIG4NJRU3x3RuTkMjl7sd/bz2t2Ft4u5C6IfGHkmTJPbOzYCpr3qqPl nsV7OeN99Y9Vbun4ZT+J6Q4jUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiIWnzG bdTOksmYfZzx408NPNXSMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgwPe+I1pcQ9q3f6VMi8gNDwHzJATDlbQ2rr0cvbl8Bkq+37DjF04mi+ogTJV vc3GJm+jvRO0xqOJHKGIxtNuO7XrZ9soVRRcA//rFDr/xXHKH3xCwIzxryZOd+Mc p90pHrJxInQRe7HdSACxnrYWSIXWAhFioFnogqRgSf8MFeo0ecu4i4Dr9VlRWSRf IP7IaC7DFcBtkGacnh/pvy6xoaJYZ/KlviaP+8jJI1mu1VgvR1XDMVue1KWH9Xo2 RibBXoc8I4S5D9UiOheatl1b3ahIicrWvkuN3KfMDR4Rpsk4yI5a2qG8GHUlMMwF QiWOtrpOlbgtGQ2aqwGZEpklVQ== -----END CERTIFICATE-----Generated at Thu Sep 10 09:41:49 2026 by rpki-client