$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: OmtTKNif6DGmrM4idVt9cb4IP+NesO0KsZ2BXozO414= Subject key identifier: 89:2A:9F:BC:EA:13:38:8E:9F:4A:83:9B:61:60:2E:98:F4:D8:16:84 Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 041A Signing time: Sat 05 Sep 2026 00:05:28 +0000 Manifest this update: Sat 05 Sep 2026 00:05:28 +0000 Manifest next update: Sat 12 Sep 2026 00:05:28 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: ecFrQ1BLhcQKIJG/Bgpn8uQO3wnkW2bUcOjcZ74EX/A=) 2: 685F0CBA031211F1BBBCC8A9163D8C67.roa (hash: NxlgbUimOupPTjcXRwh01KDTfYdr+Bp3csROuFT6/PM=) 3: 3A904D64210111F181AE0DC81F3D8C67.roa (hash: t+AIRVihJ3hRRsLPqK0l+yDAoSi5gLyuvLWG6FytYCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Sep 5 00:05:28 2026 GMT Not After : Sep 12 00:05:28 2026 GMT Subject: CN=6a9b5cc8-18df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:b9:e9:af:5a:14:67:bd:ec:96:f0:18:a7: 99:8a:61:0e:fd:10:bc:3f:68:31:21:af:08:b2:c5: 9b:c2:36:62:54:e1:cc:9f:08:d0:de:14:99:06:98: 4b:9f:fb:82:20:6f:2a:65:63:46:63:be:48:2c:ac: e7:fe:bc:0b:a2:2a:ee:db:74:39:c5:d7:2e:e6:ad: f4:fe:5a:dd:de:3d:64:70:e1:f6:06:20:49:94:44: ad:bc:54:c5:c6:2b:d5:d4:1f:68:78:6d:1b:8e:ae: eb:d0:87:b1:1d:81:5e:10:6f:98:51:98:ee:5c:e0: 74:98:d1:2b:52:43:f6:05:c5:d2:df:19:20:57:20: 2d:5e:84:50:7d:99:35:24:e3:22:e2:8d:ec:23:d5: 7a:25:89:7b:05:8f:c5:3c:9a:42:25:c1:6b:5e:94: df:ba:96:d9:f3:d7:d6:99:61:b7:47:4c:4b:e3:4f: 3a:ce:60:14:5b:d4:c9:76:88:a4:68:fa:d8:54:d4: 58:05:82:65:62:42:2b:2f:10:35:53:9b:b9:e6:a7: ec:7c:1f:ed:a3:4d:c4:f8:ac:05:4d:2a:e0:63:c2: 77:60:fa:5e:f3:05:7a:6c:b8:19:d0:b7:41:b6:ed: b3:56:de:a2:9e:8b:58:6e:ac:8d:ee:cb:f4:22:c9: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2A:9F:BC:EA:13:38:8E:9F:4A:83:9B:61:60:2E:98:F4:D8:16:84 X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ba:9f:ab:4c:2c:6a:b5:f0:2c:14:e0:53:d8:07:e0:48:3b: be:28:86:60:db:ad:5a:86:ad:ce:02:fe:87:e3:a2:0f:38:4a: 29:89:db:ae:3c:d4:52:85:45:74:9e:11:3f:35:8a:09:99:17: c0:16:03:27:8e:dd:a7:75:fd:3b:09:88:14:df:e2:cf:c5:95: 44:81:2d:ba:cc:d5:16:ed:05:9b:0a:c8:58:66:48:37:61:45: 26:01:9f:7a:2c:21:d5:a2:18:b5:a6:39:3d:59:4a:69:cb:c4: 4c:d9:a6:2c:9e:0c:ea:93:46:d8:d1:82:75:d9:89:b3:74:f8: 13:d2:c5:c8:9d:ef:3e:89:fd:4e:44:99:03:41:da:b7:2e:75: eb:f6:ff:ee:5e:58:6a:91:44:8a:87:b5:e5:cf:b3:b3:62:35: 29:d6:49:18:4c:37:3c:ef:66:80:ec:d3:9d:f2:c4:5a:59:98: c3:3f:8f:44:54:bd:50:1b:72:64:44:77:c3:a9:4a:de:fc:6e: 63:5e:ea:b1:2e:26:8a:b5:85:91:25:3b:c4:75:7b:7d:77:e2: 07:3a:32:44:b7:a4:fb:94:b1:5f:a9:a7:85:83:e1:21:af:88: 1a:c2:6d:53:d3:83:01:a7:ea:9a:98:13:c3:f9:d4:e4:a0:2d: 7f:5b:7b:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjYwOTA1MDAwNTI4WhcNMjYwOTEyMDAwNTI4WjAYMRYwFAYD VQQDEw02YTliNWNjOC0xOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsg+56a9aFGe97JbwGKeZimEO/RC8P2gxIa8IssWbwjZiVOHMnwjQ3hSZBphL n/uCIG8qZWNGY75ILKzn/rwLoiru23Q5xdcu5q30/lrd3j1kcOH2BiBJlEStvFTF xivV1B9oeG0bjq7r0IexHYFeEG+YUZjuXOB0mNErUkP2BcXS3xkgVyAtXoRQfZk1 JOMi4o3sI9V6JYl7BY/FPJpCJcFrXpTfupbZ89fWmWG3R0xL4086zmAUW9TJdoik aPrYVNRYBYJlYkIrLxA1U5u55qfsfB/to03E+KwFTSrgY8J3YPpe8wV6bLgZ0LdB tu2zVt6inotYbqyN7sv0IslP/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkqn7zq EziOn0qDm2FgLpj02BaEMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLqfq0wsarXwLBTgU9gH4Eg7viiGYNutWoatzgL+h+OiDzhKKYnbrjzUUoVF dJ4RPzWKCZkXwBYDJ47dp3X9OwmIFN/iz8WVRIEtuszVFu0FmwrIWGZIN2FFJgGf eiwh1aIYtaY5PVlKacvETNmmLJ4M6pNG2NGCddmJs3T4E9LFyJ3vPon9TkSZA0Ha ty516/b/7l5YapFEioe15c+zs2I1KdZJGEw3PO9mgOzTnfLEWlmYwz+PRFS9UBty ZER3w6lK3vxuY17qsS4mirWFkSU7xHV7fXfiBzoyRLek+5SxX6mnhYPhIa+IGsJt U9ODAafqmpgTw/nU5KAtf1t7CA== -----END CERTIFICATE-----Generated at Sat Sep 5 03:14:51 2026 by rpki-client