$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft File: -Q4hD858Z6Lysy3hTusFoEsNEOE.mft (raw, json) Hash identifier: RT8GjXKoiHW9QiKeR5gpeL220KXGGCpifkarUYcYGH4= Subject key identifier: D2:85:34:A1:06:97:9A:56:C0:02:13:2E:05:71:D8:A7:B4:52:38:F8 Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft Manifest number: 023D Signing time: Sat 05 Sep 2026 02:25:59 +0000 Manifest this update: Sat 05 Sep 2026 02:25:58 +0000 Manifest next update: Sat 12 Sep 2026 02:25:58 +0000 Files and hashes: 1: -Q4hD858Z6Lysy3hTusFoEsNEOE.crl (hash: Dqe55xNLGnrKCfusatX3MWkI9g1iFnvtz35hRpFxhRM=) 2: 437B845AA75E11F18D55ABAC3511F970.roa (hash: vrjWlbpAWsGBPe+tIxJRzPxMIwBnCgUwMY8nBDp3H9g=) 3: 10A3333E3BAC11F1B91923E195833773.roa (hash: qv+5geqvZuNiYk7aYI5fXtMxpLW2mBJm6HRn38gC5D4=) 4: re2-D6m1rwVPcLxJQ-D1bJPeQAY.asa (hash: twkoRDc3iJHscp7wypa+HU9CAGZBoclPq14+LY8ZVQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Validity Not Before: Sep 5 02:25:58 2026 GMT Not After : Sep 12 02:25:58 2026 GMT Subject: CN=6a9b7db7-e077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:00:4f:35:10:8e:4a:4b:40:8e:dd:82:77: 50:f2:16:fb:fa:02:a5:70:18:1f:cd:76:0a:06:ff: 75:6c:c0:df:53:58:13:14:44:c1:5f:e0:49:0e:30: 4c:63:3d:54:50:a9:2e:76:1f:ef:4a:35:58:8f:11: de:97:40:45:68:dc:31:18:f9:8b:fb:2a:73:f9:1d: f2:c7:4c:a8:6d:d6:34:3d:c7:6c:40:79:7a:b3:22: 17:a0:b0:67:ea:3d:b7:7a:4c:aa:36:b7:be:4e:fd: f1:ce:be:bc:81:bb:a6:6c:62:1b:b6:e2:ed:9c:a5: 80:11:c2:a3:5b:49:58:b5:29:2d:43:22:e7:1b:37: db:2e:c2:9e:b4:17:70:89:e5:51:73:3f:62:22:4c: 5b:25:21:54:41:e1:c3:6f:02:d7:3c:a2:60:f6:a7: 13:88:f9:a5:89:24:fd:5a:00:34:2f:75:aa:7d:82: 07:c0:04:cf:76:22:9a:4f:3c:48:43:a4:d2:ce:e9: d1:6b:11:e6:a0:c3:93:78:80:24:5e:60:92:8f:8e: df:df:e1:e0:ee:34:6b:cf:25:0f:83:cf:5b:6a:13: b1:e7:96:19:4a:bb:41:72:b0:98:76:b4:d8:69:db: e5:75:01:db:f6:a4:e8:43:b4:f8:c5:a0:34:e5:cb: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:85:34:A1:06:97:9A:56:C0:02:13:2E:05:71:D8:A7:B4:52:38:F8 X509v3 Authority Key Identifier: keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e7:ae:f4:8c:21:4b:64:51:21:f3:c6:6c:90:98:17:e0:f3: 3d:7f:d4:c7:fd:fc:da:21:b2:dd:a1:42:c2:f3:a7:73:83:bd: d8:cc:bf:84:1b:e8:44:78:64:3f:08:ec:2f:59:8e:28:e9:2c: 29:d0:28:fb:c5:6c:e2:7e:a1:9b:3f:d6:42:3d:9e:ba:60:61: b6:e5:01:26:43:76:ec:5d:92:d9:39:50:80:ac:b3:f1:62:c9: 39:c0:d6:7d:9e:f5:74:8b:f7:03:33:8f:87:27:24:60:e7:d8: 52:d1:3f:57:f0:18:2d:9d:4b:75:17:39:12:3c:62:05:cc:34: 6d:a5:01:e4:3c:8d:49:89:98:77:44:57:5f:7c:20:68:b7:e4: 5d:87:b8:6f:fc:05:68:50:49:ce:75:f6:5d:d3:50:c0:ab:b7: b3:79:6a:2e:a9:23:ab:09:c5:50:3c:ba:5f:da:05:36:02:f5: 8a:cb:0e:04:1f:cb:9e:42:48:07:cc:21:13:a2:e3:5e:a1:8c: e1:5c:a2:55:7e:e8:75:a6:0f:35:1d:c5:2f:2c:c6:7a:92:88: db:95:fa:aa:80:ba:b2:93:2c:61:1f:97:03:86:6e:41:a6:4e: b4:2c:fc:a1:13:6e:27:ab:9b:e5:8b:40:55:c8:85:78:09:1d: ef:b2:99:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTczNjkxMTAvBgNVBAUTKEY5MEUyMTBGQ0U3QzY3QTJGMkIzMkRFMTRFRUIwNUEw NEIwRDEwRTEwHhcNMjYwOTA1MDIyNTU4WhcNMjYwOTEyMDIyNTU4WjAYMRYwFAYD VQQDEw02YTliN2RiNy1lMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKAATzUQjkpLQI7dgndQ8hb7+gKlcBgfzXYKBv91bMDfU1gTFETBX+BJDjBM Yz1UUKkudh/vSjVYjxHel0BFaNwxGPmL+ypz+R3yx0yobdY0PcdsQHl6syIXoLBn 6j23ekyqNre+Tv3xzr68gbumbGIbtuLtnKWAEcKjW0lYtSktQyLnGzfbLsKetBdw ieVRcz9iIkxbJSFUQeHDbwLXPKJg9qcTiPmliST9WgA0L3WqfYIHwATPdiKaTzxI Q6TSzunRaxHmoMOTeIAkXmCSj47f3+Hg7jRrzyUPg89bahOx55YZSrtBcrCYdrTY advldQHb9qToQ7T4xaA05cvj9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKFNKEG l5pWwAITLgVx2Ke0Ujj4MB8GA1UdIwQYMBaAFPkOIQ/OfGei8rMt4U7rBaBLDRDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzM2OS9CMUQ2MTk0MjQ4 N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2THlzeTNoVHVzRm9Fc05F T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RNGhEODU4WjZMeXN5M2hUdXNGb0VzTkVPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzM2OS9CMUQ2MTk0MjQ4N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2 THlzeTNoVHVzRm9Fc05FT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIOeu9IwhS2RRIfPGbJCYF+DzPX/Ux/382iGy3aFCwvOnc4O92My/hBvoRHhk PwjsL1mOKOksKdAo+8Vs4n6hmz/WQj2eumBhtuUBJkN27F2S2TlQgKyz8WLJOcDW fZ71dIv3AzOPhyckYOfYUtE/V/AYLZ1LdRc5EjxiBcw0baUB5DyNSYmYd0RXX3wg aLfkXYe4b/wFaFBJznX2XdNQwKu3s3lqLqkjqwnFUDy6X9oFNgL1issOBB/LnkJI B8whE6LjXqGM4VyiVX7odaYPNR3FLyzGepKI25X6qoC6spMsYR+XA4ZuQaZOtCz8 oRNuJ6ub5YtAVciFeAkd77KZVA== -----END CERTIFICATE-----Generated at Sat Sep 5 11:02:55 2026 by rpki-client