$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: 2RkpkqrWEaMpowPtO/Wn1BXYZXHLEW1+9uXnjhjfTW8= Subject key identifier: 45:B8:0C:44:61:B3:43:40:C0:53:27:BD:4C:08:55:AE:EC:67:03:6E Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 037A Signing time: Wed 07 Oct 2026 00:55:42 +0000 Manifest this update: Wed 07 Oct 2026 00:55:42 +0000 Manifest next update: Wed 14 Oct 2026 00:55:42 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: OfWaS/Ss49gKXUtoIxNIitHJ1qA20cjmkzCJ0VM/7NE=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: 95MXEPd3XWfhWFM2kZfvjKE+kkcge5QqhzEgDRS8E0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: Oct 7 00:55:42 2026 GMT Not After : Oct 14 00:55:42 2026 GMT Subject: CN=6ac5988e-4c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:06:14:30:a9:1e:74:69:2f:dc:dd:a6:64: 45:25:a6:fe:a1:29:33:4c:e2:2e:e7:83:2d:df:c0: c7:10:77:cf:7c:bd:2f:5c:9c:0d:81:d3:c1:1c:27: fe:db:f1:7e:a1:80:55:9e:43:06:50:db:6c:44:07: ba:c9:6c:16:58:28:2f:54:d1:4f:f5:a6:6a:9e:69: 3e:45:08:c7:8f:c1:43:cb:de:9e:41:81:ea:5d:6c: d5:c6:ab:4b:af:8d:68:d5:7c:4c:29:f2:e5:3c:7b: 9e:ab:35:70:9b:bc:f8:69:72:08:c1:f2:34:dd:51: 6b:73:00:a2:20:2e:be:f9:14:27:40:00:cb:ed:c3: e5:a3:dc:6d:54:b0:46:52:81:82:23:63:c6:1e:24: 61:1d:45:1a:86:5e:d6:17:0b:f5:ff:46:15:21:21: ca:cf:b1:d6:e0:14:3e:9c:96:64:2a:81:43:7b:fc: 88:81:c2:5e:58:92:5b:8b:ff:b4:e6:bb:8a:a6:3e: 1b:f4:ab:4a:42:ba:74:a9:d4:e2:4a:94:65:fc:51: 1c:64:4a:f7:24:22:13:5d:7e:0c:11:cb:f6:99:6b: f7:79:d2:13:5d:de:54:2e:4c:96:38:8f:0a:50:0b: f7:a7:80:98:4f:a3:e6:7f:26:bc:ec:ed:59:4c:22: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B8:0C:44:61:B3:43:40:C0:53:27:BD:4C:08:55:AE:EC:67:03:6E X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:59:a4:94:aa:23:6f:6d:a0:8e:5a:53:89:0b:db:c0:dc:9f: 26:1d:8a:c4:45:ab:68:19:fc:65:f6:6d:2b:d9:32:2c:50:b7: 38:5d:ac:5c:f0:50:c2:ce:5a:18:10:25:a8:b9:6f:33:0f:42: 7f:59:ea:db:4b:fd:0b:a0:71:be:20:28:f6:60:6b:22:37:2e: 20:e2:16:c2:3a:01:25:3e:e4:b0:24:10:7d:13:7e:81:aa:91: 24:23:a6:9b:e4:52:f8:88:4a:ca:a1:2b:ac:97:0f:6f:20:2c: f2:21:50:26:4f:b5:b1:ff:4a:d5:de:1d:0b:72:9c:d2:97:cc: 3c:a3:aa:1d:6a:69:bb:3f:8e:ad:07:13:47:64:66:1a:b6:04: c0:04:34:32:c5:03:26:bc:75:98:00:00:6b:d9:43:57:12:a3: 7b:cd:99:8b:44:eb:2e:35:8b:0a:98:b8:43:ee:60:2a:b5:35: b8:9f:75:79:b1:43:a8:c3:d1:96:90:7a:6f:7f:52:c9:35:26: 23:2d:7e:c7:f2:50:2f:43:92:96:2c:f0:1d:c8:36:06:c5:5f: 2f:00:23:95:a8:83:5c:64:f7:ea:cc:4b:e4:2b:0b:f4:b1:32: 1e:26:fa:7e:91:04:9f:e9:5a:f2:69:ba:e3:c5:da:ff:20:70: 45:12:9a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjYxMDA3MDA1NTQyWhcNMjYxMDE0MDA1NTQyWjAYMRYwFAYD VQQDEw02YWM1OTg4ZS00YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC0GFDCpHnRpL9zdpmRFJab+oSkzTOIu54Mt38DHEHfPfL0vXJwNgdPBHCf+ 2/F+oYBVnkMGUNtsRAe6yWwWWCgvVNFP9aZqnmk+RQjHj8FDy96eQYHqXWzVxqtL r41o1XxMKfLlPHueqzVwm7z4aXIIwfI03VFrcwCiIC6++RQnQADL7cPlo9xtVLBG UoGCI2PGHiRhHUUahl7WFwv1/0YVISHKz7HW4BQ+nJZkKoFDe/yIgcJeWJJbi/+0 5ruKpj4b9KtKQrp0qdTiSpRl/FEcZEr3JCITXX4MEcv2mWv3edITXd5ULkyWOI8K UAv3p4CYT6Pmfya87O1ZTCL+2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEW4DERh s0NAwFMnvUwIVa7sZwNuMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAElmklKojb22gjlpTiQvbwNyfJh2KxEWraBn8ZfZtK9kyLFC3OF2sXPBQws5a GBAlqLlvMw9Cf1nq20v9C6BxviAo9mBrIjcuIOIWwjoBJT7ksCQQfRN+gaqRJCOm m+RS+IhKyqErrJcPbyAs8iFQJk+1sf9K1d4dC3Kc0pfMPKOqHWppuz+OrQcTR2Rm GrYEwAQ0MsUDJrx1mAAAa9lDVxKje82Zi0TrLjWLCpi4Q+5gKrU1uJ91ebFDqMPR lpB6b39SyTUmIy1+x/JQL0OSlizwHcg2BsVfLwAjlaiDXGT36sxL5CsL9LEyHib6 fpEEn+la8mm648Xa/yBwRRKa+Q== -----END CERTIFICATE-----Generated at Wed Oct 7 04:30:08 2026 by rpki-client