$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: CeIO4jGR1Mb99NeICq4o8VLtaF3dXdHBZqM33J8af2o= Subject key identifier: B8:B1:63:7F:19:E3:EA:10:6F:9D:44:CA:93:EB:B2:30:F4:73:24:EB Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 02CF Signing time: Fri 11 Sep 2026 01:19:59 +0000 Manifest this update: Fri 11 Sep 2026 01:19:58 +0000 Manifest next update: Fri 18 Sep 2026 01:19:58 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: 96A0pcsWK2T9R6ILbsxzow6vBntp2TUx8s/5bZLM9Fo=) 2: 680147B486F311F1B8F66003A7EE528E.roa (hash: vd6Z39KPLKcomn09hEZQiUw+JqJNW7KhM+nNsWSg93s=) 3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Sep 11 01:19:58 2026 GMT Not After : Sep 18 01:19:58 2026 GMT Subject: CN=6aa3573f-f6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:d2:f0:27:94:4a:17:a2:14:e6:f5:68:03: eb:26:ad:98:f7:b7:47:95:b1:f9:c4:a1:24:0e:2d: c4:90:7f:c7:90:26:72:76:04:e4:28:76:da:7b:17: 53:98:2c:e9:b0:cd:0e:9c:bc:33:7c:60:bd:2e:d8: b1:80:8f:a3:fe:f0:14:b7:de:03:d7:c4:a6:cb:dd: 2e:d7:34:5f:9b:c6:dd:3a:42:94:dd:5a:38:e4:3f: a7:68:b2:08:a4:40:92:2b:b3:7c:88:a8:dc:da:74: 03:cb:c2:c4:b5:ee:ec:8c:53:cb:42:39:e7:26:88: 7b:84:e7:91:cb:31:89:7d:c0:4e:fb:d6:4d:f5:81: ec:f9:db:84:b1:e2:01:c5:29:fe:3b:55:8e:69:c2: 0a:49:93:04:b1:d7:ea:42:43:7b:ef:e6:48:5e:53: c9:ea:31:71:b8:81:5b:33:f0:10:f8:4f:a8:82:9e: 9e:1c:75:1f:78:bb:44:68:16:59:77:63:9a:5a:7b: f4:1a:cf:8b:17:c4:df:99:ba:85:4c:9b:06:11:44: 7c:ab:53:a2:a8:34:61:b7:c2:af:30:c6:b1:77:91: f3:a4:78:ec:53:58:d6:47:f5:34:52:4f:4e:46:b9: 6c:90:49:34:14:aa:4d:1a:15:1c:94:12:fa:de:d5: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:63:7F:19:E3:EA:10:6F:9D:44:CA:93:EB:B2:30:F4:73:24:EB X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d4:3e:43:7e:28:bc:c5:b3:c6:93:65:ea:4d:66:ea:51:66: 94:c9:1c:f7:59:15:4e:15:8f:57:3d:95:1e:e4:04:c9:68:85: 99:6a:75:dc:3f:1c:c2:6f:0c:eb:4c:6c:c0:41:15:51:e1:b5: 70:f6:4c:3a:22:27:e8:66:96:e4:05:c9:9b:e5:78:66:9c:55: 0e:2c:ac:d5:ad:bf:5f:c9:b3:c1:39:f6:2f:14:c7:7c:19:5d: 8c:b2:b9:0d:52:e8:a9:48:37:f6:63:a7:28:aa:11:37:ad:1e: 6c:3a:25:3d:b8:33:72:be:1f:4e:a9:c4:29:de:4a:b0:d9:b6: 82:bb:11:e2:f1:5b:2f:64:79:8a:11:f2:c3:71:05:74:94:43: 83:5e:2a:8f:85:26:bd:4c:f0:26:6a:6f:29:da:cb:87:20:21: 8c:ef:0c:5f:e0:89:6b:01:1d:6a:ca:4f:5e:e0:4c:3f:43:26: 51:17:27:ed:22:4e:5c:e7:26:06:69:75:f7:f7:a0:31:24:a2: 75:14:73:88:3f:87:fb:00:98:23:92:6e:a7:a4:89:f1:fa:8d: 84:c6:d6:ce:ef:30:46:7d:cc:bc:c3:61:6a:5c:46:36:34:e9: c1:f6:ce:b7:23:96:67:60:fe:f9:99:af:7c:ab:b9:bc:d1:99: bb:0c:1b:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYwOTExMDExOTU4WhcNMjYwOTE4MDExOTU4WjAYMRYwFAYD VQQDEw02YWEzNTczZi1mNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx/S8CeUSheiFOb1aAPrJq2Y97dHlbH5xKEkDi3EkH/HkCZydgTkKHbaexdT mCzpsM0OnLwzfGC9LtixgI+j/vAUt94D18Smy90u1zRfm8bdOkKU3Vo45D+naLII pECSK7N8iKjc2nQDy8LEte7sjFPLQjnnJoh7hOeRyzGJfcBO+9ZN9YHs+duEseIB xSn+O1WOacIKSZMEsdfqQkN77+ZIXlPJ6jFxuIFbM/AQ+E+ogp6eHHUfeLtEaBZZ d2OaWnv0Gs+LF8TfmbqFTJsGEUR8q1OiqDRht8KvMMaxd5HzpHjsU1jWR/U0Uk9O RrlskEk0FKpNGhUclBL63tUeUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLixY38Z 4+oQb51EypPrsjD0cyTrMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR9Q+Q34ovMWzxpNl6k1m6lFmlMkc91kVThWPVz2VHuQEyWiFmWp13D8cwm8M 60xswEEVUeG1cPZMOiIn6GaW5AXJm+V4ZpxVDiys1a2/X8mzwTn2LxTHfBldjLK5 DVLoqUg39mOnKKoRN60ebDolPbgzcr4fTqnEKd5KsNm2grsR4vFbL2R5ihHyw3EF dJRDg14qj4UmvUzwJmpvKdrLhyAhjO8MX+CJawEdaspPXuBMP0MmURcn7SJOXOcm Bml19/egMSSidRRziD+H+wCYI5Jup6SJ8fqNhMbWzu8wRn3MvMNhalxGNjTpwfbO tyOWZ2D++ZmvfKu5vNGZuwwbOw== -----END CERTIFICATE-----Generated at Fri Sep 11 13:07:54 2026 by rpki-client