$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: SUMF85zXTDZqEkHxgoDjT15PPZawPQ9jrbcGlN76VGw= Subject key identifier: DC:29:F1:13:DE:4B:47:3E:7B:AC:0A:39:3F:59:9F:AF:34:E3:86:DE Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 014C Signing time: Fri 11 Sep 2026 05:28:09 +0000 Manifest this update: Fri 11 Sep 2026 05:28:08 +0000 Manifest next update: Fri 18 Sep 2026 05:28:08 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: RXx7wTIuzsldX8y5itAfyJxVWnEu/yEdOYrVNsWb8MY=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Sep 11 05:28:08 2026 GMT Not After : Sep 18 05:28:08 2026 GMT Subject: CN=6aa39169-6c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:b2:3e:47:46:e3:eb:2b:70:49:1e:cc:80: 58:a1:de:ba:9b:66:b3:28:ff:0d:5e:f9:96:97:c8: 4e:14:43:17:d5:a5:0e:64:08:b8:2c:6f:05:c6:b1: 76:e3:59:84:ec:af:88:4c:5d:53:8e:00:2a:ff:ad: ac:1e:59:96:44:77:f0:7a:7d:4b:e9:43:16:b5:99: 0c:d2:f0:e3:bb:e3:14:48:e1:c2:24:b4:37:61:14: 0d:49:1d:7b:a8:9c:f3:c9:0a:02:0f:6f:b5:63:97: 42:39:e6:49:b4:60:5c:a3:30:76:2b:cf:43:98:16: ad:ed:1b:0a:2b:af:a9:0c:d3:cf:50:13:b1:38:21: b0:b4:a2:3b:18:c9:24:9c:b6:5b:b3:83:dc:fa:81: 11:6f:91:0b:86:2d:a2:bf:18:82:58:6c:91:f9:d7: 6f:02:55:73:11:89:2d:72:76:91:33:03:9d:32:2d: 95:4d:19:cf:a6:14:bd:19:7a:97:d0:25:6d:ce:a9: 1c:e0:cd:9b:30:16:a5:27:c5:79:f8:1d:80:fd:6a: b6:2f:09:63:09:ea:11:ab:e3:41:e7:20:d5:51:31: 9b:98:d9:85:57:6e:9a:b8:63:4e:5a:6f:e7:da:cb: 86:74:27:52:b6:60:0f:29:9d:87:20:db:58:e9:62: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:29:F1:13:DE:4B:47:3E:7B:AC:0A:39:3F:59:9F:AF:34:E3:86:DE X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:38:70:ac:24:47:81:d0:02:99:77:e3:8d:d9:e3:8d:8f:45: 2a:3c:53:6c:72:a8:7a:57:f6:a4:b5:c2:0f:90:32:e8:a3:09: 96:01:7f:2f:34:87:cf:47:bc:ba:2e:f9:43:06:74:b8:80:85: 88:e5:2a:02:24:9e:8d:77:1a:9b:3d:52:37:a9:f4:e0:67:40: 71:d5:82:66:d8:9c:e9:c4:b9:a0:27:c5:be:70:ac:d2:8b:38: d3:a5:e8:ab:2f:26:fd:9c:4c:73:f1:17:7b:f8:78:76:7f:db: 29:d2:0e:f0:6c:09:a7:43:27:62:d2:1a:82:25:90:9e:da:77: 81:d3:74:ff:4a:44:da:13:8f:66:11:7d:94:04:89:71:e2:1c: fd:1b:0d:45:66:f0:2f:63:ba:7b:96:f4:8b:2c:40:74:45:99: 36:04:a2:03:f2:20:e3:d6:af:07:89:c6:9c:2f:73:d0:82:3b: 1e:8d:33:90:fc:15:9b:f7:96:82:83:a3:c1:c4:61:3f:70:55: 09:bc:20:8b:81:bc:60:b1:f5:f5:5d:4e:03:42:5d:c3:82:17: e9:a3:5f:3b:6f:9b:33:a2:14:b1:a3:35:c1:cf:3d:96:a8:37: 2e:db:9f:14:9a:11:21:ce:72:5e:2b:1e:3e:25:79:4a:bd:72: 2b:95:e3:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwOTExMDUyODA4WhcNMjYwOTE4MDUyODA4WjAYMRYwFAYD VQQDEw02YWEzOTE2OS02YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrWyPkdG4+srcEkezIBYod66m2azKP8NXvmWl8hOFEMX1aUOZAi4LG8FxrF2 41mE7K+ITF1TjgAq/62sHlmWRHfwen1L6UMWtZkM0vDju+MUSOHCJLQ3YRQNSR17 qJzzyQoCD2+1Y5dCOeZJtGBcozB2K89DmBat7RsKK6+pDNPPUBOxOCGwtKI7GMkk nLZbs4Pc+oERb5ELhi2ivxiCWGyR+ddvAlVzEYktcnaRMwOdMi2VTRnPphS9GXqX 0CVtzqkc4M2bMBalJ8V5+B2A/Wq2LwljCeoRq+NB5yDVUTGbmNmFV26auGNOWm/n 2suGdCdStmAPKZ2HINtY6WL33wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwp8RPe S0c+e6wKOT9Zn68044beMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbDhwrCRHgdACmXfjjdnjjY9FKjxTbHKoelf2pLXCD5Ay6KMJlgF/LzSHz0e8 ui75QwZ0uICFiOUqAiSejXcamz1SN6n04GdAcdWCZtic6cS5oCfFvnCs0os406Xo qy8m/ZxMc/EXe/h4dn/bKdIO8GwJp0MnYtIagiWQntp3gdN0/0pE2hOPZhF9lASJ ceIc/RsNRWbwL2O6e5b0iyxAdEWZNgSiA/Ig49avB4nGnC9z0II7Ho0zkPwVm/eW goOjwcRhP3BVCbwgi4G8YLH19V1OA0Jdw4IX6aNfO2+bM6IUsaM1wc89lqg3Ltuf FJoRIc5yXisePiV5Sr1yK5XjMw== -----END CERTIFICATE-----Generated at Fri Sep 11 15:42:44 2026 by rpki-client