$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: An94/ef7cfm4WhbmzwyxDTXzJIwi5B09XIxDgfGsR3Y= Subject key identifier: D1:6A:F0:D0:0F:88:AB:DB:AC:8D:03:48:D8:75:66:DB:39:36:67:84 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0A5F Signing time: Fri 04 Sep 2026 19:33:18 +0000 Manifest this update: Fri 04 Sep 2026 19:33:17 +0000 Manifest next update: Fri 11 Sep 2026 19:33:17 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: C8R6eHQeqcN8anwXLiIySzDRer7uBESjllOuitzyzDE=) 2: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=) 3: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Sep 4 19:33:17 2026 GMT Not After : Sep 11 19:33:17 2026 GMT Subject: CN=6a9b1cfe-18be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:71:63:78:d7:88:b1:06:85:1f:0a:27:e7:20: 9d:76:a9:bf:73:e0:c1:89:64:79:6c:35:39:13:0a: 4a:5c:f4:17:06:55:4d:9b:82:a0:9e:98:9c:49:43: 6d:1a:ae:6a:80:b9:6f:25:2d:6f:10:51:a1:b1:d9: 78:0e:ac:fb:45:34:32:c0:00:b2:8a:12:62:14:65: 95:92:98:70:6f:18:12:d7:d4:86:41:80:0c:aa:8d: f3:d6:2c:28:41:8d:ae:52:21:83:9c:44:b8:70:9b: 35:95:00:52:e6:f3:b5:a9:ee:a9:a8:2a:0d:89:8e: 6f:d7:15:5b:30:8c:28:90:dc:8b:b8:4a:70:d8:61: 6c:c0:7f:29:94:79:e6:91:6d:fb:19:aa:2f:a6:4b: 2e:a4:a0:83:d4:9f:ce:43:08:6f:1f:85:25:d5:29: f1:fe:47:c6:12:03:94:ea:54:8b:9f:ec:a4:38:a9: 29:f2:66:52:e9:bf:0d:a0:52:bf:a1:5c:d9:02:24: cd:25:76:3f:29:36:05:a6:87:ae:55:0e:85:35:79: 3a:9a:47:e6:4a:68:f2:1b:f8:a5:f1:34:b4:12:b4: 03:1a:65:69:20:dd:d3:01:af:5b:48:57:0d:96:25: ec:ff:5e:16:12:32:be:66:28:20:a6:17:75:e7:f7: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:F0:D0:0F:88:AB:DB:AC:8D:03:48:D8:75:66:DB:39:36:67:84 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:23:d5:c6:57:6c:b9:3c:df:23:e5:0e:aa:43:ab:58:9b:05: 36:cb:b9:9d:33:cc:5a:a0:48:3f:98:59:18:5e:96:e5:98:b0: 47:82:1f:9c:4f:9b:04:4f:01:b0:99:3e:aa:1a:0b:55:e2:cf: 15:8a:a7:9c:12:0e:d6:24:2d:f1:c5:4a:25:19:74:5d:fb:78: ff:69:11:fc:f6:85:60:13:40:76:58:68:10:ee:64:13:e0:cc: 6c:a7:75:c8:a2:c4:b9:17:59:b3:6b:81:6f:3f:e3:d7:e4:ff: 34:9b:17:cf:04:0c:42:ae:54:d3:c6:b6:e5:e3:7f:b0:41:cf: ea:4b:e9:42:e6:41:09:1b:8c:30:36:91:f6:10:44:19:1a:9c: 08:78:14:82:da:f8:24:05:01:15:b1:d1:c0:ed:12:40:02:d0: ce:9e:a6:df:17:3b:c2:5c:76:4c:2b:ff:80:38:ad:14:ed:76: a9:40:f1:63:a9:54:21:7b:45:e9:7b:7f:ed:30:2d:73:1b:a5: 26:67:61:6f:9c:58:60:16:66:cb:e8:af:5a:35:f5:e5:8f:64: fd:c2:9f:9e:8d:6d:a3:b0:d6:0d:a9:da:5b:30:34:95:78:15: 96:a9:41:65:5c:77:75:4a:15:51:f0:af:6e:0b:8b:11:e9:db: 29:43:f1:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwOTA0MTkzMzE3WhcNMjYwOTExMTkzMzE3WjAYMRYwFAYD VQQDEw02YTliMWNmZS0xOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HFjeNeIsQaFHwon5yCddqm/c+DBiWR5bDU5EwpKXPQXBlVNm4KgnpicSUNt Gq5qgLlvJS1vEFGhsdl4Dqz7RTQywACyihJiFGWVkphwbxgS19SGQYAMqo3z1iwo QY2uUiGDnES4cJs1lQBS5vO1qe6pqCoNiY5v1xVbMIwokNyLuEpw2GFswH8plHnm kW37GaovpksupKCD1J/OQwhvH4Ul1Snx/kfGEgOU6lSLn+ykOKkp8mZS6b8NoFK/ oVzZAiTNJXY/KTYFpoeuVQ6FNXk6mkfmSmjyG/il8TS0ErQDGmVpIN3TAa9bSFcN liXs/14WEjK+Ziggphd15/dOqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFq8NAP iKvbrI0DSNh1Zts5NmeEMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAyPVxldsuTzfI+UOqkOrWJsFNsu5nTPMWqBIP5hZGF6W5ZiwR4IfnE+bBE8B sJk+qhoLVeLPFYqnnBIO1iQt8cVKJRl0Xft4/2kR/PaFYBNAdlhoEO5kE+DMbKd1 yKLEuRdZs2uBbz/j1+T/NJsXzwQMQq5U08a25eN/sEHP6kvpQuZBCRuMMDaR9hBE GRqcCHgUgtr4JAUBFbHRwO0SQALQzp6m3xc7wlx2TCv/gDitFO12qUDxY6lUIXtF 6Xt/7TAtcxulJmdhb5xYYBZmy+ivWjX15Y9k/cKfno1to7DWDanaWzA0lXgVlqlB ZVx3dUoVUfCvbguLEenbKUPxuQ== -----END CERTIFICATE-----Generated at Sat Sep 5 09:36:32 2026 by rpki-client