$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: PXx4m3/FN4bDbNE9W+aEyGG36YaUGUIfRCOTL4F96B8= Subject key identifier: F0:00:63:EC:28:3D:B6:F8:45:27:2D:7C:8F:07:D7:0D:B3:E7:11:13 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 028C Signing time: Tue 29 Sep 2026 02:22:25 +0000 Manifest this update: Tue 29 Sep 2026 02:22:24 +0000 Manifest next update: Tue 06 Oct 2026 02:22:24 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: seITvuAbY9mxSb4598jD38oSmgTw7FO1oNA5qeWO0OA=) 2: 838BC7789A0F11F1B1C23B0D5111F970.roa (hash: o595B/i1pDK8qP1YvaWFTUXyklKrhEuTIBaUZSJRvt0=) 3: 01E26EA86ACF11F191659B0D6B47A888.roa (hash: kM+Vu69NRQ5mEE07A5gTkC6P9QeS9+lMcrdBxgPLcxk=) 4: okhLokwJJQ6nnlc__-g9G0Q9-qc.asa (hash: eHYopKRVvXtuy0dvO+4/orHzsTrfEG4ZKWlpn6/K26E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 02:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Sep 29 02:22:24 2026 GMT Not After : Oct 6 02:22:24 2026 GMT Subject: CN=6abb20e1-c2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:05:b7:60:e8:59:2d:d1:b4:df:9c:29:7f: c1:2b:fa:22:ad:63:ff:fb:14:a6:b2:e5:e0:27:6a: dc:07:f9:29:2a:c4:b6:a0:46:d6:b7:53:9b:a5:77: ae:07:85:8a:af:0c:c6:99:ee:1a:2c:6e:82:ed:1d: e5:e2:f2:aa:88:f2:c8:3a:d9:e2:59:66:58:4d:00: 05:ea:6b:77:b2:69:53:36:dd:b7:cc:32:dd:f7:15: f3:08:77:60:7e:43:fe:ef:14:6f:db:cb:e1:6a:1e: b5:17:3a:62:c8:51:0f:d6:e8:cf:9e:a9:de:a3:ea: 0a:de:6c:f7:24:75:32:2d:3b:c2:a5:b2:61:12:1c: 6c:8b:47:62:7f:63:87:14:1f:39:50:d6:ec:38:bc: 8b:4b:82:ef:d3:6a:ca:d7:7c:20:05:a9:ab:3a:91: 47:ac:37:d5:3a:28:5b:d2:bd:a1:e5:41:23:a0:4a: de:d7:5d:db:19:ce:1b:24:38:b9:47:3b:4b:ab:ff: 15:92:ff:6d:68:a3:8a:10:51:ad:5a:31:99:26:a9: d7:b1:08:2e:b9:17:10:a4:65:ba:2b:ae:e4:e1:bc: b8:a5:9b:89:cb:01:86:78:b8:cd:0a:75:fd:14:fe: 13:fc:3a:88:8e:31:4a:b9:4f:ce:c8:1c:f0:2c:d9: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:00:63:EC:28:3D:B6:F8:45:27:2D:7C:8F:07:D7:0D:B3:E7:11:13 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ab:ef:5d:09:f4:9e:ca:98:47:4f:7c:af:81:87:23:d2:76: 9c:9b:66:b9:c0:27:16:37:cd:7b:d9:3f:64:51:8d:6b:27:78: 07:81:ad:e3:07:2e:22:45:e3:7b:e5:7c:bb:38:5d:e9:5a:43: 64:62:b9:57:ab:b1:76:b8:07:6b:9a:cb:7a:04:bd:7a:e6:e6: a4:29:74:1a:13:ae:7a:e2:ee:8b:83:db:b2:85:87:c4:a0:7f: b0:df:67:e7:17:57:b4:1f:fc:48:77:f5:53:92:a9:f4:08:42: 2c:3f:e7:18:69:c9:12:60:ba:96:95:b7:ae:b7:b9:62:76:8e: 1e:6a:06:ea:0b:fc:0e:89:a1:c7:cb:7c:d2:05:5d:1f:0c:67: db:1a:5a:de:80:9f:d3:b7:ef:af:58:8f:6c:ff:af:a8:9a:13: 58:36:0e:67:e9:e7:1b:8a:a4:89:f7:4d:6c:4a:b3:0f:85:00: 09:05:1e:d8:1a:9c:c7:e2:16:a9:d7:f0:0f:88:40:b3:a0:5d: d6:c7:60:8c:06:22:9a:bc:c8:aa:7a:99:22:4f:06:0e:99:99: 96:8d:e3:ca:73:84:c4:e3:76:0d:19:28:1c:95:23:d2:22:19: af:79:b8:7e:3e:c3:75:fb:a6:b5:b5:a6:81:49:ed:d3:5f:9d: 1b:49:0d:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjYwOTI5MDIyMjI0WhcNMjYxMDA2MDIyMjI0WjAYMRYwFAYD VQQDEw02YWJiMjBlMS1jMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLoFt2DoWS3RtN+cKX/BK/oirWP/+xSmsuXgJ2rcB/kpKsS2oEbWt1ObpXeu B4WKrwzGme4aLG6C7R3l4vKqiPLIOtniWWZYTQAF6mt3smlTNt23zDLd9xXzCHdg fkP+7xRv28vhah61FzpiyFEP1ujPnqneo+oK3mz3JHUyLTvCpbJhEhxsi0dif2OH FB85UNbsOLyLS4Lv02rK13wgBamrOpFHrDfVOihb0r2h5UEjoEre113bGc4bJDi5 RztLq/8Vkv9taKOKEFGtWjGZJqnXsQguuRcQpGW6K67k4by4pZuJywGGeLjNCnX9 FP4T/DqIjjFKuU/OyBzwLNlfvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPAAY+wo Pbb4RSctfI8H1w2z5xETMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEqvvXQn0nsqYR098r4GHI9J2nJtmucAnFjfNe9k/ZFGNayd4B4Gt4wcuIkXj e+V8uzhd6VpDZGK5V6uxdrgHa5rLegS9eubmpCl0GhOueuLui4PbsoWHxKB/sN9n 5xdXtB/8SHf1U5Kp9AhCLD/nGGnJEmC6lpW3rre5YnaOHmoG6gv8Domhx8t80gVd Hwxn2xpa3oCf07fvr1iPbP+vqJoTWDYOZ+nnG4qkifdNbEqzD4UACQUe2Bqcx+IW qdfwD4hAs6Bd1sdgjAYimrzIqnqZIk8GDpmZlo3jynOExON2DRkoHJUj0iIZr3m4 fj7DdfumtbWmgUnt01+dG0kNZg== -----END CERTIFICATE-----Generated at Wed Sep 30 11:26:11 2026 by rpki-client