$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: IOsylMcHj1MbXxWypFBZOqMs1Rh04IZwS6Ni3JLIv+I= Subject key identifier: EC:40:C8:D5:2F:0F:6F:A0:22:C5:C3:15:15:0E:42:00:C3:DE:73:66 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 0296 Signing time: Tue 15 Sep 2026 01:35:44 +0000 Manifest this update: Tue 15 Sep 2026 01:35:44 +0000 Manifest next update: Tue 22 Sep 2026 01:35:44 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: VFtVQelpzC7T+vwTI680Wh9m7NK215Gdr5iDOn1+EKM=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 0Ijz+UY/qG59jnxM6F9e8jT0AK5gXL4f9XftWto6NZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Sep 15 01:35:44 2026 GMT Not After : Sep 22 01:35:44 2026 GMT Subject: CN=6aa8a0f0-946b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:41:92:f2:b4:c3:da:60:fa:cb:f5:69:8d: 45:ee:ad:27:bf:74:57:33:39:cd:f0:b0:04:bd:2b: c5:2b:74:85:25:d6:74:52:53:8b:cf:14:ea:3c:c6: 78:28:e4:6a:bd:8f:be:7a:f2:1d:4e:7a:dc:7a:11: d0:a4:b0:7f:9b:9f:fe:25:83:f5:a0:56:68:20:ff: 96:d4:fa:88:95:1d:bf:cf:84:f5:59:8a:78:2f:86: 58:85:2a:84:0a:dc:e7:98:af:15:53:5d:ce:ce:f4: 8a:5d:d2:bc:09:8f:47:b4:de:1f:28:f4:37:05:7f: 2a:24:bc:f4:d4:e5:51:64:dc:5c:52:d6:83:ba:35: 50:6f:df:92:54:06:ec:89:59:05:0b:fe:60:d8:83: 59:d6:2d:61:fa:87:f8:73:10:be:4b:3d:de:c1:be: 02:51:47:5d:23:af:e1:bb:15:ec:0f:8b:d8:95:af: d5:dc:b7:64:e7:83:7c:89:da:b7:4e:29:f1:c6:6f: 30:bf:26:ed:e3:a5:79:d0:ce:cd:00:c0:eb:29:fd: 96:0f:e5:65:12:f5:8f:59:6c:9a:65:0d:16:15:4c: 53:0e:05:eb:52:2a:51:b4:45:01:94:5b:ef:ad:fc: aa:cf:c8:64:fb:8d:f5:6a:d3:f7:d8:4f:8f:f1:19: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:40:C8:D5:2F:0F:6F:A0:22:C5:C3:15:15:0E:42:00:C3:DE:73:66 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0b:57:b9:de:00:a0:61:8f:78:9d:89:9c:cc:1b:6e:8d:f3: 83:79:94:46:58:b3:b2:cf:07:0d:5d:ad:19:a7:b1:5c:fa:3d: c6:58:7a:3b:b2:7d:02:f5:8b:f2:e5:f8:15:8e:9f:10:a0:c1: 98:22:06:c8:cb:ad:3b:ec:6f:65:6c:82:14:21:21:04:67:0c: a5:42:19:73:dc:f5:69:c8:a8:4c:d7:63:13:8d:f2:17:67:6f: 58:90:14:6a:c1:3e:61:95:d0:a7:0b:69:02:80:b2:d5:ba:6e: df:65:ad:fb:5d:5e:53:10:e4:59:bd:e4:49:7f:d0:91:33:3b: 8e:5f:d0:96:3c:1b:9a:cf:76:d7:26:02:bb:e4:2b:5d:b3:17: 6a:d7:b5:77:75:bf:91:0f:81:1b:b2:c7:02:18:54:ef:ff:4d: b7:8d:a9:19:10:3c:ce:d6:e0:5c:0f:85:14:7c:60:70:ba:b2: 4a:2e:9a:f6:66:f8:91:62:67:d6:2c:b5:4b:fc:fb:9c:38:7e: 58:d6:53:e6:e5:a5:6a:76:2a:bf:d7:5f:69:f5:32:f3:08:3f: 6b:7c:3b:c6:02:33:09:d9:13:b5:ad:b9:6c:cb:da:30:f5:ed: 6a:e0:38:98:e7:6a:7e:fa:fc:5f:a9:c3:24:4e:3d:47:1d:d2: 13:c7:98:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjYwOTE1MDEzNTQ0WhcNMjYwOTIyMDEzNTQ0WjAYMRYwFAYD VQQDEw02YWE4YTBmMC05NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWtBkvK0w9pg+sv1aY1F7q0nv3RXMznN8LAEvSvFK3SFJdZ0UlOLzxTqPMZ4 KORqvY++evIdTnrcehHQpLB/m5/+JYP1oFZoIP+W1PqIlR2/z4T1WYp4L4ZYhSqE CtznmK8VU13OzvSKXdK8CY9HtN4fKPQ3BX8qJLz01OVRZNxcUtaDujVQb9+SVAbs iVkFC/5g2INZ1i1h+of4cxC+Sz3ewb4CUUddI6/huxXsD4vYla/V3Ldk54N8idq3 Tinxxm8wvybt46V50M7NAMDrKf2WD+VlEvWPWWyaZQ0WFUxTDgXrUipRtEUBlFvv rfyqz8hk+431atP32E+P8RmxuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxAyNUv D2+gIsXDFRUOQgDD3nNmMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXQtXud4AoGGPeJ2JnMwbbo3zg3mURlizss8HDV2tGaexXPo9xlh6O7J9AvWL 8uX4FY6fEKDBmCIGyMutO+xvZWyCFCEhBGcMpUIZc9z1acioTNdjE43yF2dvWJAU asE+YZXQpwtpAoCy1bpu32Wt+11eUxDkWb3kSX/QkTM7jl/Qljwbms921yYCu+Qr XbMXate1d3W/kQ+BG7LHAhhU7/9Nt42pGRA8ztbgXA+FFHxgcLqySi6a9mb4kWJn 1iy1S/z7nDh+WNZT5uWlanYqv9dfafUy8wg/a3w7xgIzCdkTta25bMvaMPXtauA4 mOdqfvr8X6nDJE49Rx3SE8eYKA== -----END CERTIFICATE-----Generated at Tue Sep 15 10:44:55 2026 by rpki-client