$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: qn8gN40WuD+CosxcDEV7snl8tSh5WcwPTKeIfoJJqlc= Subject key identifier: EA:D5:B2:C6:D0:A3:E1:94:64:71:2F:B7:13:2E:43:FC:F3:8E:9E:4F Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 098E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 0984 Signing time: Mon 31 Aug 2026 20:01:26 +0000 Manifest this update: Mon 31 Aug 2026 20:01:26 +0000 Manifest next update: Mon 07 Sep 2026 20:01:26 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: AUSMXqmRg1hsgy46sZP8ik6WYTFVC1oKjyviwGbM/OI=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: /BHXZw097Vnx6svspg9H0QFXzJ+pPqoQmyYjSxe8qDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Aug 31 20:01:26 2026 GMT Not After : Sep 7 20:01:26 2026 GMT Subject: CN=6a95dd96-7241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:6e:4a:b1:cb:e8:04:86:14:db:c2:a7:db: 42:a4:66:2d:a6:9d:28:df:4d:c7:e0:64:c7:97:3e: 8a:bd:f4:bd:53:e5:8c:53:32:55:83:c5:7d:39:55: 0b:79:f9:88:dd:98:fe:f9:82:5d:f4:d4:a7:19:45: 27:31:3a:95:5a:72:67:33:6b:4f:28:bc:77:3f:84: c4:75:e0:07:14:d1:74:20:48:74:38:8b:20:bb:c9: 51:d5:89:31:af:da:69:a9:c1:0e:98:11:14:8d:eb: f7:e9:f9:22:b0:42:22:b8:b3:ef:e1:41:d0:48:99: dd:c1:65:e6:b4:44:3d:a5:7f:6e:1d:28:b6:62:15: ae:15:b8:2c:07:47:e5:2a:40:7f:fa:14:f1:ff:7b: 35:15:db:cc:1a:9d:3a:a2:17:92:71:9b:dd:8d:b9: 17:93:87:37:f6:2a:18:18:68:98:35:b7:ab:ea:8e: 41:d9:f0:2f:ac:a8:df:6f:2d:c6:ba:63:bf:65:0c: ec:d4:a0:2d:75:4e:6c:b0:be:17:8b:01:08:4d:1f: 54:66:7f:46:d7:b5:fc:3e:93:0f:e7:e6:b0:0d:2c: 4d:74:b6:08:26:30:a0:a6:ec:08:e8:c0:ce:95:bb: 8b:5b:24:12:71:4a:fe:46:aa:fc:31:16:ed:5a:ec: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D5:B2:C6:D0:A3:E1:94:64:71:2F:B7:13:2E:43:FC:F3:8E:9E:4F X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d2:b7:43:d1:5c:a8:8c:50:a2:75:47:5d:3d:72:7a:fc:a6: a6:79:c2:65:da:2f:a3:09:47:37:48:72:33:38:94:45:da:28: 19:5b:13:56:75:be:26:bb:4c:a4:c0:0d:f8:01:8b:9f:da:7c: 7b:8c:9f:41:a7:54:cf:e4:1b:81:19:4c:05:be:4f:44:46:41: ed:7b:e9:72:54:98:9f:61:69:64:db:24:48:3d:d0:4d:93:b7: 41:3d:09:30:78:9d:8d:d6:cd:94:4b:e5:4b:41:d5:e7:a7:9a: a6:a0:8e:27:53:a9:8c:d1:76:32:e0:56:aa:e2:5a:07:70:3c: 0a:7f:7e:23:ba:0e:85:7a:2d:b6:fb:7a:88:28:bc:f7:71:72: b0:8e:58:02:00:57:e4:9f:40:e6:ac:26:c4:bd:6a:04:e7:61: 02:22:dc:42:c9:a0:b5:4b:8c:3d:bd:f6:e8:3f:5c:3e:74:15: 13:aa:bd:25:c9:d1:18:e6:a9:5b:ee:43:aa:f0:16:fc:30:a3: 51:41:b5:3d:83:19:00:f1:58:4a:b3:3e:a9:d8:a0:e3:6f:53: e6:45:74:92:1b:b8:be:df:e7:58:7e:47:04:c3:99:db:e1:11: ee:7c:d2:11:ea:b5:3c:c3:36:8d:53:f5:44:4c:9f:49:6a:97: 48:6e:3d:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwODMxMjAwMTI2WhcNMjYwOTA3MjAwMTI2WjAYMRYwFAYD VQQDEw02YTk1ZGQ5Ni03MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurFuSrHL6ASGFNvCp9tCpGYtpp0o303H4GTHlz6KvfS9U+WMUzJVg8V9OVUL efmI3Zj++YJd9NSnGUUnMTqVWnJnM2tPKLx3P4TEdeAHFNF0IEh0OIsgu8lR1Ykx r9ppqcEOmBEUjev36fkisEIiuLPv4UHQSJndwWXmtEQ9pX9uHSi2YhWuFbgsB0fl KkB/+hTx/3s1FdvMGp06oheScZvdjbkXk4c39ioYGGiYNber6o5B2fAvrKjfby3G umO/ZQzs1KAtdU5ssL4XiwEITR9UZn9G17X8PpMP5+awDSxNdLYIJjCgpuwI6MDO lbuLWyQScUr+Rqr8MRbtWuyqbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrVssbQ o+GUZHEvtxMuQ/zzjp5PMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNK3Q9FcqIxQonVHXT1yevympnnCZdovowlHN0hyMziURdooGVsTVnW+JrtM pMAN+AGLn9p8e4yfQadUz+QbgRlMBb5PREZB7XvpclSYn2FpZNskSD3QTZO3QT0J MHidjdbNlEvlS0HV56eapqCOJ1OpjNF2MuBWquJaB3A8Cn9+I7oOhXottvt6iCi8 93FysI5YAgBX5J9A5qwmxL1qBOdhAiLcQsmgtUuMPb326D9cPnQVE6q9JcnRGOap W+5DqvAW/DCjUUG1PYMZAPFYSrM+qdig429T5kV0khu4vt/nWH5HBMOZ2+ER7nzS Eeq1PMM2jVP1REyfSWqXSG49Yg== -----END CERTIFICATE-----Generated at Tue Sep 1 04:33:16 2026 by rpki-client