$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: gmj+GpKrXjMso5lLMBK35tWJy1uq1hmnOyun9yKtS28= Subject key identifier: 65:9A:20:7B:F7:E9:BE:F1:88:7A:2B:80:2E:77:64:28:07:88:B4:1F Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0DA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0D6A Signing time: Thu 10 Sep 2026 18:04:52 +0000 Manifest this update: Thu 10 Sep 2026 18:04:51 +0000 Manifest next update: Thu 17 Sep 2026 18:04:51 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: U5KPEJX9oK1MZVCY/D5h3qRbIwIaBvVQmyvnbXepOus=) 2: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=) 3: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=) 4: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=) 5: 4DC07014161411F1B995070A2E3D8C67.roa (hash: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU=) 6: CCA73AD084D111F195FCD5AD58A30FBC.roa (hash: Zsxd7kKN0wCdkDigU6/ttzwC27LOJzyfJn/Dkigf1fg=) 7: 5DB19F74332511F19B77F41AB8833773.roa (hash: eS81eZ4BRnB1S8RBeTEIim17x0/NA9jClADK3JWCczs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Sep 10 18:04:51 2026 GMT Not After : Sep 17 18:04:51 2026 GMT Subject: CN=6aa2f143-dffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:0c:1a:26:b2:07:84:ca:e2:09:81:62:3c: a5:91:b6:c2:c8:ee:a5:3e:70:27:bd:85:b7:9d:25: ec:87:a5:59:a7:8f:b0:7f:af:f7:3b:d7:5b:6b:43: 1e:6a:13:e7:ad:de:73:d9:03:8c:6d:4f:80:84:47: 39:10:bb:aa:14:8d:35:21:65:a2:b3:d2:4f:18:60: 41:87:71:f0:a1:47:ed:63:ba:3c:13:07:22:be:d3: f2:45:7e:8b:c7:17:cd:c8:9a:0c:b2:9b:63:a3:23: 73:8b:b6:c7:d5:4d:6d:1c:43:93:e4:a7:5f:1a:4b: 86:16:fd:59:8b:d7:13:c3:db:e7:09:2b:b2:50:a0: 13:07:3d:9d:5f:bc:78:9f:27:05:6b:f4:ce:90:d3: b5:dc:04:1f:39:9e:cb:d4:68:32:6c:14:96:e4:10: 47:7a:c1:20:04:20:68:84:17:4a:56:d5:0d:59:56: 94:35:08:f1:2b:22:26:b3:16:7b:04:18:06:95:e5: 36:17:9d:2d:c6:dd:6f:70:db:d8:1c:55:79:76:85: 39:2b:a3:f0:69:01:09:93:ac:07:3c:df:03:af:dd: 80:5e:9d:aa:de:1a:ac:06:35:0c:9a:dc:44:04:ff: 74:c9:0e:b0:57:cc:a4:f6:b5:f7:67:6b:92:78:c2: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:20:7B:F7:E9:BE:F1:88:7A:2B:80:2E:77:64:28:07:88:B4:1F X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:f3:b0:d2:f4:56:ef:ee:2c:ba:e0:e6:0a:e1:c0:64:20: de:6c:ec:9a:ff:4f:28:0a:c5:e9:25:27:24:db:c4:41:61:fe: 78:cc:0e:49:e0:7c:22:5c:36:86:51:5e:25:3a:71:4f:db:a8: 56:b2:db:6e:14:87:f9:23:66:99:00:09:01:b3:b4:48:02:f7: 1a:e1:d5:b8:18:81:4d:c7:0b:43:81:3a:20:98:a3:48:af:2e: e5:d8:3d:37:7d:5b:9d:d5:43:a3:6e:7a:aa:5c:a4:68:d8:03: c1:fe:f9:a7:4f:02:68:df:79:7d:07:f1:1c:4b:be:0f:19:fd: c5:7d:fe:51:16:eb:54:a8:12:fb:4b:4b:2b:3c:6c:82:f0:a0: 39:db:b6:6a:4d:29:c4:49:1c:3e:d9:39:82:4f:39:41:ad:76: bf:c6:1b:2a:03:79:73:2e:4a:b8:c7:69:6b:9e:98:6f:90:b2: 0e:91:bd:d5:e2:f0:e4:95:af:8a:20:d8:a8:1f:0e:5d:92:f8: ad:9a:dd:b7:11:68:d9:6e:ba:bd:07:a0:7e:44:66:91:52:ad: 8a:6c:1f:0c:96:85:3f:2f:e4:10:61:5d:b0:ba:c0:1b:4d:fd: ba:26:d1:9c:e0:b0:bf:1f:a4:c7:8b:57:22:34:35:ba:20:0f: ef:db:31:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYwOTEwMTgwNDUxWhcNMjYwOTE3MTgwNDUxWjAYMRYwFAYD VQQDEw02YWEyZjE0My1kZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKUMGiayB4TK4gmBYjylkbbCyO6lPnAnvYW3nSXsh6VZp4+wf6/3O9dba0Me ahPnrd5z2QOMbU+AhEc5ELuqFI01IWWis9JPGGBBh3HwoUftY7o8EwcivtPyRX6L xxfNyJoMsptjoyNzi7bH1U1tHEOT5KdfGkuGFv1Zi9cTw9vnCSuyUKATBz2dX7x4 nycFa/TOkNO13AQfOZ7L1GgybBSW5BBHesEgBCBohBdKVtUNWVaUNQjxKyImsxZ7 BBgGleU2F50txt1vcNvYHFV5doU5K6PwaQEJk6wHPN8Dr92AXp2q3hqsBjUMmtxE BP90yQ6wV8yk9rX3Z2uSeMKuhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWaIHv3 6b7xiHorgC53ZCgHiLQfMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIcTzsNL0Vu/uLLrg5grhwGQg3mzsmv9PKArF6SUnJNvEQWH+eMwOSeB8Ilw2 hlFeJTpxT9uoVrLbbhSH+SNmmQAJAbO0SAL3GuHVuBiBTccLQ4E6IJijSK8u5dg9 N31bndVDo256qlykaNgDwf75p08CaN95fQfxHEu+Dxn9xX3+URbrVKgS+0tLKzxs gvCgOdu2ak0pxEkcPtk5gk85Qa12v8YbKgN5cy5KuMdpa56Yb5CyDpG91eLw5JWv iiDYqB8OXZL4rZrdtxFo2W66vQegfkRmkVKtimwfDJaFPy/kEGFdsLrAG039uibR nOCwvx+kx4tXIjQ1uiAP79sxTQ== -----END CERTIFICATE-----Generated at Fri Sep 11 15:36:58 2026 by rpki-client