$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft File: EbEncUrFQIyE8NdlOMlegnXa2Fo.mft (raw, json) Hash identifier: AcMtVYeTAnxKrdYc+3jXGCgO9cdqW80gVgTrOmlJH28= Subject key identifier: 29:0D:2C:5D:E1:4C:6F:ED:3C:19:BB:66:0A:63:D9:4E:E5:D8:45:FF Authority key identifier: 11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A Certificate issuer: /CN=A91B4E1D/serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft Manifest number: 09 Signing time: Tue 29 Sep 2026 09:53:01 +0000 Manifest this update: Tue 29 Sep 2026 09:53:01 +0000 Manifest next update: Tue 06 Oct 2026 09:53:01 +0000 Files and hashes: 1: EbEncUrFQIyE8NdlOMlegnXa2Fo.crl (hash: b4vuD2tFCeNG3BRrk/oJsBNj3nT7i4iXNSxHzA96zYY=) 2: BC271E52B31911F183412A046611F970.roa (hash: vbiJolfMPvVJDBUNL2V3IBTDoWz3FM/eSssSUTrnDrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E1D, serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A Validity Not Before: Sep 29 09:53:01 2026 GMT Not After : Oct 6 09:53:01 2026 GMT Subject: CN=6abb8a7d-c698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:0d:c4:92:7d:41:3d:0e:dd:2f:7b:cd:db: a7:05:75:c2:c5:d8:90:cb:9e:48:21:66:d1:78:b2: 8b:be:b8:91:60:fc:a5:85:06:e0:96:e7:3e:f7:85: 60:9d:1b:f5:47:e7:d6:84:a5:bb:cd:57:46:1b:75: e7:a5:6f:39:d7:06:69:65:56:7b:77:67:58:f5:aa: 30:f8:56:c6:08:ba:fc:d6:d2:ed:06:d5:fc:bf:69: 02:23:27:5b:74:8f:83:d8:09:d3:f9:49:b1:df:c1: 85:4d:d4:e8:41:e8:c1:57:5b:b3:63:88:0f:33:ee: 8a:78:3e:65:3f:68:6e:0f:de:48:f8:63:7d:7e:98: 18:8e:41:9f:2c:00:d7:21:07:62:23:b4:e2:09:c0: c8:ae:f4:46:d9:42:22:1f:2a:47:e2:67:75:d9:1c: 47:cc:82:e2:cf:7c:58:d4:9d:38:12:14:b9:14:57: 8c:0d:c8:86:66:cb:e2:9d:30:74:44:ed:da:82:12: 73:5e:18:ab:6b:b5:fe:65:6d:73:dc:64:d7:42:fa: 1c:44:f4:71:1b:50:2d:2e:89:c7:81:92:fa:f0:0f: 25:1f:ae:87:eb:a2:44:fa:79:e2:af:81:c3:85:0f: 0b:5b:aa:9f:c8:ff:e9:6a:17:81:ca:3a:9d:35:9d: e3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0D:2C:5D:E1:4C:6F:ED:3C:19:BB:66:0A:63:D9:4E:E5:D8:45:FF X509v3 Authority Key Identifier: keyid:11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:e4:d0:c5:44:a2:24:e8:06:0c:2d:60:a2:b1:ac:15:9a: 04:a1:09:a1:68:c8:f2:eb:3f:9b:01:c4:cd:78:8c:b9:eb:6c: 92:6b:86:f2:ed:3e:79:96:fc:58:08:a8:1a:17:e6:a0:26:99: 80:8d:0f:85:e8:9e:ea:ca:eb:b2:95:64:5c:ed:10:57:f3:94: 10:48:fd:ed:93:12:a5:94:c2:db:0b:11:79:a4:4a:0a:d5:77: 17:82:96:af:e0:59:73:f4:60:27:7d:35:ca:d0:9f:52:ce:cd: 2e:e3:cc:4a:de:33:d6:4c:34:bf:96:f9:2f:b0:f2:bf:80:70: 1b:25:25:b5:14:3b:69:05:20:93:05:80:f2:80:5b:4d:81:ec: 39:30:29:6c:10:bb:fa:7c:b7:b1:52:7d:fa:f3:aa:c0:a2:8c: 2b:fa:82:85:f3:af:5f:1b:1b:e2:bb:9a:d5:70:08:e8:42:c8: 35:4c:78:00:b0:48:d6:5b:cf:9f:d0:be:3f:6b:05:01:f8:a3: 92:76:f6:24:a1:aa:ad:c2:f6:35:cd:bc:66:dd:14:c1:bc:2e: 96:a2:2a:eb:38:10:f2:7e:a0:f1:59:5d:de:5a:78:89:f6:03: 74:29:f1:0c:67:83:b3:b1:46:f1:fd:99:78:75:7b:d4:74:e7: 55:e7:64:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUxRDExMC8GA1UEBRMoMTFCMTI3NzE0QUM1NDA4Qzg0RjBENzY1MzhDOTVFODI3 NURBRDg1QTAeFw0yNjA5MjkwOTUzMDFaFw0yNjEwMDYwOTUzMDFaMBgxFjAUBgNV BAMTDTZhYmI4YTdkLWM2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFdg3Ekn1BPQ7dL3vN26cFdcLF2JDLnkghZtF4sou+uJFg/KWFBuCW5z73hWCd G/VH59aEpbvNV0YbdeelbznXBmllVnt3Z1j1qjD4VsYIuvzW0u0G1fy/aQIjJ1t0 j4PYCdP5SbHfwYVN1OhB6MFXW7NjiA8z7op4PmU/aG4P3kj4Y31+mBiOQZ8sANch B2IjtOIJwMiu9EbZQiIfKkfiZ3XZHEfMguLPfFjUnTgSFLkUV4wNyIZmy+KdMHRE 7dqCEnNeGKtrtf5lbXPcZNdC+hxE9HEbUC0uiceBkvrwDyUfrofrokT6eeKvgcOF Dwtbqp/I/+lqF4HKOp01neNBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKQ0sXeFM b+08GbtmCmPZTuXYRf8wHwYDVR0jBBgwFoAUEbEncUrFQIyE8NdlOMlegnXa2Fow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzczQjkxRkNDQjIx RTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5RThOZGxPTWxlZ25YYTJG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWJFbmNVckZRSXlFOE5kbE9NbGVnblhhMkZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTFELzczQjkxRkNDQjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5 RThOZGxPTWxlZ25YYTJGby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB03OTQxUSiJOgGDC1gorGsFZoEoQmhaMjy6z+bAcTNeIy562ySa4by7T55lvxY CKgaF+agJpmAjQ+F6J7qyuuylWRc7RBX85QQSP3tkxKllMLbCxF5pEoK1XcXgpav 4Flz9GAnfTXK0J9Szs0u48xK3jPWTDS/lvkvsPK/gHAbJSW1FDtpBSCTBYDygFtN gew5MClsELv6fLexUn3686rAoowr+oKF869fGxviu5rVcAjoQsg1THgAsEjWW8+f 0L4/awUB+KOSdvYkoaqtwvY1zbxm3RTBvC6WoirrOBDyfqDxWV3eWniJ9gN0KfEM Z4OzsUbx/Zl4dXvUdOdV52S1 -----END CERTIFICATE-----Generated at Wed Sep 30 19:49:51 2026 by rpki-client