$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: W/kOQZoSEGUT+8zy7ox8/YdvRXahw+QnywyqJuy1DUU= Subject key identifier: 15:27:BF:14:D2:36:62:94:B1:27:E5:4A:23:2E:24:9B:22:05:37:05 Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: 01E3 Signing time: Fri 11 Sep 2026 03:37:50 +0000 Manifest this update: Fri 11 Sep 2026 03:37:49 +0000 Manifest next update: Fri 18 Sep 2026 03:37:49 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: BJv+uVXY+1JLsAdQ0WHaVy1J2XxmFDQSoZp29rDMdy8=) 2: C63D0814097B11F0B1329480C4F9AE02.roa (hash: MmLLr6l4IDOg8XMaUZVystbsTDwX0oyuPDuuzGnXhFs=) 3: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: 1R5i5o2t6sI6xlQkmjgkQQNJTTUz/BHQTGAZz17WwEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Sep 11 03:37:49 2026 GMT Not After : Sep 18 03:37:49 2026 GMT Subject: CN=6aa3778d-ffba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:95:8f:82:2e:1d:cf:c3:2d:0c:0d:57:2d: 4b:bd:03:f4:fe:98:29:c9:f9:e7:bc:ac:18:b2:36: d7:8f:68:27:f6:85:09:29:d7:8f:58:08:93:4a:cd: c6:3b:8c:f6:4a:72:53:05:0d:01:e4:e1:5a:e6:7f: 31:92:c0:9c:7b:21:f6:c5:c6:38:f5:d1:56:43:c2: a3:71:12:bc:75:82:59:16:06:eb:5f:d8:ce:59:0c: 49:b3:b5:c5:93:c3:e4:25:d3:94:0d:6b:4b:90:f2: c1:cc:7b:55:9b:63:22:cc:44:2e:05:69:1c:f2:bc: cd:aa:c4:a8:03:6d:02:89:4d:c0:33:0d:48:6f:8f: d1:7e:74:a4:b4:66:9c:7e:16:0d:d5:47:b8:d1:67: e9:f2:19:99:7d:db:c6:89:94:e0:29:fe:f2:70:ca: 41:29:23:cf:02:7e:e3:5b:10:7f:57:c8:aa:9d:db: 99:da:26:5f:17:cf:c2:e6:f3:7b:5b:99:64:64:cb: d9:fc:2f:c4:d6:18:93:f7:83:50:28:91:11:88:3e: 50:f8:44:f4:8b:02:8f:1d:a2:54:bc:99:56:d2:49: dd:16:34:2d:2a:b0:32:cf:5e:29:c3:a5:36:31:03: 84:e6:03:a3:08:b5:1c:81:41:d9:08:d0:8d:99:23: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:27:BF:14:D2:36:62:94:B1:27:E5:4A:23:2E:24:9B:22:05:37:05 X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0d:bf:23:1e:54:0e:8a:c4:dd:7c:ff:6d:6c:5c:67:ea:dd: 32:58:72:b5:20:0e:1b:3b:00:54:0a:b8:c0:2f:1a:23:97:61: df:f7:8f:33:4d:af:2c:40:1a:e7:61:16:50:53:f1:91:45:77: b5:b7:ba:22:1a:1e:80:f9:fd:96:af:1d:d5:9c:46:11:58:fa: 9d:01:5b:e9:4c:79:fb:73:d3:02:42:f7:9b:4b:e9:7c:98:b6: be:c3:b7:0c:53:bf:77:20:37:2a:fa:2c:13:9a:e3:7e:3d:39: cc:1e:2e:19:92:87:36:29:69:d2:e1:38:44:ab:d0:aa:c9:76: 21:71:6a:0b:81:ff:a4:cc:4f:17:fa:af:95:2d:72:76:e0:d5: f5:79:33:a8:84:4f:28:aa:1b:06:18:5d:98:7f:4e:29:46:b5: a6:47:63:dc:9d:ec:94:a9:27:fe:b5:7a:70:b6:82:75:6a:5a: da:73:9e:2d:d8:2f:07:04:6e:f9:af:1f:31:c3:34:ec:dc:d7: 86:92:d5:a1:87:1f:7b:ca:9d:7c:cd:5a:4d:bd:d0:b7:c9:bd: b3:e8:85:fb:0f:92:94:47:ef:90:75:10:52:89:dc:87:85:8f: 15:5f:11:7d:0a:95:71:a0:de:cd:c0:11:b9:db:83:ad:85:f1: 43:5a:f2:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjYwOTExMDMzNzQ5WhcNMjYwOTE4MDMzNzQ5WjAYMRYwFAYD VQQDEw02YWEzNzc4ZC1mZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0liVj4IuHc/DLQwNVy1LvQP0/pgpyfnnvKwYsjbXj2gn9oUJKdePWAiTSs3G O4z2SnJTBQ0B5OFa5n8xksCceyH2xcY49dFWQ8KjcRK8dYJZFgbrX9jOWQxJs7XF k8PkJdOUDWtLkPLBzHtVm2MizEQuBWkc8rzNqsSoA20CiU3AMw1Ib4/RfnSktGac fhYN1Ue40Wfp8hmZfdvGiZTgKf7ycMpBKSPPAn7jWxB/V8iqnduZ2iZfF8/C5vN7 W5lkZMvZ/C/E1hiT94NQKJERiD5Q+ET0iwKPHaJUvJlW0kndFjQtKrAyz14pw6U2 MQOE5gOjCLUcgUHZCNCNmSNSGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUnvxTS NmKUsSflSiMuJJsiBTcFMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQ2/Ix5UDorE3Xz/bWxcZ+rdMlhytSAOGzsAVAq4wC8aI5dh3/ePM02vLEAa 52EWUFPxkUV3tbe6IhoegPn9lq8d1ZxGEVj6nQFb6Ux5+3PTAkL3m0vpfJi2vsO3 DFO/dyA3KvosE5rjfj05zB4uGZKHNilp0uE4RKvQqsl2IXFqC4H/pMxPF/qvlS1y duDV9XkzqIRPKKobBhhdmH9OKUa1pkdj3J3slKkn/rV6cLaCdWpa2nOeLdgvBwRu +a8fMcM07NzXhpLVoYcfe8qdfM1aTb3Qt8m9s+iF+w+SlEfvkHUQUonch4WPFV8R fQqVcaDezcARuduDrYXxQ1ryTQ== -----END CERTIFICATE-----Generated at Fri Sep 11 13:06:32 2026 by rpki-client