$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft File: MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft (raw, json) Hash identifier: r4LJ93fMTOXFLO0ibO7ljNHDmWajfabh3gqD0a0gmL4= Subject key identifier: 63:E3:E2:34:84:81:60:BC:D7:FA:01:88:F0:6C:26:4F:8A:13:F5:9D Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft Manifest number: 021E Signing time: Mon 05 Oct 2026 03:09:47 +0000 Manifest this update: Mon 05 Oct 2026 03:09:47 +0000 Manifest next update: Mon 12 Oct 2026 03:09:47 +0000 Files and hashes: 1: MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl (hash: 3QBssYpMtYeDC2FmOsXY47IY5bC9Gzg2Dj6t/hGPdZ8=) 2: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (hash: 3tWo+TxjvNRfazBkfrqsYl15Cz/V8ipCTw/38p8PqXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EC7, serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Validity Not Before: Oct 5 03:09:47 2026 GMT Not After : Oct 12 03:09:47 2026 GMT Subject: CN=6ac314fb-8c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:df:99:cd:8e:f7:6b:06:f0:1e:bd:da:31: 11:99:df:98:f6:ee:e5:f4:21:9e:55:36:f3:28:ed: fe:99:3e:b4:a4:61:68:07:fc:ee:f7:4e:5d:93:11: 13:cd:53:7d:4b:ae:77:26:2a:96:a2:d4:c1:04:84: d8:5d:3d:e3:b1:ce:8a:5d:52:d2:d6:c4:df:9b:9f: eb:76:63:0b:fd:b3:48:39:b9:56:83:c7:4c:66:c2: 23:1b:4f:ee:b5:56:b0:d7:a7:68:5c:eb:de:38:f2: 5f:bb:c9:0f:03:90:f9:c3:ef:af:48:7c:68:9b:bb: 30:15:b1:55:cb:76:60:5f:23:e9:d9:5e:8e:fd:38: 00:0e:f9:a2:34:75:c6:ab:d3:a4:30:e8:b7:90:1e: 2a:de:76:be:bc:2d:fa:c5:0b:b3:14:c5:d7:c7:9f: 08:c0:6e:28:9c:f7:11:46:e0:34:2d:c4:1c:f5:b2: 00:67:db:58:c1:47:d0:58:9d:8a:0d:90:46:51:ca: 5e:b3:2b:bf:5c:14:23:b6:45:9c:7a:b3:2c:b9:b4: 92:18:e4:c0:80:89:87:19:7b:cb:30:6a:24:bd:62: 9d:02:a2:5d:ec:f2:6c:ba:7d:5a:d8:cf:9d:88:e5: 50:36:c9:a2:e7:0b:92:eb:b0:fc:8c:95:4d:36:d1: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:E2:34:84:81:60:BC:D7:FA:01:88:F0:6C:26:4F:8A:13:F5:9D X509v3 Authority Key Identifier: keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:69:5d:2a:5c:16:c8:55:e1:82:01:7a:6a:67:31:7b:14:22: c7:1b:8d:94:00:41:58:7f:65:39:29:95:46:20:b9:3b:ea:87: b6:42:cf:33:35:a4:bc:e8:07:79:a7:9e:9a:d8:ae:a9:91:dd: c7:26:6a:2f:72:44:7e:3c:b1:6e:1d:16:d8:e1:5f:e6:0b:67: d4:90:4d:5d:d0:f8:61:2b:77:91:27:a0:41:7f:45:39:60:16: 0c:c2:63:f3:0c:2e:27:40:af:8e:21:87:ce:00:a5:0f:ab:6a: ef:a6:1a:06:07:40:7f:23:41:3b:df:94:66:3f:cd:b5:8f:b1: 10:24:26:67:61:d1:91:ad:3f:4f:c1:7f:67:94:40:da:3c:80: 63:77:48:43:6d:a8:b3:b4:fc:54:75:e2:d4:82:14:27:78:4e: e7:e2:c7:a9:bb:3e:21:63:1a:55:a2:dc:25:9a:86:39:45:48: 91:2f:1d:6e:f9:50:03:29:cd:2f:7a:a8:4d:5f:b0:f8:f2:15: 42:87:0b:be:97:4e:e0:4b:fd:76:fe:fc:0e:23:93:9f:55:17: 8b:5a:e5:2d:f6:c4:d6:90:4e:35:18:a1:48:a4:27:fd:d6:b7: 40:bd:6b:67:fc:a4:c4:4b:21:34:48:80:d9:40:81:38:02:30: ce:dc:3d:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQzcxMTAvBgNVBAUTKDMwNkUzNEZBODREQTA5MEM2MDAxQjM1NDY0QkI4QzQy NjM1N0Q5MjgwHhcNMjYxMDA1MDMwOTQ3WhcNMjYxMDEyMDMwOTQ3WjAYMRYwFAYD VQQDEw02YWMzMTRmYi04YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufnfmc2O92sG8B692jERmd+Y9u7l9CGeVTbzKO3+mT60pGFoB/zu905dkxET zVN9S653JiqWotTBBITYXT3jsc6KXVLS1sTfm5/rdmML/bNIOblWg8dMZsIjG0/u tVaw16doXOveOPJfu8kPA5D5w++vSHxom7swFbFVy3ZgXyPp2V6O/TgADvmiNHXG q9OkMOi3kB4q3na+vC36xQuzFMXXx58IwG4onPcRRuA0LcQc9bIAZ9tYwUfQWJ2K DZBGUcpesyu/XBQjtkWcerMsubSSGOTAgImHGXvLMGokvWKdAqJd7PJsun1a2M+d iOVQNsmi5wuS67D8jJVNNtGWJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPj4jSE gWC81/oBiPBsJk+KE/WdMB8GA1UdIwQYMBaAFDBuNPqE2gkMYAGzVGS7jEJjV9ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVDNy9FNjNGMkY4QTgy QTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9UYUNReGdBYk5VWkx1TVFtTlgy U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01HNDAtb1RhQ1F4Z0FiTlVaTHVNUW1OWDJTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVDNy9FNjNGMkY4QTgyQTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9UYUNR eGdBYk5VWkx1TVFtTlgyU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACWldKlwWyFXhggF6amcxexQixxuNlABBWH9lOSmVRiC5O+qHtkLPMzWkvOgH eaeemtiuqZHdxyZqL3JEfjyxbh0W2OFf5gtn1JBNXdD4YSt3kSegQX9FOWAWDMJj 8wwuJ0CvjiGHzgClD6tq76YaBgdAfyNBO9+UZj/NtY+xECQmZ2HRka0/T8F/Z5RA 2jyAY3dIQ22os7T8VHXi1IIUJ3hO5+LHqbs+IWMaVaLcJZqGOUVIkS8dbvlQAynN L3qoTV+w+PIVQocLvpdO4Ev9dv78DiOTn1UXi1rlLfbE1pBONRihSKQn/da3QL1r Z/ykxEshNEiA2UCBOAIwztw9Cg== -----END CERTIFICATE-----Generated at Tue Oct 6 21:03:37 2026 by rpki-client