$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: ZQzFPitALyBq0CaZywAja0Wix4Wf8MukSN99VElaR9g= Subject key identifier: 9D:38:D4:BE:D1:7B:BB:C1:6A:18:A4:A7:2C:18:D8:C6:81:09:55:E7 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0967 Signing time: Mon 28 Sep 2026 20:14:26 +0000 Manifest this update: Mon 28 Sep 2026 20:14:26 +0000 Manifest next update: Mon 05 Oct 2026 20:14:26 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: ZtD5aLf46VFOtibn2W01XE09II8Ka2Ujka2Wm7DG0os=) 2: IfnxeI_qvA_DIKB98GZIwMTgjjg.asa (hash: oq7xHMj7wwbECFLW7FlKdlrFAKXtPt0LGfNtmat8Zak=) 3: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: Pj+YSJz05e5/XvtCulJkxzG8FOEXuhs7JqRBkYESckI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Sep 28 20:14:26 2026 GMT Not After : Oct 5 20:14:26 2026 GMT Subject: CN=6abacaa2-1bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:ed:73:2d:06:4e:ac:a9:e5:d6:ff:73:a1: 9c:58:ef:40:1e:ea:b7:80:28:5e:a0:9d:a0:ee:fb: f9:5a:e1:14:39:08:ac:77:1f:0b:83:cc:9c:eb:a6: a2:91:0b:bd:a1:a0:4f:df:9e:7f:c7:5c:a2:7f:18: 9c:2a:15:d9:b8:8f:84:27:33:9e:71:06:33:a4:4e: 4d:ea:fe:79:00:6d:b3:53:31:4b:aa:2c:e1:24:84: 47:3e:56:20:89:c5:03:66:8e:f2:3f:5f:cf:ea:d5: c2:a8:09:29:3a:d1:06:a4:c0:47:d8:3d:2d:b1:db: b3:26:6a:c5:43:57:26:53:5b:34:88:dc:b5:e1:d4: a1:7a:5e:67:5a:f7:1a:e8:4d:88:73:f4:71:8e:3d: cc:be:da:9e:6e:fd:bb:48:fe:99:da:1e:6d:bf:03: 47:b9:54:55:15:64:0c:49:30:97:a6:97:f0:03:8f: 0f:04:d7:1c:3e:fe:f2:0f:06:04:10:73:fa:47:5a: 8d:f4:61:41:42:13:ec:4e:77:6d:f1:63:c1:17:5f: 82:ac:1c:af:ef:2e:e8:34:01:0e:c1:20:09:a0:47: 00:a2:83:ab:af:46:be:76:45:3a:42:f3:c0:2c:14: 2c:44:5e:54:20:16:34:61:fe:70:e2:d9:45:6d:68: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:D4:BE:D1:7B:BB:C1:6A:18:A4:A7:2C:18:D8:C6:81:09:55:E7 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:3e:38:47:76:d3:e5:3e:65:39:24:bb:5a:dd:87:ff:8c:ea: c6:90:4a:31:f3:55:5d:f9:c2:fd:d4:d8:fc:8c:da:b6:56:86: 4e:f4:38:b0:5f:ff:6b:57:84:b2:c1:c1:a8:b6:76:d0:94:db: 43:be:44:00:85:61:d8:01:eb:87:51:ed:2d:e9:18:13:21:d8: 90:d2:e5:19:86:d3:31:bb:a8:4f:6b:5c:ec:c0:f8:a0:f0:2d: bd:4f:6b:e2:ad:5b:f1:21:48:fc:64:38:30:b6:7f:f0:39:ed: 48:55:f3:a2:ca:45:e9:4b:f5:25:c4:1a:7f:46:21:cf:e3:08: 6c:05:e2:83:40:3f:08:e1:42:7c:0b:c3:d3:28:16:49:ca:65: 8e:97:95:45:9f:62:7a:03:49:70:33:d0:6c:7b:ea:19:78:0a: cd:d9:2b:dc:74:42:9b:1d:9f:16:32:4a:2d:1e:c5:ca:5f:6f: 50:2a:ca:c9:74:d2:ae:61:b6:57:11:b7:c5:b4:1b:f9:9c:07: e3:a8:cf:7c:64:c0:96:a4:c1:b7:51:8c:38:cc:af:f3:00:ea: 97:53:07:78:02:9a:0a:f0:08:ce:6d:db:35:f4:68:b6:36:4a: 2b:d8:dc:4a:66:a9:e7:f7:60:9e:32:7c:fe:32:7b:d7:dc:94: d9:75:37:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjYwOTI4MjAxNDI2WhcNMjYxMDA1MjAxNDI2WjAYMRYwFAYD VQQDEw02YWJhY2FhMi0xYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c/tcy0GTqyp5db/c6GcWO9AHuq3gCheoJ2g7vv5WuEUOQisdx8Lg8yc66ai kQu9oaBP355/x1yifxicKhXZuI+EJzOecQYzpE5N6v55AG2zUzFLqizhJIRHPlYg icUDZo7yP1/P6tXCqAkpOtEGpMBH2D0tsduzJmrFQ1cmU1s0iNy14dShel5nWvca 6E2Ic/Rxjj3Mvtqebv27SP6Z2h5tvwNHuVRVFWQMSTCXppfwA48PBNccPv7yDwYE EHP6R1qN9GFBQhPsTndt8WPBF1+CrByv7y7oNAEOwSAJoEcAooOrr0a+dkU6QvPA LBQsRF5UIBY0Yf5w4tlFbWhrCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ041L7R e7vBahikpywY2MaBCVXnMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuT44R3bT5T5lOSS7Wt2H/4zqxpBKMfNVXfnC/dTY/IzatlaGTvQ4sF//a1eE ssHBqLZ20JTbQ75EAIVh2AHrh1HtLekYEyHYkNLlGYbTMbuoT2tc7MD4oPAtvU9r 4q1b8SFI/GQ4MLZ/8DntSFXzospF6Uv1JcQaf0Yhz+MIbAXig0A/COFCfAvD0ygW ScpljpeVRZ9iegNJcDPQbHvqGXgKzdkr3HRCmx2fFjJKLR7Fyl9vUCrKyXTSrmG2 VxG3xbQb+ZwH46jPfGTAlqTBt1GMOMyv8wDql1MHeAKaCvAIzm3bNfRotjZKK9jc Smap5/dgnjJ8/jJ719yU2XU3Zg== -----END CERTIFICATE-----Generated at Tue Sep 29 12:59:58 2026 by rpki-client