$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: HUA9IsaE7sN8aPZwuC1DXKyzxHzJ/frdkBxZAq0N1vw= Subject key identifier: 2F:60:88:C6:F0:63:87:87:1B:10:93:BF:ED:DE:6D:9C:51:C9:B0:0C Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 058C Signing time: Thu 10 Sep 2026 23:08:30 +0000 Manifest this update: Thu 10 Sep 2026 23:08:30 +0000 Manifest next update: Thu 17 Sep 2026 23:08:30 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: I/cC1bug02sxR3VwAqFR/PWeDw+8yelQbHPt2iYrCpM=) 2: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: t3chBruHTyyhjmWGr7PACIhRpSOcddPnItF52cMQU50=) 3: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: lYuc7KAwDmnwAL+8k2Ka5IK1fQ2BuQOjBbbuBba3h5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Sep 10 23:08:30 2026 GMT Not After : Sep 17 23:08:30 2026 GMT Subject: CN=6aa3386e-339a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:cc:36:8a:15:61:0d:8e:bc:11:ab:86:c6: 15:fb:53:7c:82:62:e5:d5:ef:71:10:8e:85:cd:e2: ff:06:a7:17:3b:e9:a3:bb:08:68:e0:e0:6b:b8:97: 68:07:45:dc:65:6c:55:41:2b:ce:3a:c5:a0:7a:7f: 5b:26:ee:da:d3:bb:02:69:4c:84:5c:ce:34:c6:4c: 13:1d:d7:f0:ba:5b:18:fb:fa:19:f0:c8:4b:b8:21: 6a:8e:27:9b:b6:73:f1:d4:ab:1d:18:e7:51:ef:06: 96:92:82:79:e9:a3:a8:c8:d4:a0:a2:06:50:93:5e: a3:b2:7b:58:65:0d:9f:67:7b:d1:44:77:23:64:c2: 6d:ce:53:3d:14:4a:71:cf:2d:27:c3:0d:ce:70:f5: 55:4e:5c:75:65:bd:5c:db:cb:1a:c5:52:e8:6c:58: 69:bf:47:4c:3d:27:1b:b9:4b:57:5f:2d:3e:3f:b5: ef:d4:60:d3:0a:88:22:af:b1:75:43:08:cb:46:d0: 4d:5d:d7:7c:fc:8b:f2:57:82:74:72:d6:bd:2a:34: cf:26:5f:b8:18:13:44:e0:5e:68:be:32:70:13:ec: 21:7f:7e:06:44:ff:7b:1e:b1:ee:53:3c:a1:7c:7e: 2d:bf:b8:bf:16:24:8a:46:a2:61:b0:bc:77:26:f6: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:88:C6:F0:63:87:87:1B:10:93:BF:ED:DE:6D:9C:51:C9:B0:0C X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:60:42:e2:32:79:80:71:b2:ff:d2:19:6c:80:3a:6b:9c:4e: 2d:ee:2e:b0:3d:f7:72:6a:a1:cc:64:01:45:d5:7e:a9:de:b7: f7:f0:53:06:98:ba:41:f8:99:24:e3:02:e8:e5:66:32:33:eb: c5:3a:61:a7:a0:e8:ff:8a:3a:74:58:c7:26:01:fe:8c:77:45: 25:1b:55:b6:27:69:50:83:8b:78:d1:f2:e2:37:11:c0:0e:dc: a6:dc:26:e7:b1:ac:f9:4f:19:94:2a:35:91:a9:46:aa:33:47: cb:d7:67:35:5c:1d:4e:20:7a:56:b8:7f:36:6e:1c:51:ff:e2: 8a:58:83:35:67:e8:5b:a4:07:41:b8:c8:30:ab:78:6d:d7:b1: 1a:59:e3:ff:b7:07:2f:d3:e4:2f:e2:3c:cf:c6:0b:18:29:b0: 9e:54:1a:0b:f6:4f:6a:ec:0e:2b:17:8e:bc:dc:44:f9:7e:f2: 71:cc:c3:d5:c7:95:da:98:af:db:a6:c2:38:95:b7:26:8e:ba: 93:81:31:72:a0:33:33:5f:1e:89:18:17:f8:be:df:52:54:34: ab:cc:83:29:be:3d:b8:a5:8f:77:0e:71:3d:83:60:d0:11:15: 51:04:6b:9d:c8:ea:96:9c:e7:b1:da:5c:95:8b:e4:4a:3c:7e: 5d:87:8d:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjYwOTEwMjMwODMwWhcNMjYwOTE3MjMwODMwWjAYMRYwFAYD VQQDEw02YWEzMzg2ZS0zMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCrMNooVYQ2OvBGrhsYV+1N8gmLl1e9xEI6FzeL/BqcXO+mjuwho4OBruJdo B0XcZWxVQSvOOsWgen9bJu7a07sCaUyEXM40xkwTHdfwulsY+/oZ8MhLuCFqjieb tnPx1KsdGOdR7waWkoJ56aOoyNSgogZQk16jsntYZQ2fZ3vRRHcjZMJtzlM9FEpx zy0nww3OcPVVTlx1Zb1c28saxVLobFhpv0dMPScbuUtXXy0+P7Xv1GDTCogir7F1 QwjLRtBNXdd8/IvyV4J0cta9KjTPJl+4GBNE4F5ovjJwE+whf34GRP97HrHuUzyh fH4tv7i/FiSKRqJhsLx3Jva5jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9giMbw Y4eHGxCTv+3ebZxRybAMMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEmBC4jJ5gHGy/9IZbIA6a5xOLe4usD33cmqhzGQBRdV+qd639/BTBpi6QfiZ JOMC6OVmMjPrxTphp6Do/4o6dFjHJgH+jHdFJRtVtidpUIOLeNHy4jcRwA7cptwm 57Gs+U8ZlCo1kalGqjNHy9dnNVwdTiB6Vrh/Nm4cUf/iiliDNWfoW6QHQbjIMKt4 bdexGlnj/7cHL9PkL+I8z8YLGCmwnlQaC/ZPauwOKxeOvNxE+X7ycczD1ceV2piv 26bCOJW3Jo66k4ExcqAzM18eiRgX+L7fUlQ0q8yDKb49uKWPdw5xPYNg0BEVUQRr ncjqlpznsdpclYvkSjx+XYeNBA== -----END CERTIFICATE-----Generated at Fri Sep 11 12:05:11 2026 by rpki-client