$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: EEgf3D6k3Lt1ODhx9fKZS/4w2xitwfVi7dw0NqU8pxM= Subject key identifier: 9E:6F:AA:2A:73:37:AF:22:3E:A1:DA:B1:8E:0D:89:21:B4:36:7A:7B Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0FDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0FC0 Signing time: Fri 04 Sep 2026 17:26:49 +0000 Manifest this update: Fri 04 Sep 2026 17:26:48 +0000 Manifest next update: Fri 11 Sep 2026 17:26:48 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: O0zeyxvWNmbMmIQtPloq9i6CYpHuk4AIR0Xlhj3N+S4=) 2: 64554290C9F611ED9853C583C4F9AE02.roa (hash: Jb42NeKSs3YwFgjroWCzgaWt1KOKTLqIAP8DvayOhdo=) 3: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: vsNlGQ11CWIdF534rGVVHSBQnNLB5S6nlxZqLQOrOlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Sep 4 17:26:48 2026 GMT Not After : Sep 11 17:26:48 2026 GMT Subject: CN=6a9aff58-34b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:d6:b8:a7:a9:40:e4:c4:88:f8:71:f7:58: 03:b7:03:61:82:9d:6a:07:16:87:71:b7:a5:e0:04: fe:f6:d4:af:d5:82:ab:0c:af:c8:ac:df:a5:5f:6c: c5:2c:cf:55:45:2a:2c:d8:d2:98:7d:71:1f:15:8f: 45:35:40:c5:6a:71:ca:9e:d0:63:e3:a7:a5:18:a9: ec:d1:92:83:fe:26:3d:37:c9:ef:29:0b:97:3e:cc: d7:17:a5:28:c5:c8:87:d5:63:e8:2e:3b:5e:d0:f0: 63:66:02:d6:96:0e:dc:18:69:b1:87:fa:48:ea:1a: 4b:29:9e:02:8b:86:45:1e:48:6f:93:e6:0f:38:94: 8f:63:41:b2:fd:53:cf:67:79:25:74:53:8e:b3:51: 0c:32:33:b8:1d:41:96:c6:d0:27:f0:72:9a:0c:ea: 68:13:99:a3:1e:64:35:ab:67:6d:b1:a3:75:43:a2: b0:79:a3:f2:0e:12:82:ef:9c:c1:0a:a3:c8:6c:44: e0:d5:75:25:a6:a5:bb:57:bb:63:6e:13:2b:d6:8d: 66:01:59:d5:09:65:e0:5a:56:6c:74:89:2b:1e:71: a9:40:9a:c3:47:4d:48:9a:0d:ae:a6:49:92:10:52: 96:ed:c5:f1:b5:51:b6:e8:46:f1:43:af:98:ab:b8: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:AA:2A:73:37:AF:22:3E:A1:DA:B1:8E:0D:89:21:B4:36:7A:7B X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ce:05:04:8b:c3:28:10:71:65:78:05:62:53:02:84:72:30: 7b:e7:92:48:84:f1:23:5b:f7:a0:4b:dc:d9:cc:14:ab:f7:c7: 24:40:29:91:2a:6b:a3:01:32:87:66:85:53:e8:d3:20:56:ee: 03:21:f4:ba:7f:94:17:9b:0a:36:81:be:00:a2:91:68:da:49: d8:8c:63:05:9a:db:44:a0:3c:aa:0d:76:e7:f6:eb:79:de:b0: 4d:80:d9:f8:7f:52:cd:88:90:38:15:6a:f5:da:11:42:a6:ba: 88:0b:a6:97:68:c5:df:a5:b4:7e:2e:9a:59:d3:71:0f:f7:64: 19:5f:9a:84:f4:eb:fb:6f:6f:86:cd:70:54:85:47:c9:fe:7e: 89:74:7e:a1:16:33:55:4d:37:d8:78:ba:52:81:0f:ea:ca:81: 5f:a8:96:bf:00:e7:fb:84:54:9c:4a:b7:ca:0e:11:0d:23:2a: 61:20:41:73:40:5e:9c:4c:f9:da:18:19:97:52:7d:fd:f3:dd: b6:e2:5d:73:b8:fc:fa:d3:f1:23:ae:01:d9:6c:8b:57:11:16: 0d:73:14:4a:83:c8:e1:60:39:e2:0a:f7:e5:5a:38:80:f5:bc: d4:c2:ed:9b:9a:f3:08:34:39:81:09:b7:09:57:19:96:ea:5b: 38:ac:62:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjYwOTA0MTcyNjQ4WhcNMjYwOTExMTcyNjQ4WjAYMRYwFAYD VQQDEw02YTlhZmY1OC0zNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpHWuKepQOTEiPhx91gDtwNhgp1qBxaHcbel4AT+9tSv1YKrDK/IrN+lX2zF LM9VRSos2NKYfXEfFY9FNUDFanHKntBj46elGKns0ZKD/iY9N8nvKQuXPszXF6Uo xciH1WPoLjte0PBjZgLWlg7cGGmxh/pI6hpLKZ4Ci4ZFHkhvk+YPOJSPY0Gy/VPP Z3kldFOOs1EMMjO4HUGWxtAn8HKaDOpoE5mjHmQ1q2dtsaN1Q6KweaPyDhKC75zB CqPIbETg1XUlpqW7V7tjbhMr1o1mAVnVCWXgWlZsdIkrHnGpQJrDR01Img2upkmS EFKW7cXxtVG26EbxQ6+Yq7gbyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5vqipz N68iPqHasY4NiSG0Nnp7MB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ84FBIvDKBBxZXgFYlMChHIwe+eSSITxI1v3oEvc2cwUq/fHJEApkSprowEy h2aFU+jTIFbuAyH0un+UF5sKNoG+AKKRaNpJ2IxjBZrbRKA8qg125/bred6wTYDZ +H9SzYiQOBVq9doRQqa6iAuml2jF36W0fi6aWdNxD/dkGV+ahPTr+29vhs1wVIVH yf5+iXR+oRYzVU032Hi6UoEP6sqBX6iWvwDn+4RUnEq3yg4RDSMqYSBBc0BenEz5 2hgZl1J9/fPdtuJdc7j8+tPxI64B2WyLVxEWDXMUSoPI4WA54gr35Vo4gPW81MLt m5rzCDQ5gQm3CVcZlupbOKxiLQ== -----END CERTIFICATE-----Generated at Sat Sep 5 01:01:07 2026 by rpki-client