$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: qlgOWOl5Bjv3a6ctrNiOrzl+mZsPrHBHivH7GLxPJvc= Subject key identifier: F9:2C:66:91:00:C0:71:21:16:40:4F:38:78:03:A9:4D:9B:B7:85:10 Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 0223 Signing time: Tue 29 Sep 2026 03:16:34 +0000 Manifest this update: Tue 29 Sep 2026 03:16:34 +0000 Manifest next update: Tue 06 Oct 2026 03:16:34 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: UESs3qV46F7EVp35gVUuCxXxoStPvAR9je6VOazbzCg=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: wgZY6CZu4QF64tBtckX4XM82ZwiMInYJliPcrt7Ct0M=) 3: VSN5GqE1ltgJwx7RS3cxUNDcO8A.asa (hash: 4NhPMM06aQACEB7ezDJRQrzNEtgGn+jyY3EkFIetkxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 03:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Sep 29 03:16:34 2026 GMT Not After : Oct 6 03:16:34 2026 GMT Subject: CN=6abb2d92-ba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:3c:c1:46:ec:9d:46:7a:15:67:ec:9c:bc: 7e:c5:4b:77:4e:75:37:2f:58:d0:8c:88:ca:18:d5: 06:26:a1:0e:22:9b:b9:0e:ed:2d:7c:22:9f:28:39: 99:3f:b5:f7:ea:a7:aa:80:aa:50:5c:57:94:e2:93: 6d:bb:a5:1e:80:84:c0:d2:a2:66:36:e9:17:a3:1f: 9f:d2:a4:3a:bc:f8:98:c6:d7:b7:01:b4:67:31:c6: 43:c6:fb:89:1e:ed:b0:10:40:6e:76:94:b5:fa:05: 4d:00:8b:a3:2f:e9:55:65:f7:e3:d0:b7:2a:81:ee: c3:15:b9:d0:e1:a9:9e:4c:91:73:a1:aa:29:f2:c9: a2:1e:d1:a9:8c:10:cb:98:0e:25:eb:a1:bb:b5:42: de:76:49:ee:5c:22:b2:4b:64:d1:d6:82:1a:d4:98: 78:49:5e:c7:4b:44:33:0c:57:32:db:2c:54:9c:eb: 70:0e:f2:aa:fe:29:41:29:3f:20:7c:7f:84:79:ee: f8:5a:a2:c4:b2:27:f3:9c:72:c5:ea:2b:83:92:67: 40:6e:10:df:41:d8:e1:68:02:87:69:1e:77:d7:ed: aa:cb:d2:6d:c2:e9:9a:22:3f:34:79:5a:e8:79:46: 50:32:f7:27:61:1e:10:0d:fa:91:92:7c:ef:7b:ad: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:66:91:00:C0:71:21:16:40:4F:38:78:03:A9:4D:9B:B7:85:10 X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:88:c7:db:50:80:9d:c3:ae:ba:29:19:c4:1b:7f:55:96:c2: 03:61:a3:d0:e6:f9:14:73:56:33:0a:f7:58:fe:b4:d5:e5:3d: 70:7f:18:cd:d8:24:0a:d2:a9:0d:b1:e6:ea:cc:ea:20:59:41: ee:bb:85:22:3a:3b:36:cf:89:ef:10:f0:e0:5d:25:4b:bb:cc: 5a:c1:10:0c:e2:bc:ce:62:84:75:e1:ee:9e:47:d2:20:a1:39: f8:89:d5:51:b4:a6:6a:d2:ce:bb:97:7e:71:09:9f:65:43:82: d8:ac:7e:b7:ec:17:2f:f7:e8:06:59:45:cb:86:8a:da:54:db: 0e:13:1a:36:58:0b:9d:7f:ff:e4:5f:c8:0f:58:11:2a:9c:b9: ea:65:9e:75:f1:eb:c8:7f:a0:d7:80:3c:2a:be:d8:e7:70:e6: 65:dd:18:5a:2b:d5:52:9b:78:f3:66:1d:83:8d:96:37:fb:8c: dc:a3:d3:d4:8e:14:65:46:e7:4f:8d:ef:24:6b:9f:b5:5b:af: a6:e2:6d:01:48:fe:d9:07:1e:b7:83:a7:02:5c:c3:02:2c:b9: 41:c7:7c:82:7c:e8:67:58:f5:db:05:b0:4e:6d:c5:e5:ea:d3: 97:fa:e1:a9:bb:30:a0:9c:13:6b:52:95:fc:a8:08:73:05:44: 4f:ee:45:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjYwOTI5MDMxNjM0WhcNMjYxMDA2MDMxNjM0WjAYMRYwFAYD VQQDEw02YWJiMmQ5Mi1iYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntQ8wUbsnUZ6FWfsnLx+xUt3TnU3L1jQjIjKGNUGJqEOIpu5Du0tfCKfKDmZ P7X36qeqgKpQXFeU4pNtu6UegITA0qJmNukXox+f0qQ6vPiYxte3AbRnMcZDxvuJ Hu2wEEBudpS1+gVNAIujL+lVZffj0Lcqge7DFbnQ4ameTJFzoaop8smiHtGpjBDL mA4l66G7tULedknuXCKyS2TR1oIa1Jh4SV7HS0QzDFcy2yxUnOtwDvKq/ilBKT8g fH+Eee74WqLEsifznHLF6iuDkmdAbhDfQdjhaAKHaR531+2qy9JtwumaIj80eVro eUZQMvcnYR4QDfqRknzve63R2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPksZpEA wHEhFkBPOHgDqU2bt4UQMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANIjH21CAncOuuikZxBt/VZbCA2Gj0Ob5FHNWMwr3WP601eU9cH8YzdgkCtKp DbHm6szqIFlB7ruFIjo7Ns+J7xDw4F0lS7vMWsEQDOK8zmKEdeHunkfSIKE5+InV UbSmatLOu5d+cQmfZUOC2Kx+t+wXL/foBllFy4aK2lTbDhMaNlgLnX//5F/ID1gR Kpy56mWedfHryH+g14A8Kr7Y53DmZd0YWivVUpt482Ydg42WN/uM3KPT1I4UZUbn T43vJGuftVuvpuJtAUj+2Qcet4OnAlzDAiy5Qcd8gnzoZ1j12wWwTm3F5erTl/rh qbswoJwTa1KV/KgIcwVET+5FPw== -----END CERTIFICATE-----Generated at Wed Sep 30 10:01:55 2026 by rpki-client