$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: cMXAOuTJc1iDnyF1LmfHI/0DvLGBNPx0IM8IlNL9K4g= Subject key identifier: 70:4F:74:46:1A:85:74:2F:40:FE:41:23:87:CC:65:FA:91:64:F5:9E Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 35AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3595 Signing time: Tue 06 Oct 2026 15:16:01 +0000 Manifest this update: Tue 06 Oct 2026 15:16:00 +0000 Manifest next update: Tue 13 Oct 2026 15:16:00 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: YEQntKbbVGhcNtDFZuTdfej7/XbijFpeup+cbHNwUPY=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Oct 6 15:16:00 2026 GMT Not After : Oct 13 15:16:00 2026 GMT Subject: CN=6ac510b1-696c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:77:84:83:b2:4b:d0:2e:c1:bc:51:c7:37: 71:ee:9c:02:5f:e3:13:e2:c8:8a:7f:86:bd:c7:4b: 8e:f0:42:19:a4:e3:37:3e:56:0f:76:7b:6b:4e:c0: 59:c2:37:e2:f6:ab:7b:99:59:e4:fc:72:16:93:b6: 51:c2:d0:dc:b8:6d:e1:0e:ae:e1:d5:06:0a:96:ad: c9:8d:98:1f:bd:53:4d:23:55:46:85:6b:c3:40:c1: 21:bf:77:2b:90:f2:96:d5:68:46:58:29:f8:64:41: b2:15:38:6f:b8:0e:45:9a:17:6a:77:bc:78:fd:9e: b2:06:76:b6:cf:bb:ed:1a:1c:fe:09:27:57:27:e7: 99:64:fe:05:e5:c1:27:68:53:79:ee:a3:af:25:a2: cd:78:99:17:b4:40:57:bb:dc:ee:66:d9:c2:73:9e: e4:eb:c4:ff:9f:74:7a:cb:c8:ea:97:3e:3c:ba:e3: 8d:1a:1b:56:d1:ca:e2:e6:82:46:b1:1a:40:c1:49: 26:3e:69:42:6a:63:77:9a:17:e6:ec:88:dd:e9:1e: 26:be:7e:48:1f:c0:a7:a1:99:07:52:bb:c2:e0:35: 08:ab:f7:39:8d:ed:dc:fc:ea:db:97:2f:e6:99:bb: a1:34:0f:f9:ae:6d:55:94:29:10:f2:b0:09:88:11: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:74:46:1A:85:74:2F:40:FE:41:23:87:CC:65:FA:91:64:F5:9E X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:89:37:1a:39:2f:14:7a:c6:b8:f8:1b:1c:08:b2:31:2a:fd: 20:eb:d1:4d:33:7e:4f:9f:79:05:b3:42:55:24:80:1a:29:d0: 60:22:9c:ca:7f:e8:3b:a2:c0:25:01:3f:9d:dd:ce:fc:75:6d: bf:3e:93:66:96:c8:df:c6:4d:34:66:9e:4d:38:97:48:77:59: c0:cf:11:17:a5:54:1b:a2:ed:3f:4a:ba:28:07:d2:03:20:30: c8:f3:50:47:87:51:4d:a5:5c:b7:be:65:dc:a1:25:fe:56:f3: fc:19:05:c5:08:90:bb:72:ba:47:d5:09:81:88:82:8b:90:e6: 55:b8:3c:4a:ff:0e:03:bc:37:24:77:f4:a8:93:00:37:fe:62: 6b:ea:b9:85:65:f2:e9:c7:e2:0a:37:c9:68:26:ae:69:ee:a9: cd:f4:81:92:8f:b4:38:bd:5a:01:17:53:9b:25:a7:72:b8:85: c4:d0:de:5e:bd:17:0d:ca:45:49:06:a2:e2:97:03:9b:d3:01: bc:1f:85:db:50:5b:77:8b:bf:1f:4c:99:f1:32:a6:22:ba:95: 37:77:51:ba:6d:23:57:e3:98:37:c7:61:41:f6:e5:57:92:48: 5f:f0:07:ae:7a:17:a7:32:d4:e2:f1:b7:a9:5b:89:93:17:7c: 4b:08:5d:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYxMDA2MTUxNjAwWhcNMjYxMDEzMTUxNjAwWjAYMRYwFAYD VQQDEw02YWM1MTBiMS02OTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLp3hIOyS9AuwbxRxzdx7pwCX+MT4siKf4a9x0uO8EIZpOM3PlYPdntrTsBZ wjfi9qt7mVnk/HIWk7ZRwtDcuG3hDq7h1QYKlq3JjZgfvVNNI1VGhWvDQMEhv3cr kPKW1WhGWCn4ZEGyFThvuA5Fmhdqd7x4/Z6yBna2z7vtGhz+CSdXJ+eZZP4F5cEn aFN57qOvJaLNeJkXtEBXu9zuZtnCc57k68T/n3R6y8jqlz48uuONGhtW0cri5oJG sRpAwUkmPmlCamN3mhfm7Ijd6R4mvn5IH8CnoZkHUrvC4DUIq/c5je3c/Orbly/m mbuhNA/5rm1VlCkQ8rAJiBGsZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBPdEYa hXQvQP5BI4fMZfqRZPWeMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh4k3GjkvFHrGuPgbHAiyMSr9IOvRTTN+T595BbNCVSSAGinQYCKcyn/oO6LA JQE/nd3O/HVtvz6TZpbI38ZNNGaeTTiXSHdZwM8RF6VUG6LtP0q6KAfSAyAwyPNQ R4dRTaVct75l3KEl/lbz/BkFxQiQu3K6R9UJgYiCi5DmVbg8Sv8OA7w3JHf0qJMA N/5ia+q5hWXy6cfiCjfJaCauae6pzfSBko+0OL1aARdTmyWncriFxNDeXr0XDcpF SQai4pcDm9MBvB+F21Bbd4u/H0yZ8TKmIrqVN3dRum0jV+OYN8dhQfblV5JIX/AH rnoXpzLU4vG3qVuJkxd8SwhdXg== -----END CERTIFICATE-----Generated at Tue Oct 6 19:55:06 2026 by rpki-client