$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: bYQrckOrDZkR7K6EPZnR/73d1FTNLu4gDFweGOEAV8Y= Subject key identifier: 7B:CA:0C:D7:14:04:35:23:FC:7C:10:B6:47:CD:01:1F:42:F4:F6:6E Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 3592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 3589 Signing time: Mon 14 Sep 2026 14:32:29 +0000 Manifest this update: Mon 14 Sep 2026 14:32:29 +0000 Manifest next update: Mon 21 Sep 2026 14:32:29 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: ufYDrHZQfxFnAswaWuxdlXjKQPVGuj10p9oBxS5cQbk=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: rxf3DHMFewfYjEmU/j0BdMyIOehzcE11rbLSMoX1rKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13714 (0x3592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Sep 14 14:32:29 2026 GMT Not After : Sep 21 14:32:29 2026 GMT Subject: CN=6aa8057d-5a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:cf:b1:9a:d3:cf:1f:30:1b:63:0e:b6:b2: fd:04:cb:26:91:26:87:da:47:08:2e:d4:59:f5:50: 89:69:62:f0:8b:08:d4:57:d8:8c:c4:6f:60:f0:c6: 1f:07:a1:95:b4:58:bd:4a:8a:f7:40:65:a4:d4:98: 58:34:01:09:4f:2d:5e:ad:47:d2:6b:27:b3:f4:5d: f4:b4:5e:3d:4b:39:66:30:09:e5:ea:1d:fd:b6:fd: 66:ae:70:07:45:1a:28:26:5d:df:e7:e8:a3:2f:c0: 1e:ae:a7:2e:06:4d:0f:c7:15:f8:cf:d2:0d:6b:3f: dc:b7:aa:92:d5:cf:a3:86:5a:ac:1b:1f:4f:78:20: 85:d2:d9:4c:d9:81:fa:62:ed:71:20:05:d1:5a:36: f9:32:10:91:bb:88:4e:65:c3:aa:06:d7:e2:e7:b8: 25:d7:78:f6:8a:e7:37:07:c0:4e:cb:37:b5:2f:b8: cf:8f:f0:33:63:8f:b1:f2:6a:c9:b2:e1:5e:3e:1f: ab:ab:43:74:58:8d:25:a4:6e:47:07:c7:63:c4:7d: 07:0e:2d:77:1c:4d:79:0b:72:20:51:47:85:d2:d8: d0:47:2a:fc:39:6a:c3:b4:94:d2:d5:17:c1:6b:0a: 0d:b4:f3:99:e6:70:39:7b:bf:14:d5:68:a7:e4:c6: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CA:0C:D7:14:04:35:23:FC:7C:10:B6:47:CD:01:1F:42:F4:F6:6E X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:df:ce:0f:c0:8a:ed:91:7c:9e:e6:1f:9d:49:5a:ad:42:fa: 02:4d:02:a1:e8:8e:f5:bb:8c:1b:e3:39:ca:fc:72:c1:a9:62: 1a:1d:1d:ab:d9:53:b5:86:49:15:f4:a2:81:4e:fd:6b:34:8e: 6d:9e:1e:86:d1:ba:9b:3d:ea:9b:bd:08:64:46:c8:11:5f:97: 8e:66:ab:7c:57:78:f9:a9:7f:7c:2c:b3:8f:69:64:e5:5c:c8: 14:24:e1:0f:10:39:25:9b:3c:e7:3f:fa:6c:ee:69:cf:d5:d8: 50:ef:4f:e2:30:dd:d4:52:e7:e4:9c:f1:10:60:04:0b:11:a8: 3d:79:cf:da:88:76:05:ae:9d:be:ea:10:7e:54:be:9a:7e:18: 48:1c:cb:f2:dd:c5:6c:fa:9c:75:fe:76:d6:e8:7d:6c:4d:84: 13:3a:64:25:99:7d:d1:26:10:e0:2e:72:86:88:59:f5:ae:61: 4f:ed:26:ef:a5:06:ee:c1:b8:61:6e:98:73:94:84:22:c1:49: 59:05:e9:26:7f:ee:f1:fa:90:6c:a7:45:b6:b7:dc:3e:b9:e3: 11:35:16:89:0f:ca:30:78:2e:6d:a1:27:65:09:93:32:1b:6a: d6:6c:3f:a0:7b:c3:04:1b:01:81:24:5a:df:f8:1b:66:d3:67: 6b:3c:91:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjYwOTE0MTQzMjI5WhcNMjYwOTIxMTQzMjI5WjAYMRYwFAYD VQQDEw02YWE4MDU3ZC01YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/fPsZrTzx8wG2MOtrL9BMsmkSaH2kcILtRZ9VCJaWLwiwjUV9iMxG9g8MYf B6GVtFi9Sor3QGWk1JhYNAEJTy1erUfSayez9F30tF49SzlmMAnl6h39tv1mrnAH RRooJl3f5+ijL8AerqcuBk0PxxX4z9INaz/ct6qS1c+jhlqsGx9PeCCF0tlM2YH6 Yu1xIAXRWjb5MhCRu4hOZcOqBtfi57gl13j2iuc3B8BOyze1L7jPj/AzY4+x8mrJ suFePh+rq0N0WI0lpG5HB8djxH0HDi13HE15C3IgUUeF0tjQRyr8OWrDtJTS1RfB awoNtPOZ5nA5e78U1Win5MZdGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvKDNcU BDUj/HwQtkfNAR9C9PZuMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUd/OD8CK7ZF8nuYfnUlarUL6Ak0CoeiO9buMG+M5yvxywaliGh0dq9lTtYZJ FfSigU79azSObZ4ehtG6mz3qm70IZEbIEV+XjmarfFd4+al/fCyzj2lk5VzIFCTh DxA5JZs85z/6bO5pz9XYUO9P4jDd1FLn5JzxEGAECxGoPXnP2oh2Ba6dvuoQflS+ mn4YSBzL8t3FbPqcdf521uh9bE2EEzpkJZl90SYQ4C5yhohZ9a5hT+0m76UG7sG4 YW6Yc5SEIsFJWQXpJn/u8fqQbKdFtrfcPrnjETUWiQ/KMHgubaEnZQmTMhtq1mw/ oHvDBBsBgSRa3/gbZtNnazyRcg== -----END CERTIFICATE-----Generated at Tue Sep 15 16:14:45 2026 by rpki-client