$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json) Hash identifier: ayAl9vc94feRjUlgMaep8JTzrDOG/MokE4lCM+6TfmM= Subject key identifier: 40:D4:80:58:11:2A:F2:A8:58:A1:74:15:1F:DA:3E:16:6E:4D:F4:46 Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft Manifest number: 0431 Signing time: Wed 07 Oct 2026 00:25:01 +0000 Manifest this update: Wed 07 Oct 2026 00:25:00 +0000 Manifest next update: Wed 14 Oct 2026 00:25:00 +0000 Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: 2lEBG4UFb+bXiiiP8I9E4I1KbuFhA8TvsHJOdSVyT0o=) 2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=) 3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Validity Not Before: Oct 7 00:25:00 2026 GMT Not After : Oct 14 00:25:00 2026 GMT Subject: CN=6ac5915d-c30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c1:1c:3a:09:61:b3:60:28:f4:3a:9a:a9:15: e0:da:47:d8:65:b3:8b:ef:8c:49:43:e0:50:2a:a5: 7f:93:7d:90:ff:a6:88:e0:82:0b:10:41:de:d7:f5: e7:be:3d:4a:a0:1c:b0:33:68:b5:a0:0a:71:ea:0b: 7e:d5:a3:af:e5:b6:a3:79:7b:54:84:9f:82:77:52: c5:e1:db:2b:0f:13:3c:79:09:93:f3:17:5e:3c:f0: 33:c7:48:13:17:05:b8:b2:d5:d5:e7:a2:1e:12:48: 0f:01:2a:d4:8d:16:14:e2:d3:5f:73:80:96:19:7e: e7:64:15:d0:29:ed:c0:5b:72:78:7d:33:45:9a:98: 2b:73:c6:60:f7:22:3a:b4:c5:14:63:be:f1:cb:8d: 85:57:69:c4:1b:e2:92:c4:bb:20:a7:aa:28:c0:a5: 24:e8:10:74:03:9c:c8:3b:ca:b6:ef:21:ee:f9:11: 7c:98:58:2e:72:78:0a:e1:78:4d:bc:3b:cf:50:e9: a1:80:12:3e:fd:ee:99:07:38:cc:ae:68:4c:38:47: f7:fd:54:ea:93:ad:ec:9b:c9:8c:fc:af:93:28:1f: e7:7b:c4:74:28:29:31:00:20:bb:55:fe:25:18:64: 52:3a:a2:b4:a1:e1:01:78:28:86:fd:a8:57:79:2d: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D4:80:58:11:2A:F2:A8:58:A1:74:15:1F:DA:3E:16:6E:4D:F4:46 X509v3 Authority Key Identifier: keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:db:0f:93:69:4a:cc:9d:8a:f0:d6:11:89:f2:23:fa:5b:74: 5f:84:eb:0b:d8:85:c1:cb:fe:e6:15:9d:3e:f9:f6:cc:43:10: 28:ba:73:cc:fb:b5:53:86:36:a0:17:2e:38:40:70:50:b3:7d: 5b:16:27:ef:db:59:9d:f3:07:7c:02:40:8a:42:6c:f2:47:44: bc:82:fd:67:7d:10:ce:a0:08:75:78:4f:bd:79:43:30:f2:ea: 5f:8f:81:58:9f:47:34:12:5e:0f:46:92:9a:18:07:0b:54:42: 15:11:dc:48:99:79:89:45:c4:03:43:2d:bf:8d:f6:fd:a9:3c: 17:9f:41:cb:cb:e4:bf:a4:a4:30:13:ec:30:c0:a8:ba:88:e7: 39:fd:1f:c9:e2:05:c6:c3:c2:5e:af:dd:e2:5a:f6:3f:f0:b7: 77:42:41:a0:2d:aa:78:13:57:f3:7b:33:b5:de:54:54:23:e1: 0a:50:38:43:78:7d:e4:53:a5:45:03:0f:53:05:4c:6d:13:8e: ef:3c:b8:9b:76:e7:e9:9e:3b:96:99:9c:e4:16:a3:16:bb:92: 6c:e8:fc:87:02:8e:59:ad:7d:9e:b1:fb:97:a3:4b:d8:5d:f0: 9f:ff:6b:1a:22:ec:aa:3b:1a:20:c5:5c:d2:f4:5d:d6:b7:e0: 4a:43:cd:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5MjIyMEYyOTNF MTc5MUI2QkMwHhcNMjYxMDA3MDAyNTAwWhcNMjYxMDE0MDAyNTAwWjAYMRYwFAYD VQQDEw02YWM1OTE1ZC1jMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sEcOglhs2Ao9DqaqRXg2kfYZbOL74xJQ+BQKqV/k32Q/6aI4IILEEHe1/Xn vj1KoBywM2i1oApx6gt+1aOv5bajeXtUhJ+Cd1LF4dsrDxM8eQmT8xdePPAzx0gT FwW4stXV56IeEkgPASrUjRYU4tNfc4CWGX7nZBXQKe3AW3J4fTNFmpgrc8Zg9yI6 tMUUY77xy42FV2nEG+KSxLsgp6oowKUk6BB0A5zIO8q27yHu+RF8mFgucngK4XhN vDvPUOmhgBI+/e6ZBzjMrmhMOEf3/VTqk63sm8mM/K+TKB/ne8R0KCkxACC7Vf4l GGRSOqK0oeEBeCiG/ahXeS2VKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDUgFgR KvKoWKF0FR/aPhZuTfRGMB8GA1UdIwQYMBaAFNUo+tS4dqv7cK84kiIPKT4Xkba8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZDNS9FODI2NjAyMEM2 QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFfdHdyemlTSWc4cFBoZVJ0 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTajYxTGgycV90d3J6aVNJZzhwUGhlUnRydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZDNS9FODI2NjAyMEM2QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFf dHdyemlTSWc4cFBoZVJ0cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALdsPk2lKzJ2K8NYRifIj+lt0X4TrC9iFwcv+5hWdPvn2zEMQKLpzzPu1U4Y2 oBcuOEBwULN9WxYn79tZnfMHfAJAikJs8kdEvIL9Z30QzqAIdXhPvXlDMPLqX4+B WJ9HNBJeD0aSmhgHC1RCFRHcSJl5iUXEA0Mtv432/ak8F59By8vkv6SkMBPsMMCo uojnOf0fyeIFxsPCXq/d4lr2P/C3d0JBoC2qeBNX83sztd5UVCPhClA4Q3h95FOl RQMPUwVMbROO7zy4m3bn6Z47lpmc5BajFruSbOj8hwKOWa19nrH7l6NL2F3wn/9r GiLsqjsaIMVc0vRd1rfgSkPN2w== -----END CERTIFICATE-----Generated at Thu Oct 8 00:56:30 2026 by rpki-client