$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft File: 9ezJNiwdO3OCT11Cma2_q0r4TY0.mft (raw, json) Hash identifier: qGm+gcBT9rT2dkH0/LI1g9CEndqCnFZPp4lJ3vMHszQ= Subject key identifier: 20:1D:B9:CF:68:A6:23:33:5F:6C:D4:60:04:17:9D:2F:E5:81:85:1F Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft Manifest number: 23 Signing time: Thu 03 Sep 2026 09:10:54 +0000 Manifest this update: Thu 03 Sep 2026 09:10:54 +0000 Manifest next update: Thu 10 Sep 2026 09:10:54 +0000 Files and hashes: 1: 9ezJNiwdO3OCT11Cma2_q0r4TY0.crl (hash: OsdKvc/62nHnNu7Vc0Sonx8/Ythw3hiq7E3TpQHZQ0A=) 2: 8197428E8A2F11F1979432C96D11F970.roa (hash: 3agLE6eYwjBLKD73jdTnpcDMyC6z3gyTK8QJXd1hgRY=) 3: D07522FE831D11F1B418DC1191A30FBC.roa (hash: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Validity Not Before: Sep 3 09:10:54 2026 GMT Not After : Sep 10 09:10:54 2026 GMT Subject: CN=6a99399e-8146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:86:2d:0c:d3:f1:64:93:a4:96:4b:b5:d8: 27:43:3c:75:76:e2:17:6d:e7:d5:ce:06:31:d1:33: b7:88:b6:80:8f:19:2c:c2:2b:88:32:ba:9c:ca:4e: 4f:fc:85:b0:fb:7f:bf:fc:6b:12:e4:ef:c2:fa:f4: 26:90:f9:92:06:05:29:8c:c8:bc:99:53:6c:cc:cc: 8a:35:d5:f5:bf:40:92:7b:17:e3:f7:25:4e:3a:8f: d1:d0:d2:e7:0e:b2:6d:94:8a:41:42:47:be:64:66: 89:21:4d:0f:cc:cd:f0:0a:39:c3:1c:01:13:52:f9: d1:58:38:ef:4c:c5:03:49:c9:4d:de:30:81:ff:2c: 9e:e6:6d:7e:2d:31:98:aa:e9:64:9b:aa:8f:e3:29: a2:db:10:a9:bc:18:44:07:07:02:52:c5:a2:86:06: f1:fa:94:df:d8:79:a9:b1:1b:41:56:ab:ec:e8:32: 66:7e:00:b4:7d:57:ac:b4:1c:d7:cf:cb:bb:1f:ad: 9b:7f:48:12:b4:fe:c3:5b:ac:9d:75:c5:92:08:ab: a2:c8:34:c4:3a:36:60:a6:80:1b:f4:2e:89:e1:30: 0e:de:6b:31:95:df:36:63:1b:36:80:0f:ce:bc:10: b4:ae:fd:c2:db:e8:b7:dc:c7:17:14:fc:68:48:63: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:B9:CF:68:A6:23:33:5F:6C:D4:60:04:17:9D:2F:E5:81:85:1F X509v3 Authority Key Identifier: keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:b2:64:e4:ee:87:ef:77:dc:71:f3:55:30:68:50:84:ad: 11:d4:f9:da:8d:f1:3a:79:9d:01:4c:37:24:e9:8c:85:cf:f2: 96:1f:63:fa:df:cd:3c:c6:a9:c6:61:80:eb:29:ad:fa:12:06: bc:a3:1d:fe:eb:ab:12:91:45:be:48:d6:05:80:18:fe:a0:51: 94:6b:95:3e:b9:8a:93:84:cb:50:a4:31:19:a2:61:0f:c9:f3: 23:74:74:a9:7d:1f:1f:46:3a:d7:c8:c2:c3:c5:39:f8:e5:97: 66:39:80:57:e0:e7:07:d6:37:79:52:f1:ce:8b:bd:9f:5b:79: de:1e:bf:5b:be:41:00:9d:63:f5:4c:ac:24:83:08:32:e0:d2: bd:ba:a1:23:08:c7:6d:20:14:97:b2:ba:06:4b:7e:58:d0:c8: f0:d1:f8:09:b7:9c:15:14:59:ba:24:8b:f8:1c:27:88:1d:4b: 14:db:fa:3a:d3:94:3b:5d:39:d3:34:72:68:0f:27:43:22:a1: f7:7b:86:dd:55:eb:6a:53:7e:1c:73:15:ff:20:6b:92:a1:f4: 92:2e:c9:d5:c0:ac:a5:ee:eb:95:e9:a9:a1:d1:4f:7a:88:00: 9d:7d:ac:17:f3:50:ea:66:30:00:d2:f0:f5:51:d6:ca:ce:ed: 16:38:3d:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzMjExMC8GA1UEBRMoRjVFQ0M5MzYyQzFEM0I3MzgyNEY1RDQyOTlBREJGQUI0 QUY4NEQ4RDAeFw0yNjA5MDMwOTEwNTRaFw0yNjA5MTAwOTEwNTRaMBgxFjAUBgNV BAMTDTZhOTkzOTllLTgxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMoYYtDNPxZJOklku12CdDPHV24hdt59XOBjHRM7eItoCPGSzCK4gyupzKTk/8 hbD7f7/8axLk78L69CaQ+ZIGBSmMyLyZU2zMzIo11fW/QJJ7F+P3JU46j9HQ0ucO sm2UikFCR75kZokhTQ/MzfAKOcMcARNS+dFYOO9MxQNJyU3eMIH/LJ7mbX4tMZiq 6WSbqo/jKaLbEKm8GEQHBwJSxaKGBvH6lN/YeamxG0FWq+zoMmZ+ALR9V6y0HNfP y7sfrZt/SBK0/sNbrJ11xZIIq6LINMQ6NmCmgBv0LonhMA7eazGV3zZjGzaAD868 ELSu/cLb6LfcxxcU/GhIY1jzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIB25z2im IzNfbNRgBBedL+WBhR8wHwYDVR0jBBgwFoAU9ezJNiwdO3OCT11Cma2/q0r4TY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDMyL0E3MDc2NEY2ODJD QjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNPQ1QxMUNtYTJfcTByNFRZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWV6Sk5pd2RPM09DVDExQ21hMl9xMHI0VFkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDMyL0E3MDc2NEY2ODJDQjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNP Q1QxMUNtYTJfcTByNFRZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArLLJk5O6H73fccfNVMGhQhK0R1PnajfE6eZ0BTDck6YyFz/KWH2P63808xqnG YYDrKa36Ega8ox3+66sSkUW+SNYFgBj+oFGUa5U+uYqThMtQpDEZomEPyfMjdHSp fR8fRjrXyMLDxTn45ZdmOYBX4OcH1jd5UvHOi72fW3neHr9bvkEAnWP1TKwkgwgy 4NK9uqEjCMdtIBSXsroGS35Y0Mjw0fgJt5wVFFm6JIv4HCeIHUsU2/o605Q7XTnT NHJoDydDIqH3e4bdVetqU34ccxX/IGuSofSSLsnVwKyl7uuV6amh0U96iACdfawX 81DqZjAA0vD1UdbKzu0WOD2W -----END CERTIFICATE-----Generated at Sat Sep 5 10:13:35 2026 by rpki-client