$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: /la+DaXngPUTZBLfgJzXmlraGG7vCI3dlNeUIvT4LOw= Subject key identifier: 90:1D:D3:80:D8:51:3F:0E:72:31:2D:C9:81:34:F6:41:B6:4B:EA:11 Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 0369 Signing time: Mon 05 Oct 2026 01:04:42 +0000 Manifest this update: Mon 05 Oct 2026 01:04:41 +0000 Manifest next update: Mon 12 Oct 2026 01:04:41 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: yeFJu7lwuzseaO9SNwCG/SOC4cQD6yyKQCqbA1js7OQ=) 2: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: TdcGUCFXzXTItt/U5FsMFNX2z6RTRrQyU46xfxrbahk=) 3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: GDZokXpZ+niO8zKz7vtzfAEOG0XN49j5ArWRaowNtqg=) 4: 826A614C16D911F183D175C0323D8C67.roa (hash: vzlm2lNsNkYyqc9HraEI88fz4qcYmcDAB/JqH0Rt1J4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Oct 5 01:04:41 2026 GMT Not After : Oct 12 01:04:41 2026 GMT Subject: CN=6ac2f7aa-24c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:44:7a:bd:c0:74:da:e3:6f:61:2f:7c:03:6b: e5:c3:15:c0:22:ef:fe:17:4e:03:95:4d:cf:31:f7: d1:48:35:47:20:b5:77:3e:11:56:b2:46:eb:bd:a6: 76:d3:85:62:cd:77:d9:14:ad:f5:7d:9a:47:c1:67: ff:e9:46:15:86:9f:23:dc:3b:19:59:c5:c0:25:fe: 0c:0d:ed:b9:a7:4b:56:ba:8c:d5:b1:54:ce:44:e2: 00:6a:f5:a6:6b:d0:1f:0c:73:3a:51:a4:df:23:69: 8f:0a:a9:1f:fa:03:41:ff:51:5e:a5:19:28:33:76: 1e:b2:f5:88:a5:63:f5:a7:19:33:c3:75:d6:a1:bb: 0f:f8:44:76:65:c2:37:92:f2:9f:94:8b:4b:63:0d: 80:05:c5:f8:e2:04:0f:66:b6:66:0c:9b:c5:14:fb: 6c:03:84:5d:bd:8f:2b:05:2d:3d:35:5e:e1:a0:d0: e0:80:ab:48:c9:d5:5c:eb:bf:6b:7b:5f:21:45:40: cc:3d:35:4c:2f:d5:a9:ba:1f:29:79:d1:8c:4a:7d: 01:2f:47:84:c5:ff:bc:f1:34:10:b8:50:40:4c:0a: f0:20:9f:1b:e8:d1:d0:12:82:9d:6e:ab:95:59:86: 21:b4:48:51:4b:09:f8:73:4a:98:fd:4a:8f:d1:75: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:D3:80:D8:51:3F:0E:72:31:2D:C9:81:34:F6:41:B6:4B:EA:11 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b6:94:44:eb:2b:b9:b5:95:7d:97:10:9f:47:d8:e6:b8:4b: f4:5a:ec:ea:d2:b4:58:3c:a5:e9:71:f7:c7:a0:f7:9c:fa:7a: 77:77:e9:05:1a:8c:cc:ca:b0:7f:4d:af:2b:12:2f:b6:4c:a5: 1c:b3:74:af:6d:b0:71:a0:6f:72:ab:aa:51:92:e0:52:f4:92: b8:60:8b:86:b3:a8:41:84:40:ad:9b:ca:fb:fd:d3:e3:bc:34: aa:0c:00:c6:d1:46:c5:94:4f:09:45:ba:d2:aa:84:0b:0a:1b: b6:53:e3:61:bf:6b:a6:90:b6:55:22:ff:ac:08:37:5f:ee:45: 3a:0c:48:79:31:b1:e8:ab:e6:b0:08:14:d0:65:72:ed:2a:e4: eb:cf:02:a0:6a:e6:a0:31:45:01:58:77:fc:5a:e4:a9:b7:49: 8d:b2:ff:22:df:de:8e:2e:8b:4f:44:e6:5e:71:a7:bf:98:4c: 16:45:ed:89:df:f8:a3:6d:8a:03:76:24:e1:b9:6d:fc:9f:54: d1:c2:4e:6b:04:de:5e:97:4b:1e:3b:75:4b:77:7a:3e:ed:b4: 6d:af:c2:07:fa:d9:6d:9e:c1:e1:6f:e4:dc:44:e6:63:6e:57: 13:25:09:34:60:bf:be:5d:1a:7f:87:c7:90:4b:dd:b1:37:8c: 06:1b:e1:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjYxMDA1MDEwNDQxWhcNMjYxMDEyMDEwNDQxWjAYMRYwFAYD VQQDEw02YWMyZjdhYS0yNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60R6vcB02uNvYS98A2vlwxXAIu/+F04DlU3PMffRSDVHILV3PhFWskbrvaZ2 04VizXfZFK31fZpHwWf/6UYVhp8j3DsZWcXAJf4MDe25p0tWuozVsVTOROIAavWm a9AfDHM6UaTfI2mPCqkf+gNB/1FepRkoM3YesvWIpWP1pxkzw3XWobsP+ER2ZcI3 kvKflItLYw2ABcX44gQPZrZmDJvFFPtsA4RdvY8rBS09NV7hoNDggKtIydVc679r e18hRUDMPTVML9Wpuh8pedGMSn0BL0eExf+88TQQuFBATArwIJ8b6NHQEoKdbquV WYYhtEhRSwn4c0qY/UqP0XV0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAd04DY UT8OcjEtyYE09kG2S+oRMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb7aUROsrubWVfZcQn0fY5rhL9Frs6tK0WDyl6XH3x6D3nPp6d3fpBRqMzMqw f02vKxIvtkylHLN0r22wcaBvcquqUZLgUvSSuGCLhrOoQYRArZvK+/3T47w0qgwA xtFGxZRPCUW60qqECwobtlPjYb9rppC2VSL/rAg3X+5FOgxIeTGx6KvmsAgU0GVy 7Srk688CoGrmoDFFAVh3/FrkqbdJjbL/It/eji6LT0TmXnGnv5hMFkXtid/4o22K A3Yk4blt/J9U0cJOawTeXpdLHjt1S3d6Pu20ba/CB/rZbZ7B4W/k3ETmY25XEyUJ NGC/vl0af4fHkEvdsTeMBhvhNg== -----END CERTIFICATE-----Generated at Tue Oct 6 18:53:11 2026 by rpki-client