$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: JeopxSSRMtcCi86u12P1B7xSmMA6Mq9Ks8f05e2OPPA= Subject key identifier: D8:67:C9:83:3D:DD:A3:27:06:AD:C7:0B:A9:B5:53:F1:1E:7E:22:43 Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 9A Signing time: Sat 05 Sep 2026 05:30:45 +0000 Manifest this update: Sat 05 Sep 2026 05:30:45 +0000 Manifest next update: Sat 12 Sep 2026 05:30:45 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: h1/wPQ57N+DhBExjLGKuHnXZqHu89cOEzGZOfpI94U0=) 2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: m4Jr3uuRCqNgf8md7I8vYpb7gOreEr0nf9WW3w8MQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Sep 5 05:30:45 2026 GMT Not After : Sep 12 05:30:45 2026 GMT Subject: CN=6a9ba905-051e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:ca:06:96:b1:69:aa:c4:9d:ef:f6:69:63: 3f:5f:9c:d7:01:7d:21:35:3e:23:3a:d4:f9:8c:1f: bb:5a:cb:27:08:66:db:1f:48:6c:52:fe:02:2b:dc: b1:3f:90:d8:91:66:8c:f0:86:42:4c:ec:83:93:30: f2:13:0e:ba:65:5b:9a:4a:c0:cd:10:b4:55:6e:33: dd:3e:e7:11:67:60:80:e5:84:a9:39:71:67:aa:7e: 1b:aa:b8:dc:38:b7:d0:aa:8a:fa:ac:40:aa:db:5f: 3c:5e:e8:d4:91:18:98:42:a0:ed:c6:eb:d8:6f:25: f3:fa:23:15:d5:13:b1:72:fe:d1:12:91:1a:d9:15: 6c:e9:6a:54:11:ec:f7:d4:e7:df:b7:da:fc:d6:42: 16:0d:39:e6:dd:aa:4a:c7:be:d0:62:ec:96:a6:b2: c7:8c:9a:88:64:de:c0:98:51:00:19:6f:cf:81:d0: cf:ca:de:4c:70:9b:52:ec:62:cc:04:81:da:c3:ca: f0:b2:de:e8:24:56:43:3a:b9:a6:cf:39:42:be:03: a9:be:f1:14:7e:31:29:97:e6:a4:45:5c:64:87:a8: 8e:b3:c2:ac:b0:25:b2:72:c5:8b:8f:94:1f:21:3c: 75:b3:2e:70:32:6e:ea:2c:54:c1:60:5c:9c:38:89: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:C9:83:3D:DD:A3:27:06:AD:C7:0B:A9:B5:53:F1:1E:7E:22:43 X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:25:e4:b9:95:61:2b:32:20:a4:e3:d8:7e:09:35:24:f0:a1: ad:71:bd:6d:7d:5e:e6:23:cf:c0:c2:d0:60:a9:21:7a:33:9f: 17:e6:bf:3c:79:3b:75:a4:98:c7:aa:0d:05:2d:25:5d:bf:47: 4e:16:24:dd:af:d3:a3:b6:c3:dd:a6:08:ee:10:04:17:e0:91: 6c:62:e2:07:d5:84:e3:64:79:d6:91:31:4e:51:e5:bb:49:33: ad:04:d4:e0:4e:9c:6f:2f:e3:e1:93:06:33:ad:ca:07:e8:a3: f3:14:14:5a:5d:43:06:60:ec:bf:0f:89:c7:a9:53:c4:7c:53: 1b:e3:14:be:f9:b1:c1:30:73:67:5a:3f:56:d9:d2:e7:9b:5a: 3d:12:68:01:dd:54:04:8f:75:99:73:eb:3c:55:f7:6b:7e:41: 2a:6c:f6:ef:57:a1:0f:2d:21:96:0e:d4:0f:e7:59:9c:dd:5f: 3c:51:f7:37:9e:f7:fd:7f:18:5a:94:68:98:40:13:42:57:1f: 7a:5c:67:76:cb:70:9c:24:59:6c:dc:25:7e:d1:2f:32:c7:6e: 2c:2c:14:fc:d3:7e:cc:c9:bf:8a:93:ba:4d:77:0b:d7:8f:12: ca:87:21:82:34:9d:25:22:de:f1:f4:38:fe:91:25:cd:f8:c0: d3:74:5e:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxQUMxMTAvBgNVBAUTKEVFQTkwMUI3RkIzM0ZCNTBDRjA0QzU5ODFGOEJFRjZD NERFQzM1RTIwHhcNMjYwOTA1MDUzMDQ1WhcNMjYwOTEyMDUzMDQ1WjAYMRYwFAYD VQQDEw02YTliYTkwNS0wNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuivKBpaxaarEne/2aWM/X5zXAX0hNT4jOtT5jB+7WssnCGbbH0hsUv4CK9yx P5DYkWaM8IZCTOyDkzDyEw66ZVuaSsDNELRVbjPdPucRZ2CA5YSpOXFnqn4bqrjc OLfQqor6rECq2188XujUkRiYQqDtxuvYbyXz+iMV1ROxcv7REpEa2RVs6WpUEez3 1Offt9r81kIWDTnm3apKx77QYuyWprLHjJqIZN7AmFEAGW/PgdDPyt5McJtS7GLM BIHaw8rwst7oJFZDOrmmzzlCvgOpvvEUfjEpl+akRVxkh6iOs8KssCWycsWLj5Qf ITx1sy5wMm7qLFTBYFycOIm+3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhnyYM9 3aMnBq3HC6m1U/EefiJDMB8GA1UdIwQYMBaAFO6pAbf7M/tQzwTFmB+L72xN7DXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDFBQy9BMzAyQUI0NkM2 OEMxMUYwQUQyMTQ2MzdDNEY5QUUwMi83cWtCdF9zei0xRFBCTVdZSDR2dmJFM3NO ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDFBQy9BMzAyQUI0NkM2OEMxMUYwQUQyMTQ2MzdDNEY5QUUwMi83cWtCdF9zei0x RFBCTVdZSDR2dmJFM3NOZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWyXkuZVhKzIgpOPYfgk1JPChrXG9bX1e5iPPwMLQYKkhejOfF+a/PHk7daSY x6oNBS0lXb9HThYk3a/To7bD3aYI7hAEF+CRbGLiB9WE42R51pExTlHlu0kzrQTU 4E6cby/j4ZMGM63KB+ij8xQUWl1DBmDsvw+Jx6lTxHxTG+MUvvmxwTBzZ1o/VtnS 55taPRJoAd1UBI91mXPrPFX3a35BKmz271ehDy0hlg7UD+dZnN1fPFH3N573/X8Y WpRomEATQlcfelxndstwnCRZbNwlftEvMsduLCwU/NN+zMm/ipO6TXcL148Syoch gjSdJSLe8fQ4/pElzfjA03ReDQ== -----END CERTIFICATE-----Generated at Sat Sep 5 17:43:12 2026 by rpki-client