$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json) Hash identifier: hkaWsTkSHIPu/CdWjBI8HgyQBTt3MrNjxPMLRUheHpc= Subject key identifier: B7:44:A7:A3:F2:BE:CC:87:AF:D5:79:E7:1A:D6:8E:B1:0A:E8:55:26 Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft Manifest number: 7A Signing time: Wed 07 Oct 2026 08:23:11 +0000 Manifest this update: Wed 07 Oct 2026 08:23:11 +0000 Manifest next update: Wed 14 Oct 2026 08:23:11 +0000 Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: 86MXqXVUYAdOc5zCZwqdmqIIpcDYWDfcb9fUnROXveU=) 2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 08:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Validity Not Before: Oct 7 08:23:11 2026 GMT Not After : Oct 14 08:23:11 2026 GMT Subject: CN=6ac6016f-9869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:22:10:5f:a4:88:ca:22:17:68:44:ca:d8: 7e:bd:19:2a:04:37:08:4d:21:c1:f2:ae:92:f5:b0: 0b:41:d5:68:f1:c3:87:68:e1:42:2e:2c:5a:2e:17: 29:07:48:71:be:ab:48:e5:8a:30:55:1c:3d:7c:ef: 71:b6:c9:b0:80:4c:04:3f:dd:11:8d:e0:25:66:6d: ed:c0:c2:27:95:c1:f0:3d:9a:c7:6b:0f:1d:68:34: a7:04:be:e6:7f:5d:6a:be:46:c6:37:0b:7a:24:9b: 9c:f0:f8:d7:5b:93:fd:df:2a:97:5a:46:3f:fd:d5: 37:fb:ba:f6:b9:85:1c:a0:01:04:d1:cc:e9:e0:3f: 51:f2:81:e4:54:54:79:37:5c:0e:f9:fe:79:96:e6: 57:95:c2:40:5f:57:4b:0d:30:c4:70:d7:5f:12:3c: a2:c7:54:ad:05:5e:a9:0d:0d:be:09:82:88:42:fc: 7a:60:99:d8:f3:35:48:c1:8d:38:c7:ae:37:28:c5: c8:0a:0b:40:61:90:34:df:fd:14:d5:be:69:db:4b: 66:70:ca:37:60:81:7f:31:9c:6a:75:6d:50:6b:1e: d6:3f:80:fe:29:c6:77:5a:16:30:30:92:13:3b:f5: 1a:56:2b:80:c8:02:31:51:35:d8:02:79:61:19:d3: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:44:A7:A3:F2:BE:CC:87:AF:D5:79:E7:1A:D6:8E:B1:0A:E8:55:26 X509v3 Authority Key Identifier: keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c1:fa:1c:56:95:31:8c:ff:32:d6:75:7f:12:39:db:57:fa: 2f:ab:3a:e3:b9:51:dc:bd:d3:c7:98:2b:41:52:e0:27:ca:92: 89:27:da:0b:07:51:cc:a9:a5:0f:68:04:96:0f:a9:92:78:50: b8:40:d0:25:17:44:aa:8b:3f:33:27:f6:62:f4:73:3f:6d:3a: d2:08:2c:ec:1f:52:cd:20:34:e9:e8:65:3c:b3:49:f8:be:39: b8:f9:b2:9c:be:2b:4c:e0:de:ca:ee:cc:25:a1:55:c2:00:21: 85:66:7c:57:7b:80:63:36:e3:14:c2:ea:8f:b2:bc:88:78:81: 7e:9d:76:ca:e4:cf:70:5b:75:7a:07:79:d5:c7:2b:7c:0e:eb: 2c:8f:38:49:30:cc:60:ef:3b:01:0c:0b:7f:c3:24:29:d3:6d: fa:6b:ec:46:a8:d1:e7:1a:e7:4c:76:8c:c7:71:16:f6:9c:45: e9:50:c4:5c:3f:88:3f:57:67:ce:98:83:b6:47:9a:1a:bb:86: 72:2d:b8:4d:52:ac:28:2b:71:57:13:02:27:24:6a:ac:01:74: a3:09:e4:eb:30:ea:44:88:0c:11:68:10:c5:79:50:90:21:2f: 58:12:c7:ad:66:1a:9e:4e:dd:2b:22:28:88:f7:ef:9b:06:49: 0a:b1:5d:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE ODE5Q0FFNDAeFw0yNjEwMDcwODIzMTFaFw0yNjEwMTQwODIzMTFaMBgxFjAUBgNV BAMTDTZhYzYwMTZmLTk4NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQfSIQX6SIyiIXaETK2H69GSoENwhNIcHyrpL1sAtB1Wjxw4do4UIuLFouFykH SHG+q0jlijBVHD1873G2ybCATAQ/3RGN4CVmbe3AwieVwfA9msdrDx1oNKcEvuZ/ XWq+RsY3C3okm5zw+Ndbk/3fKpdaRj/91Tf7uva5hRygAQTRzOngP1HygeRUVHk3 XA75/nmW5leVwkBfV0sNMMRw118SPKLHVK0FXqkNDb4JgohC/HpgmdjzNUjBjTjH rjcoxcgKC0BhkDTf/RTVvmnbS2ZwyjdggX8xnGp1bVBrHtY/gP4pxndaFjAwkhM7 9RpWK4DIAjFRNdgCeWEZ00WdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUt0Sno/K+ zIev1XnnGtaOsQroVSYwHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4 NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXwfocVpUxjP8y1nV/EjnbV/ovqzrjuVHcvdPHmCtBUuAnypKJJ9oLB1HMqaUP aASWD6mSeFC4QNAlF0Sqiz8zJ/Zi9HM/bTrSCCzsH1LNIDTp6GU8s0n4vjm4+bKc vitM4N7K7swloVXCACGFZnxXe4BjNuMUwuqPsryIeIF+nXbK5M9wW3V6B3nVxyt8 DussjzhJMMxg7zsBDAt/wyQp0236a+xGqNHnGudMdozHcRb2nEXpUMRcP4g/V2fO mIO2R5oau4ZyLbhNUqwoK3FXEwInJGqsAXSjCeTrMOpEiAwRaBDFeVCQIS9YEset ZhqeTt0rIiiI9++bBkkKsV0z -----END CERTIFICATE-----Generated at Thu Oct 8 01:04:38 2026 by rpki-client