$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: GE/Gkom3VEv5xyVx9YHRtmyTpIRI+pjq8QoNyR75Tp4= Subject key identifier: 8C:8A:8C:44:9A:01:FF:12:77:26:9F:29:DD:2D:A2:85:55:26:85:22 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 057B Signing time: Thu 10 Sep 2026 23:12:33 +0000 Manifest this update: Thu 10 Sep 2026 23:12:32 +0000 Manifest next update: Thu 17 Sep 2026 23:12:32 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: Cu7zt7I72IP6PHwnpCyE7bFu9EwqdwcQvLUgfR7CREk=) 2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=) 3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Sep 10 23:12:32 2026 GMT Not After : Sep 17 23:12:32 2026 GMT Subject: CN=6aa33961-2e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b2:97:89:77:b9:2d:08:11:fe:30:6d:9f:2c: 70:44:b2:5c:f2:16:bd:16:a4:75:07:28:e4:a8:d6: 04:13:b1:25:9d:b1:e8:f8:fb:8d:3d:99:26:12:4a: b9:94:b5:c0:b1:03:4a:0d:0d:4b:52:45:c9:a1:43: 38:15:ca:02:f4:75:bc:93:38:da:4b:ba:cf:62:96: 1a:62:13:a0:c6:89:ab:da:82:3d:4a:4f:82:b1:e5: aa:c0:27:56:e8:b9:0b:39:70:21:6b:f3:77:aa:65: 50:b4:e1:93:16:b1:56:fc:5b:4a:b9:4d:3e:4d:e6: a1:a1:96:f9:18:ee:01:5b:92:93:8d:5d:86:2b:03: c8:de:9a:15:c0:99:6b:05:de:7b:05:86:4a:fa:81: 5c:fe:e5:57:ce:d5:7d:22:5b:c4:6c:01:ca:7c:38: 6a:bb:60:fd:af:45:32:e8:9b:8a:19:11:45:1b:e6: ad:22:a0:f0:cd:71:ed:11:18:7f:b4:1b:95:92:a2: b0:7c:3f:77:cc:90:4a:4f:76:2f:ec:71:1a:ab:4d: 18:cd:f5:be:b1:f7:91:93:fe:d7:80:98:4e:78:b3: 5b:de:95:bd:0b:70:70:cf:e0:b4:f9:a1:85:8c:7e: 93:22:44:ab:cc:db:7a:38:27:27:4d:5d:7e:fb:1d: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8A:8C:44:9A:01:FF:12:77:26:9F:29:DD:2D:A2:85:55:26:85:22 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1a:7d:a4:98:2f:16:53:b3:06:ac:b1:a4:2c:75:a6:0a:2a: a6:34:13:ea:08:31:6e:ab:3b:b4:b3:c7:fd:e8:87:f1:db:9b: 81:15:5e:2a:03:b1:6e:1c:e3:49:82:4f:28:fc:54:bc:fc:36: 45:eb:3c:9d:4e:41:dc:03:fe:92:10:15:5c:aa:4a:1a:f5:45: fb:90:a5:c7:d9:bd:91:b2:77:af:7e:fc:39:d6:e7:05:04:04: 05:4d:a2:19:90:84:32:a6:59:93:41:f6:d2:a7:4a:be:f1:75: c5:18:36:89:c7:94:e5:ce:92:99:37:fa:b5:9b:f4:08:84:7c: d2:bd:0e:35:7b:c2:9c:6e:9f:2a:a6:63:44:31:27:94:81:a8: d6:09:26:8f:8c:c4:50:8b:9d:2f:71:d7:c6:48:e4:59:05:bf: 1b:ac:c3:a0:11:1e:b2:38:67:7c:da:f1:b0:48:14:35:d4:01: b5:83:4c:6d:23:32:24:63:15:94:cc:f0:36:eb:ea:8f:03:85: 3a:d4:7e:cc:85:13:cb:a7:06:a5:29:79:87:4e:b5:d0:6f:80: 2f:b6:51:0a:d4:69:9f:a8:00:89:76:1d:f2:ab:cb:6b:cf:4a: dd:5c:28:b7:68:a1:0a:d3:aa:6f:64:df:71:1c:7b:f0:80:09: d2:d3:ba:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjYwOTEwMjMxMjMyWhcNMjYwOTE3MjMxMjMyWjAYMRYwFAYD VQQDEw02YWEzMzk2MS0yZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LKXiXe5LQgR/jBtnyxwRLJc8ha9FqR1ByjkqNYEE7ElnbHo+PuNPZkmEkq5 lLXAsQNKDQ1LUkXJoUM4FcoC9HW8kzjaS7rPYpYaYhOgxomr2oI9Sk+CseWqwCdW 6LkLOXAha/N3qmVQtOGTFrFW/FtKuU0+TeahoZb5GO4BW5KTjV2GKwPI3poVwJlr Bd57BYZK+oFc/uVXztV9IlvEbAHKfDhqu2D9r0Uy6JuKGRFFG+atIqDwzXHtERh/ tBuVkqKwfD93zJBKT3Yv7HEaq00YzfW+sfeRk/7XgJhOeLNb3pW9C3Bwz+C0+aGF jH6TIkSrzNt6OCcnTV1++x0A0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyKjESa Af8SdyafKd0tooVVJoUiMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAghp9pJgvFlOzBqyxpCx1pgoqpjQT6ggxbqs7tLPH/eiH8dubgRVeKgOxbhzj SYJPKPxUvPw2Res8nU5B3AP+khAVXKpKGvVF+5Clx9m9kbJ3r378OdbnBQQEBU2i GZCEMqZZk0H20qdKvvF1xRg2iceU5c6SmTf6tZv0CIR80r0ONXvCnG6fKqZjRDEn lIGo1gkmj4zEUIudL3HXxkjkWQW/G6zDoBEesjhnfNrxsEgUNdQBtYNMbSMyJGMV lMzwNuvqjwOFOtR+zIUTy6cGpSl5h0610G+AL7ZRCtRpn6gAiXYd8qvLa89K3Vwo t2ihCtOqb2TfcRx78IAJ0tO6DA== -----END CERTIFICATE-----Generated at Fri Sep 11 12:29:36 2026 by rpki-client