$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft File: A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json) Hash identifier: x2dw/Qe6bRJHxLPbj/9c3p5a/9RSoAmIAzpyL5FTDQ4= Subject key identifier: C4:80:C1:4D:CD:43:E7:79:47:AC:23:F9:7F:CE:3B:15:5C:09:C3:7F Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2 Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft Manifest number: DA Signing time: Wed 07 Oct 2026 07:08:12 +0000 Manifest this update: Wed 07 Oct 2026 07:08:12 +0000 Manifest next update: Wed 14 Oct 2026 07:08:12 +0000 Files and hashes: 1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: M7PpFJAEtBV2qbBZWtzvZN6bMd4WPWQTXPUPcz5AYUc=) 2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: d5dQQKV6mBbhcnZfLSqq6nPzbtvHpYbUsS3qHsfGmHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2 Validity Not Before: Oct 7 07:08:12 2026 GMT Not After : Oct 14 07:08:12 2026 GMT Subject: CN=6ac5efdc-c4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:4b:b6:d6:80:da:5e:df:94:80:63:b7:d7: e8:74:ce:0a:49:c4:3f:a7:9c:09:66:26:b9:e0:b4: 9c:6c:41:68:7f:53:36:85:1f:7e:db:34:af:c9:0a: c7:66:85:6e:05:b7:21:14:66:ca:3e:27:24:e4:5b: 9c:a9:84:a2:63:c3:fb:e1:0b:78:39:16:1a:33:df: 60:21:a3:50:5d:fd:6c:64:5e:51:a5:56:85:62:2e: 8c:94:ce:98:e6:a9:a8:8a:9a:f9:ed:1a:f1:e4:39: 58:22:5f:bb:83:f1:91:62:69:cf:a6:a9:d6:aa:38: 50:ad:3b:9b:cd:45:a3:9e:1e:60:a6:66:25:6c:1b: 57:df:aa:09:1e:2d:9f:26:ab:b6:b1:32:19:c8:1d: d5:bc:7c:c9:72:c5:b7:97:17:3e:d1:3c:04:e0:45: 59:9a:45:57:c0:47:a9:b0:a9:62:b8:34:0e:ae:d2: b4:e4:e3:85:a1:26:55:25:8f:39:03:e9:b4:3e:a2: 22:01:d2:d3:3b:af:a3:e1:c0:8f:fa:7b:9f:76:27: 09:61:63:f3:c8:b3:2d:b9:e7:e5:bd:cd:3d:9d:ab: ae:ef:2c:fd:a6:e5:a8:ac:0b:d0:26:01:99:a9:77: 19:a4:6f:91:29:6c:50:f3:f6:17:5e:4b:58:bf:71: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:C1:4D:CD:43:E7:79:47:AC:23:F9:7F:CE:3B:15:5C:09:C3:7F X509v3 Authority Key Identifier: keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ca:e2:ab:d9:7a:de:06:9d:86:b6:fb:cd:cb:22:a5:38:b8: 8a:10:9a:fd:53:47:d9:2b:f1:59:e4:b7:cd:ee:49:0c:63:75: 62:8a:12:5a:f1:88:2e:c8:f2:da:0a:65:9e:4e:10:c8:ed:c4: 82:08:2d:d2:f1:43:3a:fa:57:09:38:13:69:82:23:26:27:25: 1e:cc:cf:d9:a3:b5:e7:22:ca:6d:7d:71:0e:ad:53:1c:92:25: b8:b0:67:e6:45:6c:00:6c:e8:68:ee:cc:a5:b0:65:0f:e1:4d: 02:3f:1a:90:09:45:ca:16:af:7d:32:f6:74:0a:44:ca:65:1b: 01:13:c4:64:a4:d2:e3:37:77:65:68:1a:01:fb:f1:a9:3f:5c: 65:b8:55:03:1e:ac:b6:64:2c:6a:0f:f9:72:0c:7f:7d:da:de: f6:d0:5d:f0:74:a5:1c:09:a2:a4:dc:7c:f2:24:e2:98:92:7f: 1e:cf:60:55:8a:04:31:6f:f2:b1:eb:80:df:9b:4f:d4:2e:e5: db:6e:0b:61:65:63:fe:79:e0:d7:a9:ac:d2:5e:f0:47:f9:74: cf:86:c4:68:ca:b7:a2:5a:91:3d:cc:cf:12:b9:a8:49:ec:f8: 56:be:0d:79:d5:ea:7f:66:7c:28:50:d3:ba:f5:79:45:a1:0c: ba:03:73:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwMUUxMTAvBgNVBAUTKDAzRDg3NEZGMkY1RDMyMDhFN0VCNjI1QTc3MzdGQ0Q0 NENFRTJBQzIwHhcNMjYxMDA3MDcwODEyWhcNMjYxMDE0MDcwODEyWjAYMRYwFAYD VQQDEw02YWM1ZWZkYy1jNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnplLttaA2l7flIBjt9fodM4KScQ/p5wJZia54LScbEFof1M2hR9+2zSvyQrH ZoVuBbchFGbKPick5FucqYSiY8P74Qt4ORYaM99gIaNQXf1sZF5RpVaFYi6MlM6Y 5qmoipr57Rrx5DlYIl+7g/GRYmnPpqnWqjhQrTubzUWjnh5gpmYlbBtX36oJHi2f Jqu2sTIZyB3VvHzJcsW3lxc+0TwE4EVZmkVXwEepsKliuDQOrtK05OOFoSZVJY85 A+m0PqIiAdLTO6+j4cCP+nufdicJYWPzyLMtueflvc09nauu7yz9puWorAvQJgGZ qXcZpG+RKWxQ8/YXXktYv3HgCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSAwU3N Q+d5R6wj+X/OOxVcCcN/MB8GA1UdIwQYMBaAFAPYdP8vXTII5+tiWnc3/NRM7irC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9ERTJENjRFQTc4 REExMUYwQjBGQkUyMTZDNEY5QUUwMi9BOWgwX3k5ZE1nam42MkphZHpmODFFenVL c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0E5aDBfeTlkTWdqbjYySmFkemY4MUV6dUtzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTAxRS9ERTJENjRFQTc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9BOWgwX3k5ZE1n am42MkphZHpmODFFenVLc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicriq9l63gadhrb7zcsipTi4ihCa/VNH2SvxWeS3ze5JDGN1YooSWvGILsjy 2gplnk4QyO3Egggt0vFDOvpXCTgTaYIjJiclHszP2aO15yLKbX1xDq1THJIluLBn 5kVsAGzoaO7MpbBlD+FNAj8akAlFyhavfTL2dApEymUbARPEZKTS4zd3ZWgaAfvx qT9cZbhVAx6stmQsag/5cgx/fdre9tBd8HSlHAmipNx88iTimJJ/Hs9gVYoEMW/y seuA35tP1C7l224LYWVj/nng16ms0l7wR/l0z4bEaMq3olqRPczPErmoSez4Vr4N edXqf2Z8KFDTuvV5RaEMugNzRA== -----END CERTIFICATE-----Generated at Thu Oct 8 10:40:49 2026 by rpki-client