$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: mYr8yrI1A5hbqQneV8t4CjjqyBDSKnea4tYt1xF4Z14= Subject key identifier: AB:F7:B6:C3:CC:97:26:68:55:DA:86:71:44:EF:8D:FB:A8:B6:98:F2 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 027C Signing time: Sat 05 Sep 2026 01:58:42 +0000 Manifest this update: Sat 05 Sep 2026 01:58:41 +0000 Manifest next update: Sat 12 Sep 2026 01:58:41 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: IYaI7crp3zXW3tgpCIAZuKEKyZEXO87fmD/PARp9X5w=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: oXr+vmkmATSoU0utBEAVuOzrUcdZ9gNuCzhDxhz21iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Sep 5 01:58:41 2026 GMT Not After : Sep 12 01:58:41 2026 GMT Subject: CN=6a9b7751-b9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:76:44:97:43:43:55:9f:5f:ae:69:6e:73: 64:94:c0:66:5b:62:5f:5b:16:a4:86:b6:0e:25:3d: cf:7a:97:8e:c8:77:09:86:88:ce:51:84:fa:c6:89: 56:4a:be:5f:a8:f0:5d:62:9b:9d:4a:2c:88:ca:7c: 27:23:55:bd:a2:60:e1:3e:f1:f7:f6:76:29:f9:95: 33:17:2d:d8:d0:92:c6:be:89:03:95:6d:1c:f0:39: 86:7c:78:fb:c9:02:e6:a2:6c:c8:f0:64:5b:a6:98: 6a:be:d4:ee:c4:df:62:2e:30:52:50:e5:1e:8a:b7: 19:ca:8d:19:fd:f5:24:02:4b:0e:16:a3:7a:8b:4e: b2:a7:0c:5a:85:a1:55:64:c5:61:64:cb:70:db:3a: 54:f4:c3:ed:c6:41:22:53:29:a9:e0:57:c9:a0:b2: 49:c4:75:12:0d:14:ef:da:b8:07:4c:1f:43:c3:79: 6c:1f:71:8d:ea:dc:0b:a1:c3:ec:6f:c7:03:fe:10: 42:2f:f4:e8:36:6c:ab:c2:6a:a2:22:4e:4e:14:36: 50:d5:ad:55:9e:ba:1e:3e:1e:05:60:a5:e7:13:35: 28:f9:f9:60:0e:7f:98:7a:55:de:8e:56:b9:25:e7: 4a:09:bf:d3:93:7f:ad:7c:03:15:98:7d:cf:bf:00: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:B6:C3:CC:97:26:68:55:DA:86:71:44:EF:8D:FB:A8:B6:98:F2 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3c:e3:7a:a4:e7:a9:30:78:9f:ba:6f:4b:22:09:ef:16:94: 10:82:6f:72:e8:9d:02:6f:43:9e:7e:03:36:57:8a:d9:6e:f4: 1e:b3:91:22:ea:88:bc:1f:43:9d:61:90:b6:29:dc:23:83:a4: bd:ee:99:e5:fc:a2:83:aa:83:4a:bb:4c:88:96:1b:00:2c:47: fa:ef:64:4c:14:4c:79:52:41:a3:3e:c6:60:a0:3c:ed:fd:4a: d4:9b:12:d4:e2:72:b5:38:af:72:98:83:f6:6c:38:17:e3:52: 00:02:0d:1c:14:a4:a1:8c:a4:03:cf:32:8e:a3:6c:49:76:aa: 42:be:44:b0:0d:69:83:b8:4f:1c:9c:1b:9d:a2:a9:f8:61:61: 17:f2:f1:75:a9:4d:d7:ce:05:bd:75:d3:b2:ae:a7:ee:7a:8f: 9a:73:d5:e2:a0:72:54:9b:46:1a:64:2a:99:b4:b0:18:65:08: 68:b2:56:a2:1e:22:b2:27:f2:8f:af:8f:4b:05:b1:f0:c9:a3: 6a:0e:61:21:f3:0d:9f:e3:9d:49:e3:4a:ea:9b:30:ac:9b:1d: fd:ba:a7:9f:25:50:7e:21:d1:1a:b9:cb:a8:3a:1d:28:29:b8: 2a:b1:f8:85:f9:4f:f8:c2:d2:85:a8:79:43:32:3d:37:28:84: 62:a3:2f:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjYwOTA1MDE1ODQxWhcNMjYwOTEyMDE1ODQxWjAYMRYwFAYD VQQDEw02YTliNzc1MS1iOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKF2RJdDQ1WfX65pbnNklMBmW2JfWxakhrYOJT3PepeOyHcJhojOUYT6xolW Sr5fqPBdYpudSiyIynwnI1W9omDhPvH39nYp+ZUzFy3Y0JLGvokDlW0c8DmGfHj7 yQLmomzI8GRbpphqvtTuxN9iLjBSUOUeircZyo0Z/fUkAksOFqN6i06ypwxahaFV ZMVhZMtw2zpU9MPtxkEiUymp4FfJoLJJxHUSDRTv2rgHTB9Dw3lsH3GN6twLocPs b8cD/hBCL/ToNmyrwmqiIk5OFDZQ1a1VnroePh4FYKXnEzUo+flgDn+YelXejla5 JedKCb/Tk3+tfAMVmH3PvwAnPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv3tsPM lyZoVdqGcUTvjfuotpjyMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXjzjeqTnqTB4n7pvSyIJ7xaUEIJvcuidAm9Dnn4DNleK2W70HrORIuqIvB9D nWGQtincI4Okve6Z5fyig6qDSrtMiJYbACxH+u9kTBRMeVJBoz7GYKA87f1K1JsS 1OJytTivcpiD9mw4F+NSAAINHBSkoYykA88yjqNsSXaqQr5EsA1pg7hPHJwbnaKp +GFhF/LxdalN184FvXXTsq6n7nqPmnPV4qByVJtGGmQqmbSwGGUIaLJWoh4isify j6+PSwWx8Mmjag5hIfMNn+OdSeNK6pswrJsd/bqnnyVQfiHRGrnLqDodKCm4KrH4 hflP+MLShah5QzI9NyiEYqMvaA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:19:46 2026 by rpki-client