$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: VilpcIu986sNwHY5AiwrxVJbzenJgRwdouiwkuEbW9Q= Subject key identifier: BD:B8:84:3C:2D:D9:F7:52:92:D0:6F:0F:84:B6:4A:C0:F5:88:10:05 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 08E0 Signing time: Tue 08 Sep 2026 20:33:24 +0000 Manifest this update: Tue 08 Sep 2026 20:33:23 +0000 Manifest next update: Tue 15 Sep 2026 20:33:23 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: 9PUS652qklVaVtbjFt1jGc8/9TpCnTjg4NNzIbxNbiE=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 42y2IvwrLcP86ePHCf3Zl904O206V8onirE7M47u3Ug=) 3: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: Uv/v0jJRP1b/GKNvDesBCtfjzY1O3IX5XgFxcHY7TZA=) 4: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: CdE0wm1hQkaULrjbI4DvgCzOn/hrQ6Nkq8KmfPCKoy0=) 5: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: BpbgeH/Vr/553sYirLn87E6dC8av6GNKTUUgGPnSWFc=) 6: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: hhAQbiBusLUKt765Go4ceXpM5iS75GtSHTtWboHmI4A=) 7: 67FF0960076911EF8569F157C4F9AE02.roa (hash: kux5oSfatn2oOCm3na/+0puHZ/uNesRh8WO7dtAzHlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 20:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Sep 8 20:33:23 2026 GMT Not After : Sep 15 20:33:23 2026 GMT Subject: CN=6aa07114-a2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:1c:b5:9f:4f:01:5f:2a:1e:68:ad:b2:09: 33:59:a9:e5:6e:e0:04:8b:c2:04:d3:15:c7:ec:31: 59:55:d5:05:ed:7e:f6:81:85:a1:fd:56:91:26:4c: cd:df:09:12:28:08:9c:9a:0a:51:3d:46:d2:f2:86: 9a:11:b8:25:1e:d1:e9:f6:ad:d2:46:f9:df:e8:ff: a4:7f:b1:49:4a:fc:d9:ea:d7:22:81:ce:40:2e:66: e8:ed:51:87:35:cb:00:d1:05:82:36:8e:c9:af:7b: b4:bf:13:ea:2e:d3:d8:f7:7e:73:47:46:9c:a6:59: 1e:4b:34:b8:39:40:e8:c1:83:c2:8d:4e:2d:31:f0: fa:81:44:27:75:e1:4d:d5:02:bb:d4:06:98:6d:83: b7:70:59:f0:9e:ad:c7:85:c6:d5:f2:41:27:4d:76: d2:8d:5d:da:67:cf:a3:45:83:c6:e8:b6:79:28:3b: a7:38:0d:ad:8c:99:c6:51:bc:62:55:90:51:f0:f5: ef:1e:76:97:97:00:a7:c1:bc:12:04:ce:95:82:36: e2:b0:0e:02:06:6f:f4:ba:f7:d3:5a:f2:b6:36:42: 89:50:67:ea:94:31:99:0c:28:59:c5:1d:5f:cf:85: 34:d4:36:ad:ed:05:26:50:bb:78:2f:4c:4a:7a:17: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B8:84:3C:2D:D9:F7:52:92:D0:6F:0F:84:B6:4A:C0:F5:88:10:05 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:90:20:e1:a5:71:1c:80:1a:99:25:cb:2a:9e:50:2b:b9:79: dd:db:ba:6c:f2:d4:e8:b7:50:8d:28:92:14:09:06:b2:72:87: 35:83:25:5d:44:1d:8f:1d:6c:19:d6:88:ee:0d:71:c4:c4:a1: 60:92:49:4f:12:25:f1:7e:9c:fc:27:f4:36:4d:c6:be:90:ac: 82:d3:84:5f:4f:17:88:87:49:c6:45:1c:6c:f4:c9:11:02:4c: 76:d2:69:f2:ba:1c:70:cf:bb:49:e3:81:51:96:90:f4:47:ef: 25:7d:64:c8:c4:db:89:1b:2d:9d:23:af:9c:e7:17:a1:69:69: 17:a6:14:03:f0:f1:2a:da:ba:52:ee:8f:b1:1e:5a:5c:30:4f: 26:2f:8b:75:4d:26:b5:1a:78:25:c4:3f:dc:6e:a3:1c:46:f5: 2f:db:fc:41:ad:98:8e:5b:0d:d8:28:17:b8:b1:d4:e7:78:6a: b7:57:16:91:36:9c:63:2b:98:1e:f6:52:d3:53:d1:a2:12:8e: 02:fa:44:c9:6d:b0:c8:85:cf:36:ee:86:94:82:45:d6:73:80: 92:ca:c5:10:db:9e:6f:f4:f4:dc:b4:26:42:02:1b:13:75:1f: 9d:ea:a0:4f:50:75:32:11:92:eb:f8:8a:f9:f5:17:b9:21:c4: c0:ae:a8:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwOTA4MjAzMzIzWhcNMjYwOTE1MjAzMzIzWjAYMRYwFAYD VQQDEw02YWEwNzExNC1hMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmakctZ9PAV8qHmitsgkzWanlbuAEi8IE0xXH7DFZVdUF7X72gYWh/VaRJkzN 3wkSKAicmgpRPUbS8oaaEbglHtHp9q3SRvnf6P+kf7FJSvzZ6tcigc5ALmbo7VGH NcsA0QWCNo7Jr3u0vxPqLtPY935zR0acplkeSzS4OUDowYPCjU4tMfD6gUQndeFN 1QK71AaYbYO3cFnwnq3HhcbV8kEnTXbSjV3aZ8+jRYPG6LZ5KDunOA2tjJnGUbxi VZBR8PXvHnaXlwCnwbwSBM6VgjbisA4CBm/0uvfTWvK2NkKJUGfqlDGZDChZxR1f z4U01Dat7QUmULt4L0xKehcr8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL24hDwt 2fdSktBvD4S2SsD1iBAFMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpAg4aVxHIAamSXLKp5QK7l53du6bPLU6LdQjSiSFAkGsnKHNYMlXUQdjx1s GdaI7g1xxMShYJJJTxIl8X6c/Cf0Nk3GvpCsgtOEX08XiIdJxkUcbPTJEQJMdtJp 8roccM+7SeOBUZaQ9EfvJX1kyMTbiRstnSOvnOcXoWlpF6YUA/DxKtq6Uu6PsR5a XDBPJi+LdU0mtRp4JcQ/3G6jHEb1L9v8Qa2YjlsN2CgXuLHU53hqt1cWkTacYyuY HvZS01PRohKOAvpEyW2wyIXPNu6GlIJF1nOAksrFENueb/T03LQmQgIbE3Ufneqg T1B1MhGS6/iK+fUXuSHEwK6oSQ== -----END CERTIFICATE-----Generated at Thu Sep 10 21:20:12 2026 by rpki-client