$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: QaPnUxVKqRgcpqm1ZEcd2rHbQJqfImWChPyko0vT9oc= Subject key identifier: ED:E8:D4:D5:95:FF:FD:98:6F:1C:3B:68:06:99:EE:DD:5E:EC:82:1A Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 201F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 2014 Signing time: Fri 02 Oct 2026 16:04:04 +0000 Manifest this update: Fri 02 Oct 2026 16:04:03 +0000 Manifest next update: Fri 09 Oct 2026 16:04:03 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: RfG1ikKHBie0/LiBPG7qMfCxXY+5Sd8inQsptFh0Jrc=) 2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: fWbU5wUcRVqBD2W/21N8EXJc5ZUPBV1B+c7N8ZjZtoI=) 3: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: qcG0+weF7/DZys8DSh56CWznRhHyYKo0E8ugjAi6OXs=) 4: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: Hj4Ur9kRjHIcFsq73QnGpa+VM4j4t9Sz6VEkRhW5xU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8223 (0x201f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Oct 2 16:04:03 2026 GMT Not After : Oct 9 16:04:03 2026 GMT Subject: CN=6abfd5f4-45ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:e4:a2:46:be:a5:fd:4a:5a:12:c1:8c:9d: 5f:ed:69:e6:19:17:22:1d:83:e1:c2:b6:65:20:d8: 44:7c:2e:6b:32:6b:85:8a:0b:ec:b4:1a:41:b2:40: 38:ca:d6:20:10:2a:b0:1b:1c:7a:57:d9:7b:71:d1: bb:35:b2:84:2b:1a:69:a5:6c:fb:04:a9:b2:44:ea: 86:8f:58:78:bb:fd:1f:65:92:61:8c:0f:1c:cf:2d: 12:46:1b:25:1f:77:fa:d7:a9:35:03:8e:a0:c5:82: 2d:35:27:bd:5b:d5:27:58:62:1a:e0:b4:b7:f1:4c: fd:b5:af:14:ec:b4:41:3d:6f:57:94:f5:66:03:d3: 23:45:bb:d0:bc:a2:38:42:da:d8:68:37:4a:75:b9: 70:0a:49:45:1d:d3:ea:4b:e1:85:4b:32:33:05:a6: 09:7f:f8:11:ba:b8:b8:a9:e8:2e:a2:14:8a:16:eb: e2:57:9c:c6:b4:86:ae:21:08:be:3c:08:b7:03:22: 87:52:c6:61:51:32:25:c2:6c:b0:b8:10:c6:87:84: dd:b7:c9:c6:1a:72:40:27:35:d5:f8:5d:98:dd:a1: be:5f:93:27:fe:f3:e9:db:09:61:51:2c:0d:3d:b7: fd:a1:f2:02:4a:bc:45:b7:f8:d3:5c:bc:f1:d3:55: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E8:D4:D5:95:FF:FD:98:6F:1C:3B:68:06:99:EE:DD:5E:EC:82:1A X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f6:21:1e:41:0c:8f:b1:ff:e3:c7:73:d7:7f:5a:10:da:f0: 82:43:3b:94:37:6b:db:e8:e3:e7:60:22:25:dc:32:5b:00:34: d1:59:cd:e8:a2:ed:f4:18:c8:f4:c2:6c:ce:be:3b:4c:ed:7e: 20:83:af:4c:b8:d8:ec:61:0a:73:08:d4:c8:00:53:9c:ea:53: 7e:f0:56:70:08:2f:ee:61:63:c5:3f:bd:30:32:24:f7:40:e5: 74:77:53:82:f0:8e:15:08:9c:72:27:fc:ee:2f:9a:44:f4:62: 54:98:29:07:3b:17:36:50:ef:fb:7d:aa:9a:8e:4f:88:a8:e9: ac:d9:79:f3:e9:9a:bf:ac:e7:4c:bd:78:b5:80:c4:5c:6b:16: f4:61:40:8f:1f:5a:fe:a4:f2:c2:2c:69:4d:78:cf:0d:a6:8d: 7c:a8:17:84:2d:fe:fd:14:06:ea:f7:a0:8d:cf:22:48:a7:30: 57:6d:5a:9e:7d:48:0d:fe:56:bd:2a:04:ab:63:73:d3:32:28: 26:37:a0:9b:5b:58:a6:0a:f1:b5:47:b6:77:ce:92:bb:fa:1e: 97:27:9e:c7:57:21:94:22:07:09:65:5b:7d:e5:74:f4:58:2f: b9:8d:4e:e8:6a:d9:62:16:10:bb:69:e6:f0:5f:70:73:3e:bc: 2c:03:a3:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYxMDAyMTYwNDAzWhcNMjYxMDA5MTYwNDAzWjAYMRYwFAYD VQQDEw02YWJmZDVmNC00NWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxTkoka+pf1KWhLBjJ1f7WnmGRciHYPhwrZlINhEfC5rMmuFigvstBpBskA4 ytYgECqwGxx6V9l7cdG7NbKEKxpppWz7BKmyROqGj1h4u/0fZZJhjA8czy0SRhsl H3f616k1A46gxYItNSe9W9UnWGIa4LS38Uz9ta8U7LRBPW9XlPVmA9MjRbvQvKI4 QtrYaDdKdblwCklFHdPqS+GFSzIzBaYJf/gRuri4qeguohSKFuviV5zGtIauIQi+ PAi3AyKHUsZhUTIlwmywuBDGh4Tdt8nGGnJAJzXV+F2Y3aG+X5Mn/vPp2wlhUSwN Pbf9ofICSrxFt/jTXLzx01W/+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3o1NWV //2Ybxw7aAaZ7t1e7IIaMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb/YhHkEMj7H/48dz139aENrwgkM7lDdr2+jj52AiJdwyWwA00VnN6KLt9BjI 9MJszr47TO1+IIOvTLjY7GEKcwjUyABTnOpTfvBWcAgv7mFjxT+9MDIk90DldHdT gvCOFQiccif87i+aRPRiVJgpBzsXNlDv+32qmo5PiKjprNl58+mav6znTL14tYDE XGsW9GFAjx9a/qTywixpTXjPDaaNfKgXhC3+/RQG6vegjc8iSKcwV21ann1IDf5W vSoEq2Nz0zIoJjegm1tYpgrxtUe2d86Su/oelyeex1chlCIHCWVbfeV09FgvuY1O 6GrZYhYQu2nm8F9wcz68LAOj4g== -----END CERTIFICATE-----Generated at Sun Oct 4 17:39:52 2026 by rpki-client