$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft File: raiu0ysVuH5hElLSnR4dW95YFkY.mft (raw, json) Hash identifier: ADMEklMQn7u5fKSBoLCXBqQOTJHib8gIpW4xogi6Kw0= Subject key identifier: 93:90:29:D1:6C:22:E8:DB:A4:0C:9C:03:84:18:7B:FB:31:36:68:6B Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Certificate serial: 368C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft Manifest number: 35F5 Signing time: Tue 22 Sep 2026 14:16:27 +0000 Manifest this update: Tue 22 Sep 2026 14:16:26 +0000 Manifest next update: Tue 29 Sep 2026 14:16:26 +0000 Files and hashes: 1: raiu0ysVuH5hElLSnR4dW95YFkY.crl (hash: h8FmfHm6ImfexV29J81lpqzWHKDhx2xjfRafIw2fgUA=) 2: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (hash: US7l9IRW6KnysaR3hgfIHQKP61jxpaRsUq+BQajlvlE=) 3: DB3F9CA4817B11F0BDC51985C4F9AE02.roa (hash: Zl7CL1hILK98z1K1OQnmQBFBX3AF5k+q1EWP8nnTBiE=) 4: zJRz-1c5houizgFGumguKRn1Clg.asa (hash: 0pjUIAe0fXtb3i3avT3dUDDXCRYt+tr2uS+SBzKFiVE=) 5: 7C836BA46C8E11EEA38B9554C4F9AE02.roa (hash: 13OCzHbeP84SVts3fLFM8ezvX9wYG+xk9oztS8IQ/oo=) 6: woCjYFsvUmdhypHZ5nFLfWxYzak.asa (hash: maY7sNrNwk9jrLA6Yj9C3sO+z56TyqAAlLtSFQjzBnc=) 7: 662A2F2286B411E6BAEB2614C4F9AE02.roa (hash: y6ZiKIpbO8nVe1RhgWjLdE8kQETpbK+AjZQf/Ewa3Fk=) 8: CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa (hash: OFgzbOFR7cWIcyO0nD8LJZP/oxj+UNNBCwjlq9DcI3Y=) 9: C9B8A270483411ECA6C7C085C4F9AE02.roa (hash: 0TLVORl6wSPXD4zN0o2eNo/c7mH0Sa6LVUUSVrU3gGs=) 10: E2446DD228AA11E79582F36BC4F9AE02.roa (hash: oS/2Yr0f0AX3IY6Qw0kprzC/haS0V2Vl/e9gsEC9t0o=) 11: VVhuMwTL81PFRVMa9-1fXA7HwHM.asa (hash: mBpazvK1JO7XQxRtLpgMvlrnxREAE0vs3vWkxv3+B6E=) 12: uC-toPD9VWu8EjtdZpJZizsqe5g.asa (hash: 2XTg91PvdmzFZO5xkwVBLaVB3XyJdwjrFAY8bIAUWGo=) 13: 330CB090A69A11F1B62FFE123411F970.roa (hash: MdN5x9COPAkOWErVD4b+gG1Gk95Xd26pJgYkE2yZ/Uo=) 14: aN2iDVOHmPp2ny-zekFfqNg-XH0.asa (hash: KKcDTJ5obXcUbT0l1jSZ7QFTW7ljWQN+P+SZY0FCmp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13964 (0x368c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Validity Not Before: Sep 22 14:16:26 2026 GMT Not After : Sep 29 14:16:26 2026 GMT Subject: CN=6ab28dbb-1d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:82:64:7d:0c:d4:34:39:d9:f4:c8:96:21: 39:4e:9c:b3:aa:51:62:44:f1:b8:14:09:67:b0:b5: e3:c1:c3:61:92:f7:50:62:f2:6b:cf:1b:07:a6:59: 79:80:f6:94:92:8c:49:a0:15:91:61:4d:9f:15:78: 5c:40:29:4e:c8:1b:b3:e2:c7:f7:cc:65:56:43:7e: a8:09:dd:f8:4c:99:3f:18:6b:2e:2e:0a:34:20:de: ba:56:94:ac:14:08:ea:3f:ce:24:a5:45:b5:69:a5: 82:7e:86:99:66:d2:05:8c:87:0e:ba:87:c0:68:60: 06:e1:b5:1e:71:26:48:fc:85:a3:83:79:aa:15:49: c6:f1:ac:03:e7:d3:c6:eb:2d:63:aa:b0:dc:2f:0d: 3a:b8:63:5b:fb:09:72:45:a0:d2:68:0d:5e:9e:3b: b2:29:cc:ca:2a:3a:c4:2c:59:b4:82:2a:80:77:ab: 06:dd:62:70:1d:b3:46:92:70:25:16:57:e4:8e:c1: c6:61:b7:ea:85:d8:84:bb:1d:78:2c:38:dc:82:c8: 44:59:57:db:79:a4:38:8c:d0:2a:0d:d0:2e:63:6a: 96:89:be:6f:43:72:1e:77:8d:7e:df:0c:70:30:0d: 8c:28:a4:21:61:82:ec:b2:2d:d0:f5:17:fd:b2:14: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:29:D1:6C:22:E8:DB:A4:0C:9C:03:84:18:7B:FB:31:36:68:6B X509v3 Authority Key Identifier: keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a7:b1:6b:dc:bd:d1:17:f7:01:33:33:b5:6e:00:f3:aa:c1: 74:92:72:dc:1e:1e:e2:ec:2b:9b:28:51:4d:38:5d:88:ee:6b: 19:65:e8:bd:08:55:77:70:8c:10:e0:76:3a:3d:0f:e7:d5:65: 34:a1:ef:83:b9:c5:a1:37:d3:41:1d:2c:9d:6b:95:db:0e:b6: 39:d8:e8:2e:1c:41:41:8f:16:f6:e7:55:60:d6:66:9a:b8:99: 1e:bc:b1:fe:11:da:b7:88:47:2a:d3:1f:c6:d9:85:22:1d:2c: 04:b8:a1:2d:f0:22:45:80:e2:58:e0:a4:4a:51:75:ec:a8:74: 4e:3e:9b:a5:22:1f:9e:02:94:fc:bc:d2:ff:e3:38:62:2d:5f: e8:8b:16:63:a3:03:84:57:9e:b3:99:82:5a:91:0e:a8:cd:2d: d4:43:e5:ca:52:a9:f6:3c:63:6c:1c:41:9e:fc:8c:5c:3f:75: 76:44:de:ed:78:b6:14:68:a1:53:c7:30:5a:e8:34:93:63:40: bf:2e:a9:b0:a6:27:9e:18:e5:19:11:c3:15:94:ea:a2:18:07: ee:6d:06:d9:a8:6b:02:83:05:8e:69:d2:98:91:20:a0:f4:2b: 0b:4d:50:8b:7d:76:f7:11:6f:a7:97:25:6c:c5:d7:da:8f:57: 4c:cc:1b:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC REU1ODE2NDYwHhcNMjYwOTIyMTQxNjI2WhcNMjYwOTI5MTQxNjI2WjAYMRYwFAYD VQQDEw02YWIyOGRiYi0xZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM6CZH0M1DQ52fTIliE5TpyzqlFiRPG4FAlnsLXjwcNhkvdQYvJrzxsHpll5 gPaUkoxJoBWRYU2fFXhcQClOyBuz4sf3zGVWQ36oCd34TJk/GGsuLgo0IN66VpSs FAjqP84kpUW1aaWCfoaZZtIFjIcOuofAaGAG4bUecSZI/IWjg3mqFUnG8awD59PG 6y1jqrDcLw06uGNb+wlyRaDSaA1enjuyKczKKjrELFm0giqAd6sG3WJwHbNGknAl FlfkjsHGYbfqhdiEux14LDjcgshEWVfbeaQ4jNAqDdAuY2qWib5vQ3Ied41+3wxw MA2MKKQhYYLssi3Q9Rf9shQjswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOQKdFs IujbpAycA4QYe/sxNmhrMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVCRS9ENDAxNjE5QTFENjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVI NWhFbExTblI0ZFc5NVlGa1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeKexa9y90Rf3ATMztW4A86rBdJJy3B4e4uwrmyhRTThdiO5rGWXovQhVd3CM EOB2Oj0P59VlNKHvg7nFoTfTQR0snWuV2w62OdjoLhxBQY8W9udVYNZmmriZHryx /hHat4hHKtMfxtmFIh0sBLihLfAiRYDiWOCkSlF17Kh0Tj6bpSIfngKU/LzS/+M4 Yi1f6IsWY6MDhFees5mCWpEOqM0t1EPlylKp9jxjbBxBnvyMXD91dkTe7Xi2FGih U8cwWug0k2NAvy6psKYnnhjlGRHDFZTqohgH7m0G2ahrAoMFjmnSmJEgoPQrC01Q i3129xFvp5clbMXX2o9XTMwblA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:39:48 2026 by rpki-client