$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: TgmDFnctQEgyE0YeFmUUVMVpsw5b4y0ryJKTVvldJDA= Subject key identifier: 78:12:21:D9:1E:1C:7A:94:07:A0:FC:92:58:CA:2B:20:E2:D7:9F:32 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 02CB Signing time: Fri 11 Sep 2026 01:29:11 +0000 Manifest this update: Fri 11 Sep 2026 01:29:11 +0000 Manifest next update: Fri 18 Sep 2026 01:29:11 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: 7x9fRVwu6Ci/GRntVAJ1HjBf28mMSn9iq1CgO5G7pKk=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: 4jtKn5a6oeJ2ZvZ6jOhbyJ8NLFyq6vJ1Ql8J7L6gxEQ=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: XbLvpieZLxPD8FqUNOF2czHZzpbSV3R5GXAyN7YF/l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Sep 11 01:29:11 2026 GMT Not After : Sep 18 01:29:11 2026 GMT Subject: CN=6aa35967-94eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:75:00:1c:ad:0d:77:17:ec:be:43:d1:11: a0:66:3b:ca:4c:89:f1:48:a5:3b:c3:41:d5:b1:1d: 59:9c:f8:98:d2:53:45:e8:9e:34:a0:ab:f8:06:04: 07:4f:aa:e9:cf:1c:88:20:22:23:65:4c:80:04:2b: 07:40:09:dd:01:ff:0a:9f:04:5b:ec:9f:e8:31:4b: 63:01:70:a2:01:56:40:71:11:e7:5a:e4:e7:0a:53: ec:fa:58:88:21:79:ac:56:bd:e8:ca:31:b1:99:cc: 1d:9d:ed:13:fa:3d:ff:8e:ec:dc:35:67:4e:b7:4c: 51:00:74:b5:a9:78:68:2c:ed:bf:f4:9c:6d:e0:03: 09:dd:81:ee:24:7c:95:13:07:f4:5b:20:55:cd:3a: 78:9e:10:ca:ab:b1:1b:50:6b:25:f4:3b:f2:c7:fc: e8:24:2b:17:10:6b:de:93:32:05:c4:69:1d:36:7f: 74:2a:6e:b6:e0:5a:54:e4:2b:c8:cc:1e:93:4e:8a: 7f:3c:c5:7c:5f:22:4e:5a:20:81:ca:0a:05:0d:df: 95:98:4e:f5:7c:3a:49:91:9f:aa:70:4a:2e:57:69: 57:8c:e4:9e:31:b9:e4:70:c2:19:ab:d4:ad:d3:a7: de:9f:a2:32:4b:ad:d1:13:6c:6e:8c:dd:9f:33:0c: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:12:21:D9:1E:1C:7A:94:07:A0:FC:92:58:CA:2B:20:E2:D7:9F:32 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b7:93:e0:e9:88:50:4b:93:1a:0e:1a:76:62:cc:59:17:7f: 36:2f:57:57:de:20:5e:1a:3e:61:ce:45:25:6b:87:67:77:88: 26:48:91:4b:ee:a0:44:ad:5f:0c:2c:83:35:5e:12:7b:4d:08: 43:e6:8f:ad:59:79:45:0d:c2:e6:ed:03:66:7c:d8:87:ad:17: ce:0c:8f:e7:98:0a:2c:8f:79:de:48:51:eb:dc:af:4d:7a:01: d0:2a:fc:5f:85:03:a7:9d:ee:e1:8d:58:3d:de:bd:6d:92:2a: 6b:78:11:37:5a:39:4b:fe:ae:c9:2a:f9:24:1d:06:86:3e:ae: aa:8b:6e:b3:e1:c7:51:53:e1:a8:75:dc:32:d7:28:ee:0e:27: 9a:0e:04:6b:cd:3d:ca:11:b9:62:11:ca:74:72:55:9c:21:ef: c9:62:67:9c:2c:9f:7b:23:37:d3:f7:6f:81:8f:c1:34:e4:e2: 5f:af:d1:b7:d3:3a:08:19:27:74:57:4e:bd:2b:b9:69:1f:5a: 49:34:ba:a4:0e:ef:21:48:a2:8d:aa:06:81:8f:41:68:59:63: db:1c:b0:f3:35:46:e4:38:1d:1d:ef:7b:8f:85:ff:a3:d5:6d: ba:73:e0:3f:bd:f4:85:ef:33:44:f0:ef:29:b6:84:ce:1a:f9: 21:90:20:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwOTExMDEyOTExWhcNMjYwOTE4MDEyOTExWjAYMRYwFAYD VQQDEw02YWEzNTk2Ny05NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTd1ABytDXcX7L5D0RGgZjvKTInxSKU7w0HVsR1ZnPiY0lNF6J40oKv4BgQH T6rpzxyIICIjZUyABCsHQAndAf8KnwRb7J/oMUtjAXCiAVZAcRHnWuTnClPs+liI IXmsVr3oyjGxmcwdne0T+j3/juzcNWdOt0xRAHS1qXhoLO2/9Jxt4AMJ3YHuJHyV Ewf0WyBVzTp4nhDKq7EbUGsl9Dvyx/zoJCsXEGvekzIFxGkdNn90Km624FpU5CvI zB6TTop/PMV8XyJOWiCBygoFDd+VmE71fDpJkZ+qcEouV2lXjOSeMbnkcMIZq9St 06fen6IyS63RE2xujN2fMwyEZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgSIdke HHqUB6D8kljKKyDi158yMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHreT4OmIUEuTGg4admLMWRd/Ni9XV94gXho+Yc5FJWuHZ3eIJkiRS+6gRK1f DCyDNV4Se00IQ+aPrVl5RQ3C5u0DZnzYh60XzgyP55gKLI953khR69yvTXoB0Cr8 X4UDp53u4Y1YPd69bZIqa3gRN1o5S/6uySr5JB0Ghj6uqotus+HHUVPhqHXcMtco 7g4nmg4Ea809yhG5YhHKdHJVnCHvyWJnnCyfeyM30/dvgY/BNOTiX6/Rt9M6CBkn dFdOvSu5aR9aSTS6pA7vIUiijaoGgY9BaFlj2xyw8zVG5DgdHe97j4X/o9VtunPg P730he8zRPDvKbaEzhr5IZAgPQ== -----END CERTIFICATE-----Generated at Fri Sep 11 11:26:55 2026 by rpki-client