$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: t/89/eDa7j3yKHA/YNRFFMCeV8rcGJ8NZTTZiLPlDds= Subject key identifier: C1:69:37:AA:02:AE:74:5B:02:BD:EE:4A:B8:1E:2F:41:C6:35:8A:90 Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 0771 Signing time: Fri 18 Sep 2026 21:35:13 +0000 Manifest this update: Fri 18 Sep 2026 21:35:12 +0000 Manifest next update: Fri 25 Sep 2026 21:35:12 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: AavP9RLPYI2kzOSaU8aMWlkovXYzU2REHZN5/X8/Ggo=) 2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=) 3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=) 4: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: Sep 18 21:35:12 2026 GMT Not After : Sep 25 21:35:12 2026 GMT Subject: CN=6aadae90-a3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:a3:8d:ee:f0:8a:60:5e:d6:aa:8a:c6:a4: 18:0d:ba:a1:d8:ca:c1:d8:49:b4:94:8e:db:24:53: 9c:63:e2:bc:0f:b7:4b:05:56:98:f7:f4:e9:c8:09: 7b:b6:9b:f4:35:4f:28:38:77:d8:c6:0e:ed:a4:b1: 9c:e7:75:e9:7d:73:de:82:16:3b:45:6f:5c:f1:4e: 48:49:a4:cf:d0:ef:52:21:ce:b6:29:69:d9:a1:8d: 3c:a5:1c:b3:90:83:fa:e0:f8:9c:af:d1:3f:b9:71: aa:39:6b:21:f2:1b:51:37:1c:8b:46:6a:a2:3a:e9: 3e:16:c0:66:38:0e:2f:61:73:6a:0f:2d:27:f9:2a: 52:1b:d5:c7:38:a8:55:49:04:35:6a:1e:84:77:b2: 71:31:c0:9c:2e:0b:41:e4:57:da:c2:0c:23:30:73: 60:8a:f0:c6:cb:7d:66:52:f2:b1:1d:eb:74:a7:c6: 82:a7:95:77:12:72:da:f5:f5:15:83:da:61:60:bc: f7:71:2b:d4:48:99:4a:3d:23:a2:c9:7a:71:d3:0e: 61:00:44:56:a8:d6:f7:af:83:0a:76:e0:5a:4b:9d: 65:bf:21:7c:a7:0b:0c:d9:78:3a:a1:53:45:42:82: 4c:79:18:a5:45:93:f2:0e:eb:66:32:e8:99:90:62: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:69:37:AA:02:AE:74:5B:02:BD:EE:4A:B8:1E:2F:41:C6:35:8A:90 X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d0:55:12:e1:cb:08:f5:9f:49:62:6c:91:1d:c2:07:4f:1c: ad:8c:bc:b3:ac:ab:bf:b9:5e:ec:10:01:1a:70:fa:c4:d3:5a: 6d:63:b9:0f:70:7a:37:64:b2:94:eb:55:b5:df:e7:82:e2:c7: 92:a0:36:d1:b4:d0:f6:82:79:95:40:a4:0c:a4:ec:e4:0a:6c: 81:32:1d:c8:05:04:da:fb:c4:24:42:51:1b:f1:43:fa:cc:fe: f4:38:f2:1b:e0:12:b7:f4:e3:9d:f2:66:be:ec:e2:ae:de:c2: fa:2f:06:ec:34:29:e9:e6:da:bf:61:51:7e:8d:2e:83:b5:2b: cd:d9:bc:40:87:cd:a0:3d:56:95:53:67:a7:2e:1c:ae:cb:60: eb:44:ce:12:77:49:42:cc:0d:d2:78:b8:03:d7:b9:63:2e:1e: dc:36:54:a1:75:2e:13:d2:57:87:23:44:44:d7:cb:ed:8e:f2: de:94:5d:e1:4c:fc:0f:ec:ce:70:df:92:5a:36:c7:8c:3f:8d: d8:b7:45:cd:69:b4:7d:6e:4c:cb:fc:82:00:b9:06:13:a2:b3: 1e:f6:f2:a3:67:2b:08:ad:57:29:0e:f7:92:7d:8a:ab:18:b4: 84:60:09:9e:0f:ed:54:4f:6c:77:31:5b:c7:d8:6b:b4:d8:5b: 82:92:b7:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjYwOTE4MjEzNTEyWhcNMjYwOTI1MjEzNTEyWjAYMRYwFAYD VQQDEw02YWFkYWU5MC1hM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvqjje7wimBe1qqKxqQYDbqh2MrB2Em0lI7bJFOcY+K8D7dLBVaY9/TpyAl7 tpv0NU8oOHfYxg7tpLGc53XpfXPeghY7RW9c8U5ISaTP0O9SIc62KWnZoY08pRyz kIP64Picr9E/uXGqOWsh8htRNxyLRmqiOuk+FsBmOA4vYXNqDy0n+SpSG9XHOKhV SQQ1ah6Ed7JxMcCcLgtB5FfawgwjMHNgivDGy31mUvKxHet0p8aCp5V3EnLa9fUV g9phYLz3cSvUSJlKPSOiyXpx0w5hAERWqNb3r4MKduBaS51lvyF8pwsM2Xg6oVNF QoJMeRilRZPyDutmMuiZkGJgeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFpN6oC rnRbAr3uSrgeL0HGNYqQMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgtBVEuHLCPWfSWJskR3CB08crYy8s6yrv7le7BABGnD6xNNabWO5D3B6N2Sy lOtVtd/nguLHkqA20bTQ9oJ5lUCkDKTs5ApsgTIdyAUE2vvEJEJRG/FD+sz+9Djy G+ASt/TjnfJmvuzirt7C+i8G7DQp6ebav2FRfo0ug7Urzdm8QIfNoD1WlVNnpy4c rstg60TOEndJQswN0ni4A9e5Yy4e3DZUoXUuE9JXhyNERNfL7Y7y3pRd4Uz8D+zO cN+SWjbHjD+N2LdFzWm0fW5My/yCALkGE6KzHvbyo2crCK1XKQ73kn2Kqxi0hGAJ ng/tVE9sdzFbx9hrtNhbgpK38w== -----END CERTIFICATE-----Generated at Sat Sep 19 04:47:21 2026 by rpki-client