$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: DaIyjQhzXCqi/kqIiT5cRY+5WYXrdb4iMq75t3BJHYo= Subject key identifier: A6:8C:AB:08:6B:11:2D:E7:F5:65:C3:5F:1A:59:BB:88:34:ED:55:27 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 01D7 Signing time: Mon 05 Oct 2026 03:59:05 +0000 Manifest this update: Mon 05 Oct 2026 03:59:04 +0000 Manifest next update: Mon 12 Oct 2026 03:59:04 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: UAp+JpcCz+QnohjmRiEFAW/ynbvHB7fg1cc2tXKt/6U=) 2: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=) 3: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=) 4: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Oct 5 03:59:04 2026 GMT Not After : Oct 12 03:59:04 2026 GMT Subject: CN=6ac32088-fd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:f8:e3:f6:e9:b7:9d:95:ce:f8:dd:50:51: 0b:db:8e:63:02:31:bd:0f:dc:60:90:3d:b3:e3:f8: a8:2b:a7:5b:f4:5b:a0:6a:64:c5:24:dd:87:83:84: 2a:b3:74:9f:d0:53:57:b4:e8:0f:b7:33:e6:2e:87: 30:07:bc:03:65:db:a4:88:7f:1e:f9:a3:15:c6:48: d2:0f:56:b4:c1:fc:83:86:00:3b:d1:d5:d8:7e:d0: 57:c2:92:b2:dc:cc:1f:f5:c0:ee:32:0a:aa:47:08: fa:b3:29:24:e4:c3:57:b8:0a:a6:7e:f5:7e:fb:32: 79:e3:76:69:9f:df:f1:0d:6b:6b:78:78:20:a6:39: d9:52:62:a0:7f:72:4b:da:05:9c:be:1d:25:7c:67: c2:b9:32:f5:7d:10:9d:00:c4:14:d2:ab:9b:99:92: 84:d5:a6:18:3c:ff:4a:df:66:16:1e:42:be:18:c9: 6b:95:64:58:79:9f:ea:07:4e:16:0a:2a:47:40:9a: 25:e2:4b:19:dc:09:c8:09:78:79:d3:98:aa:8b:1a: 87:47:a6:33:ad:a3:ac:bc:2b:08:77:62:57:98:d1: 0c:b5:52:07:e7:3a:c7:dc:cf:60:c7:8c:c2:e5:15: 79:b8:dd:3e:5a:53:f0:c9:73:0f:41:e7:f8:42:54: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8C:AB:08:6B:11:2D:E7:F5:65:C3:5F:1A:59:BB:88:34:ED:55:27 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:00:61:c0:e6:da:fe:25:a6:fb:aa:f4:e0:1f:1b:95:8e:61: 08:60:fe:c8:d9:4d:b7:b4:dd:c4:90:b5:c8:22:4b:78:07:a6: 31:82:dc:dd:be:22:bd:c5:fc:06:21:eb:f1:00:6b:fd:76:52: 85:3f:fc:3a:e1:f6:53:ac:6c:88:5f:b6:bf:c9:e8:38:fd:bc: ec:eb:8d:e2:09:8b:c1:4f:2a:ea:ac:49:20:92:1e:bf:ba:f1: ac:69:1f:b7:86:ef:9e:ef:2f:b3:16:da:ef:17:52:dc:76:da: fc:ba:80:80:52:01:9a:3c:0a:fc:b8:1e:e5:a9:20:87:b0:ea: e5:85:2e:2b:73:68:03:1c:af:ba:ca:b9:a9:58:54:b3:6a:0e: 05:1b:a0:bd:7f:a1:0f:6b:31:32:82:51:7e:9d:cb:72:b0:1d: 6c:85:51:7e:a7:9c:8e:e5:97:9c:9e:8e:06:fb:90:3c:d6:56: 52:ca:c1:37:af:9b:1c:93:0d:a9:5f:ab:10:72:3b:a4:80:66: 86:8b:37:17:67:cb:4f:a5:30:b1:dd:4f:1a:f8:cd:c9:fe:83: bd:4b:74:e7:fc:97:3e:e2:75:17:5f:a3:84:b4:d8:d1:f8:59: 31:42:20:37:1f:07:99:b3:57:8d:f4:3d:27:c7:19:7d:10:0c: f4:dd:55:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjYxMDA1MDM1OTA0WhcNMjYxMDEyMDM1OTA0WjAYMRYwFAYD VQQDEw02YWMzMjA4OC1mZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh1X44/bpt52VzvjdUFEL245jAjG9D9xgkD2z4/ioK6db9FugamTFJN2Hg4Qq s3Sf0FNXtOgPtzPmLocwB7wDZdukiH8e+aMVxkjSD1a0wfyDhgA70dXYftBXwpKy 3Mwf9cDuMgqqRwj6sykk5MNXuAqmfvV++zJ543Zpn9/xDWtreHggpjnZUmKgf3JL 2gWcvh0lfGfCuTL1fRCdAMQU0qubmZKE1aYYPP9K32YWHkK+GMlrlWRYeZ/qB04W CipHQJol4ksZ3AnICXh505iqixqHR6YzraOsvCsId2JXmNEMtVIH5zrH3M9gx4zC 5RV5uN0+WlPwyXMPQef4QlRo0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaMqwhr ES3n9WXDXxpZu4g07VUnMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnwBhwOba/iWm+6r04B8blY5hCGD+yNlNt7TdxJC1yCJLeAemMYLc3b4ivcX8 BiHr8QBr/XZShT/8OuH2U6xsiF+2v8noOP287OuN4gmLwU8q6qxJIJIev7rxrGkf t4bvnu8vsxba7xdS3Hba/LqAgFIBmjwK/Lge5akgh7Dq5YUuK3NoAxyvusq5qVhU s2oOBRugvX+hD2sxMoJRfp3LcrAdbIVRfqecjuWXnJ6OBvuQPNZWUsrBN6+bHJMN qV+rEHI7pIBmhos3F2fLT6Uwsd1PGvjNyf6DvUt05/yXPuJ1F1+jhLTY0fhZMUIg Nx8HmbNXjfQ9J8cZfRAM9N1VkQ== -----END CERTIFICATE-----Generated at Tue Oct 6 03:52:50 2026 by rpki-client