$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft File: b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft (raw, json) Hash identifier: VQtNOudGVnIhIVv/8rP66Vo4RwC3WZQQU3O7iZKUZ4Q= Subject key identifier: CA:17:59:C0:4C:B2:3E:39:40:41:01:E4:56:F4:62:4F:23:6C:C8:1C Authority key identifier: 6F:6A:B5:0E:8A:A4:2B:E8:F1:77:FD:EC:3A:87:0C:D6:10:7C:4F:37 Certificate issuer: /CN=A91E1FC4/serialNumber=6F6AB50E8AA42BE8F177FDEC3A870CD6107C4F37 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft Manifest number: 06 Signing time: Sun 27 Sep 2026 09:52:03 +0000 Manifest this update: Sun 27 Sep 2026 09:52:03 +0000 Manifest next update: Sun 04 Oct 2026 09:52:03 +0000 Files and hashes: 1: b2q1DoqkK-jxd_3sOocM1hB8Tzc.crl (hash: KYpBBpu10Mx0sJqMZ0RheCaQ8mneAcKDPG1YO/RV6Uc=) 2: C08F5282B62C11F193035DF56011F970.roa (hash: MGL8VfCm0hjEtcX0+xPYCLXG3QK86ejrAfr1f/uNSIo=) 3: 5-vd7NQqnv_ev978dogXob6KCrI.asa (hash: txaO/MHR6ARH0o6eUGzy6xXr7j11fJuA1imV7ff9QiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.crl rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1FC4, serialNumber=6F6AB50E8AA42BE8F177FDEC3A870CD6107C4F37 Validity Not Before: Sep 27 09:52:03 2026 GMT Not After : Oct 4 09:52:03 2026 GMT Subject: CN=6ab8e743-d8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:71:6c:fd:64:b9:77:6c:e3:13:61:d5:d3:6c: 5d:4a:f4:d2:b3:70:68:92:0f:19:d4:77:4d:3d:a3: 77:6e:43:99:fb:23:ca:5c:9a:47:7c:c0:0f:ad:bf: 29:b5:be:55:ba:b4:8d:12:7e:39:cd:92:b4:41:77: c9:e0:4a:88:f6:af:7f:8c:b8:e6:cb:f1:76:45:64: 01:31:80:93:8c:2b:1b:aa:b3:bc:b5:ad:dc:1e:f1: a8:30:45:65:90:f7:87:87:03:3a:90:10:ec:a4:be: f6:e3:1a:a2:0a:d7:1b:7f:be:8d:e6:ee:b7:18:89: cf:40:9b:05:6e:4a:7c:93:b3:be:a8:ff:6f:a9:4f: cf:22:43:85:4a:6f:b0:b8:72:e5:ce:ed:8e:5d:2d: 6d:25:6e:a7:dd:b6:93:ea:b6:65:d5:4e:9b:d6:a2: 39:88:cc:1b:a3:13:a4:3c:51:49:55:61:91:38:39: 96:61:a4:7b:a7:37:62:64:2a:80:1d:8c:ac:9c:80: f7:b1:49:51:7b:1a:51:47:e0:11:d3:8b:34:42:d3: 77:b4:e0:8b:ca:18:45:48:ae:8e:5c:fb:1f:ee:10: c9:e7:a4:b9:d3:6c:82:45:fe:58:33:86:e1:f8:5c: 9d:fe:bd:3f:d8:69:9f:7c:b9:a6:f4:c4:7f:36:58: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:17:59:C0:4C:B2:3E:39:40:41:01:E4:56:F4:62:4F:23:6C:C8:1C X509v3 Authority Key Identifier: keyid:6F:6A:B5:0E:8A:A4:2B:E8:F1:77:FD:EC:3A:87:0C:D6:10:7C:4F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2q1DoqkK-jxd_3sOocM1hB8Tzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1FC4/663320ACB62C11F1BEDE5C856011F970/b2q1DoqkK-jxd_3sOocM1hB8Tzc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f5:6d:ee:41:f3:af:f6:70:d5:a8:33:ba:27:db:14:0e:28: 97:30:12:90:34:8d:e1:8c:07:ad:c7:d3:12:08:3f:18:90:df: 11:b3:23:37:9b:a3:3c:21:9e:d3:b7:7f:ca:93:b8:52:b4:c0: bf:c7:fc:6d:e7:0b:8e:9f:bc:93:22:35:08:bc:d6:91:3e:d9: fb:38:e9:97:00:7b:9d:7a:a0:97:50:46:0d:58:23:e0:cf:bd: 22:19:4f:8d:6f:3c:f5:57:c4:7f:59:29:1e:04:f9:07:ce:09: c7:3e:be:43:2c:f4:1f:89:46:9f:f4:ce:6c:8e:0e:e5:4b:c1: 22:5c:9c:f9:c8:59:a4:6b:10:b4:b5:49:84:c0:7b:f2:2e:51: 7d:b5:8f:28:ed:ce:4a:18:1c:41:0a:a8:22:84:57:8a:ee:b7: 0c:1a:ff:75:4c:b0:e2:a8:d1:23:9c:dd:8e:93:d6:eb:74:4e: e0:49:4f:ba:b9:72:6b:4a:36:d3:0d:27:2d:c0:77:66:bb:43: 38:16:72:b8:c0:8e:2b:ac:e5:37:27:27:40:57:a3:c9:c7:c3: e0:2f:0f:fd:1a:69:52:d6:b4:2a:ae:d1:93:fb:b3:7a:96:db: b3:63:fc:38:75:14:2e:4b:f4:56:4d:bd:03:31:40:31:76:a4: 25:5a:29:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUZDNDExMC8GA1UEBRMoNkY2QUI1MEU4QUE0MkJFOEYxNzdGREVDM0E4NzBDRDYx MDdDNEYzNzAeFw0yNjA5MjcwOTUyMDNaFw0yNjEwMDQwOTUyMDNaMBgxFjAUBgNV BAMTDTZhYjhlNzQzLWQ4ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxcWz9ZLl3bOMTYdXTbF1K9NKzcGiSDxnUd009o3duQ5n7I8pcmkd8wA+tvym1 vlW6tI0SfjnNkrRBd8ngSoj2r3+MuObL8XZFZAExgJOMKxuqs7y1rdwe8agwRWWQ 94eHAzqQEOykvvbjGqIK1xt/vo3m7rcYic9AmwVuSnyTs76o/2+pT88iQ4VKb7C4 cuXO7Y5dLW0lbqfdtpPqtmXVTpvWojmIzBujE6Q8UUlVYZE4OZZhpHunN2JkKoAd jKycgPexSVF7GlFH4BHTizRC03e04IvKGEVIro5c+x/uEMnnpLnTbIJF/lgzhuH4 XJ3+vT/YaZ98uab0xH82WGqhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyhdZwEyy PjlAQQHkVvRiTyNsyBwwHwYDVR0jBBgwFoAUb2q1DoqkK+jxd/3sOocM1hB8Tzcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRkM0LzY2MzMyMEFDQjYy QzExRjFCRURFNUM4NTYwMTFGOTcwL2IycTFEb3FrSy1qeGRfM3NPb2NNMWhCOFR6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjJxMURvcWtLLWp4ZF8zc09vY00xaEI4VHpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RkM0LzY2MzMyMEFDQjYyQzExRjFCRURFNUM4NTYwMTFGOTcwL2IycTFEb3FrSy1q eGRfM3NPb2NNMWhCOFR6Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBi9W3uQfOv9nDVqDO6J9sUDiiXMBKQNI3hjAetx9MSCD8YkN8RsyM3m6M8IZ7T t3/Kk7hStMC/x/xt5wuOn7yTIjUIvNaRPtn7OOmXAHudeqCXUEYNWCPgz70iGU+N bzz1V8R/WSkeBPkHzgnHPr5DLPQfiUaf9M5sjg7lS8EiXJz5yFmkaxC0tUmEwHvy LlF9tY8o7c5KGBxBCqgihFeK7rcMGv91TLDiqNEjnN2Ok9brdE7gSU+6uXJrSjbT DSctwHdmu0M4FnK4wI4rrOU3JydAV6PJx8PgLw/9GmlS1rQqrtGT+7N6ltuzY/w4 dRQuS/RWTb0DMUAxdqQlWik2 -----END CERTIFICATE-----Generated at Mon Sep 28 01:49:04 2026 by rpki-client