$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: MPNkQKYe82Hjeu3UKvs7XueqogEoytcAukgKDl82i/g= Subject key identifier: 61:D2:88:16:B3:37:61:33:FC:41:0D:BC:50:D5:CE:4F:0F:3C:29:F5 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: B9 Signing time: Fri 04 Sep 2026 23:00:58 +0000 Manifest this update: Fri 04 Sep 2026 23:00:57 +0000 Manifest next update: Fri 11 Sep 2026 23:00:57 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: uUTGP1Q8f28RJzQSwZdrtq0G9agjCrdm8irxhCO9ODI=) 2: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA=) 3: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 4: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 5: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) 6: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) 7: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Sep 4 23:00:57 2026 GMT Not After : Sep 11 23:00:57 2026 GMT Subject: CN=6a9b4da9-1086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:83:c6:6d:cf:a3:95:ec:29:85:dc:62:9f: 90:10:a9:d3:24:98:13:3a:bc:b5:a2:27:49:71:fc: c4:d7:84:09:87:8f:77:67:a3:a6:15:56:74:c1:11: cb:0a:60:63:2e:17:b8:71:18:30:f2:08:f5:00:85: 84:d1:53:88:3e:09:0b:0b:7d:e7:07:4c:ee:a2:ed: 9e:fa:5c:35:90:30:39:36:70:a6:b6:9f:c1:f2:6b: 56:87:39:f1:ef:84:ca:af:3a:d0:aa:41:c4:ae:cb: 91:bd:3f:00:34:66:b6:05:9e:ff:b4:62:39:7c:53: 60:2e:e6:d6:3b:32:f9:e1:b5:be:c7:91:cc:90:6b: 90:2b:e6:89:6f:3d:1d:51:4f:9c:12:92:c3:96:e8: 5c:0b:a7:cb:99:7f:b0:84:77:cf:2b:25:5c:49:3e: 6d:1f:54:63:64:f9:c4:75:14:8e:54:2a:f8:23:aa: a3:a7:2c:68:7a:32:7f:4b:cc:66:f5:97:ee:68:ee: 2c:9d:46:fb:33:9d:b3:a2:2e:bb:6e:fc:08:98:87: ea:86:76:19:f2:aa:04:23:d5:3c:86:ae:1e:4d:a5: 77:b3:da:f6:ba:b2:20:de:67:ee:ce:a7:1a:07:c7: 96:d9:ff:d5:3c:7e:bd:11:58:46:e1:df:12:de:e6: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D2:88:16:B3:37:61:33:FC:41:0D:BC:50:D5:CE:4F:0F:3C:29:F5 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:e6:ed:e7:f8:43:56:a5:29:f8:9f:f5:d5:71:19:af:5b:36: 49:ea:c9:32:28:cf:21:fc:28:31:30:a7:5f:b3:89:dd:05:5a: 6b:64:4f:c8:c6:2e:11:13:1d:2c:6d:2d:30:29:74:af:9d:2f: 0f:cb:00:4c:14:95:21:49:75:5d:45:a2:df:24:27:4d:70:db: e4:04:c8:1d:8e:a4:1e:49:fa:09:2b:ba:e7:42:d6:cb:12:f4: 3d:0f:79:51:9f:96:b2:60:fd:75:34:0b:f8:ff:36:b5:4a:54: 48:cf:b2:5a:55:f1:24:78:ff:96:14:70:b5:89:78:70:86:97: d3:90:14:9e:a8:47:2c:4e:70:e9:7f:7b:62:c9:72:23:8e:26: 90:22:38:87:9a:b3:4f:b5:79:37:14:43:62:7c:8e:94:06:bd: ab:33:b4:4f:60:33:9e:fb:cf:75:8a:2e:f4:65:0c:90:a6:bf: 91:57:cf:4f:08:56:3b:3b:ba:f0:e7:89:9f:d0:d8:fa:4e:f3: d3:27:cb:1c:d2:e6:07:4f:e6:52:fc:d4:18:37:d7:fd:c9:ee: d5:ed:04:2f:be:41:eb:4f:56:d8:4f:14:1e:39:78:af:e7:1c: 6f:01:53:25:91:c5:58:15:70:a6:d6:5b:d6:8a:c3:24:98:63: d6:ba:86:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwOTA0MjMwMDU3WhcNMjYwOTExMjMwMDU3WjAYMRYwFAYD VQQDEw02YTliNGRhOS0xMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwmDxm3Po5XsKYXcYp+QEKnTJJgTOry1oidJcfzE14QJh493Z6OmFVZ0wRHL CmBjLhe4cRgw8gj1AIWE0VOIPgkLC33nB0zuou2e+lw1kDA5NnCmtp/B8mtWhznx 74TKrzrQqkHErsuRvT8ANGa2BZ7/tGI5fFNgLubWOzL54bW+x5HMkGuQK+aJbz0d UU+cEpLDluhcC6fLmX+whHfPKyVcST5tH1RjZPnEdRSOVCr4I6qjpyxoejJ/S8xm 9ZfuaO4snUb7M52zoi67bvwImIfqhnYZ8qoEI9U8hq4eTaV3s9r2urIg3mfuzqca B8eW2f/VPH69EVhG4d8S3ubixwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHSiBaz N2Ez/EENvFDVzk8PPCn1MB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1Obt5/hDVqUp+J/11XEZr1s2SerJMijPIfwoMTCnX7OJ3QVaa2RPyMYuERMd LG0tMCl0r50vD8sATBSVIUl1XUWi3yQnTXDb5ATIHY6kHkn6CSu650LWyxL0PQ95 UZ+WsmD9dTQL+P82tUpUSM+yWlXxJHj/lhRwtYl4cIaX05AUnqhHLE5w6X97Ysly I44mkCI4h5qzT7V5NxRDYnyOlAa9qzO0T2AznvvPdYou9GUMkKa/kVfPTwhWOzu6 8OeJn9DY+k7z0yfLHNLmB0/mUvzUGDfX/cnu1e0EL75B609W2E8UHjl4r+ccbwFT JZHFWBVwptZb1orDJJhj1rqGyw== -----END CERTIFICATE-----Generated at Sat Sep 5 11:04:06 2026 by rpki-client