$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json) Hash identifier: Y8WRh8Q8Fl2Q2n1pAyXx3CrBuFghf2WHaZZhwCXqNt0= Subject key identifier: DF:1C:97:C4:C7:A1:94:80:18:CD:50:01:B0:B4:1D:58:BD:CB:B4:CE Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Certificate serial: 0957 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft Manifest number: 0949 Signing time: Fri 02 Oct 2026 20:25:28 +0000 Manifest this update: Fri 02 Oct 2026 20:25:27 +0000 Manifest next update: Fri 09 Oct 2026 20:25:27 +0000 Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: TDbwP0K8xHldI8/kwoocsX5A7DYKqIQSB3FOgVnu/xs=) 2: zOyHyOrTP8BYGAohXNo4Kgj8cVI.asa (hash: WefVujjKNEcGOlSqWteiU/Pcigx69pnqtQuxdpmbUA4=) 3: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: p/WvE2tM9oWtFSPqsDTw38TfwFRB6bi66/O6CMRedgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Validity Not Before: Oct 2 20:25:27 2026 GMT Not After : Oct 9 20:25:27 2026 GMT Subject: CN=6ac01338-2d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:fd:ae:ef:27:ec:2b:3e:4a:43:59:c2:81: 77:ee:fb:4b:5c:d5:a4:cf:de:e1:01:15:60:e5:ba: ed:da:43:fd:4b:0b:b4:2b:cb:e6:2d:ad:7a:34:51: 50:01:50:08:7f:f6:ee:c2:6e:3f:24:e4:b0:d4:94: 1d:aa:41:76:88:80:27:99:17:9a:1f:5a:53:ca:8b: d9:d7:5b:dd:d9:8f:40:65:5d:06:a6:55:3c:23:5e: 20:65:09:c2:02:82:c3:9c:c3:9b:02:9c:75:1d:a3: c7:f8:df:b4:56:d9:e3:42:8d:5e:33:b7:4c:f8:a0: 23:3a:a9:5e:7b:c4:39:9b:33:98:20:46:0d:ce:50: b3:e0:0f:57:de:9b:92:a8:6b:d8:20:f5:37:b1:63: f0:cf:62:87:31:83:97:9f:89:04:f9:64:db:9a:6a: 8a:36:32:66:6f:15:3c:8c:fd:66:56:47:0a:90:06: a1:3f:48:f8:62:e7:bd:94:f7:59:5c:0d:4f:cf:df: aa:8c:b0:90:6f:38:ce:6d:b4:4b:1d:cf:48:1e:c5: 64:8e:53:ac:0b:a5:ef:a6:4d:49:63:15:4c:71:5f: 61:42:4e:40:f2:c3:3a:92:cd:67:da:6a:3a:d9:ed: 86:b7:26:54:2f:08:22:aa:d6:9e:bc:86:08:5b:92: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1C:97:C4:C7:A1:94:80:18:CD:50:01:B0:B4:1D:58:BD:CB:B4:CE X509v3 Authority Key Identifier: keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:79:31:31:68:67:6a:15:5e:b2:c7:0e:99:e6:a0:63:30:25: a8:a7:6b:ec:fc:37:72:18:68:25:cb:01:dc:5c:be:82:fe:42: cd:78:f7:92:04:23:eb:0b:77:cd:de:e7:7c:7d:a1:c4:d9:b3: 37:d8:5e:7f:d1:3e:f0:75:09:9a:8c:a5:a4:4f:c9:42:85:88: b7:d0:7d:e5:28:18:ae:d1:e4:bf:85:7b:36:d6:8c:cb:7a:1f: 7b:88:42:33:c9:84:b8:ed:06:19:89:f3:fd:c2:45:a4:90:57: ca:93:51:7a:dc:ea:fd:60:b3:00:1f:cf:2d:c8:ec:56:5c:5d: ac:fb:e2:95:67:c2:73:dc:42:9b:bf:1f:a9:1a:d6:2a:f8:32: 4c:33:38:d5:50:ab:51:54:8c:8e:3a:ea:c8:3a:0b:75:d5:0a: 72:64:ac:75:97:10:ac:92:4b:1b:e7:96:e4:2b:10:ce:b9:74: c9:e1:2e:ad:ac:f5:bc:47:66:d8:ab:9c:ee:1f:9d:23:ec:bb: cb:8d:42:ea:ef:8b:c0:d3:32:17:bc:b4:a1:ad:17:f7:3c:0b: 5c:53:17:6e:c9:2d:9d:55:80:8d:ea:56:92:36:bd:36:f9:7d: 94:f8:70:8e:d9:94:53:98:c3:dd:24:2d:9a:b4:9b:4d:9b:5c: 2b:22:2f:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCQjMxMTAvBgNVBAUTKDNDREY0M0Q3MTdGQzU4NDlGMjNBOTRFMjlBNzcyQjI4 QTVENzAxRTMwHhcNMjYxMDAyMjAyNTI3WhcNMjYxMDA5MjAyNTI3WjAYMRYwFAYD VQQDEw02YWMwMTMzOC0yZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmY39ru8n7Cs+SkNZwoF37vtLXNWkz97hARVg5brt2kP9Swu0K8vmLa16NFFQ AVAIf/buwm4/JOSw1JQdqkF2iIAnmReaH1pTyovZ11vd2Y9AZV0GplU8I14gZQnC AoLDnMObApx1HaPH+N+0VtnjQo1eM7dM+KAjOqlee8Q5mzOYIEYNzlCz4A9X3puS qGvYIPU3sWPwz2KHMYOXn4kE+WTbmmqKNjJmbxU8jP1mVkcKkAahP0j4Yue9lPdZ XA1Pz9+qjLCQbzjObbRLHc9IHsVkjlOsC6Xvpk1JYxVMcV9hQk5A8sM6ks1n2mo6 2e2GtyZULwgiqtaevIYIW5Jx0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8cl8TH oZSAGM1QAbC0HVi9y7TOMB8GA1UdIwQYMBaAFDzfQ9cX/FhJ8jqU4pp3Kyil1wHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JCMy85NUFFQTlFOENC RTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdFbnlPcFRpbW5jcktLWFhB ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOOUQxeGY4V0VueU9wVGltbmNyS0tYWEFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JCMy85NUFFQTlFOENCRTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdF bnlPcFRpbW5jcktLWFhBZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnkxMWhnahVesscOmeagYzAlqKdr7Pw3chhoJcsB3Fy+gv5CzXj3kgQj6wt3 zd7nfH2hxNmzN9hef9E+8HUJmoylpE/JQoWIt9B95SgYrtHkv4V7NtaMy3ofe4hC M8mEuO0GGYnz/cJFpJBXypNRetzq/WCzAB/PLcjsVlxdrPvilWfCc9xCm78fqRrW KvgyTDM41VCrUVSMjjrqyDoLddUKcmSsdZcQrJJLG+eW5CsQzrl0yeEuraz1vEdm 2Kuc7h+dI+y7y41C6u+LwNMyF7y0oa0X9zwLXFMXbsktnVWAjepWkja9Nvl9lPhw jtmUU5jD3SQtmrSbTZtcKyIvmQ== -----END CERTIFICATE-----Generated at Sat Oct 3 15:43:18 2026 by rpki-client