$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json) Hash identifier: D+HS856pKi4D0RbFqUIn3zJn0LyW+vZBx5DFiWexUNk= Subject key identifier: 85:70:27:D4:5B:EB:35:DA:1D:5F:13:54:32:FB:F7:2F:6F:3E:2F:D0 Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft Manifest number: 0152 Signing time: Sat 05 Sep 2026 05:01:28 +0000 Manifest this update: Sat 05 Sep 2026 05:01:27 +0000 Manifest next update: Sat 12 Sep 2026 05:01:27 +0000 Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: U+Y2kI4L5fFTJyDNtnhOMXlfi5pyg1hgnzUrTr8Vp4I=) 2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: vVE/wYQljIOEW6qq0MvXd9SjBMo9AS5Tw8SXEPHuwyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Validity Not Before: Sep 5 05:01:27 2026 GMT Not After : Sep 12 05:01:27 2026 GMT Subject: CN=6a9ba228-a14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:1f:f9:50:26:6b:83:40:45:53:ed:e6:00: 6c:25:60:2c:67:79:5d:97:98:fc:eb:e9:e5:84:65: 82:57:6c:94:67:22:aa:c5:b7:0c:f6:b9:26:fc:d9: a5:d1:fc:c1:05:0a:7c:d8:4f:bc:23:7b:45:c3:8b: a4:15:98:93:7a:5d:22:18:a9:4a:2a:9f:6c:d2:c4: 23:1b:b2:50:ea:de:8b:70:5c:bc:83:19:a6:97:73: c1:3d:17:82:24:24:76:40:81:bc:36:03:fc:51:79: 4b:5c:75:28:7f:f9:3d:27:82:d2:4f:58:90:92:af: 4b:b0:bb:63:7c:6a:e2:a1:25:6c:fb:6b:08:f0:31: dc:04:e9:e9:2c:72:0e:da:95:e4:b1:67:0c:e0:32: 54:1d:0a:f6:01:a5:ac:a0:0f:46:ef:cd:d8:59:3f: 5e:a1:72:4a:3f:7c:d9:c2:f6:cb:ca:34:37:42:be: ae:93:17:4a:94:ff:dd:36:a5:3d:86:4e:28:f5:d9: 94:f6:cd:ed:3a:69:40:c5:4c:b7:73:50:88:21:ff: 2f:76:ae:31:c4:e3:ea:83:21:2f:81:9a:e2:a9:46: 05:8b:7a:e6:89:ea:ff:ed:2c:87:a0:f8:bd:a3:49: 48:ba:10:2a:b8:67:f9:35:ad:b8:23:0a:58:7e:dd: ab:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:27:D4:5B:EB:35:DA:1D:5F:13:54:32:FB:F7:2F:6F:3E:2F:D0 X509v3 Authority Key Identifier: keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:33:bb:64:cf:5a:8a:04:f1:da:77:ba:36:f8:f2:3d:c2:93: 21:79:77:95:80:23:93:58:05:36:d4:b0:9c:f7:af:60:55:91: c3:8f:ed:5f:51:a3:ea:24:b3:06:1f:9e:f2:fa:e7:a4:87:27: 04:d3:95:17:1e:4c:1b:9b:69:d1:0d:b1:8d:61:8b:ae:45:51: 77:75:a5:62:3c:d1:74:00:f9:73:24:cc:e7:5a:38:0a:00:33: 74:71:38:e5:16:4a:7d:4a:de:ee:a9:38:71:06:ee:50:22:24: 86:a4:c1:e8:86:3e:53:f2:1e:b1:1e:99:fe:92:3a:00:ac:e9: 39:24:bd:8a:72:23:33:46:b6:43:e2:be:40:e8:2a:ef:93:ae: 07:5d:d3:92:8f:51:7a:2b:68:7f:4f:1a:a0:3b:87:e7:23:f0: 43:39:a3:68:75:b7:b4:1e:9d:00:af:3b:7a:ed:02:4f:f3:90: 9e:20:8f:cf:1e:13:1d:ba:66:35:cd:24:df:55:81:56:d1:b6: cd:6b:bb:6e:12:70:43:d8:30:85:9b:2d:2e:3e:91:5c:97:26: 87:61:7b:39:48:5e:e3:0f:95:42:72:db:0b:d6:4e:bc:20:82: c1:95:51:bb:1c:37:65:c2:72:c5:0f:0e:fc:e9:1d:9b:ec:b2: 98:88:ae:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUyMEYxMTAvBgNVBAUTKEIxQkQ0REIwMjFGNTRDNzI2M0YzQzM1MzVGODgzNjg0 OUJBMkU2MEUwHhcNMjYwOTA1MDUwMTI3WhcNMjYwOTEyMDUwMTI3WjAYMRYwFAYD VQQDEw02YTliYTIyOC1hMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1f0f+VAma4NARVPt5gBsJWAsZ3ldl5j86+nlhGWCV2yUZyKqxbcM9rkm/Nml 0fzBBQp82E+8I3tFw4ukFZiTel0iGKlKKp9s0sQjG7JQ6t6LcFy8gxmml3PBPReC JCR2QIG8NgP8UXlLXHUof/k9J4LST1iQkq9LsLtjfGrioSVs+2sI8DHcBOnpLHIO 2pXksWcM4DJUHQr2AaWsoA9G783YWT9eoXJKP3zZwvbLyjQ3Qr6ukxdKlP/dNqU9 hk4o9dmU9s3tOmlAxUy3c1CIIf8vdq4xxOPqgyEvgZriqUYFi3rmier/7SyHoPi9 o0lIuhAquGf5Na24IwpYft2rjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVwJ9Rb 6zXaHV8TVDL79y9vPi/QMB8GA1UdIwQYMBaAFLG9TbAh9UxyY/PDU1+INoSbouYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTIwRi80MUNDQkM2RUE4 MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRISmo4OE5UWDRnMmhKdWk1 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NiMU5zQ0gxVEhKajg4TlRYNGcyaEp1aTVnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTIwRi80MUNDQkM2RUE4MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRI Smo4OE5UWDRnMmhKdWk1ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDO7ZM9aigTx2ne6NvjyPcKTIXl3lYAjk1gFNtSwnPevYFWRw4/tX1Gj6iSz Bh+e8vrnpIcnBNOVFx5MG5tp0Q2xjWGLrkVRd3WlYjzRdAD5cyTM51o4CgAzdHE4 5RZKfUre7qk4cQbuUCIkhqTB6IY+U/IesR6Z/pI6AKzpOSS9inIjM0a2Q+K+QOgq 75OuB13Tko9Reitof08aoDuH5yPwQzmjaHW3tB6dAK87eu0CT/OQniCPzx4THbpm Nc0k31WBVtG2zWu7bhJwQ9gwhZstLj6RXJcmh2F7OUhe4w+VQnLbC9ZOvCCCwZVR uxw3ZcJyxQ8O/Okdm+yymIiuEw== -----END CERTIFICATE-----Generated at Sat Sep 5 09:17:38 2026 by rpki-client