$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: kguDQMzWUBLc9yR1mDI6nYs6geiP9zBoRirqvkfNjDg= Subject key identifier: 7D:8C:B6:12:FC:F1:7C:EA:36:B8:69:76:27:C6:AD:2B:03:C9:04:F1 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 12C4 Signing time: Tue 06 Oct 2026 17:06:46 +0000 Manifest this update: Tue 06 Oct 2026 17:06:46 +0000 Manifest next update: Tue 13 Oct 2026 17:06:46 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: 9JXrRWGuJqAr1B0nInsnd+5EHyfbQESlF4Mj/GjNeXA=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: IkNZoaRzi6fB9RRMWn5BH65RrfY+xv1Hx872Jrr8QIw=) 3: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) 4: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4838 (0x12e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Oct 6 17:06:46 2026 GMT Not After : Oct 13 17:06:46 2026 GMT Subject: CN=6ac52aa6-d7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:08:8f:bd:bb:07:4a:5c:e8:3f:ff:c0:93: a0:7e:89:92:25:e6:54:8e:72:7a:63:3b:f4:c0:1a: 2c:0b:06:69:e7:b9:4e:91:c8:ff:85:8d:a1:8d:02: cb:fc:98:69:57:ed:9e:32:6a:c6:0a:6b:ec:71:3f: 9b:ca:c1:ef:54:b6:7c:b0:09:bd:a7:d1:0f:a3:b0: 5c:7d:e7:74:2e:8b:b2:06:34:01:51:aa:4a:2b:0d: a0:e6:85:a3:89:9e:3f:a4:4b:22:9e:55:ac:5e:b6: a1:bd:c0:94:34:28:f0:8c:8e:19:c2:45:27:cb:18: 11:b7:bc:44:f5:2d:26:03:5f:0b:23:28:0a:fb:e1: 69:44:0a:04:c3:14:65:2b:3c:ef:f0:58:99:da:2b: 69:d7:ab:36:23:d3:cc:e2:5c:c8:18:d7:8f:70:a3: 6c:39:ce:58:8c:d1:40:b6:61:55:ab:4e:26:e8:50: 12:c5:e8:b6:7b:af:ee:e5:36:98:f1:ad:ec:73:bb: b6:2e:aa:5b:94:57:27:89:3f:20:09:1a:16:be:0c: fd:db:26:d4:b1:17:08:f6:32:42:1c:79:92:9b:8d: 88:aa:82:6d:29:e4:c8:9f:06:5f:66:4d:cb:1a:55: 5e:e4:30:8b:39:94:c0:b8:03:ce:42:64:71:76:4f: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8C:B6:12:FC:F1:7C:EA:36:B8:69:76:27:C6:AD:2B:03:C9:04:F1 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ca:31:31:36:d6:80:74:6b:cb:d5:9e:f3:87:ff:38:5c:62: 78:62:df:23:dd:ed:49:8e:2a:2f:4f:fe:56:a8:94:40:81:3a: 43:fe:ce:f2:0f:7e:0b:fc:f7:cf:80:bb:5e:59:4f:0e:8b:05: 8c:a8:2f:9a:6b:b2:5f:16:79:fe:04:17:27:ef:d1:69:3f:6a: 92:f8:64:a8:3d:7f:3f:2a:1a:81:a6:9b:ab:28:74:b0:3f:47: 26:84:66:9e:20:52:2e:80:bb:1d:fe:74:c5:75:b3:9b:b4:76: 75:ae:12:65:38:cd:b8:43:63:e1:59:f0:09:04:9e:6e:24:6c: 7f:2b:3b:e5:b7:a9:44:8a:55:13:23:c5:db:13:f3:03:d5:f1: ef:0a:53:29:30:67:a3:b0:5e:c5:6b:6d:01:0e:c3:87:ef:42: 68:aa:84:ea:8f:69:19:0d:be:f6:1c:14:4f:2a:7d:79:93:72: 3f:4e:6b:d8:ef:b3:64:8a:7b:68:e6:d9:d5:dc:cc:f0:5b:7f: 13:16:03:cd:22:47:2d:ac:aa:20:c8:b2:20:6c:92:30:eb:68: 2e:35:78:af:89:1b:d1:6f:8f:21:59:36:45:ad:1b:03:5b:e7: 81:be:7e:3e:d6:33:ad:2a:4e:70:ab:69:1d:7e:74:8e:49:47: 30:f5:ab:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYxMDA2MTcwNjQ2WhcNMjYxMDEzMTcwNjQ2WjAYMRYwFAYD VQQDEw02YWM1MmFhNi1kN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzYIj727B0pc6D//wJOgfomSJeZUjnJ6Yzv0wBosCwZp57lOkcj/hY2hjQLL /JhpV+2eMmrGCmvscT+bysHvVLZ8sAm9p9EPo7Bcfed0LouyBjQBUapKKw2g5oWj iZ4/pEsinlWsXrahvcCUNCjwjI4ZwkUnyxgRt7xE9S0mA18LIygK++FpRAoEwxRl Kzzv8FiZ2itp16s2I9PM4lzIGNePcKNsOc5YjNFAtmFVq04m6FASxei2e6/u5TaY 8a3sc7u2LqpblFcniT8gCRoWvgz92ybUsRcI9jJCHHmSm42IqoJtKeTInwZfZk3L GlVe5DCLOZTAuAPOQmRxdk9RuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2MthL8 8XzqNrhpdifGrSsDyQTxMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesoxMTbWgHRry9We84f/OFxieGLfI93tSY4qL0/+VqiUQIE6Q/7O8g9+C/z3 z4C7XllPDosFjKgvmmuyXxZ5/gQXJ+/RaT9qkvhkqD1/Pyoagaabqyh0sD9HJoRm niBSLoC7Hf50xXWzm7R2da4SZTjNuENj4VnwCQSebiRsfys75bepRIpVEyPF2xPz A9Xx7wpTKTBno7BexWttAQ7Dh+9CaKqE6o9pGQ2+9hwUTyp9eZNyP05r2O+zZIp7 aObZ1dzM8Ft/ExYDzSJHLayqIMiyIGySMOtoLjV4r4kb0W+PIVk2Ra0bA1vngb5+ PtYzrSpOcKtpHX50jklHMPWr5g== -----END CERTIFICATE-----Generated at Thu Oct 8 03:53:28 2026 by rpki-client