$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft File: eHnvTZd9yKcBAzr1eKtUikC2lOE.mft (raw, json) Hash identifier: RufgRihHWvF289rChvmwFqMp33gF1LzwQj2QH9kqlQ8= Subject key identifier: C9:7E:05:5C:DF:40:1B:67:76:C2:1F:B9:9C:89:AE:44:12:33:71:DF Authority key identifier: 78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 Certificate issuer: /CN=A91F0EF9/serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft Manifest number: 13 Signing time: Mon 31 Aug 2026 09:26:12 +0000 Manifest this update: Mon 31 Aug 2026 09:26:11 +0000 Manifest next update: Mon 07 Sep 2026 09:26:11 +0000 Files and hashes: 1: eHnvTZd9yKcBAzr1eKtUikC2lOE.crl (hash: XzN3DyQfgeadcwpJ1x4Fb9CHYmnR1DjFeS/bZkMzyf4=) 2: 2C9C69108A9A11F1AFC3D80E4E11F970.roa (hash: uSqkn8LIl8mlBYrH3ffPd4fErtRj9+veTGhqeaUcpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EF9, serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Validity Not Before: Aug 31 09:26:11 2026 GMT Not After : Sep 7 09:26:11 2026 GMT Subject: CN=6a9548b4-0d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:98:4d:b7:30:49:2b:8e:ba:f8:37:44:08: e2:88:fa:90:d0:03:32:ae:47:c1:bd:fc:d9:da:6f: f0:79:2c:99:ad:a4:fd:47:5b:f3:7a:a7:32:35:f9: df:2e:48:49:48:5b:d7:53:72:4a:35:da:82:bd:82: 91:b3:7c:57:0a:c7:47:f3:7a:e5:60:54:a6:08:99: 68:1e:82:d9:93:98:02:eb:40:0f:70:55:e7:85:d3: da:5d:fd:38:0b:73:a9:0e:69:e5:f6:d0:2c:98:32: 80:71:5d:62:3c:11:31:4e:99:2d:31:33:dd:80:c4: 21:12:76:a2:55:a8:e5:34:97:30:71:f2:a7:6b:85: 09:a4:86:aa:7b:35:b3:52:7d:fe:a5:cb:a2:ca:d4: ed:a3:d3:ef:ed:66:da:0c:cd:9e:04:b1:65:d4:19: a1:f4:54:8e:eb:34:65:6c:83:ca:9e:99:f5:2e:7d: 0e:74:60:fc:8a:76:39:7e:c2:62:1d:3e:70:06:69: a7:7f:96:e5:1d:2a:1f:02:34:70:8c:74:6f:d0:84: b2:44:fb:64:9e:ec:ff:44:e8:de:3f:a1:86:54:69: 0f:d4:57:3c:55:53:4a:40:16:81:71:0c:cc:08:a4: 27:aa:b0:c0:27:88:1a:2a:02:b9:7f:c2:9b:17:4a: e9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7E:05:5C:DF:40:1B:67:76:C2:1F:B9:9C:89:AE:44:12:33:71:DF X509v3 Authority Key Identifier: keyid:78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2c:6b:35:2f:18:65:35:13:b1:f5:db:0f:b6:57:8c:93:2d: 2f:fe:74:25:6d:08:5c:ea:a1:e4:25:0a:13:ad:00:22:92:4d: a7:fe:ab:97:b1:69:f2:61:f3:bf:78:c3:24:e5:b8:f7:3b:0d: 0a:a7:c3:5a:9f:29:1f:0e:f2:50:ed:a1:14:e3:0e:50:e3:67: 2a:13:23:61:5e:e7:9c:af:ba:67:56:06:ca:00:8d:af:5e:4c: 23:b2:4b:6f:2e:46:b6:55:6b:c2:df:f2:f8:b5:8b:e8:10:aa: 2d:78:b6:5f:52:a3:c6:70:ac:7c:59:8e:ef:1f:b8:24:fe:0c: 8f:06:ad:4a:59:e7:1c:e1:09:d7:e0:30:28:cf:0f:43:69:e1: b0:1c:d7:4d:04:e2:a8:33:88:01:5e:e1:c9:d1:55:5f:9b:6b: 07:b5:e4:8f:76:f0:f0:d0:5b:37:c6:1c:65:51:39:66:99:b1: 28:d1:b4:43:41:01:64:2b:44:ab:7f:e2:1e:bd:f0:dc:2e:1c: 34:99:8b:06:b1:e0:6a:6f:6f:9c:43:19:cc:69:11:de:85:d6: c6:82:f4:18:7f:01:a4:7d:3f:f4:ad:0c:65:0c:ec:66:90:84: fd:99:84:f6:39:f0:8c:49:a1:1a:89:0c:57:d2:03:7e:da:2c: 6d:16:81:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEVGOTExMC8GA1UEBRMoNzg3OUVGNEQ5NzdEQzhBNzAxMDMzQUY1NzhBQjU0OEE0 MEI2OTRFMTAeFw0yNjA4MzEwOTI2MTFaFw0yNjA5MDcwOTI2MTFaMBgxFjAUBgNV BAMTDTZhOTU0OGI0LTBkOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC335hNtzBJK466+DdECOKI+pDQAzKuR8G9/Nnab/B5LJmtpP1HW/N6pzI1+d8u SElIW9dTcko12oK9gpGzfFcKx0fzeuVgVKYImWgegtmTmALrQA9wVeeF09pd/TgL c6kOaeX20CyYMoBxXWI8ETFOmS0xM92AxCESdqJVqOU0lzBx8qdrhQmkhqp7NbNS ff6ly6LK1O2j0+/tZtoMzZ4EsWXUGaH0VI7rNGVsg8qemfUufQ50YPyKdjl+wmId PnAGaad/luUdKh8CNHCMdG/QhLJE+2Se7P9E6N4/oYZUaQ/UVzxVU0pAFoFxDMwI pCeqsMAniBoqArl/wpsXSumJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyX4FXN9A G2d2wh+5nImuRBIzcd8wHwYDVR0jBBgwFoAUeHnvTZd9yKcBAzr1eKtUikC2lOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwRUY5L0UyOTA2QUFDOEE5 ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtjQkF6cjFlS3RVaWtDMmxP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUhudlRaZDl5S2NCQXpyMWVLdFVpa0MybE9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw RUY5L0UyOTA2QUFDOEE5ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtj QkF6cjFlS3RVaWtDMmxPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQLGs1LxhlNROx9dsPtleMky0v/nQlbQhc6qHkJQoTrQAikk2n/quXsWnyYfO/ eMMk5bj3Ow0Kp8NanykfDvJQ7aEU4w5Q42cqEyNhXuecr7pnVgbKAI2vXkwjsktv Lka2VWvC3/L4tYvoEKoteLZfUqPGcKx8WY7vH7gk/gyPBq1KWecc4QnX4DAozw9D aeGwHNdNBOKoM4gBXuHJ0VVfm2sHteSPdvDw0Fs3xhxlUTlmmbEo0bRDQQFkK0Sr f+IevfDcLhw0mYsGseBqb2+cQxnMaRHehdbGgvQYfwGkfT/0rQxlDOxmkIT9mYT2 OfCMSaEaiQxX0gN+2ixtFoGP -----END CERTIFICATE-----Generated at Tue Sep 1 04:36:25 2026 by rpki-client