$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft File: o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json) Hash identifier: zQm86d0bmpMaZyiC/rtYuqPTxJP0QP4xu03rjvev1aQ= Subject key identifier: 80:EF:10:C5:E1:8F:E7:17:00:85:29:4C:4D:1E:F1:B5:48:B3:D2:FD Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft Manifest number: 72 Signing time: Fri 11 Sep 2026 07:59:47 +0000 Manifest this update: Fri 11 Sep 2026 07:59:47 +0000 Manifest next update: Fri 18 Sep 2026 07:59:47 +0000 Files and hashes: 1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: aiFHnbMVbrciI0njcHWUr3y5+oJ411hbGG9y/nn9d5o=) 2: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=) 3: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=) 4: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D Validity Not Before: Sep 11 07:59:47 2026 GMT Not After : Sep 18 07:59:47 2026 GMT Subject: CN=6aa3b4f3-13ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:5e:d2:6f:2f:4d:fa:1a:d4:5a:e9:d6:3a: 20:4b:41:8a:f1:ca:c2:91:ef:f4:69:ef:ff:97:9d: 45:29:61:d5:47:ed:dc:95:b7:b5:51:1c:49:6b:2e: 4a:f2:1a:83:62:12:d8:f5:f6:4f:e2:c9:67:65:27: 4c:13:12:49:7f:1a:86:c2:c1:f3:a9:dc:97:c7:f5: 98:5a:d3:94:73:b8:ad:59:52:1c:5e:f9:95:31:ac: 7a:3d:64:34:08:83:a5:1d:94:96:99:1b:56:10:24: 88:72:c7:cf:27:38:80:fe:eb:69:10:78:f0:68:3a: 8c:53:cd:68:14:44:48:8e:7c:6e:f1:cf:d6:5f:1d: 04:3c:df:e7:43:e9:a6:e4:44:f8:8c:f5:ca:bf:45: ad:4b:52:7d:e4:08:a8:7d:f2:db:ea:95:f4:aa:8e: 65:2a:bb:67:65:bb:cc:7f:b1:bf:58:e0:ef:27:ef: ef:46:37:0c:ff:ee:91:e1:bb:68:13:cf:01:37:10: 66:8b:98:3b:98:76:d7:43:7e:9e:68:a1:eb:14:63: 84:b7:9d:be:64:d7:ce:71:d2:3a:c5:1d:b7:c8:ae: 8e:ac:5a:44:a4:8a:9f:e7:87:89:a5:6e:90:20:22: b6:54:b4:af:c3:9f:e0:77:9b:20:d0:1c:ba:04:81: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EF:10:C5:E1:8F:E7:17:00:85:29:4C:4D:1E:F1:B5:48:B3:D2:FD X509v3 Authority Key Identifier: keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fd:02:6d:2d:55:69:ac:0a:0b:fb:ff:97:d2:c6:7c:2e:68: d5:64:6c:23:ad:95:b6:62:e6:ee:ee:fd:39:b7:72:f0:48:e4: 2e:c9:81:06:70:c7:87:3d:99:61:47:54:b6:b7:38:f2:49:07: 9b:42:73:40:f0:45:b6:ff:59:e0:dc:90:44:e2:d2:df:43:85: 20:3c:ca:32:e7:cc:e2:6d:d0:48:ac:9f:78:e8:f0:e6:af:b5: 8d:aa:7d:2e:8a:d2:1f:d9:03:06:c7:1b:9c:4f:11:70:78:8d: 0e:2b:c0:6d:9f:2b:5d:aa:68:37:35:8c:58:1e:a6:b3:06:f9: 16:da:a1:ca:2b:38:74:91:92:4d:a4:6a:a3:cc:de:9a:74:78: 07:3a:fb:5d:e9:c1:3e:46:21:ca:a3:66:69:d3:d2:3a:4c:39: 1e:c2:d7:22:c2:07:9b:e8:30:9c:42:e1:72:01:d0:6c:5e:cb: 71:1b:fb:d9:9f:3b:a0:f1:d4:79:5e:47:02:4e:49:a1:b1:c6: da:dd:46:30:d9:71:cf:27:f1:f2:0e:99:5d:b2:4e:80:d5:d7: 21:47:3e:9d:24:07:2b:00:e1:97:e3:92:8a:58:1c:bb:37:3c: bd:8b:ea:d3:1a:f7:f1:e6:16:61:1e:f3:f9:c8:35:0d:2a:44: 1f:15:f7:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzhFMjExMC8GA1UEBRMoQTM0NjY0OEI0QURGNEZDNUI0NzdDN0RBMkNGMDVCMTY4 NDM3REI1RDAeFw0yNjA5MTEwNzU5NDdaFw0yNjA5MTgwNzU5NDdaMBgxFjAUBgNV BAMTDTZhYTNiNGYzLTEzY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC18V7Sby9N+hrUWunWOiBLQYrxysKR7/Rp7/+XnUUpYdVH7dyVt7VRHElrLkry GoNiEtj19k/iyWdlJ0wTEkl/GobCwfOp3JfH9Zha05RzuK1ZUhxe+ZUxrHo9ZDQI g6UdlJaZG1YQJIhyx88nOID+62kQePBoOoxTzWgUREiOfG7xz9ZfHQQ83+dD6abk RPiM9cq/Ra1LUn3kCKh98tvqlfSqjmUqu2dlu8x/sb9Y4O8n7+9GNwz/7pHhu2gT zwE3EGaLmDuYdtdDfp5ooesUY4S3nb5k185x0jrFHbfIro6sWkSkip/nh4mlbpAg IrZUtK/Dn+B3myDQHLoEgfNtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgO8QxeGP 5xcAhSlMTR7xtUiz0v0wHwYDVR0jBBgwFoAUo0Zki0rfT8W0d8faLPBbFoQ3210w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OEUyL0M4RjRBOEUyMDc5 OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhXMGQ4ZmFMUEJiRm9RMzIx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzBaa2kwcmZUOFcwZDhmYUxQQmJGb1EzMjEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 OEUyL0M4RjRBOEUyMDc5OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhX MGQ4ZmFMUEJiRm9RMzIxMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBO/QJtLVVprAoL+/+X0sZ8LmjVZGwjrZW2Yubu7v05t3LwSOQuyYEGcMeHPZlh R1S2tzjySQebQnNA8EW2/1ng3JBE4tLfQ4UgPMoy58zibdBIrJ946PDmr7WNqn0u itIf2QMGxxucTxFweI0OK8Btnytdqmg3NYxYHqazBvkW2qHKKzh0kZJNpGqjzN6a dHgHOvtd6cE+RiHKo2Zp09I6TDkewtciwgeb6DCcQuFyAdBsXstxG/vZnzug8dR5 XkcCTkmhscba3UYw2XHPJ/HyDpldsk6A1dchRz6dJAcrAOGX45KKWBy7Nzy9i+rT Gvfx5hZhHvP5yDUNKkQfFfcG -----END CERTIFICATE-----Generated at Fri Sep 11 12:08:36 2026 by rpki-client