$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: Dz9XDsdLphbnxbEoExqMHtM2b1JRdPupn6Si2cjdx80= Subject key identifier: 37:00:77:6C:A5:75:7A:10:CD:B6:55:E2:37:52:25:4A:BB:48:F0:44 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 0213 Signing time: Sat 05 Sep 2026 02:59:58 +0000 Manifest this update: Sat 05 Sep 2026 02:59:57 +0000 Manifest next update: Sat 12 Sep 2026 02:59:57 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: rYUr4qghxh8BOebKDXDVXm5STZ2NbI3U0Q2cLmIIcRs=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: pHxXivDFEbvkF+NQAZkLY9uNgdyvvnZXrHsc10zFfQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Sep 5 02:59:57 2026 GMT Not After : Sep 12 02:59:57 2026 GMT Subject: CN=6a9b85ad-b4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:2e:08:f3:07:c7:41:df:1e:27:d8:01:25: 41:f5:38:8a:04:c0:91:cb:74:93:54:cb:b5:c3:57: e8:b7:78:0f:fd:aa:63:4e:46:d1:f3:4f:78:26:37: a1:5a:61:5c:99:ca:b5:a8:a2:8d:de:45:13:78:5e: d0:1c:6d:67:b7:72:c7:1f:5d:1d:24:9f:b1:59:28: 2d:55:be:61:4f:db:34:dd:8c:58:ee:75:cb:d0:9f: f1:76:cf:88:db:94:fe:c6:68:0d:98:f2:7f:e9:8d: cb:23:4f:d5:28:55:72:6e:0c:29:ec:f9:36:65:cd: da:8a:ea:f9:30:c4:d0:72:bb:0d:26:f3:fb:10:44: fa:95:d9:f4:a2:0f:62:be:6a:20:1a:af:19:ca:24: b2:a3:5b:5a:44:08:dd:0f:39:55:05:99:66:81:8e: 82:1c:b3:bc:f0:d7:f9:1b:28:a8:73:1f:36:f9:ab: bd:26:57:95:b2:8a:b4:de:37:98:49:97:16:90:d7: 34:86:c2:49:e6:93:b3:42:92:e6:3f:27:ef:33:ac: f5:f0:ab:57:b1:76:21:f3:be:da:b7:22:a6:f9:c3: 0b:4a:ae:59:8c:4c:4d:1b:76:b4:0b:84:9d:86:23: 6b:d0:5f:a5:9a:61:99:61:33:0f:97:77:0b:ce:44: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:00:77:6C:A5:75:7A:10:CD:B6:55:E2:37:52:25:4A:BB:48:F0:44 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:cf:bd:93:53:0c:4b:aa:44:73:9f:7c:41:11:eb:b0:44:45: 29:96:cb:4a:41:28:8a:8a:4e:da:3b:4d:87:b6:09:0a:76:ce: 36:8f:c9:eb:71:f0:c8:78:9a:63:03:f4:c8:0f:4b:69:3b:cc: 1a:b4:c0:59:70:f5:0c:76:c9:a4:87:91:1a:31:79:50:ab:66: c2:90:66:c8:e7:b6:7b:86:22:b5:1b:b5:2e:10:1c:e4:80:79: a3:04:b2:fc:76:63:7e:91:66:ac:32:b4:c4:9a:41:d9:3a:dd: 71:bc:4f:8c:d4:a7:7e:bf:97:c4:3c:fd:8f:bb:75:79:ee:d2: fe:68:e4:4a:68:17:03:f8:19:67:db:62:2d:ca:3c:e2:29:3e: 8f:23:08:00:51:ce:5b:2c:ca:a5:28:e8:43:26:72:a2:bf:a4: ae:cb:d1:02:bd:08:0d:c4:79:73:e0:53:86:d6:55:a0:83:a4: df:04:d8:a6:69:ad:05:6b:c2:60:fc:28:e7:1a:71:58:06:af: 75:79:be:e8:85:16:7b:59:d2:d1:94:88:2f:8e:9f:95:70:98: 0d:87:5d:0c:4c:b1:5b:5a:3b:ab:df:e9:80:a5:b5:53:94:fe: 4d:a7:29:0a:40:3f:dc:ef:d4:09:78:05:41:b9:7b:30:57:ac: 68:62:b2:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjYwOTA1MDI1OTU3WhcNMjYwOTEyMDI1OTU3WjAYMRYwFAYD VQQDEw02YTliODVhZC1iNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTUuCPMHx0HfHifYASVB9TiKBMCRy3STVMu1w1fot3gP/apjTkbR8094Jjeh WmFcmcq1qKKN3kUTeF7QHG1nt3LHH10dJJ+xWSgtVb5hT9s03YxY7nXL0J/xds+I 25T+xmgNmPJ/6Y3LI0/VKFVybgwp7Pk2Zc3aiur5MMTQcrsNJvP7EET6ldn0og9i vmogGq8ZyiSyo1taRAjdDzlVBZlmgY6CHLO88Nf5Gyiocx82+au9JleVsoq03jeY SZcWkNc0hsJJ5pOzQpLmPyfvM6z18KtXsXYh877atyKm+cMLSq5ZjExNG3a0C4Sd hiNr0F+lmmGZYTMPl3cLzkQT5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcAd2yl dXoQzbZV4jdSJUq7SPBEMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ8+9k1MMS6pEc598QRHrsERFKZbLSkEoiopO2jtNh7YJCnbONo/J63HwyHia YwP0yA9LaTvMGrTAWXD1DHbJpIeRGjF5UKtmwpBmyOe2e4YitRu1LhAc5IB5owSy /HZjfpFmrDK0xJpB2TrdcbxPjNSnfr+XxDz9j7t1ee7S/mjkSmgXA/gZZ9tiLco8 4ik+jyMIAFHOWyzKpSjoQyZyor+krsvRAr0IDcR5c+BThtZVoIOk3wTYpmmtBWvC YPwo5xpxWAavdXm+6IUWe1nS0ZSIL46flXCYDYddDEyxW1o7q9/pgKW1U5T+Tacp CkA/3O/UCXgFQbl7MFesaGKyCg== -----END CERTIFICATE-----Generated at Sat Sep 5 10:01:46 2026 by rpki-client