$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: S7YD7FZFDR/L0y5voYWIyTwPlW8JmBnKF/JX0O2H1dk= Subject key identifier: 40:AA:B6:02:AB:D1:A9:19:CC:D1:AC:70:F9:DA:F9:E4:F5:B2:24:79 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 025F Signing time: Sat 05 Sep 2026 02:07:37 +0000 Manifest this update: Sat 05 Sep 2026 02:07:36 +0000 Manifest next update: Sat 12 Sep 2026 02:07:36 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: 6qAA3pNGmSA+/vv+pzlwPBoj2pbrsn6mRiaUI4fPXLU=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Sep 5 02:07:36 2026 GMT Not After : Sep 12 02:07:36 2026 GMT Subject: CN=6a9b7969-7b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:b8:44:59:33:b1:f1:45:78:36:92:24:c1: c8:8c:f1:f1:32:25:37:24:2a:25:aa:10:27:54:1a: 79:0d:ea:7d:16:11:35:fe:66:0b:3f:64:d8:17:66: 94:a6:c0:21:0c:5b:47:58:bd:71:a3:74:53:7d:47: 27:90:7b:55:0d:b8:8d:02:ac:43:4b:98:0a:59:7d: 00:fb:87:82:5f:32:4f:2f:30:ca:b6:b3:63:f8:2c: 85:45:20:ef:5f:af:20:7a:6e:f0:de:a1:9b:4d:70: 8a:f9:1f:60:1f:55:f5:0f:73:be:89:db:17:08:4a: f4:6c:c6:3f:bf:f3:54:df:ea:f7:ed:50:9f:25:2f: e7:c6:2b:e4:df:b6:d3:0c:55:94:40:8d:04:82:98: fc:1d:f2:62:da:18:28:fb:14:26:89:5d:1a:70:2d: 0c:05:6b:b8:88:a4:85:51:fa:89:e8:28:a9:6f:ec: 31:28:f4:3a:3b:fc:d9:e9:6b:0d:0e:d1:98:37:2b: d6:ed:e0:19:1e:23:de:7a:4f:d2:e4:80:ea:29:1f: 13:00:7b:fb:af:62:98:c5:f7:a1:9c:a8:31:22:fd: 22:52:ed:4d:6b:47:5a:05:f1:56:e4:57:30:6c:df: 2d:ec:21:af:ea:68:65:ff:5d:20:72:05:52:a0:ec: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:B6:02:AB:D1:A9:19:CC:D1:AC:70:F9:DA:F9:E4:F5:B2:24:79 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:ab:bd:23:1c:9d:99:3c:ca:b2:0c:ec:bc:2e:9a:24:ff:6d: ad:8d:bc:41:1f:60:80:b1:58:59:9d:66:07:04:72:3f:b1:59: 31:61:b8:3b:91:95:7f:51:33:58:f4:4d:92:5d:12:d0:d0:8d: c3:63:9c:68:33:46:39:9b:8a:28:7a:53:3c:50:01:59:6f:cd: 82:04:86:93:2c:69:c2:4d:6c:7e:fe:b7:b9:92:d9:2f:34:e4: c1:da:78:24:d9:b7:86:20:22:48:ba:98:e7:72:e9:4b:9b:f1: 4a:5a:9f:12:c0:9f:65:ef:60:31:e8:6b:08:c8:0a:0f:3b:fd: 7a:19:71:f8:a3:1e:bc:b3:e1:47:9d:4b:4b:c4:b5:ef:ab:28: b3:e4:90:fe:ff:3a:5a:19:78:e2:bd:01:1b:3c:20:c9:c1:49: 8c:3b:9c:1e:de:e4:e2:af:8a:18:4f:20:35:8d:ac:80:c4:26: c5:a3:2d:8f:6d:de:15:13:90:4e:37:12:3c:02:66:2b:a6:af: 64:1d:cd:69:4b:1b:53:33:3e:3c:a0:8b:5b:54:34:82:fa:30: 2a:39:db:09:60:35:76:0e:e4:11:6c:93:dd:b6:65:9f:92:fd: 71:9e:af:99:aa:4e:a9:7c:59:86:ec:84:25:da:cf:94:46:b7: 03:9d:0e:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjYwOTA1MDIwNzM2WhcNMjYwOTEyMDIwNzM2WjAYMRYwFAYD VQQDEw02YTliNzk2OS03YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoO4RFkzsfFFeDaSJMHIjPHxMiU3JColqhAnVBp5Dep9FhE1/mYLP2TYF2aU psAhDFtHWL1xo3RTfUcnkHtVDbiNAqxDS5gKWX0A+4eCXzJPLzDKtrNj+CyFRSDv X68gem7w3qGbTXCK+R9gH1X1D3O+idsXCEr0bMY/v/NU3+r37VCfJS/nxivk37bT DFWUQI0Egpj8HfJi2hgo+xQmiV0acC0MBWu4iKSFUfqJ6Cipb+wxKPQ6O/zZ6WsN DtGYNyvW7eAZHiPeek/S5IDqKR8TAHv7r2KYxfehnKgxIv0iUu1Na0daBfFW5Fcw bN8t7CGv6mhl/10gcgVSoOwxWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECqtgKr 0akZzNGscPna+eT1siR5MB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0Ku9IxydmTzKsgzsvC6aJP9trY28QR9ggLFYWZ1mBwRyP7FZMWG4O5GVf1Ez WPRNkl0S0NCNw2OcaDNGOZuKKHpTPFABWW/NggSGkyxpwk1sfv63uZLZLzTkwdp4 JNm3hiAiSLqY53LpS5vxSlqfEsCfZe9gMehrCMgKDzv9ehlx+KMevLPhR51LS8S1 76sos+SQ/v86Whl44r0BGzwgycFJjDucHt7k4q+KGE8gNY2sgMQmxaMtj23eFROQ TjcSPAJmK6avZB3NaUsbUzM+PKCLW1Q0gvowKjnbCWA1dg7kEWyT3bZln5L9cZ6v mapOqXxZhuyEJdrPlEa3A50OJQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:14:53 2026 by rpki-client