$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.mft File: 99ScFtZ5vEBdj6-doB_Pray5nbg.mft (raw, json) Hash identifier: gMzwMLJ157Cp2q2wTonfTmaEzbbbNFEoY6V2+4d3fWI= Subject key identifier: 10:12:A1:E8:FE:7A:3F:9A:E1:9B:22:A2:79:F5:EB:61:72:A6:48:C6 Authority key identifier: F7:D4:9C:16:D6:79:BC:40:5D:8F:AF:9D:A0:1F:CF:AD:AC:B9:9D:B8 Certificate issuer: /CN=A91FCA20/serialNumber=F7D49C16D679BC405D8FAF9DA01FCFADACB99DB8 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ScFtZ5vEBdj6-doB_Pray5nbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.mft Manifest number: 08 Signing time: Sun 11 Oct 2026 09:54:29 +0000 Manifest this update: Sun 11 Oct 2026 09:54:29 +0000 Manifest next update: Sun 18 Oct 2026 09:54:29 +0000 Files and hashes: 1: 99ScFtZ5vEBdj6-doB_Pray5nbg.crl (hash: T6HYcg762jbtR69hcSBrSVvvI4TCNO0NBmLilGuIVLA=) 2: 1F570068BBEF11F181E0A0606E11F970.roa (hash: KsMqN0WthcI9r2Gmivl+cLrOQiNCQi5AweNACLK33Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.crl rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ScFtZ5vEBdj6-doB_Pray5nbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA20, serialNumber=F7D49C16D679BC405D8FAF9DA01FCFADACB99DB8 Validity Not Before: Oct 11 09:54:29 2026 GMT Not After : Oct 18 09:54:29 2026 GMT Subject: CN=6acb5cd5-b213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:e7:53:4d:a5:e1:74:55:11:29:d0:80:37: ed:b2:83:64:d1:63:24:80:2d:85:b2:fc:1d:4f:47: 12:66:09:0c:1d:76:c9:b9:e8:00:82:a2:1a:07:b5: 1b:ba:d3:fb:e0:3f:1d:d8:51:30:5c:51:4f:ac:db: e9:19:5d:35:31:74:9b:40:5b:d1:59:fb:d5:02:14: 03:d7:b5:fd:e7:c1:56:95:eb:86:30:69:ff:53:00: 71:20:3d:64:43:46:14:e2:cd:2a:1d:30:16:e4:de: 4f:ae:d3:db:38:17:d5:96:8f:23:23:e7:df:33:9f: 81:26:c9:4f:a9:fa:6f:06:31:73:81:00:1a:1f:dd: 1a:f8:4d:d8:22:8a:57:5e:9d:d4:53:f7:ca:63:86: 57:05:2f:43:c1:41:16:ab:46:56:4a:d1:7a:c9:0c: d6:cb:25:34:39:be:2e:de:3a:15:5a:52:2d:2c:44: a5:dc:69:ea:f2:d9:6a:48:9a:1e:fa:ad:a3:89:10: 21:22:a0:26:28:58:c7:9b:35:ef:75:13:ba:59:7b: 22:c5:b4:6e:a2:d8:d0:54:31:85:01:38:48:c0:85: 6d:64:da:f7:15:48:f2:97:f6:9c:8f:93:8d:e6:e2: 09:e1:9e:82:55:50:39:52:aa:24:96:82:fe:2d:3b: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:A1:E8:FE:7A:3F:9A:E1:9B:22:A2:79:F5:EB:61:72:A6:48:C6 X509v3 Authority Key Identifier: keyid:F7:D4:9C:16:D6:79:BC:40:5D:8F:AF:9D:A0:1F:CF:AD:AC:B9:9D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ScFtZ5vEBdj6-doB_Pray5nbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:dd:4c:9b:0b:22:73:9b:1d:35:55:17:5c:18:e0:8d:b0:a8: 44:78:f1:ac:4b:c4:3a:c1:bd:6c:0a:36:88:a0:3b:57:7c:e6: 93:6c:31:53:b8:31:a9:c4:e4:22:a8:dc:ef:4d:9c:e6:34:8b: cd:5c:11:0f:12:f7:78:06:c1:90:b8:07:51:24:49:d4:4c:74: 6a:c2:65:de:71:e3:6b:a5:ae:70:a5:a6:78:12:fa:98:df:da: dd:4f:27:c5:6c:17:42:a9:c7:21:49:d4:b8:6a:c8:b3:cd:2b: c9:70:31:7f:49:7e:72:7b:d8:2b:56:54:44:ea:ad:74:d7:45: c3:09:ad:2f:ec:9c:bb:f8:87:b7:11:8b:52:d9:97:77:eb:44: cc:13:8f:8a:a8:85:d1:72:ed:fa:c6:ba:69:31:59:1a:13:64: ca:3c:f9:af:09:c1:f9:01:59:a1:e4:61:f8:c3:fb:ed:8b:64: e7:1e:4a:a2:fa:1c:42:e2:91:54:09:af:93:9f:6c:87:d1:e3: 04:93:67:fe:52:8d:e7:3c:d6:da:bc:b8:04:c4:f5:15:bb:d1: 76:89:e9:be:99:a3:4d:f8:8f:21:ea:21:16:44:44:77:fe:a6: 98:6d:d7:c3:cb:bb:c2:b1:b4:11:ed:c5:74:61:88:d8:62:19: cb:ed:46:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0EyMDExMC8GA1UEBRMoRjdENDlDMTZENjc5QkM0MDVEOEZBRjlEQTAxRkNGQURB Q0I5OURCODAeFw0yNjEwMTEwOTU0MjlaFw0yNjEwMTgwOTU0MjlaMBgxFjAUBgNV BAMTDTZhY2I1Y2Q1LWIyMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs2udTTaXhdFURKdCAN+2yg2TRYySALYWy/B1PRxJmCQwddsm56ACCohoHtRu6 0/vgPx3YUTBcUU+s2+kZXTUxdJtAW9FZ+9UCFAPXtf3nwVaV64Ywaf9TAHEgPWRD RhTizSodMBbk3k+u09s4F9WWjyMj598zn4EmyU+p+m8GMXOBABof3Rr4Tdgiilde ndRT98pjhlcFL0PBQRarRlZK0XrJDNbLJTQ5vi7eOhVaUi0sRKXcaery2WpImh76 raOJECEioCYoWMebNe91E7pZeyLFtG6i2NBUMYUBOEjAhW1k2vcVSPKX9pyPk43m 4gnhnoJVUDlSqiSWgv4tOwELAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEBKh6P56 P5rhmyKiefXrYXKmSMYwHwYDVR0jBBgwFoAU99ScFtZ5vEBdj6+doB/Pray5nbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTIwL0FGRTdCQzQyQkJF QzExRjFCMUJFMjVENjZDMTFGOTcwLzk5U2NGdFo1dkVCZGo2LWRvQl9QcmF5NW5i Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTlTY0Z0WjV2RUJkajYtZG9CX1ByYXk1bmJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTIwL0FGRTdCQzQyQkJFQzExRjFCMUJFMjVENjZDMTFGOTcwLzk5U2NGdFo1dkVC ZGo2LWRvQl9QcmF5NW5iZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCo3UybCyJzmx01VRdcGOCNsKhEePGsS8Q6wb1sCjaIoDtXfOaTbDFTuDGpxOQi qNzvTZzmNIvNXBEPEvd4BsGQuAdRJEnUTHRqwmXeceNrpa5wpaZ4EvqY39rdTyfF bBdCqcchSdS4asizzSvJcDF/SX5ye9grVlRE6q1010XDCa0v7Jy7+Ie3EYtS2Zd3 60TME4+KqIXRcu36xrppMVkaE2TKPPmvCcH5AVmh5GH4w/vti2TnHkqi+hxC4pFU Ca+Tn2yH0eMEk2f+Uo3nPNbavLgExPUVu9F2iem+maNN+I8h6iEWRER3/qaYbdfD y7vCsbQR7cV0YYjYYhnL7UaQ -----END CERTIFICATE-----Generated at Mon Oct 12 10:32:59 2026 by rpki-client