$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft File: sfYJnZYvySdk5xe4l9ERPLfnbSk.mft (raw, json) Hash identifier: wM+7ZWP+Eg+niNcMkxxUj2Wm5NUZ6YtkpmB/5Y73b1s= Subject key identifier: B1:BE:53:18:9E:CC:8F:6F:B2:3E:24:00:FF:23:A3:8C:3E:F2:4F:4A Authority key identifier: B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 Certificate issuer: /CN=A91FF8C9/serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft Manifest number: 23 Signing time: Wed 07 Oct 2026 09:33:08 +0000 Manifest this update: Wed 07 Oct 2026 09:33:08 +0000 Manifest next update: Wed 14 Oct 2026 09:33:08 +0000 Files and hashes: 1: sfYJnZYvySdk5xe4l9ERPLfnbSk.crl (hash: AcgChe4rx9xocd0Zf/iM204NOKRm2dm6d4PifRhEyg0=) 2: QuZ9RYGCB3-yFC_l3eiq8enSqsc.asa (hash: zjE9PMVv3fk5nDWUkwT5RkbI+mpS62anj+Oj4cunBqo=) 3: 0EB7317299AA11F1BAD0E41A7111F970.roa (hash: 8OuhmagAmsUG01wzlgf+KfYSs7YjWuqfz/27xcrRefY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Validity Not Before: Oct 7 09:33:08 2026 GMT Not After : Oct 14 09:33:08 2026 GMT Subject: CN=6ac611d4-0aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:cb:f4:fc:fd:49:3c:cf:8d:59:59:9d:c7: fd:81:c6:ce:48:bf:4c:f0:22:33:4b:3b:fc:27:4e: c5:6a:cb:01:e8:ac:09:44:d1:64:7c:1b:e4:27:2e: b8:72:6a:00:4a:bd:7d:cc:5d:0e:59:38:fb:ea:1a: b7:9b:03:db:75:6c:3c:6d:d3:94:ba:2c:e6:76:ec: d3:c3:ed:e9:b8:15:ed:c3:82:67:71:bc:e1:40:01: f0:93:89:20:71:89:9a:41:de:e7:71:d9:57:5b:2c: 96:3c:22:7d:07:8b:2e:60:97:ae:41:79:83:14:ac: 3d:b4:92:4e:4d:f5:04:19:96:4d:ce:92:86:3f:b9: 92:a6:f3:9e:cf:3a:53:bb:90:3f:29:e9:31:9c:53: 61:d6:3a:5e:0a:ae:1a:0d:97:85:ab:b8:bc:a7:ba: 1e:96:fb:60:71:6b:e9:ae:3c:b4:28:f7:20:69:34: 59:3f:d5:b9:96:f3:fe:63:31:95:b8:9d:a6:22:c6: d7:78:bf:69:f4:89:d8:ab:f2:42:06:5b:df:e2:58: 8a:cb:2f:d5:bd:1f:e9:9d:3c:e1:7c:eb:08:a9:5f: 5a:c5:4e:06:ca:eb:3d:a8:d2:4f:f7:36:b2:39:74: 4c:bf:34:a7:02:03:7c:9c:9f:43:46:da:12:0b:b7: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BE:53:18:9E:CC:8F:6F:B2:3E:24:00:FF:23:A3:8C:3E:F2:4F:4A X509v3 Authority Key Identifier: keyid:B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:61:0e:5d:d7:ed:cc:1b:32:a7:18:1b:b6:be:5a:12:e4: d5:0b:38:1a:35:ad:bf:d2:a7:a3:c2:96:48:47:97:ba:a4:75: 7c:f0:b6:7a:c1:72:a0:ab:e2:e1:36:53:03:e6:f5:74:26:32: 82:3f:8c:b4:4b:c1:67:8a:c0:a4:e9:0b:b1:b6:6c:2e:0a:ea: 30:04:5f:ed:33:dc:be:e9:f3:d9:c0:53:57:52:44:47:72:b6: 20:b8:42:a7:15:d2:3a:27:79:f2:4f:f5:4a:e2:1d:fb:24:0f: 5a:eb:89:77:95:38:4c:a0:b4:ce:f6:2b:46:d5:b8:aa:b6:ee: 5f:27:b9:df:43:fb:f4:3a:0b:93:5e:d6:87:01:86:ea:17:7a: 07:43:1d:c8:69:a3:5c:9a:a1:6f:5b:98:0b:f1:ff:cb:0c:d4: c0:e1:a1:67:4a:bb:20:13:e9:0b:a6:be:a7:bc:a7:e5:f5:ee: ba:dd:51:5b:61:01:67:e2:88:dc:4a:27:b8:74:53:ec:42:2f: 7b:d0:ef:01:96:2f:08:44:fb:44:92:40:fc:3a:50:95:03:1f: c8:24:89:01:7f:62:97:f8:6b:7d:bc:90:6b:11:e2:a0:e7:11: 13:30:a7:4a:5f:d3:0d:c8:36:fa:0b:1b:f6:ee:68:79:e5:34: 41:76:e0:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoQjFGNjA5OUQ5NjJGQzkyNzY0RTcxN0I4OTdEMTExM0NC N0U3NkQyOTAeFw0yNjEwMDcwOTMzMDhaFw0yNjEwMTQwOTMzMDhaMBgxFjAUBgNV BAMTDTZhYzYxMWQ0LTBhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkq8v0/P1JPM+NWVmdx/2Bxs5Iv0zwIjNLO/wnTsVqywHorAlE0WR8G+QnLrhy agBKvX3MXQ5ZOPvqGrebA9t1bDxt05S6LOZ27NPD7em4Fe3DgmdxvOFAAfCTiSBx iZpB3udx2VdbLJY8In0Hiy5gl65BeYMUrD20kk5N9QQZlk3OkoY/uZKm857POlO7 kD8p6TGcU2HWOl4KrhoNl4WruLynuh6W+2Bxa+muPLQo9yBpNFk/1bmW8/5jMZW4 naYixtd4v2n0idir8kIGW9/iWIrLL9W9H+mdPOF86wipX1rFTgbK6z2o0k/3NrI5 dEy/NKcCA3ycn0NG2hILt42NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsb5TGJ7M j2+yPiQA/yOjjD7yT0owHwYDVR0jBBgwFoAUsfYJnZYvySdk5xe4l9ERPLfnbSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzcwNjQ4RDg4OTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNkazV4ZTRsOUVSUExmbmJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2ZZSm5aWXZ5U2RrNXhlNGw5RVJQTGZuYlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzcwNjQ4RDg4OTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNk azV4ZTRsOUVSUExmbmJTay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7nmEOXdftzBsypxgbtr5aEuTVCzgaNa2/0qejwpZIR5e6pHV88LZ6wXKgq+Lh NlMD5vV0JjKCP4y0S8FnisCk6QuxtmwuCuowBF/tM9y+6fPZwFNXUkRHcrYguEKn FdI6J3nyT/VK4h37JA9a64l3lThMoLTO9itG1biqtu5fJ7nfQ/v0OguTXtaHAYbq F3oHQx3IaaNcmqFvW5gL8f/LDNTA4aFnSrsgE+kLpr6nvKfl9e663VFbYQFn4ojc Sie4dFPsQi970O8Bli8IRPtEkkD8OlCVAx/IJIkBf2KX+Gt9vJBrEeKg5xETMKdK X9MNyDb6Cxv27mh55TRBduCV -----END CERTIFICATE-----Generated at Thu Oct 8 07:18:20 2026 by rpki-client