$ rpki-client -vvvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: uXT11Xymmga6Zj8MXFoUzrBeBFh0yljVmdddUYdq6/k= Subject key identifier: 0C:93:EB:74:9F:57:21:EC:03:6B:E4:EC:6E:E5:B7:13:85:F8:D8:65 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0230 Signing time: Wed 23 Sep 2026 02:37:37 +0000 Manifest this update: Wed 23 Sep 2026 02:37:37 +0000 Manifest next update: Wed 30 Sep 2026 02:37:37 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: kA+WTZAXGUZpIF3XZeJwS/PXMk4j9G+6qMIORa6ACsU=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=) 3: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: vugsK16sJjvSr8OK0LSYKyoQkwn8bb1O/z7sIhYr5Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Sep 23 02:37:37 2026 GMT Not After : Sep 30 02:37:37 2026 GMT Subject: CN=6ab33b71-d909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:59:ce:91:b2:da:55:03:64:93:d5:66:82: 67:82:cc:be:f6:54:73:85:6d:32:29:12:0a:7a:e5: 17:f2:ec:1b:86:4d:fe:1c:bd:2e:31:92:8f:88:f0: a3:5e:1e:ce:56:93:8b:86:6f:14:6c:bb:1f:89:65: 9f:29:f8:f0:9c:8b:ba:01:52:a9:cf:3a:b9:ce:91: 90:aa:61:6e:c1:97:f3:fb:2c:6b:0b:ec:ac:2c:7b: f1:89:41:ed:6f:e5:ec:0e:5d:a3:5e:f6:ff:1f:96: bc:a6:48:9c:4d:90:87:87:88:1f:68:4b:70:bc:22: 18:49:70:51:1c:eb:3a:a2:9f:02:8c:03:22:83:0e: 22:68:3a:a3:4e:94:ac:1e:b1:72:a5:fb:67:c2:a4: bc:2c:f6:2f:91:28:cc:39:4d:9e:25:02:37:95:51: ee:3d:99:7d:37:ea:ca:82:ab:54:b4:91:20:4e:c7: 14:e8:37:36:96:60:a5:f8:7e:22:af:07:de:60:09: 9b:b6:8a:8e:50:53:24:2d:7f:d7:82:1f:13:4d:47: d1:56:80:d0:22:f1:10:03:b9:95:81:95:8f:70:eb: 32:89:24:be:d9:42:61:a0:90:69:06:a2:ba:17:2c: e2:a9:db:41:49:ee:5f:b7:09:d8:f3:6e:fe:67:0f: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:93:EB:74:9F:57:21:EC:03:6B:E4:EC:6E:E5:B7:13:85:F8:D8:65 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8e:85:af:d5:79:5c:50:88:9d:9c:34:04:75:36:6d:bf:d3: cc:58:31:a4:af:7f:c4:67:8b:c0:db:18:d2:8a:11:8c:90:de: dc:13:37:bd:09:58:67:5b:81:8b:0c:65:d7:80:46:fc:32:64: 1d:04:a5:03:47:67:13:7a:3b:ab:fe:14:ae:52:ba:49:55:4f: fd:6e:cf:47:6c:be:95:a3:af:17:a3:1a:dd:93:3d:a1:db:8f: 64:5c:5a:7e:a5:13:da:65:cc:df:e9:57:1f:55:97:ed:0b:89: 69:ec:d9:8b:c4:2b:15:2a:1e:ea:47:97:e7:63:17:75:f2:ee: 59:c3:59:97:4c:ff:e8:f3:a0:3e:d1:89:f1:d7:18:3b:27:09: 90:56:92:5f:89:8b:4d:b7:4f:1e:39:06:65:e0:ee:2a:8e:07: fc:d0:28:4e:c8:8a:c9:ac:77:39:8e:17:aa:f6:00:bd:6c:bb: 5f:5a:08:1d:db:f5:b9:b8:72:6c:60:d2:e5:da:d3:cf:a5:6d: 45:e2:79:d7:df:1d:92:83:b9:76:9c:ff:88:69:de:46:ca:ea: 7b:d6:1c:3d:e2:b9:27:5d:c9:1a:ac:7b:07:c2:74:d1:ac:f0: 1f:9c:fe:fe:d1:a4:fb:9a:0f:e1:f6:26:41:1b:b9:8c:94:f5: de:52:8a:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYwOTIzMDIzNzM3WhcNMjYwOTMwMDIzNzM3WjAYMRYwFAYD VQQDEw02YWIzM2I3MS1kOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsBZzpGy2lUDZJPVZoJngsy+9lRzhW0yKRIKeuUX8uwbhk3+HL0uMZKPiPCj Xh7OVpOLhm8UbLsfiWWfKfjwnIu6AVKpzzq5zpGQqmFuwZfz+yxrC+ysLHvxiUHt b+XsDl2jXvb/H5a8pkicTZCHh4gfaEtwvCIYSXBRHOs6op8CjAMigw4iaDqjTpSs HrFypftnwqS8LPYvkSjMOU2eJQI3lVHuPZl9N+rKgqtUtJEgTscU6Dc2lmCl+H4i rwfeYAmbtoqOUFMkLX/Xgh8TTUfRVoDQIvEQA7mVgZWPcOsyiSS+2UJhoJBpBqK6 FyziqdtBSe5ftwnY827+Zw8A0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyT63Sf VyHsA2vk7G7ltxOF+NhlMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgY6Fr9V5XFCInZw0BHU2bb/TzFgxpK9/xGeLwNsY0ooRjJDe3BM3vQlYZ1uB iwxl14BG/DJkHQSlA0dnE3o7q/4UrlK6SVVP/W7PR2y+laOvF6Ma3ZM9oduPZFxa fqUT2mXM3+lXH1WX7QuJaezZi8QrFSoe6keX52MXdfLuWcNZl0z/6POgPtGJ8dcY OycJkFaSX4mLTbdPHjkGZeDuKo4H/NAoTsiKyax3OY4XqvYAvWy7X1oIHdv1ubhy bGDS5drTz6VtReJ5198dkoO5dpz/iGneRsrqe9YcPeK5J13JGqx7B8J00azwH5z+ /tGk+5oP4fYmQRu5jJT13lKK+w== -----END CERTIFICATE-----Generated at Wed Sep 23 21:41:48 2026 by rpki-client