$ rpki-client -vvvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: GDdd25O82DddcZQnZu5L1TCKoRfFG2waJMLGP9wZnT0= Subject key identifier: 49:E3:C7:E9:93:C0:3B:A6:D4:72:6C:A5:15:40:46:54:CB:FF:4D:D2 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 0480 Signing time: Sun 20 Sep 2026 23:53:30 +0000 Manifest this update: Sun 20 Sep 2026 23:53:29 +0000 Manifest next update: Sun 27 Sep 2026 23:53:29 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 6n/hT2Tu0ARXE+ZtZ828vfDzJrcy5bA8YXhghgWUu30=) 2: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=) 4: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Sep 20 23:53:29 2026 GMT Not After : Sep 27 23:53:29 2026 GMT Subject: CN=6ab071fa-e59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:a9:4e:51:fd:97:b2:f5:bd:77:cc:1c:b1: 56:8f:7e:da:44:dd:e6:64:be:f2:e2:6f:70:1a:56: 49:44:e5:f7:8c:80:e6:95:49:eb:ae:da:e0:e5:92: f1:2d:d7:72:38:41:a3:8f:e1:12:eb:94:5a:aa:12: ce:d7:88:03:30:8d:3c:54:c5:4e:0d:5b:be:99:0e: 27:32:bf:a3:3a:80:03:8e:f9:82:1d:bf:28:40:1b: 02:44:df:2e:70:df:9c:52:75:c9:80:ef:5f:ed:6a: 49:25:41:46:2d:36:66:48:e9:eb:43:fc:75:da:5e: d4:6d:cf:15:cb:93:42:0d:8e:43:0e:dd:94:70:e4: 11:11:f0:87:1f:09:e4:20:33:f7:bd:04:ca:57:37: 48:7a:5f:69:20:17:0f:44:73:db:8a:00:12:b1:e1: 0a:ed:fa:e0:3e:a9:32:48:4b:54:c1:95:fe:e2:50: e6:89:a2:f3:77:c7:7a:06:9f:59:e9:c5:45:f1:c8: 23:79:9d:e3:db:8b:a5:bf:a8:dc:e6:4c:8f:15:ef: e7:7e:0f:85:a1:db:9a:f5:d0:45:d4:c3:1b:3d:cd: c0:48:8a:fe:3f:51:28:6d:e4:34:f2:54:b1:a8:76: 9f:1e:f3:96:1d:53:4c:3c:b7:34:7b:d8:65:ae:a5: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:C7:E9:93:C0:3B:A6:D4:72:6C:A5:15:40:46:54:CB:FF:4D:D2 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:23:1c:1c:99:4d:6c:de:33:3c:39:c7:09:8b:08:88:36:62: da:58:7b:84:e2:35:15:43:82:b4:3b:69:10:4b:7a:19:a7:fa: 41:db:26:e3:db:65:f3:92:8a:c3:b3:d4:26:41:67:25:eb:c5: 2a:11:a8:b3:36:ed:23:f0:78:8d:ba:d9:a5:6b:54:8b:c2:e0: 1f:aa:6f:b0:00:9e:16:08:ad:4c:01:e8:8e:e6:b6:2a:0a:31: 00:5f:3a:1f:65:59:1f:99:2c:2e:db:b9:d1:04:d9:a9:55:bb: 43:49:fe:ed:0c:be:64:db:ba:fe:8f:af:18:77:2b:43:d4:79: 93:02:64:e4:6a:19:dc:eb:b0:9d:aa:aa:1b:3b:e8:a2:46:e7: 10:2b:79:29:99:eb:f7:07:26:6a:78:6c:4a:c4:75:48:3e:87: 1e:0c:ce:d9:24:43:c5:59:26:09:62:66:a5:74:17:c5:7a:44: 73:07:7f:8a:c6:31:51:4a:ae:0a:fe:f2:b1:39:1e:98:d8:c9: a8:ff:53:00:28:7c:85:4e:3d:8d:8f:2f:f0:46:b0:0f:ce:42: c6:88:8b:b8:de:c2:09:ab:77:61:ec:e3:ff:76:fa:d9:7d:e8: a1:46:a9:84:9d:5f:2c:6c:cb:f1:2c:ef:22:b8:cc:84:8f:b4: dc:81:a6:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYwOTIwMjM1MzI5WhcNMjYwOTI3MjM1MzI5WjAYMRYwFAYD VQQDEw02YWIwNzFmYS1lNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiGpTlH9l7L1vXfMHLFWj37aRN3mZL7y4m9wGlZJROX3jIDmlUnrrtrg5ZLx LddyOEGjj+ES65RaqhLO14gDMI08VMVODVu+mQ4nMr+jOoADjvmCHb8oQBsCRN8u cN+cUnXJgO9f7WpJJUFGLTZmSOnrQ/x12l7Ubc8Vy5NCDY5DDt2UcOQREfCHHwnk IDP3vQTKVzdIel9pIBcPRHPbigASseEK7frgPqkySEtUwZX+4lDmiaLzd8d6Bp9Z 6cVF8cgjeZ3j24ulv6jc5kyPFe/nfg+Fodua9dBF1MMbPc3ASIr+P1EobeQ08lSx qHafHvOWHVNMPLc0e9hlrqULnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnjx+mT wDum1HJspRVARlTL/03SMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuiMcHJlNbN4zPDnHCYsIiDZi2lh7hOI1FUOCtDtpEEt6Gaf6Qdsm49tl85KK w7PUJkFnJevFKhGoszbtI/B4jbrZpWtUi8LgH6pvsACeFgitTAHojua2KgoxAF86 H2VZH5ksLtu50QTZqVW7Q0n+7Qy+ZNu6/o+vGHcrQ9R5kwJk5GoZ3OuwnaqqGzvo okbnECt5KZnr9wcmanhsSsR1SD6HHgzO2SRDxVkmCWJmpXQXxXpEcwd/isYxUUqu Cv7ysTkemNjJqP9TACh8hU49jY8v8EawD85CxoiLuN7CCat3Yezj/3b62X3ooUap hJ1fLGzL8SzvIrjMhI+03IGmYQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:31:26 2026 by rpki-client