$ rpki-client -vvvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: IaDlYVWV0HTMGuOdQeLh+qSHYGh+o2maEx/wwH9tLIU= Subject key identifier: AF:0C:6C:96:05:22:48:F4:98:CE:FE:6C:85:96:25:76:2A:D5:4A:BD Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 0128 Signing time: Sat 03 Oct 2026 06:37:46 +0000 Manifest this update: Sat 03 Oct 2026 06:37:45 +0000 Manifest next update: Sat 10 Oct 2026 06:37:45 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: N2BESoRpSFxj5qIw57+CuB2rkGEMYgz7NZFQI6knwCk=) 2: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) 3: bnK0NbUw8bBQTqHVz5DDKSrXEe4.asa (hash: 7A6SI6CQLWVcX0yr/SArmbn6gtHpeEIz0aBxOGnQ4bM=) 4: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Oct 3 06:37:45 2026 GMT Not After : Oct 10 06:37:45 2026 GMT Subject: CN=6ac0a2ba-fcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:49:81:45:c8:c6:84:ca:79:41:db:2e:2f: 36:d4:e2:01:46:b7:7d:0b:19:8e:8e:a2:c1:46:92: 55:2a:6b:c2:9a:bd:cc:86:ba:05:2c:fb:90:c5:81: 3c:29:fe:3b:5d:a5:15:c1:c8:5d:c1:80:2c:0e:9c: 52:26:59:4d:1d:d7:06:69:ac:94:49:86:f6:b1:e5: 01:f3:e9:54:cf:73:3f:a6:4b:3c:90:91:d7:ce:c3: a7:8a:ec:49:66:81:f0:88:87:23:63:3c:e3:52:c2: 07:d5:2c:31:32:78:c3:08:2a:e4:7c:23:3c:f7:c5: 37:20:93:81:83:38:91:0d:90:ec:a3:b5:f2:c0:a1: 4d:87:01:3b:f2:d6:8a:17:bf:5a:71:8b:30:76:83: 92:fe:45:dc:73:2e:cb:45:df:1b:c5:d0:d8:9b:53: a8:cc:f7:da:9d:a1:79:0d:d9:d2:71:d6:45:86:38: b0:d1:c0:60:b9:ee:8b:57:f4:40:d4:cc:19:40:7b: 66:c5:9a:cc:43:72:64:bc:09:ea:2a:7f:28:ce:16: 69:6f:3d:fb:44:8a:f0:df:12:21:48:fe:78:57:1d: 35:2e:56:59:84:b2:16:3a:79:11:88:4e:64:fb:fb: 52:6f:cd:0b:31:19:f4:82:9c:42:de:d4:a3:e8:32: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0C:6C:96:05:22:48:F4:98:CE:FE:6C:85:96:25:76:2A:D5:4A:BD X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6f:46:75:ed:fc:3b:fa:2d:0b:6e:ee:14:45:95:e1:ad:ee: 54:82:c7:fe:cc:a9:b2:27:0f:6e:91:42:18:33:b3:17:92:32: f0:93:7a:91:0c:1f:3e:a3:c3:37:48:39:49:3f:a7:47:0b:fe: db:62:28:e6:7a:06:2d:86:92:2c:76:59:c6:af:ef:7c:11:cd: 54:f7:06:86:26:ad:4a:dc:07:16:9b:4d:12:a9:a5:65:5a:4c: 93:13:6c:4b:88:30:a3:c8:bc:96:22:44:da:1f:93:9f:f4:f6: cb:79:5d:c3:ae:10:a2:ba:de:f9:06:53:68:23:95:34:d9:af: 3d:b1:1a:37:f1:d2:96:b3:d9:4c:95:e4:b3:ac:3c:0f:a2:7a: 29:1c:9a:7a:3a:5c:4c:8c:62:7d:b4:bd:19:28:68:1c:78:e5: 5c:a7:2f:83:f5:5c:e8:7c:20:70:47:b3:ff:54:a1:5a:b5:5d: 9e:58:90:20:f8:11:83:ad:90:e3:0f:1f:be:5c:a0:37:c9:45: 72:c9:04:61:e1:72:68:13:6f:a4:5b:07:51:bd:1f:76:e5:2c: 7d:22:45:c3:5d:10:db:ca:5f:c5:f7:91:24:43:91:7c:e0:7a: 35:d6:ad:d1:f6:c1:6a:00:48:91:07:f5:1b:e8:26:d0:2f:38: c2:78:cd:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYxMDAzMDYzNzQ1WhcNMjYxMDEwMDYzNzQ1WjAYMRYwFAYD VQQDEw02YWMwYTJiYS1mY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHxJgUXIxoTKeUHbLi821OIBRrd9CxmOjqLBRpJVKmvCmr3MhroFLPuQxYE8 Kf47XaUVwchdwYAsDpxSJllNHdcGaayUSYb2seUB8+lUz3M/pks8kJHXzsOniuxJ ZoHwiIcjYzzjUsIH1SwxMnjDCCrkfCM898U3IJOBgziRDZDso7XywKFNhwE78taK F79acYswdoOS/kXccy7LRd8bxdDYm1OozPfanaF5DdnScdZFhjiw0cBgue6LV/RA 1MwZQHtmxZrMQ3JkvAnqKn8ozhZpbz37RIrw3xIhSP54Vx01LlZZhLIWOnkRiE5k +/tSb80LMRn0gpxC3tSj6DLKGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8MbJYF Ikj0mM7+bIWWJXYq1Uq9MB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnm9Gde38O/otC27uFEWV4a3uVILH/sypsicPbpFCGDOzF5Iy8JN6kQwfPqPD N0g5ST+nRwv+22Io5noGLYaSLHZZxq/vfBHNVPcGhiatStwHFptNEqmlZVpMkxNs S4gwo8i8liJE2h+Tn/T2y3ldw64Qorre+QZTaCOVNNmvPbEaN/HSlrPZTJXks6w8 D6J6KRyaejpcTIxifbS9GShoHHjlXKcvg/Vc6HwgcEez/1ShWrVdnliQIPgRg62Q 4w8fvlygN8lFcskEYeFyaBNvpFsHUb0fduUsfSJFw10Q28pfxfeRJEORfOB6Ndat 0fbBagBIkQf1G+gm0C84wnjNkw== -----END CERTIFICATE-----Generated at Sun Oct 4 22:21:45 2026 by rpki-client