$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft File: 38k2Rbnm9TdyUHTptErqgKn1YIg.mft (raw, json) Hash identifier: AuNasOIF+64dVm6B2gUfW9MGC7H0vv7RuBHRGeQyyH0= Subject key identifier: FF:B7:67:F8:5C:25:87:90:18:B8:7A:E7:77:8F:B2:A6:BB:8C:D3:25 Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft Manifest number: 0F Signing time: Mon 21 Sep 2026 09:08:35 +0000 Manifest this update: Mon 21 Sep 2026 09:08:35 +0000 Manifest next update: Mon 28 Sep 2026 09:08:35 +0000 Files and hashes: 1: 38k2Rbnm9TdyUHTptErqgKn1YIg.crl (hash: JNK46uSvSuCJjA4ZnQUuSwZgPFpQl0Auccmy/2FD+uE=) 2: 95F5B186AA8A11F1B3B3CE7F6C11F970.roa (hash: CoTZ02xGIC5KTyTt7JjWnct1rV+9ZXxo1qq4eTQdz4Y=) 3: E608CE06AA8A11F1B24D5C986C11F970.roa (hash: HJbOP6dmHIH/GCIYSblnQZgwlybWB4EX3yuOhTf7yOc=) 4: E5163B82AA8A11F1B24D5C986C11F970.roa (hash: xhcHEPURG9+lzbo3uoCbCYX9fbPEr9b8rbLdKw7DUTc=) 5: E464CB9AAA8A11F1B24D5C986C11F970.roa (hash: dSmM9F1Tii7cBNcXMxoJVKWIXyxlBSdM3xcQ+7TeVfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Validity Not Before: Sep 21 09:08:35 2026 GMT Not After : Sep 28 09:08:35 2026 GMT Subject: CN=6ab0f413-1486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:50:aa:5e:4d:6d:5c:31:de:a0:96:3d:dd: 8d:e6:8b:f9:b9:46:e9:e7:de:cd:a5:fc:a9:9c:28: ef:6a:60:fd:69:93:8a:5b:71:2e:fb:34:78:5f:91: d0:8b:c7:2c:13:36:65:00:0b:4a:98:30:59:f6:e1: 02:e6:d4:46:53:b9:7d:8a:08:9d:31:e0:10:57:37: fa:37:dd:f1:e6:0e:19:51:c7:ee:62:02:fa:79:7b: f2:9e:7e:f0:b4:6f:50:aa:c0:bc:4e:5e:81:5b:70: 7c:5f:3b:df:37:4d:f4:b7:4c:d4:70:41:3b:28:68: 21:7a:7e:df:57:d2:8a:ba:c9:a6:b2:3f:74:cd:63: 0e:c2:c1:07:44:57:98:92:b7:37:60:0a:f0:78:6e: 2a:48:7e:8b:37:e6:bb:e7:92:02:79:82:0a:8b:99: 09:d4:a3:15:c0:ad:65:05:97:e7:33:55:1d:d1:d2: 3e:cb:0d:a2:22:18:e5:03:e2:7e:26:31:14:96:30: 99:60:13:7d:91:6c:76:01:b0:c6:1c:06:cd:b5:a6: a8:a2:e1:63:5b:7e:69:df:21:6e:ce:f1:24:67:b9: 46:ca:14:56:1b:5c:b7:44:cf:6b:3f:17:76:05:ae: 19:55:9a:71:a7:c8:48:60:85:d2:6f:dd:77:e1:55: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B7:67:F8:5C:25:87:90:18:B8:7A:E7:77:8F:B2:A6:BB:8C:D3:25 X509v3 Authority Key Identifier: keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c3:05:d3:2a:8d:01:39:04:11:99:77:27:39:e3:ba:31:7c: ff:39:54:72:40:0d:3c:04:2b:a5:e5:51:be:3c:d2:c2:9f:78: ab:c9:5c:63:11:b9:74:fd:9a:bd:9b:07:0d:7d:62:5a:a1:a5: 3a:35:d8:b1:8c:4a:64:b8:64:93:9b:37:07:83:fd:ea:94:83: 25:0c:1a:ee:e0:a6:51:99:0c:c2:0b:bd:d8:1d:53:72:a6:2b: 60:3c:14:b9:f3:65:a8:f5:be:a3:42:d7:ec:07:5c:ff:de:cf: 3a:b6:c2:7e:88:1a:48:fe:58:16:d6:41:d8:a4:b4:e7:57:6f: e4:b2:0e:24:c8:09:89:e9:4e:eb:9c:7c:da:02:fc:ee:9b:1e: 6c:de:09:f8:7b:e7:72:d8:df:e0:45:48:a6:6b:57:52:be:e0: 90:b2:1d:22:b9:0b:80:af:c3:a6:95:1d:98:6e:63:1d:c6:ec: 01:4e:3a:9b:e2:64:11:f9:94:68:73:f2:e4:f2:60:26:0f:f8: 39:43:77:08:b1:19:78:59:ad:f2:9e:d8:d4:53:9c:02:b9:03: b0:a9:05:71:ee:b2:08:30:35:ec:50:a9:48:8c:a1:8c:91:82: 09:ce:1c:48:0d:28:05:a9:c7:4c:1c:27:81:52:8c:a3:fd:09: a9:21:45:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTZCMjExMC8GA1UEBRMoREZDOTM2NDVCOUU2RjUzNzcyNTA3NEU5QjQ0QUVBODBB OUY1NjA4ODAeFw0yNjA5MjEwOTA4MzVaFw0yNjA5MjgwOTA4MzVaMBgxFjAUBgNV BAMTDTZhYjBmNDEzLTE0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEvVCqXk1tXDHeoJY93Y3mi/m5Runn3s2l/KmcKO9qYP1pk4pbcS77NHhfkdCL xywTNmUAC0qYMFn24QLm1EZTuX2KCJ0x4BBXN/o33fHmDhlRx+5iAvp5e/KefvC0 b1CqwLxOXoFbcHxfO983TfS3TNRwQTsoaCF6ft9X0oq6yaayP3TNYw7CwQdEV5iS tzdgCvB4bipIfos35rvnkgJ5ggqLmQnUoxXArWUFl+czVR3R0j7LDaIiGOUD4n4m MRSWMJlgE32RbHYBsMYcBs21pqii4WNbfmnfIW7O8SRnuUbKFFYbXLdEz2s/F3YF rhlVmnGnyEhghdJv3XfhVYHpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/7dn+Fwl h5AYuHrnd4+ypruM0yUwHwYDVR0jBBgwFoAU38k2Rbnm9TdyUHTptErqgKn1YIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NkIyL0Q0QTQ4RUZDQTVF OTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRkeVVIVHB0RXJxZ0tuMVlJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzhrMlJibm05VGR5VUhUcHRFcnFnS24xWUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NkIyL0Q0QTQ4RUZDQTVFOTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRk eVVIVHB0RXJxZ0tuMVlJZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBBwwXTKo0BOQQRmXcnOeO6MXz/OVRyQA08BCul5VG+PNLCn3iryVxjEbl0/Zq9 mwcNfWJaoaU6NdixjEpkuGSTmzcHg/3qlIMlDBru4KZRmQzCC73YHVNypitgPBS5 82Wo9b6jQtfsB1z/3s86tsJ+iBpI/lgW1kHYpLTnV2/ksg4kyAmJ6U7rnHzaAvzu mx5s3gn4e+dy2N/gRUima1dSvuCQsh0iuQuAr8OmlR2YbmMdxuwBTjqb4mQR+ZRo c/Lk8mAmD/g5Q3cIsRl4Wa3yntjUU5wCuQOwqQVx7rIIMDXsUKlIjKGMkYIJzhxI DSgFqcdMHCeBUoyj/QmpIUWq -----END CERTIFICATE-----Generated at Tue Sep 22 18:55:42 2026 by rpki-client