$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: ucfWw8ifARiMdT7Bah4WcfJNU7XMZkB2J9Ep0p4h+g8= Subject key identifier: 17:D8:40:59:B2:B3:A8:23:5A:EE:46:9B:88:C9:AE:B0:7B:22:7F:70 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 35EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 35A3 Signing time: Sun 20 Sep 2026 15:08:35 +0000 Manifest this update: Sun 20 Sep 2026 15:08:34 +0000 Manifest next update: Sun 27 Sep 2026 15:08:34 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: wIce/sYcixzEpVIrSwtgdDxWm3nsNRyi87lKqB1Y/do=) 2: 98AF39F22E4211F1901494E893833773.roa (hash: iFoAuTtUU0PmJ95WE4oNN0+3octF6zZzDVlPo3nsN08=) 3: DF361B00A5CC11F1A22117043311F970.roa (hash: wfoek4jkokbMCRmukkgm+0nioqtb9Dep7rPilGoQZBY=) 4: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: t/FinXSX20SwBMUiySFrkn7ywqOOheY2Dij+qlDAY/8=) 5: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: G25/DoIQB4l/NxwZR2ZZ4S0VBthWUlwHYrnZ9UpUQ54=) 6: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: uPMubkV8FhRQlQGVWB1Ss5RVIBMdWnZesOclj5/0msM=) 7: 9B26CED6A5CD11F19849D7873311F970.roa (hash: uOeXNTY+ygflSEqIrkiBDcYliPel/CdnXhfU/RgbeP4=) 8: E243CD9C227811F1B65A16B9A4833773.roa (hash: S/AzEaze3DTMcHGlipjXyDifcNRIK7tT17DD9pwo8PU=) 9: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: qZUPt2igy/OZCeagcwY7sBJ8TPbC9Y0onFfuw4bOoUY=) 10: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: EIquPTmzhNm/EgMF6y+odwoHMOmuWe10Hl5flxr8E0U=) 11: 4CF39D56A79511F185FBCE2B4711F970.roa (hash: ArUq4GxWKIQsc6698q8FAb/XtSJmT3OWDlGToU57JEk=) 12: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: XccP1/47583iPiSx+eEAvXi2g46yNyTAMgjTPnRV7Z4=) 13: 861025FE5FE811F1B01C65CA7947A888.roa (hash: b93az1yEMQhuoit5EC4BrPCFQcc8SDWXmLB4a9o1rYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13802 (0x35ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Sep 20 15:08:34 2026 GMT Not After : Sep 27 15:08:34 2026 GMT Subject: CN=6aaff6f3-8cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:90:5f:25:53:8e:5f:dd:a5:c6:d9:c9:2f:eb: c4:5e:22:cf:1d:9c:14:22:1c:48:1a:37:6e:30:44: 63:28:90:52:74:52:b6:b0:c3:02:ca:ce:bf:ef:62: 71:f1:c8:45:52:40:b6:73:76:23:2e:53:41:49:d4: 43:a9:8d:62:e8:02:30:8c:41:80:2e:3f:bc:5b:a2: 0a:34:3d:8d:29:4d:9d:36:14:40:54:cb:4f:03:ed: b6:d5:93:f3:bb:ea:f3:96:1b:f2:d8:48:91:a8:63: ba:98:38:ec:38:86:b1:a7:b2:fd:03:41:29:a1:bd: 71:f4:a4:36:cc:b9:9d:8f:5f:59:ee:9b:03:74:3b: 2d:42:5e:44:60:66:63:36:8a:0d:e7:34:5d:fc:55: d4:44:c3:6e:fe:83:26:41:37:4c:39:64:e3:54:c3: d5:e3:ed:1a:dc:bc:8b:f7:d4:19:95:7c:6d:0b:09: 08:f6:07:87:d4:54:92:dd:f5:00:a8:8b:ed:ae:c1: 22:31:2a:32:c2:6c:35:3b:99:ee:3e:89:c1:e4:57: c8:e1:89:12:0e:bf:d2:91:03:b6:93:91:d8:60:cf: b7:6f:03:c9:1a:bc:d7:f6:29:c3:c0:bb:2d:b5:13: 17:87:63:94:87:30:03:e6:48:92:a1:1a:17:2e:6f: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D8:40:59:B2:B3:A8:23:5A:EE:46:9B:88:C9:AE:B0:7B:22:7F:70 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f8:09:c6:73:71:fc:98:40:8a:41:ac:5b:97:e0:55:5e:29: b6:f5:10:d7:3c:da:61:22:0c:0e:93:0c:68:a7:c2:40:ff:2f: cb:91:39:da:c3:0e:f3:54:71:88:15:f9:95:c9:dc:89:c4:0c: 29:0e:b0:79:da:31:ae:1d:2d:32:02:1c:b0:a0:6d:a4:b1:45: 45:22:4d:b1:06:47:a4:11:ea:56:9f:8b:a9:b2:5f:2d:8f:53: 0c:d5:ff:76:7f:60:a8:b9:2d:37:25:e7:98:0c:6f:c4:4c:8c: 80:c0:13:35:a6:58:f6:3b:94:d5:ba:da:4a:a1:83:83:79:17: ea:14:a6:8c:60:46:47:85:1a:26:ba:97:32:53:ae:ab:5c:9e: ae:71:44:8b:0d:02:1c:72:ce:06:f3:22:5b:d1:f4:c1:25:b2: 75:76:21:ce:08:20:ea:4f:99:b0:ea:13:4b:91:22:51:15:f5: 2e:bd:f7:3f:52:d0:07:16:96:3a:c4:73:eb:22:55:c9:da:1d: a5:55:7e:ec:6d:68:05:88:b3:6a:f2:73:c9:60:74:fd:38:98: 84:eb:de:cf:c1:c5:3c:1e:df:ab:80:53:40:15:e2:16:02:05: f7:aa:64:9a:04:79:a0:48:de:6e:ad:8c:47:2f:68:ea:53:21: 73:46:de:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYwOTIwMTUwODM0WhcNMjYwOTI3MTUwODM0WjAYMRYwFAYD VQQDEw02YWFmZjZmMy04Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZBfJVOOX92lxtnJL+vEXiLPHZwUIhxIGjduMERjKJBSdFK2sMMCys6/72Jx 8chFUkC2c3YjLlNBSdRDqY1i6AIwjEGALj+8W6IKND2NKU2dNhRAVMtPA+221ZPz u+rzlhvy2EiRqGO6mDjsOIaxp7L9A0Epob1x9KQ2zLmdj19Z7psDdDstQl5EYGZj NooN5zRd/FXURMNu/oMmQTdMOWTjVMPV4+0a3LyL99QZlXxtCwkI9geH1FSS3fUA qIvtrsEiMSoywmw1O5nuPonB5FfI4YkSDr/SkQO2k5HYYM+3bwPJGrzX9inDwLst tRMXh2OUhzAD5kiSoRoXLm/J/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfYQFmy s6gjWu5Gm4jJrrB7In9wMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWvgJxnNx/JhAikGsW5fgVV4ptvUQ1zzaYSIMDpMMaKfCQP8vy5E52sMO81Rx iBX5lcncicQMKQ6wedoxrh0tMgIcsKBtpLFFRSJNsQZHpBHqVp+LqbJfLY9TDNX/ dn9gqLktNyXnmAxvxEyMgMATNaZY9juU1braSqGDg3kX6hSmjGBGR4UaJrqXMlOu q1yernFEiw0CHHLOBvMiW9H0wSWydXYhzggg6k+ZsOoTS5EiURX1Lr33P1LQBxaW OsRz6yJVydodpVV+7G1oBYizavJzyWB0/TiYhOvez8HFPB7fq4BTQBXiFgIF96pk mgR5oEjebq2MRy9o6lMhc0bePw== -----END CERTIFICATE-----Generated at Sun Sep 20 17:55:31 2026 by rpki-client