$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: N6cY+Ku9Wo+/V/Xa5BX0mx+CrmpytZJyqIp8y/UO69E= Subject key identifier: B0:76:52:C1:48:03:92:87:0A:A6:89:71:A3:B6:E7:FF:C6:4F:22:3B Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1136 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 111C Signing time: Fri 02 Oct 2026 14:25:51 +0000 Manifest this update: Fri 02 Oct 2026 14:25:51 +0000 Manifest next update: Fri 09 Oct 2026 14:25:51 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: FanCM1/QYIb7BLaz+uMHomE/UhYLFOanv4qdJy594Hc=) 2: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=) 3: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=) 4: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 14:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4406 (0x1136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Oct 2 14:25:51 2026 GMT Not After : Oct 9 14:25:51 2026 GMT Subject: CN=6abfbeef-e8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:78:03:36:35:f6:7e:27:9e:c9:d1:9d:db: 78:5e:87:91:6e:a1:75:b4:af:5e:72:d8:34:64:90: 7e:71:41:d8:95:39:7b:47:ca:bd:27:61:c5:9e:58: b0:4f:c7:3b:d8:91:86:f4:f8:da:2d:e5:d7:cc:46: 53:6c:07:23:59:c8:b5:9e:ff:fa:9a:92:e6:9e:dd: 1e:ec:a2:78:92:5f:0e:55:10:b0:c0:e4:1c:e6:23: 70:a1:47:7b:4c:c9:c3:db:be:fe:b7:b6:99:59:a1: c2:4c:ca:4a:6c:89:9b:58:64:03:11:ee:87:f9:d9: be:87:20:c6:76:51:9d:ac:ed:aa:d8:8c:ac:d9:9c: b4:85:b7:3b:80:00:c5:3d:df:ae:45:84:03:e7:6d: 22:d1:0f:56:1e:04:40:41:89:21:e4:ec:6b:9a:1c: 23:8c:8e:23:67:2e:4e:cc:fc:0d:45:4a:3b:6b:40: 12:ff:c9:9e:17:fd:06:1f:4d:85:5f:49:3b:b0:7b: d7:ca:c4:cf:ba:e4:be:24:80:ec:cb:2d:ce:1b:98: c0:8e:5f:19:f5:50:a4:71:3c:69:a9:fb:ec:32:c0: aa:21:77:9b:aa:c4:de:d1:2f:f6:38:4b:ed:5a:9a: 97:16:b1:3e:a2:7d:39:c9:ac:bd:d3:c7:0a:4e:df: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:76:52:C1:48:03:92:87:0A:A6:89:71:A3:B6:E7:FF:C6:4F:22:3B X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d9:f5:6b:03:b1:b7:42:73:97:57:39:49:ab:c0:93:1d:3b: 65:96:91:d7:76:9e:43:b3:eb:7d:9f:24:0d:73:5f:f3:cf:68: 33:1d:9f:49:a5:e2:40:09:6e:94:1c:2c:5c:be:86:d3:5f:b2: 11:2c:ca:26:49:11:0d:ca:b0:d7:2e:d2:8e:2f:86:4f:8d:45: 5d:4a:d5:92:cf:17:10:05:dd:b9:b3:cf:61:34:c2:91:5b:92: 3e:12:94:6d:7f:04:5b:f5:b4:63:c0:df:df:06:c4:dd:8d:a0: 9d:38:aa:aa:fe:91:98:d3:84:c7:40:46:88:e8:b1:1c:ee:2d: 96:0a:8a:ee:54:fa:02:12:ad:e9:e4:48:ed:40:79:70:c5:0b: 2b:6b:a4:7c:02:e1:20:a6:e0:69:af:30:19:09:91:f3:1e:8d: b6:50:ce:de:80:f2:ec:60:2e:37:4c:30:ad:96:3a:b7:45:af: ca:05:35:42:d8:45:97:52:74:d3:81:c7:b0:a8:02:02:d3:43: 5e:06:44:25:25:b6:5e:5a:2d:cb:10:c2:c5:13:9a:9f:e1:1c: 3d:0b:ab:9d:4c:99:92:2b:4d:f5:b0:32:64:4f:bd:cd:d2:dd: 0e:ab:76:ac:84:32:45:2d:cd:d0:f5:46:7f:e0:01:81:38:0f: ee:ed:06:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICETYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjYxMDAyMTQyNTUxWhcNMjYxMDA5MTQyNTUxWjAYMRYwFAYD VQQDEw02YWJmYmVlZi1lOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKV4AzY19n4nnsnRndt4XoeRbqF1tK9ectg0ZJB+cUHYlTl7R8q9J2HFnliw T8c72JGG9PjaLeXXzEZTbAcjWci1nv/6mpLmnt0e7KJ4kl8OVRCwwOQc5iNwoUd7 TMnD277+t7aZWaHCTMpKbImbWGQDEe6H+dm+hyDGdlGdrO2q2Iys2Zy0hbc7gADF Pd+uRYQD520i0Q9WHgRAQYkh5OxrmhwjjI4jZy5OzPwNRUo7a0AS/8meF/0GH02F X0k7sHvXysTPuuS+JIDsyy3OG5jAjl8Z9VCkcTxpqfvsMsCqIXebqsTe0S/2OEvt WpqXFrE+on05yay908cKTt/5HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLB2UsFI A5KHCqaJcaO25//GTyI7MB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYdn1awOxt0Jzl1c5SavAkx07ZZaR13aeQ7PrfZ8kDXNf889oMx2fSaXiQAlu lBwsXL6G01+yESzKJkkRDcqw1y7Sji+GT41FXUrVks8XEAXdubPPYTTCkVuSPhKU bX8EW/W0Y8Df3wbE3Y2gnTiqqv6RmNOEx0BGiOixHO4tlgqK7lT6AhKt6eRI7UB5 cMULK2ukfALhIKbgaa8wGQmR8x6NtlDO3oDy7GAuN0wwrZY6t0WvygU1QthFl1J0 04HHsKgCAtNDXgZEJSW2XlotyxDCxROan+EcPQurnUyZkitN9bAyZE+9zdLdDqt2 rIQyRS3N0PVGf+ABgTgP7u0G0g== -----END CERTIFICATE-----Generated at Sun Oct 4 01:13:32 2026 by rpki-client