$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: BbsQuMwJy0Z9YXY8TEdFmPspgK7iWPbKFg3yYoICtg0= Subject key identifier: DD:CE:6F:E0:E2:4C:0F:97:05:5A:A2:A2:E8:62:39:A9:E9:16:C2:52 Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 38F3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 37CC Signing time: Sun 20 Sep 2026 14:32:42 +0000 Manifest this update: Sun 20 Sep 2026 14:32:42 +0000 Manifest next update: Sun 27 Sep 2026 14:32:42 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: kdFoowrRjWIdjeIdZNkjDriLPOvF5qO212vqjuWMKn4=) 2: 317DA71E8B0811F1AFBFDAB07011F970.roa (hash: azVTOKF0NFIhb0K96Fo23InB6ezFswHqZ4YFdrcEIzk=) 3: F24EEED208C011F19DFF611F213D8C67.roa (hash: j8mZP70/+lxFmxKK+gaXtA4vlgcSiykk11UZrhv9x1I=) 4: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: 5aKDuZwd3Wn+m9JFqN35rRMwxZf4PwI1YL49pBMgje4=) 5: 803E1FB4844611F18199E4686DA30FBC.roa (hash: fb/gMuY4GCBBcmZDDJjLxvs0FTK9CO7zdEHnqESTxOE=) 6: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: 5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=) 7: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: cceRHowy60ndHsS0V7KTQnvxOpHcB4H7ok2enChJkmk=) 8: A3A79DD6923811F1800CA6646F11F970.roa (hash: 8Ci0/0Zg6lRMknA03QwPBAlCGKPE4eHasYGtycyfkGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14579 (0x38f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Sep 20 14:32:42 2026 GMT Not After : Sep 27 14:32:42 2026 GMT Subject: CN=6aafee8a-d41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:e6:22:1a:98:c9:db:0e:3d:06:85:06:b5: 45:ea:06:0f:52:6b:64:20:0d:b1:1f:34:ff:49:a9: 52:26:38:85:fa:8b:54:7a:7b:2d:f2:39:31:15:71: 29:f5:1e:10:2b:ae:ec:6f:1e:37:bd:40:a2:98:c1: be:ad:ad:de:1b:78:79:f1:df:49:fc:b6:e6:fb:8b: dc:c1:3b:47:78:72:a2:a2:29:cf:7e:f4:2b:b8:8e: d2:4d:cd:68:e6:51:c9:c1:4c:00:8d:ca:59:9d:49: db:54:96:d1:54:2f:90:fe:89:59:ec:02:14:ad:a1: 7e:06:ac:81:81:2e:27:f9:be:38:0f:0b:5f:65:97: e9:74:7b:b6:74:c9:33:27:65:c9:3c:65:6e:b9:93: 29:8f:23:32:0b:30:40:ab:94:95:74:da:69:13:33: 61:71:d4:c1:6f:6d:ae:70:ec:ae:ac:4a:7f:96:7d: c3:c2:21:ee:36:a0:0a:1e:b4:8d:9e:30:23:42:65: 36:a5:dd:e1:f3:c3:b7:7c:10:94:86:69:b7:96:f8: 32:65:a0:ef:51:63:80:76:c0:33:fa:46:09:73:42: 3e:09:ed:2d:a6:2d:a3:28:58:42:77:96:bb:e1:05: 32:7e:75:e9:db:71:47:ac:da:5a:22:05:69:b9:af: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CE:6F:E0:E2:4C:0F:97:05:5A:A2:A2:E8:62:39:A9:E9:16:C2:52 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:43:21:97:c7:d3:09:1c:68:17:68:b0:5e:96:20:c1:a2:e7: ff:f4:e0:2a:73:ed:08:ae:cc:85:b2:55:81:bf:a0:ad:87:13: 92:af:d7:c7:6e:65:6e:de:33:66:a3:a7:e6:52:56:4a:34:74: 6d:24:1b:41:20:92:e1:47:40:51:56:38:2b:67:d0:29:b4:dd: d4:06:da:fa:d6:e7:a9:95:cf:a0:4c:32:f8:2a:b1:f1:f2:9a: 8e:81:86:ac:6c:67:a2:e4:e4:4d:29:f6:c5:51:96:71:73:2b: 7c:f3:25:ee:49:f6:2d:8a:98:78:c8:f0:b0:7b:9d:a6:ee:86: b5:bf:71:4e:fc:d1:1b:f5:18:d6:63:79:97:f5:f9:22:90:77: 7f:d6:f1:33:1e:7e:a8:c9:66:cd:cf:4b:a2:7c:da:b6:6b:e2: 53:e6:01:5c:b4:12:c9:da:4a:dd:fc:63:16:a6:b5:80:1b:26: 72:ea:c3:21:e9:c3:2a:d4:6b:63:43:99:ec:0f:61:26:4c:52: a7:ca:77:76:1a:82:06:42:06:e9:99:1e:98:74:87:5b:1a:f2: 8b:af:5c:b5:04:aa:aa:72:31:8e:1c:1d:15:bf:0b:c5:d8:0b: 1f:58:9b:40:32:4d:be:80:cd:3d:af:3b:1a:c8:b8:5a:7d:fc: 6c:87:3a:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwOTIwMTQzMjQyWhcNMjYwOTI3MTQzMjQyWjAYMRYwFAYD VQQDEw02YWFmZWU4YS1kNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7nmIhqYydsOPQaFBrVF6gYPUmtkIA2xHzT/SalSJjiF+otUenst8jkxFXEp 9R4QK67sbx43vUCimMG+ra3eG3h58d9J/Lbm+4vcwTtHeHKioinPfvQruI7STc1o 5lHJwUwAjcpZnUnbVJbRVC+Q/olZ7AIUraF+BqyBgS4n+b44DwtfZZfpdHu2dMkz J2XJPGVuuZMpjyMyCzBAq5SVdNppEzNhcdTBb22ucOyurEp/ln3DwiHuNqAKHrSN njAjQmU2pd3h88O3fBCUhmm3lvgyZaDvUWOAdsAz+kYJc0I+Ce0tpi2jKFhCd5a7 4QUyfnXp23FHrNpaIgVpua++bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3Ob+Di TA+XBVqiouhiOanpFsJSMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJkMhl8fTCRxoF2iwXpYgwaLn//TgKnPtCK7MhbJVgb+grYcTkq/Xx25lbt4z ZqOn5lJWSjR0bSQbQSCS4UdAUVY4K2fQKbTd1Aba+tbnqZXPoEwy+Cqx8fKajoGG rGxnouTkTSn2xVGWcXMrfPMl7kn2LYqYeMjwsHudpu6Gtb9xTvzRG/UY1mN5l/X5 IpB3f9bxMx5+qMlmzc9LonzatmviU+YBXLQSydpK3fxjFqa1gBsmcurDIenDKtRr Y0OZ7A9hJkxSp8p3dhqCBkIG6ZkemHSHWxryi69ctQSqqnIxjhwdFb8LxdgLH1ib QDJNvoDNPa87Gsi4Wn38bIc6Tw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:15:50 2026 by rpki-client