$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: EFpCAF8fuVNBr8EQQuCReKUCzfu9/0o1RoUgIRtYLiA= Subject key identifier: BE:83:27:20:5D:C4:CD:22:A5:00:F5:FE:6D:E2:B6:E9:A7:B6:74:17 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D4B Signing time: Wed 14 Oct 2026 18:20:03 +0000 Manifest this update: Wed 14 Oct 2026 18:20:02 +0000 Manifest next update: Wed 21 Oct 2026 18:20:02 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: PMueV4+iSuGnlAPdDKzgNwvoB9ZReQGXo7T05HZYAxA=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 18:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 14 18:20:02 2026 GMT Not After : Oct 21 18:20:02 2026 GMT Subject: CN=6acfc7d3-2bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:45:81:70:f3:c6:99:13:83:fc:e4:68:1d:86: 07:90:45:72:e7:c2:ef:da:82:95:dc:0c:f8:ee:cc: 56:35:28:fe:6b:28:df:ea:24:2d:96:32:26:53:75: 63:1c:82:8d:91:14:5a:09:10:df:a4:30:8c:6b:5b: 93:f0:a3:e8:b7:bf:34:3a:21:7b:2f:fe:b5:9e:93: 36:35:9b:20:47:d7:22:5c:db:0c:ec:50:0f:62:1d: 91:5c:f2:be:dd:12:3c:f3:a7:cc:4f:19:e2:82:6f: a4:77:f8:16:1c:fd:5a:57:ab:3b:e6:e4:46:4f:33: 86:2a:e5:0b:07:92:b7:62:25:04:a5:bd:6c:05:b8: 76:12:82:ec:5e:5d:f1:98:40:45:3b:f8:b5:05:89: ef:88:40:65:33:90:84:0b:24:38:2b:38:32:71:ff: 82:45:0c:d9:3f:63:d4:eb:f2:0f:1d:51:94:18:b0: c8:4b:66:66:64:52:ed:18:5d:2c:91:10:39:e4:b7: 6b:52:10:ec:23:c2:84:e4:7b:da:3a:f8:a5:1a:ea: 38:a9:e1:94:a8:36:7f:0b:21:e5:48:ef:db:ff:62: 7e:0e:de:6d:68:4c:80:4d:f7:c9:d3:f3:ab:19:bd: 15:d5:01:5c:cb:91:70:34:c7:56:58:b3:53:54:ac: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:83:27:20:5D:C4:CD:22:A5:00:F5:FE:6D:E2:B6:E9:A7:B6:74:17 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:1c:f1:1f:57:cb:09:89:c9:de:ac:b4:0d:82:b5:28:a1: 4c:a7:f3:33:1e:e8:6b:3f:49:a3:3d:ce:b2:24:87:21:49:69: c3:4c:77:92:2d:01:51:5f:09:3b:bd:0f:07:96:38:2b:e9:3e: 8e:d4:11:14:17:22:98:cb:55:b4:2e:76:6e:57:1a:5c:06:19: d0:cc:4b:17:6e:80:4c:44:46:36:ce:66:fe:b0:42:b9:74:dc: fa:da:3b:17:fc:f4:72:8f:cc:c4:33:45:57:64:f8:a4:6e:94: 68:71:d4:29:78:8f:a7:b3:2b:b1:fc:7c:8c:87:09:d6:91:76: 9e:e8:13:ed:98:53:2a:f7:27:aa:6d:90:16:b4:90:69:ab:31: 02:c8:cb:99:6e:9e:63:23:41:32:04:76:44:33:02:fd:a0:de: d0:5d:99:71:7d:88:61:7a:ca:23:4a:f1:73:9a:b1:05:47:30: 02:2d:af:91:c2:ff:06:33:49:dc:0c:8a:2c:9d:c6:96:35:ae: 5a:da:c1:0c:b2:6b:fa:94:e3:60:ba:69:5e:4b:bb:b8:60:d5: e8:93:1f:6e:2c:8a:ef:88:79:4c:8e:12:ee:be:5f:64:48:cf: 0e:bb:c8:a7:ca:b8:fa:ed:c3:81:e2:15:81:65:c4:60:60:51: d8:fe:a3:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYxMDE0MTgyMDAyWhcNMjYxMDIxMTgyMDAyWjAYMRYwFAYD VQQDEw02YWNmYzdkMy0yYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EWBcPPGmROD/ORoHYYHkEVy58Lv2oKV3Az47sxWNSj+ayjf6iQtljImU3Vj HIKNkRRaCRDfpDCMa1uT8KPot780OiF7L/61npM2NZsgR9ciXNsM7FAPYh2RXPK+ 3RI886fMTxnigm+kd/gWHP1aV6s75uRGTzOGKuULB5K3YiUEpb1sBbh2EoLsXl3x mEBFO/i1BYnviEBlM5CECyQ4Kzgycf+CRQzZP2PU6/IPHVGUGLDIS2ZmZFLtGF0s kRA55LdrUhDsI8KE5HvaOvilGuo4qeGUqDZ/CyHlSO/b/2J+Dt5taEyATffJ0/Or Gb0V1QFcy5FwNMdWWLNTVKyErQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6DJyBd xM0ipQD1/m3itumntnQXMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANmUc8R9XywmJyd6stA2CtSihTKfzMx7oaz9Joz3OsiSHIUlpw0x3ki0BUV8J O70PB5Y4K+k+jtQRFBcimMtVtC52blcaXAYZ0MxLF26ATERGNs5m/rBCuXTc+to7 F/z0co/MxDNFV2T4pG6UaHHUKXiPp7Mrsfx8jIcJ1pF2nugT7ZhTKvcnqm2QFrSQ aasxAsjLmW6eYyNBMgR2RDMC/aDe0F2ZcX2IYXrKI0rxc5qxBUcwAi2vkcL/BjNJ 3AyKLJ3GljWuWtrBDLJr+pTjYLppXku7uGDV6JMfbiyK74h5TI4S7r5fZEjPDrvI p8q4+u3DgeIVgWXEYGBR2P6jsg== -----END CERTIFICATE-----Generated at Wed Oct 14 21:59:29 2026 by rpki-client