$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json) Hash identifier: r/nDRnhSYUoP+NxC6bxa/fz1aIkTTn8BixN31xXV340= Subject key identifier: D0:D0:EE:C0:43:6B:E5:FA:A0:93:22:6E:D7:15:5F:04:49:13:50:1A Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft Manifest number: C9 Signing time: Mon 21 Sep 2026 06:49:37 +0000 Manifest this update: Mon 21 Sep 2026 06:49:37 +0000 Manifest next update: Mon 28 Sep 2026 06:49:37 +0000 Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: sGtLlXqczLluOo/gOeIfh8KAhEhPbHMHXgd0yuK+mUM=) 2: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=) 3: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=) 4: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Sep 21 06:49:37 2026 GMT Not After : Sep 28 06:49:37 2026 GMT Subject: CN=6ab0d381-5269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:32:fe:bc:ff:4f:05:e1:3a:f5:4c:6f:e0: 77:55:73:a3:96:b0:87:1b:6a:56:fc:25:a6:db:71: 44:61:fa:64:1e:f3:b6:29:64:11:4e:0f:93:f5:ee: 09:0b:ab:7d:e3:ee:df:24:70:a0:e0:8f:5e:84:35: 5d:73:67:d4:6b:99:a3:fd:1c:05:cb:b2:c4:4e:bd: c6:b5:07:d9:5c:bd:be:86:02:77:45:3e:b8:0b:c9: 5e:78:cf:74:f1:1f:74:0f:76:7a:bd:2f:99:4c:26: 86:65:b7:cb:53:8e:e4:3c:66:df:9f:7b:94:3b:4e: dc:5c:7f:8e:17:7c:be:80:b7:50:ca:12:ee:3c:5e: 83:a5:69:66:e9:88:2a:9d:ea:e6:06:ab:4d:a5:3d: cf:50:50:95:9e:b4:09:f2:35:ad:fa:85:9f:5b:e5: c7:81:1b:43:b3:b6:e7:8a:89:f7:70:83:bc:08:49: 8e:16:0f:2f:97:d2:d0:0d:0a:b1:ff:e6:d1:cf:ec: 96:db:17:f2:65:7b:6a:d6:2a:3f:bd:18:5d:36:d4: 2b:e6:ef:fc:76:f0:39:78:5a:da:a6:a1:b0:91:e6: be:6a:b3:09:d0:de:56:bd:c9:af:ad:45:72:74:e9: 45:1f:a1:ff:a6:66:ee:b0:e5:40:59:b2:8f:29:d2: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D0:EE:C0:43:6B:E5:FA:A0:93:22:6E:D7:15:5F:04:49:13:50:1A X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:22:f1:ff:05:d8:68:f7:d3:b8:92:67:d1:6e:58:34:1d:27: 34:f3:c6:f1:40:58:fa:63:20:d1:f2:0c:74:a5:bc:bf:19:b1: 9b:c3:eb:e2:44:f1:fc:56:0c:ee:2e:c2:e3:55:89:d5:28:42: 5d:bc:8b:a1:3e:14:ca:80:c3:97:07:ef:3a:6c:80:99:2f:a1: 22:8c:73:43:f6:a8:02:b4:af:43:96:11:51:17:9c:89:dc:f2: 4d:9b:0e:c1:1c:96:19:3a:28:eb:4a:56:44:18:f1:5f:92:a3: 5f:ef:e8:60:57:f5:de:0b:c3:cf:d4:e7:ec:fb:54:78:21:2c: 9b:dd:21:6a:c8:0f:47:0a:46:ec:b6:71:a8:a2:a2:77:25:27: 89:47:f1:b7:a7:7e:6c:6a:43:1e:09:01:9b:d5:8f:78:eb:0c: b8:73:6f:b1:fa:fe:ea:2c:5c:2f:84:d9:d2:af:76:e8:75:9d: ba:c6:13:d7:fe:59:88:e1:9d:09:1d:1a:97:23:bc:a0:21:43: 70:bb:21:2f:96:6c:ef:51:fb:39:04:15:87:12:c0:ef:b5:f9: cc:8a:8b:87:a1:85:f6:7e:8a:0d:79:4b:eb:aa:5e:58:69:31: 1b:73:0d:4b:9e:ae:04:2a:72:73:43:43:0d:44:15:93:f8:2a: 05:b1:22:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYwOTIxMDY0OTM3WhcNMjYwOTI4MDY0OTM3WjAYMRYwFAYD VQQDEw02YWIwZDM4MS01MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9oy/rz/TwXhOvVMb+B3VXOjlrCHG2pW/CWm23FEYfpkHvO2KWQRTg+T9e4J C6t94+7fJHCg4I9ehDVdc2fUa5mj/RwFy7LETr3GtQfZXL2+hgJ3RT64C8leeM90 8R90D3Z6vS+ZTCaGZbfLU47kPGbfn3uUO07cXH+OF3y+gLdQyhLuPF6DpWlm6Ygq nermBqtNpT3PUFCVnrQJ8jWt+oWfW+XHgRtDs7bnion3cIO8CEmOFg8vl9LQDQqx /+bRz+yW2xfyZXtq1io/vRhdNtQr5u/8dvA5eFrapqGwkea+arMJ0N5WvcmvrUVy dOlFH6H/pmbusOVAWbKPKdKw/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDQ7sBD a+X6oJMibtcVXwRJE1AaMB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVm NGFaY3Z4VnpRVENvNVVHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSLx/wXYaPfTuJJn0W5YNB0nNPPG8UBY+mMg0fIMdKW8vxmxm8Pr4kTx/FYM 7i7C41WJ1ShCXbyLoT4UyoDDlwfvOmyAmS+hIoxzQ/aoArSvQ5YRURecidzyTZsO wRyWGToo60pWRBjxX5KjX+/oYFf13gvDz9Tn7PtUeCEsm90hasgPRwpG7LZxqKKi dyUniUfxt6d+bGpDHgkBm9WPeOsMuHNvsfr+6ixcL4TZ0q926HWdusYT1/5ZiOGd CR0alyO8oCFDcLshL5Zs71H7OQQVhxLA77X5zIqLh6GF9n6KDXlL66peWGkxG3MN S56uBCpyc0NDDUQVk/gqBbEiLQ== -----END CERTIFICATE-----Generated at Mon Sep 21 21:43:14 2026 by rpki-client