$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: Qo9FwAndRMaWyBQI6f05B8YliPBLwH81O1BQrsbwRRk= Subject key identifier: 0B:84:D7:F4:C9:1A:63:BF:04:32:DE:32:F9:85:8D:D2:B4:97:45:36 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 089A Signing time: Thu 24 Sep 2026 20:35:30 +0000 Manifest this update: Thu 24 Sep 2026 20:35:30 +0000 Manifest next update: Thu 01 Oct 2026 20:35:30 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: cZt2vuWDEEK21EIvEr5sOsFCT/v7gdavP+yoPNsuy4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Sep 24 20:35:30 2026 GMT Not After : Oct 1 20:35:30 2026 GMT Subject: CN=6ab58992-a8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:e9:5f:dd:c6:72:b5:e4:ad:78:fc:08:f5: e9:23:7d:06:36:c0:2a:9e:62:d7:b9:d5:e7:43:34: 98:57:4c:88:48:9c:ea:b7:7b:c7:0b:8a:f7:e9:1d: 13:b1:ee:a1:3f:5a:1f:1c:cd:70:c7:3c:0f:5b:a4: 11:4c:41:b8:8a:17:07:bd:d1:d8:3a:cc:f0:e4:58: fb:48:4a:7c:02:b7:1b:05:6f:64:54:d9:b8:a1:54: b4:8f:32:dc:1c:ea:a0:55:5b:02:6c:f6:4c:8b:b9: fb:2e:1e:29:bd:5d:2b:67:11:36:12:a5:fa:8a:11: f0:1b:2a:fe:31:81:4d:0f:55:8d:65:fd:59:96:62: b5:97:36:af:b0:8c:ba:d4:7c:c8:86:2a:e8:83:05: 2d:82:a8:0a:52:b8:c6:f4:00:24:60:b6:5b:a5:87: 5e:d4:e8:70:14:b6:73:fc:8f:a7:0f:72:37:dd:d6: d1:aa:76:11:2a:b9:f4:d8:f2:d5:b9:7d:04:29:b9: db:9c:2c:8c:46:df:7a:73:ad:d2:db:d6:20:02:f3: 7f:ef:6a:b5:fe:7c:0e:d4:33:3f:94:bc:53:2b:aa: 57:bd:62:70:1c:1a:dc:e7:55:84:0a:56:aa:d2:59: a7:a6:1e:fa:11:f0:76:13:e7:d2:e8:2e:ed:f1:60: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:D7:F4:C9:1A:63:BF:04:32:DE:32:F9:85:8D:D2:B4:97:45:36 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:26:48:ec:21:d7:71:d1:9e:d2:4c:9a:70:72:2a:9f:3d:f5: a9:9e:69:ca:3b:12:20:fd:13:77:e1:85:2f:80:03:b0:00:5e: e0:c7:af:7e:85:98:14:30:f2:0d:c7:dc:ed:b7:65:61:c1:42: 94:a7:92:c8:48:0b:76:21:8d:c5:c1:1a:2b:0c:73:c4:ab:43: e0:b9:84:67:db:b8:af:54:c7:03:61:e9:59:da:d7:25:16:b9: 21:6a:ba:ec:f6:96:dd:5c:2c:66:c1:a6:a1:06:27:e3:a9:3e: ae:00:83:78:fa:dc:02:41:ae:1f:fd:a8:91:34:21:7e:b1:5f: 5c:82:ed:01:50:9b:03:86:58:cb:b4:48:31:44:14:46:e4:7b: f4:0f:f4:34:3e:94:82:23:12:96:ee:e9:9b:d4:70:77:a2:b0: 03:be:ef:02:bc:b5:56:e7:1a:2b:fb:42:48:20:cf:dc:51:37: ac:96:55:95:5f:3d:4a:37:be:6e:5d:db:1f:a7:91:77:30:17: 37:e7:6f:0b:db:c7:2f:16:67:6b:1f:56:8a:8c:b0:fb:75:9b: 6b:53:27:2e:ab:b8:65:88:d2:cc:5a:de:cb:61:e4:29:d6:18: ce:e6:c2:bb:28:30:cd:4b:dd:39:6f:00:75:14:8d:cf:ad:c4: 4f:75:63:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjYwOTI0MjAzNTMwWhcNMjYxMDAxMjAzNTMwWjAYMRYwFAYD VQQDEw02YWI1ODk5Mi1hOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTPpX93GcrXkrXj8CPXpI30GNsAqnmLXudXnQzSYV0yISJzqt3vHC4r36R0T se6hP1ofHM1wxzwPW6QRTEG4ihcHvdHYOszw5Fj7SEp8ArcbBW9kVNm4oVS0jzLc HOqgVVsCbPZMi7n7Lh4pvV0rZxE2EqX6ihHwGyr+MYFND1WNZf1ZlmK1lzavsIy6 1HzIhirogwUtgqgKUrjG9AAkYLZbpYde1OhwFLZz/I+nD3I33dbRqnYRKrn02PLV uX0EKbnbnCyMRt96c63S29YgAvN/72q1/nwO1DM/lLxTK6pXvWJwHBrc51WEClaq 0lmnph76EfB2E+fS6C7t8WDzlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuE1/TJ GmO/BDLeMvmFjdK0l0U2MB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVSZI7CHXcdGe0kyacHIqnz31qZ5pyjsSIP0Td+GFL4ADsABe4MevfoWYFDDy Dcfc7bdlYcFClKeSyEgLdiGNxcEaKwxzxKtD4LmEZ9u4r1THA2HpWdrXJRa5IWq6 7PaW3VwsZsGmoQYn46k+rgCDePrcAkGuH/2okTQhfrFfXILtAVCbA4ZYy7RIMUQU RuR79A/0ND6UgiMSlu7pm9Rwd6KwA77vAry1VucaK/tCSCDP3FE3rJZVlV89Sje+ bl3bH6eRdzAXN+dvC9vHLxZnax9Wioyw+3Wba1MnLqu4ZYjSzFrey2HkKdYYzubC uygwzUvdOW8AdRSNz63ET3Vj7Q== -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:33 2026 by rpki-client