$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: zoRZbxI49Y8F+PoqEyxg2v44mXXCb0k61bcMYAQg6AU= Subject key identifier: BF:A9:AF:C6:49:F7:38:37:D6:D5:50:F0:1F:09:77:BE:75:5E:84:9A Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 07AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 079B Signing time: Wed 14 Oct 2026 21:48:02 +0000 Manifest this update: Wed 14 Oct 2026 21:48:02 +0000 Manifest next update: Wed 21 Oct 2026 21:48:02 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: iz/SO0g3TLURplI7QmHhWcM0EdXXNnXTBVEtAxbGPXg=) 2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: NXfieC6S74PlG+JtYRQQl5gMzeIDNhGSgnxY2WBkw18=) 3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: JK6/e0PvYBa8kGFQgLjtSrCPCDpo6wNDkFljh8D9dzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 21:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Oct 14 21:48:02 2026 GMT Not After : Oct 21 21:48:02 2026 GMT Subject: CN=6acff892-1ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:e2:57:5d:51:0d:06:3a:50:fc:dd:43:72: 7a:c1:bb:3d:c1:17:39:6d:9c:80:0d:4e:c3:8b:96: 98:c6:94:8e:6a:0d:38:a1:b4:a6:31:d2:2c:d0:4f: 43:08:90:2e:d6:75:bf:8b:01:dc:07:60:56:4c:48: d9:c7:aa:97:cc:d2:20:2d:43:14:d9:8e:20:83:4e: 60:6c:f8:05:f3:10:06:3a:aa:cc:56:bf:ae:36:30: 47:97:b3:3a:ab:05:33:73:05:9e:a3:1d:9d:f1:fe: d1:31:dc:bd:89:3e:85:f7:d5:82:54:0d:da:b4:1b: 7c:1f:33:21:5f:99:2a:38:ed:bf:48:03:c3:09:eb: fb:55:4d:24:4e:d2:b1:1a:bf:62:a5:6f:11:01:53: c3:b6:a1:bd:04:d8:db:c3:3f:68:76:98:f2:ad:ce: c9:d4:4a:09:ec:61:4b:4e:3a:77:02:85:6d:8f:14: 1b:70:9d:40:90:1b:32:c2:6f:af:52:97:28:31:8c: 02:bb:a2:0b:7e:36:3a:04:05:3e:87:1c:4e:2f:68: 7d:c4:54:ae:e3:bc:55:73:24:90:1c:b1:d5:d5:b2: f5:70:df:55:a0:9d:f1:27:1d:65:7f:5a:f1:4a:5c: c3:c3:1d:cf:c8:92:93:d4:ac:f3:6d:a0:1d:18:83: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A9:AF:C6:49:F7:38:37:D6:D5:50:F0:1F:09:77:BE:75:5E:84:9A X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e1:04:5d:2f:e1:3d:cb:34:68:52:e5:56:b1:49:dd:5e:31: 86:5c:20:ee:c9:25:9c:f1:67:50:ba:64:53:2b:fd:29:64:16: 24:90:d3:24:b9:9e:aa:99:bf:a5:56:ca:6f:79:07:5c:e8:81: 49:af:45:a0:a3:69:5e:aa:d8:ed:ba:0a:9e:88:9a:6b:c8:45: 3d:07:b9:67:84:03:09:80:cc:6b:ef:87:a1:df:6e:89:29:70: bb:f7:46:c1:f1:dc:1b:77:1f:6c:09:00:0e:3d:5f:fd:4e:bb: 11:cd:1e:c2:8d:35:fc:2f:b0:d0:0a:6d:82:f3:5c:a8:58:43: 5d:9f:c2:2b:fa:c0:da:b1:1a:1f:ba:f4:0e:7f:5c:01:e9:af: 62:d9:fd:70:d7:e9:f1:f1:74:79:4d:22:23:23:71:52:4d:ff: b8:26:eb:0b:fe:ce:56:ae:ee:ce:13:9f:f4:a2:b4:95:5e:d3: 72:72:a2:ba:7e:ad:fe:23:82:3a:00:91:a3:fc:51:74:8e:f0: 46:0d:a3:91:fb:42:a4:a2:a6:34:c4:1f:8f:36:01:4f:fc:fa: 0b:75:61:17:05:16:03:9e:00:d2:e6:3f:f3:a7:9b:e4:70:04: 13:fd:fe:09:f9:26:5d:dd:fa:5d:9c:8a:ea:b5:d1:9e:cf:ad: 88:a5:b7:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYxMDE0MjE0ODAyWhcNMjYxMDIxMjE0ODAyWjAYMRYwFAYD VQQDEw02YWNmZjg5Mi0xYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+DiV11RDQY6UPzdQ3J6wbs9wRc5bZyADU7Di5aYxpSOag04obSmMdIs0E9D CJAu1nW/iwHcB2BWTEjZx6qXzNIgLUMU2Y4gg05gbPgF8xAGOqrMVr+uNjBHl7M6 qwUzcwWeox2d8f7RMdy9iT6F99WCVA3atBt8HzMhX5kqOO2/SAPDCev7VU0kTtKx Gr9ipW8RAVPDtqG9BNjbwz9odpjyrc7J1EoJ7GFLTjp3AoVtjxQbcJ1AkBsywm+v UpcoMYwCu6ILfjY6BAU+hxxOL2h9xFSu47xVcySQHLHV1bL1cN9VoJ3xJx1lf1rx SlzDwx3PyJKT1KzzbaAdGINL9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+pr8ZJ 9zg31tVQ8B8Jd751XoSaMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQeEEXS/hPcs0aFLlVrFJ3V4xhlwg7sklnPFnULpkUyv9KWQWJJDTJLmeqpm/ pVbKb3kHXOiBSa9FoKNpXqrY7boKnoiaa8hFPQe5Z4QDCYDMa++Hod9uiSlwu/dG wfHcG3cfbAkADj1f/U67Ec0ewo01/C+w0AptgvNcqFhDXZ/CK/rA2rEaH7r0Dn9c AemvYtn9cNfp8fF0eU0iIyNxUk3/uCbrC/7OVq7uzhOf9KK0lV7TcnKiun6t/iOC OgCRo/xRdI7wRg2jkftCpKKmNMQfjzYBT/z6C3VhFwUWA54A0uY/86eb5HAEE/3+ CfkmXd36XZyK6rXRns+tiKW3Fw== -----END CERTIFICATE-----Generated at Thu Oct 15 08:11:43 2026 by rpki-client