$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: /unoyYXwLJN2ViVkGhvYYMNNdPixzZGaWmQKx6tMa4Q= Subject key identifier: 7E:23:27:D5:B1:BE:CC:70:C6:42:A9:11:CF:AF:C4:02:E6:90:FE:75 Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 3A Signing time: Mon 21 Sep 2026 08:38:26 +0000 Manifest this update: Mon 21 Sep 2026 08:38:25 +0000 Manifest next update: Mon 28 Sep 2026 08:38:25 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: TJbPYsZDrIc+mudCb4xI3z0N68zX23r9DDzfNjN25bY=) 2: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) 3: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Sep 21 08:38:25 2026 GMT Not After : Sep 28 08:38:25 2026 GMT Subject: CN=6ab0ed02-a972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:10:96:d1:e4:58:7a:75:4b:2c:15:0b:02: 43:df:af:d7:6a:1f:e0:0e:73:7c:b0:ec:b1:2a:d1: 1c:93:4b:f4:62:dc:5e:e5:49:64:bb:61:a1:2a:2f: 3a:ff:1c:af:b5:08:62:11:e9:53:2e:c3:b6:76:1c: ee:f6:fb:00:e0:d0:fa:61:c8:08:9b:ce:ba:30:a4: 72:8d:2e:1c:91:80:36:bf:4b:cd:ca:e1:cc:16:8b: 28:43:1d:6f:fd:1e:12:a7:11:76:3f:ff:28:34:c2: 9b:c9:1f:1e:74:71:94:5d:55:eb:eb:e4:3f:9a:9d: 5f:71:3f:31:8e:25:16:9f:02:38:6a:f3:ae:94:95: 64:72:83:47:ef:f0:2a:18:48:25:45:ae:d4:64:ad: 18:a2:01:43:1f:d1:d4:cf:02:4f:d5:93:e7:ef:7d: e9:9d:21:39:cc:e2:ec:f7:5a:62:a6:c9:c3:7d:ca: b8:d8:b8:b0:70:20:45:eb:84:6e:4f:49:23:6d:1a: 7e:5e:1c:3d:f3:12:a7:1f:e0:12:dc:e1:74:2f:a8: 82:4a:71:8a:30:99:95:88:e1:2e:ab:62:94:52:72: 08:08:23:a4:17:04:fb:42:22:b1:3a:97:e1:80:a5: 1c:95:95:35:3c:57:85:e8:58:2e:46:ba:6a:9b:67: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:27:D5:B1:BE:CC:70:C6:42:A9:11:CF:AF:C4:02:E6:90:FE:75 X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ab:a4:ee:90:6e:ea:c6:54:e9:22:34:9b:b0:73:4f:b8:46: a3:87:f6:29:20:fd:15:f7:99:29:8c:9e:53:b4:01:9c:5c:43: 76:ba:63:92:b3:07:57:89:02:ad:c8:58:e0:ec:50:2e:79:b3: 65:39:fe:ee:bb:54:ff:e1:78:6c:34:76:d5:a6:a0:59:62:05: c4:b6:9d:bf:7e:fa:b9:67:93:ad:6c:46:cb:f2:1d:4b:98:9f: 34:54:c0:dd:fd:5a:6f:78:bd:02:b7:7f:77:22:d2:75:6a:7f: 2a:eb:dd:38:e5:75:99:03:6b:a5:be:0b:1a:2b:16:75:e2:bb: c8:ef:2a:14:10:79:e7:32:0f:97:71:08:f3:90:34:9c:45:d4: e5:7a:b0:4e:42:a9:8a:50:d1:f0:2b:2c:a7:37:54:ba:7e:ef: b9:d9:ea:47:ae:cc:d3:9a:29:7c:c0:8d:16:a6:d1:aa:0a:75: 1d:da:c5:1a:75:d6:5c:e5:a9:0f:09:45:46:4b:33:d8:a7:be: 2c:34:51:aa:e5:e3:13:b3:22:40:6e:8a:e3:bb:5d:9c:df:4d: bd:d8:6c:18:9a:69:f1:4a:97:6e:0d:01:89:31:d4:cf:86:3a: ab:38:00:e5:0e:e2:dc:71:4b:79:8d:b5:43:75:f1:28:62:08: 38:79:19:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA5MjEwODM4MjVaFw0yNjA5MjgwODM4MjVaMBgxFjAUBgNV BAMTDTZhYjBlZDAyLWE5NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChhhCW0eRYenVLLBULAkPfr9dqH+AOc3yw7LEq0RyTS/Ri3F7lSWS7YaEqLzr/ HK+1CGIR6VMuw7Z2HO72+wDg0PphyAibzrowpHKNLhyRgDa/S83K4cwWiyhDHW/9 HhKnEXY//yg0wpvJHx50cZRdVevr5D+anV9xPzGOJRafAjhq866UlWRyg0fv8CoY SCVFrtRkrRiiAUMf0dTPAk/Vk+fvfemdITnM4uz3WmKmycN9yrjYuLBwIEXrhG5P SSNtGn5eHD3zEqcf4BLc4XQvqIJKcYowmZWI4S6rYpRScggII6QXBPtCIrE6l+GA pRyVlTU8V4XoWC5GumqbZ1VtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfiMn1bG+ zHDGQqkRz6/EAuaQ/nUwHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMq6TukG7qxlTpIjSbsHNPuEajh/YpIP0V95kpjJ5TtAGcXEN2umOSswdXiQKt yFjg7FAuebNlOf7uu1T/4XhsNHbVpqBZYgXEtp2/fvq5Z5OtbEbL8h1LmJ80VMDd /VpveL0Ct393ItJ1an8q69045XWZA2ulvgsaKxZ14rvI7yoUEHnnMg+XcQjzkDSc RdTlerBOQqmKUNHwKyynN1S6fu+52epHrszTmil8wI0WptGqCnUd2sUaddZc5akP CUVGSzPYp74sNFGq5eMTsyJAborju12c30292GwYmmnxSpduDQGJMdTPhjqrOADl DuLccUt5jbVDdfEoYgg4eRlR -----END CERTIFICATE-----Generated at Tue Sep 22 16:56:15 2026 by rpki-client