$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: GfiTcVdpzeGoi9zexA7GdxhHgP2KfxSW/R/sMAkIz0c= Subject key identifier: A7:7D:54:5E:E5:6B:E0:C0:78:B8:EE:F6:AA:83:E2:82:66:A5:39:2B Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 3582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 3580 Signing time: Fri 18 Sep 2026 15:09:17 +0000 Manifest this update: Fri 18 Sep 2026 15:09:16 +0000 Manifest next update: Fri 25 Sep 2026 15:09:16 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: sJAQ7OIBug5Uo7lBENxGWlfyR6O+3MEMRVQXmY+s5fE=) 2: 06B229CEAE8A11F1BB0AA9593211F970.roa (hash: 2VkXtw6TLQBz5SsHBgGw7v5T+W8gqP3MD+UHjaqQIqY=) 3: lqbDSEyswjdSPDR5AdmyuZ9H5iI.asa (hash: 8XekvOcth783cLD9XujT0eyZSbn8PYDNK3fol0iilWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13698 (0x3582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Sep 18 15:09:16 2026 GMT Not After : Sep 25 15:09:16 2026 GMT Subject: CN=6aad541d-a5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:fa:25:81:77:c9:42:3b:f8:fb:b0:74:36: 24:1a:28:5a:70:ce:64:e0:6c:bd:85:98:a9:8b:3e: 2a:d7:43:61:56:ce:8d:f8:ff:22:ad:d4:53:44:04: a9:3c:5e:15:1b:ff:a8:98:b2:cf:66:08:29:1b:23: 35:b6:fc:70:cf:0a:cf:fe:ce:87:13:ff:84:bc:04: a3:73:24:0a:0e:84:40:0a:2e:14:e7:68:17:47:b9: a9:34:73:37:a1:50:cd:64:43:45:7e:8a:a5:67:2a: 92:15:04:1e:96:95:14:f5:ba:ee:bb:65:64:d4:03: 72:67:30:ad:67:de:f1:bf:75:ba:ff:39:27:4c:25: df:19:e0:13:75:80:7c:ab:09:b8:13:b5:76:9c:0e: 40:70:1f:ca:c3:a9:fc:9c:33:f2:eb:e9:c5:f3:23: b3:74:e7:48:64:63:ae:50:15:9f:aa:dd:f4:5d:08: 38:5a:40:5d:40:21:46:bb:eb:ec:46:94:ff:25:4c: 99:c8:60:9a:c2:96:99:24:29:c7:89:1a:68:ec:f5: ea:d0:84:df:c4:18:dd:1c:d8:e1:f1:58:cd:e3:69: 0e:94:70:bb:31:6f:a2:2a:82:0e:38:36:43:35:ea: 50:29:49:9f:7b:71:57:c4:fa:55:51:aa:7b:f3:aa: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7D:54:5E:E5:6B:E0:C0:78:B8:EE:F6:AA:83:E2:82:66:A5:39:2B X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f7:bb:e7:a8:b4:f7:31:74:0b:4b:ba:a8:4d:69:57:2c:52: 0f:c4:26:1c:f1:c5:a9:c8:9b:84:ad:74:02:19:64:f2:32:6d: bc:6a:4c:44:ac:59:c2:d8:ad:2c:db:74:da:d2:44:f6:ba:3c: 06:02:b8:93:8d:93:04:f1:ec:84:00:87:c1:6f:13:a4:35:53: 4b:bf:14:07:aa:dd:92:75:18:00:0d:a5:26:0a:48:5f:4f:e5: 9f:16:32:2f:f8:66:3c:ee:0f:98:a3:cb:07:ab:98:48:78:48: 46:8a:f8:05:bf:25:64:ce:99:f2:5d:85:5a:7e:5e:c1:4c:0f: 17:9e:97:09:31:58:87:63:1c:db:57:e1:2e:e9:43:61:b5:04: 46:ec:10:65:7c:64:5a:1f:14:55:b7:1f:26:45:ab:36:98:53: 9a:5e:52:f3:b5:9e:93:de:8a:2d:40:ff:c7:0c:3d:58:36:bf: 5a:25:e5:cf:b6:33:63:0c:aa:76:fc:ab:2f:0e:46:40:30:64: 40:d3:87:99:73:46:81:8c:ba:3f:9d:4b:33:23:aa:82:e4:28: 60:98:7b:68:8a:e3:41:0a:90:71:25:9d:22:68:c8:0c:c7:40: 19:57:99:f8:c2:96:36:06:a5:78:8b:87:50:a2:18:f3:47:e0: b5:f3:ed:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjYwOTE4MTUwOTE2WhcNMjYwOTI1MTUwOTE2WjAYMRYwFAYD VQQDEw02YWFkNTQxZC1hNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOj6JYF3yUI7+PuwdDYkGihacM5k4Gy9hZipiz4q10NhVs6N+P8irdRTRASp PF4VG/+omLLPZggpGyM1tvxwzwrP/s6HE/+EvASjcyQKDoRACi4U52gXR7mpNHM3 oVDNZENFfoqlZyqSFQQelpUU9bruu2Vk1ANyZzCtZ97xv3W6/zknTCXfGeATdYB8 qwm4E7V2nA5AcB/Kw6n8nDPy6+nF8yOzdOdIZGOuUBWfqt30XQg4WkBdQCFGu+vs RpT/JUyZyGCawpaZJCnHiRpo7PXq0ITfxBjdHNjh8VjN42kOlHC7MW+iKoIOODZD NepQKUmfe3FXxPpVUap786pJ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKd9VF7l a+DAeLju9qqD4oJmpTkrMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAPe756i09zF0C0u6qE1pVyxSD8QmHPHFqcibhK10Ahlk8jJtvGpMRKxZwtit LNt02tJE9ro8BgK4k42TBPHshACHwW8TpDVTS78UB6rdknUYAA2lJgpIX0/lnxYy L/hmPO4PmKPLB6uYSHhIRor4Bb8lZM6Z8l2FWn5ewUwPF56XCTFYh2Mc21fhLulD YbUERuwQZXxkWh8UVbcfJkWrNphTml5S87Wek96KLUD/xww9WDa/WiXlz7YzYwyq dvyrLw5GQDBkQNOHmXNGgYy6P51LMyOqguQoYJh7aIrjQQqQcSWdImjIDMdAGVeZ +MKWNgaleIuHUKIY80fgtfPtng== -----END CERTIFICATE-----Generated at Sun Sep 20 17:41:38 2026 by rpki-client