$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: EJ9rgXysdXh5y2V961/8Vc/mjxnkrn1mVPDTQR6RBkM= Subject key identifier: 63:D5:6F:6A:6F:70:9E:33:FB:AB:44:C5:92:9D:13:11:63:BC:1E:A6 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 0218 Signing time: Mon 21 Sep 2026 02:55:03 +0000 Manifest this update: Mon 21 Sep 2026 02:55:02 +0000 Manifest next update: Mon 28 Sep 2026 02:55:02 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: NXAFfzTjRxCxlJLWlkZyzy7wHWwPE9LYHZOm84jr4mY=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Sep 21 02:55:02 2026 GMT Not After : Sep 28 02:55:02 2026 GMT Subject: CN=6ab09c87-38d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:11:5f:eb:ac:55:85:d9:d9:ef:28:9c:fb: a5:23:f2:fc:36:f1:ca:d7:02:cb:66:e3:6c:59:fe: 1f:14:70:07:50:8c:3f:9a:50:2d:d0:a9:70:78:9d: 97:5d:87:16:69:b9:4c:86:26:39:c3:70:b3:d3:06: f9:1c:f5:6a:d3:b5:33:4e:c2:38:a8:12:e9:8d:9d: 41:d2:66:15:32:ca:b9:e2:3c:9e:dd:62:f2:70:47: c1:80:73:f1:25:ee:68:c7:20:75:1d:cf:58:43:9d: 30:ad:b7:b4:ad:22:7d:2a:91:02:2e:93:d9:4b:77: de:45:2b:1b:57:0f:98:77:70:da:d6:61:6d:dc:ba: 51:5e:78:3c:f2:34:45:a0:66:f1:86:0a:b6:2b:8c: b6:78:6e:27:6f:8f:e8:68:fc:47:3d:fa:4b:0e:8d: b6:87:82:46:bb:4c:4d:1d:9e:1c:4b:b2:a6:9b:63: c2:1d:a8:e0:1d:f7:bb:c2:1b:7c:78:a9:d7:8b:8b: 3d:3c:a2:27:7c:ca:1e:7d:1c:06:2d:d3:62:69:ca: 18:8a:88:62:b5:b9:e0:2c:55:30:dd:c8:25:50:18: ca:c3:2a:ca:87:f4:e6:8b:c9:d5:95:ec:3d:b8:c3: 36:b1:3e:d9:be:35:8a:a4:e8:d9:79:28:81:39:03: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D5:6F:6A:6F:70:9E:33:FB:AB:44:C5:92:9D:13:11:63:BC:1E:A6 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:15:08:bc:c1:e4:9e:67:2f:99:26:9b:f0:74:a7:8d:3e:ae: 21:fa:e6:81:b9:9d:22:67:64:68:0e:71:55:6f:5a:e8:dd:85: 8c:53:e8:c1:8d:d1:3a:27:56:f4:ef:bc:3b:2a:07:ce:1c:b0: 63:d8:09:18:d6:70:74:e7:fa:ca:34:a5:c6:e5:07:a1:b1:b1: 94:6e:76:90:9a:0a:f6:35:32:67:44:13:a3:b5:37:1d:9f:c6: 88:d5:6c:14:aa:75:dc:13:90:a2:8e:2a:5e:72:10:de:84:00: 40:fe:39:87:00:5b:4f:31:98:cd:88:a8:b1:65:a8:ef:0d:40: 6a:4e:b1:e1:60:91:98:f3:47:71:63:e7:2c:09:8e:7f:10:b1: 7b:03:a5:b3:58:29:42:6d:55:4e:d5:93:4f:c2:e0:62:f4:72: 7a:29:d2:27:cc:13:91:0a:64:58:fe:fd:d5:48:4a:72:d2:17: 19:be:20:de:d1:2d:fa:21:a7:75:f1:dd:06:84:9b:75:60:51: 4e:3c:8b:86:e8:06:b1:e9:74:4b:2f:d6:59:85:2e:36:5b:56: f6:8b:88:8d:67:6a:e7:4d:01:1d:55:7d:94:e0:62:21:f8:30: d8:6a:23:c8:27:d3:6f:02:c6:fe:00:2e:c2:cb:00:4b:1a:7a: 69:34:01:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwOTIxMDI1NTAyWhcNMjYwOTI4MDI1NTAyWjAYMRYwFAYD VQQDEw02YWIwOWM4Ny0zOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfoRX+usVYXZ2e8onPulI/L8NvHK1wLLZuNsWf4fFHAHUIw/mlAt0KlweJ2X XYcWablMhiY5w3Cz0wb5HPVq07UzTsI4qBLpjZ1B0mYVMsq54jye3WLycEfBgHPx Je5oxyB1Hc9YQ50wrbe0rSJ9KpECLpPZS3feRSsbVw+Yd3Da1mFt3LpRXng88jRF oGbxhgq2K4y2eG4nb4/oaPxHPfpLDo22h4JGu0xNHZ4cS7Kmm2PCHajgHfe7wht8 eKnXi4s9PKInfMoefRwGLdNiacoYiohitbngLFUw3cglUBjKwyrKh/Tmi8nVlew9 uMM2sT7ZvjWKpOjZeSiBOQOeOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPVb2pv cJ4z+6tExZKdExFjvB6mMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANhUIvMHknmcvmSab8HSnjT6uIfrmgbmdImdkaA5xVW9a6N2FjFPowY3ROidW 9O+8OyoHzhywY9gJGNZwdOf6yjSlxuUHobGxlG52kJoK9jUyZ0QTo7U3HZ/GiNVs FKp13BOQoo4qXnIQ3oQAQP45hwBbTzGYzYiosWWo7w1Aak6x4WCRmPNHcWPnLAmO fxCxewOls1gpQm1VTtWTT8LgYvRyeinSJ8wTkQpkWP791UhKctIXGb4g3tEt+iGn dfHdBoSbdWBRTjyLhugGsel0Sy/WWYUuNltW9ouIjWdq500BHVV9lOBiIfgw2Goj yCfTbwLG/gAuwssASxp6aTQBIg== -----END CERTIFICATE-----Generated at Tue Sep 22 08:57:13 2026 by rpki-client