$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: RFfYCrme4cG2XeCrv7pl5X1fkCIIVZx1r5GjumtibDk= Subject key identifier: 8C:26:4C:31:DA:DB:60:CF:07:41:41:99:3E:E7:CB:26:57:7F:9D:E8 Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 02DB Signing time: Mon 21 Sep 2026 01:09:26 +0000 Manifest this update: Mon 21 Sep 2026 01:09:25 +0000 Manifest next update: Mon 28 Sep 2026 01:09:25 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: 3akJl4Tn1h/vs7e8TZVqbZUPJ/lSHhMDb1hUHs+CJlc=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: eqDK5JxYlPrD2YI5tre8evg6C6tiJ/GL+g0KzbaQtNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Sep 21 01:09:25 2026 GMT Not After : Sep 28 01:09:25 2026 GMT Subject: CN=6ab083c6-f2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:80:97:34:40:f0:e1:ff:3f:77:57:e9:b0: 05:2a:dd:69:e1:e4:ea:3f:26:05:43:75:ce:79:cf: f6:a1:ca:f1:62:f1:ae:d1:28:20:a5:7e:23:71:ba: 8f:b6:8e:5e:86:46:a0:c1:84:ff:df:5a:5f:ba:a5: 32:1d:6d:d2:78:72:9f:79:fc:3c:37:fd:41:9b:4c: 08:11:4b:94:89:62:6c:9d:3f:3c:86:89:8e:36:6e: 38:c3:ce:f0:19:fc:1e:62:77:53:22:e3:f5:9a:2b: 8f:98:3b:24:86:a6:25:51:e1:11:88:31:92:ec:ce: 07:44:99:ab:cd:bb:59:0e:13:cb:b4:0a:fb:a7:d4: 49:f1:79:fc:80:4c:a0:cd:d2:a9:c3:60:12:cc:83: 16:11:4d:12:48:06:71:c4:7a:1e:04:25:d9:ad:1c: 2f:69:d6:82:45:29:30:27:aa:e1:ad:28:53:77:96: d9:55:6e:73:60:d3:74:76:ec:1e:a9:fe:e7:61:ed: 98:e9:62:f9:37:d5:c7:f0:2b:f3:e8:2c:7c:67:ca: 3b:a3:33:39:94:45:15:cc:86:ec:86:2e:53:14:b1: 21:b8:79:39:e4:d6:a4:9c:e8:79:9e:f9:41:f4:e8: fd:46:32:82:3e:7e:bb:cd:95:e2:9c:46:19:7c:a7: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:4C:31:DA:DB:60:CF:07:41:41:99:3E:E7:CB:26:57:7F:9D:E8 X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:4d:e7:47:e4:44:55:5e:c9:27:3a:c6:ba:f4:30:ea:46: 9f:42:78:77:74:45:12:3c:7e:89:5b:84:64:df:05:44:eb:14: 15:72:c3:82:53:c3:4e:e1:2e:14:bb:77:4b:98:8a:b5:1c:55: 4a:ff:fd:d6:82:ac:c1:bd:0c:3a:f3:44:6b:3b:cb:68:9f:cb: 80:32:08:3a:21:75:da:8c:6b:49:74:c2:29:cb:6b:61:b2:a9: c6:75:86:c2:03:db:61:b0:af:cf:72:e1:6d:c2:ab:ce:0d:80: e8:b9:7f:ce:9d:35:0c:12:fc:ef:43:84:46:7b:94:3f:db:b4: 6f:df:a0:c6:48:92:52:d0:9b:aa:75:86:e8:16:0e:c0:83:e0: 86:9a:db:1a:57:76:a1:ba:f9:ee:d1:99:73:a3:d0:23:72:ab: 50:9d:b4:05:21:70:ff:fc:95:64:e7:de:a2:ab:01:b1:5d:d8: 7e:e0:40:08:e0:51:67:a7:55:ec:23:91:fc:25:35:23:5c:7d: 21:14:9c:4f:ba:7c:af:46:c7:ab:c3:df:f6:44:ad:d0:08:f6: 0a:7f:42:ba:d9:3b:11:08:e5:fb:e8:6d:f8:e1:a8:5f:17:61: 4d:fd:b4:0c:3a:8b:6f:db:1e:ea:74:6e:0a:d5:e7:b8:36:c2: 5b:5d:e5:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjYwOTIxMDEwOTI1WhcNMjYwOTI4MDEwOTI1WjAYMRYwFAYD VQQDEw02YWIwODNjNi1mMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQeAlzRA8OH/P3dX6bAFKt1p4eTqPyYFQ3XOec/2ocrxYvGu0SggpX4jcbqP to5ehkagwYT/31pfuqUyHW3SeHKfefw8N/1Bm0wIEUuUiWJsnT88homONm44w87w GfweYndTIuP1miuPmDskhqYlUeERiDGS7M4HRJmrzbtZDhPLtAr7p9RJ8Xn8gEyg zdKpw2ASzIMWEU0SSAZxxHoeBCXZrRwvadaCRSkwJ6rhrShTd5bZVW5zYNN0duwe qf7nYe2Y6WL5N9XH8Cvz6Cx8Z8o7ozM5lEUVzIbshi5TFLEhuHk55NaknOh5nvlB 9Oj9RjKCPn67zZXinEYZfKePAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwmTDHa 22DPB0FBmT7nyyZXf53oMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjbpN50fkRFVeySc6xrr0MOpGn0J4d3RFEjx+iVuEZN8FROsUFXLDglPDTuEu FLt3S5iKtRxVSv/91oKswb0MOvNEazvLaJ/LgDIIOiF12oxrSXTCKctrYbKpxnWG wgPbYbCvz3LhbcKrzg2A6Ll/zp01DBL870OERnuUP9u0b9+gxkiSUtCbqnWG6BYO wIPghprbGld2obr57tGZc6PQI3KrUJ20BSFw//yVZOfeoqsBsV3YfuBACOBRZ6dV 7COR/CU1I1x9IRScT7p8r0bHq8Pf9kSt0Aj2Cn9Cutk7EQjl++ht+OGoXxdhTf20 DDqLb9se6nRuCtXnuDbCW13ldw== -----END CERTIFICATE-----Generated at Tue Sep 22 11:42:04 2026 by rpki-client