$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft File: tHhQxGf-y0GdelnYEaxeaiegDx0.mft (raw, json) Hash identifier: mBj1LiADMFSK+BREp1mGpMMt4JuNBliI97k3+80RcY0= Subject key identifier: 42:85:8E:AE:48:A4:86:6D:53:7E:DD:60:7E:35:4D:03:9F:7B:62:62 Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D Certificate issuer: /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft Manifest number: 4C Signing time: Sat 26 Sep 2026 22:18:05 +0000 Manifest this update: Sat 26 Sep 2026 22:18:04 +0000 Manifest next update: Sat 03 Oct 2026 22:18:04 +0000 Files and hashes: 1: tHhQxGf-y0GdelnYEaxeaiegDx0.crl (hash: 9sMN/idNBzglC7oelYqrGeOrRcjxcnfg/lRuQVR+KFM=) 2: B3598D60B58E11F1A2B2E4956C11F970.roa (hash: PTbcFT3tPgE1Nv0Y3QWVYbUfneVmNyIpN0txrIvRut4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Validity Not Before: Sep 26 22:18:04 2026 GMT Not After : Oct 3 22:18:04 2026 GMT Subject: CN=6ab8449d-7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:c7:f9:82:05:74:bb:f0:d3:6a:f5:2f:f4: 6a:6b:55:f2:be:78:1e:6d:76:2d:9f:85:d4:4a:25: 2d:df:a2:38:05:1f:11:0e:ae:82:fe:c5:db:e7:f5: 47:9d:4f:84:17:42:cf:1d:4b:e5:1c:fd:72:23:93: e7:06:b1:c0:b0:71:5f:53:7b:82:68:51:e1:e3:3b: 64:6c:57:57:1f:89:8a:c5:50:a1:34:9c:a0:d6:9c: 71:f6:c8:3a:ad:2e:8f:dd:78:24:d8:16:36:1c:f1: 62:43:20:ab:34:31:16:d6:ce:f7:c6:dc:47:d8:bd: 8c:85:cb:4e:ce:9f:92:43:25:fc:48:68:5e:bb:d4: 27:b5:ba:0f:40:2f:73:46:f5:eb:72:9a:ca:1c:0c: 48:f9:0f:a5:02:5e:c9:d4:9d:bc:95:e4:3f:4b:88: 3b:99:88:bc:26:a3:f7:21:fe:3f:64:5c:c4:16:b4: 3e:74:c3:fe:e6:d0:0f:05:4e:59:81:c8:c4:83:c0: ac:77:0e:8c:0d:d1:b8:2b:1d:18:d7:6f:0c:42:d2: 6c:07:1b:60:09:f0:0a:25:58:b5:5d:17:07:17:58: ec:e8:29:8f:68:52:ae:c9:de:e0:77:68:bf:28:9b: e3:0e:62:7b:4d:f7:51:b9:d1:d3:5e:1f:4f:5a:3b: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:8E:AE:48:A4:86:6D:53:7E:DD:60:7E:35:4D:03:9F:7B:62:62 X509v3 Authority Key Identifier: keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:9e:58:bf:d0:c5:43:b7:8c:be:24:91:6c:b3:05:26:51:6c: be:ff:bf:15:75:ff:85:65:d5:b3:e4:e4:90:8c:43:9b:41:7f: 35:4e:d4:da:4e:98:5e:3b:0a:54:91:a7:20:37:f5:00:8d:b8: bf:3e:69:a0:64:50:e9:98:e7:d1:c6:76:12:00:eb:8d:32:f3: 2c:5d:a3:3d:b4:7c:1a:58:e1:28:83:a9:76:cf:83:54:56:c2: f8:35:cb:20:bd:a8:d1:c5:32:47:81:cf:c7:17:fd:96:17:e8: bb:2e:0d:a3:bc:19:e1:f2:31:6f:4e:3f:21:89:1e:94:f0:f4: 69:ba:a0:37:69:ed:26:ef:b1:a7:d6:4a:24:42:8f:36:a6:47: db:f6:8a:f1:bc:30:50:ba:c1:b4:72:11:27:7e:d7:a3:a9:b8: a7:1a:3e:15:73:03:68:6f:99:a0:5e:02:9e:f5:25:6a:46:fb: 57:40:4e:3e:47:06:49:71:6a:ca:c1:bb:a2:07:25:00:70:a7: 51:2c:3f:e6:b2:6f:bb:6a:4a:85:d4:5a:25:37:a2:4d:89:a6: 4f:70:11:26:0f:b0:db:39:4d:b7:66:e0:99:8a:00:d0:e4:fa: fc:db:98:0a:3e:eb:ab:47:18:b3:bd:b7:92:cf:96:bb:54:c2: a9:7b:3f:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUE0MDExMC8GA1UEBRMoQjQ3ODUwQzQ2N0ZFQ0I0MTlEN0E1OUQ4MTFBQzVFNkEy N0EwMEYxRDAeFw0yNjA5MjYyMjE4MDRaFw0yNjEwMDMyMjE4MDRaMBgxFjAUBgNV BAMTDTZhYjg0NDlkLTdjYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCacf5ggV0u/DTavUv9GprVfK+eB5tdi2fhdRKJS3fojgFHxEOroL+xdvn9Ued T4QXQs8dS+Uc/XIjk+cGscCwcV9Te4JoUeHjO2RsV1cfiYrFUKE0nKDWnHH2yDqt Lo/deCTYFjYc8WJDIKs0MRbWzvfG3EfYvYyFy07On5JDJfxIaF671Ce1ug9AL3NG 9etymsocDEj5D6UCXsnUnbyV5D9LiDuZiLwmo/ch/j9kXMQWtD50w/7m0A8FTlmB yMSDwKx3DowN0bgrHRjXbwxC0mwHG2AJ8AolWLVdFwcXWOzoKY9oUq7J3uB3aL8o m+MOYntN91G50dNeH09aO5CJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQoWOrkik hm1Tft1gfjVNA597YmIwHwYDVR0jBBgwFoAUtHhQxGf+y0GdelnYEaxeaiegDx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQTQwLzRFRUVBMUE2NDkw QzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBHZGVsbllFYXhlYWllZ0R4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEhoUXhHZi15MEdkZWxuWUVheGVhaWVnRHgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QTQwLzRFRUVBMUE2NDkwQzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBH ZGVsbllFYXhlYWllZ0R4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCmnli/0MVDt4y+JJFsswUmUWy+/78Vdf+FZdWz5OSQjEObQX81TtTaTpheOwpU kacgN/UAjbi/PmmgZFDpmOfRxnYSAOuNMvMsXaM9tHwaWOEog6l2z4NUVsL4Ncsg vajRxTJHgc/HF/2WF+i7Lg2jvBnh8jFvTj8hiR6U8PRpuqA3ae0m77Gn1kokQo82 pkfb9orxvDBQusG0chEnftejqbinGj4VcwNob5mgXgKe9SVqRvtXQE4+RwZJcWrK wbuiByUAcKdRLD/msm+7akqF1FolN6JNiaZPcBEmD7DbOU23ZuCZigDQ5Pr825gK PuurRxizvbeSz5a7VMKpez/k -----END CERTIFICATE-----Generated at Sun Sep 27 01:47:19 2026 by rpki-client