$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft File: DHT8APVkd7MNxjxYlDlCKryGiIM.mft (raw, json) Hash identifier: vsRzHqWqRmKbgo3SDKgXNrP1du9C6N0bvCBE+pOUzh4= Subject key identifier: F7:85:C5:0F:B6:98:4A:F7:68:33:C0:D6:AB:92:93:24:3B:F9:EE:D5 Authority key identifier: 0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 Certificate issuer: /CN=A91D2DDF/serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft Manifest number: 03 Signing time: Sat 19 Sep 2026 09:19:29 +0000 Manifest this update: Sat 19 Sep 2026 09:19:29 +0000 Manifest next update: Sat 26 Sep 2026 09:19:29 +0000 Files and hashes: 1: DHT8APVkd7MNxjxYlDlCKryGiIM.crl (hash: GrWoOvjUdVgi9kDbe93A0eIYgEZdNMhaxfe09/dM5WY=) 2: 8D5261CEB23611F193647F1D6011F970.roa (hash: Ddh2MT1TV0fpap86jGqrKcJN7Br+EymOvpXhxYCLi5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2DDF, serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Validity Not Before: Sep 19 09:19:29 2026 GMT Not After : Sep 26 09:19:29 2026 GMT Subject: CN=6aae53a1-1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:86:ba:3d:0a:8b:d7:5e:71:cd:97:91:d9: ec:3a:f6:4e:ed:74:39:b7:5c:c6:f7:01:ec:09:3e: 25:b4:16:91:6d:5c:52:30:45:01:25:93:e5:24:a8: 48:bf:0b:bf:bb:8b:64:39:de:63:7d:29:d6:58:d7: ed:38:8c:db:37:b3:54:c9:8d:41:2c:a6:09:38:41: dc:b2:7d:ef:3f:75:4c:d6:28:ac:52:28:c6:2e:53: dc:a3:16:3b:87:cc:24:25:c8:64:3c:54:bf:4b:da: 01:1d:72:4a:83:ec:c5:55:31:96:fe:42:17:c4:a8: 4b:d2:06:bc:66:5a:a5:5b:d5:95:bc:12:be:56:36: 0f:54:bf:88:57:d2:f0:77:50:30:49:82:1d:5d:b0: 55:22:18:3a:48:92:d6:c6:ab:c2:1f:4e:41:b9:33: df:3a:7f:45:7a:d4:0e:80:a9:08:04:11:8b:19:33: 4c:4b:64:d3:47:1e:c5:72:e7:8c:7d:ca:0e:69:f1: d6:8f:5a:1c:69:c0:90:85:b4:e9:11:82:76:b7:1f: 58:3c:4a:5c:e8:57:b1:8c:47:30:8b:63:ca:a8:de: c1:bc:ae:46:ff:f5:26:e3:90:7f:09:82:76:31:d4: 61:bc:1c:49:52:05:22:6c:e5:03:be:b9:de:d3:0a: ba:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:C5:0F:B6:98:4A:F7:68:33:C0:D6:AB:92:93:24:3B:F9:EE:D5 X509v3 Authority Key Identifier: keyid:0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bf:75:ae:75:21:47:cb:b0:5f:e8:b5:a7:42:c9:d9:db:e4: ca:62:0e:08:1c:b0:7c:4c:46:40:4c:98:94:b0:98:de:73:1e: 12:20:36:f8:8a:b3:33:75:be:b7:3c:40:b7:89:87:54:33:41: 39:e7:46:e5:85:86:fc:4f:ae:c1:02:ca:21:a2:29:22:37:de: 22:85:f5:dc:ad:36:68:c6:8e:80:0b:26:b0:ae:e5:cd:02:6d: 6c:9e:2a:72:5c:e4:c2:58:80:be:d2:a6:a9:2c:38:0b:d9:b6: 6b:1d:46:c5:a9:fc:80:42:67:ea:9e:37:54:aa:ba:46:99:cb: 5f:77:2b:1c:43:3c:5b:a8:be:79:a5:16:88:a5:83:54:22:d1: 20:df:d3:56:9a:62:5f:cf:e2:51:6a:57:f4:fa:b5:1f:36:51: 58:08:0c:04:47:7a:c9:2a:20:d5:0b:b7:3b:07:1f:95:42:a7: 3d:07:aa:99:d9:a7:47:e4:5e:06:65:f9:69:06:f8:f7:84:00: 92:e2:f1:9e:4e:4c:3f:12:be:9b:e3:58:20:89:3d:b7:ae:b4: b7:05:c9:36:1e:af:1b:26:20:f7:f0:34:08:fb:96:b3:5c:04: 61:88:51:5f:2f:41:32:0f:50:cc:91:84:b8:9a:a4:42:bf:54: e8:1f:98:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkRERjExMC8GA1UEBRMoMEM3NEZDMDBGNTY0NzdCMzBEQzYzQzU4OTQzOTQyMkFC Qzg2ODg4MzAeFw0yNjA5MTkwOTE5MjlaFw0yNjA5MjYwOTE5MjlaMBgxFjAUBgNV BAMTDTZhYWU1M2ExLTFjMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVoIa6PQqL115xzZeR2ew69k7tdDm3XMb3AewJPiW0FpFtXFIwRQElk+UkqEi/ C7+7i2Q53mN9KdZY1+04jNs3s1TJjUEspgk4Qdyyfe8/dUzWKKxSKMYuU9yjFjuH zCQlyGQ8VL9L2gEdckqD7MVVMZb+QhfEqEvSBrxmWqVb1ZW8Er5WNg9Uv4hX0vB3 UDBJgh1dsFUiGDpIktbGq8IfTkG5M986f0V61A6AqQgEEYsZM0xLZNNHHsVy54x9 yg5p8daPWhxpwJCFtOkRgna3H1g8SlzoV7GMRzCLY8qo3sG8rkb/9SbjkH8JgnYx 1GG8HElSBSJs5QO+ud7TCrr7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU94XFD7aY SvdoM8DWq5KTJDv57tUwHwYDVR0jBBgwFoAUDHT8APVkd7MNxjxYlDlCKryGiIMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyRERGLzRGODZGNTk2QjIz NDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdNTnhqeFlsRGxDS3J5R2lJ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREhUOEFQVmtkN01OeGp4WWxEbENLcnlHaUlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy RERGLzRGODZGNTk2QjIzNDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdN TnhqeFlsRGxDS3J5R2lJTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1v3WudSFHy7Bf6LWnQsnZ2+TKYg4IHLB8TEZATJiUsJjecx4SIDb4irMzdb63 PEC3iYdUM0E550blhYb8T67BAsohoikiN94ihfXcrTZoxo6ACyawruXNAm1snipy XOTCWIC+0qapLDgL2bZrHUbFqfyAQmfqnjdUqrpGmctfdyscQzxbqL55pRaIpYNU ItEg39NWmmJfz+JRalf0+rUfNlFYCAwER3rJKiDVC7c7Bx+VQqc9B6qZ2adH5F4G ZflpBvj3hACS4vGeTkw/Er6b41ggiT23rrS3Bck2Hq8bJiD38DQI+5azXARhiFFf L0EyD1DMkYS4mqRCv1ToH5iA -----END CERTIFICATE-----Generated at Sun Sep 20 23:52:48 2026 by rpki-client