$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: ke1ae0pgSgqW/Rz6TwfPy5OK5uGIbOJZvrl3e9mCHdk= Subject key identifier: D7:38:06:93:77:84:3E:DE:7A:96:8C:A2:88:E4:A0:E2:08:BA:59:2D Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 0237 Signing time: Mon 21 Sep 2026 02:44:07 +0000 Manifest this update: Mon 21 Sep 2026 02:44:06 +0000 Manifest next update: Mon 28 Sep 2026 02:44:06 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: j4Nhxyy8Gt8D9SshsW4gYHhomeJu4WdOD93pReg85bI=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: cF057REBd5D/+vcFWsOPGez1VoQjLibEv7GnA24pPRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Sep 21 02:44:06 2026 GMT Not After : Sep 28 02:44:06 2026 GMT Subject: CN=6ab099f6-f643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:f5:bb:e3:df:39:94:a0:b9:b0:bc:1f:2e: f7:4a:f2:4f:35:14:e1:58:08:3e:a2:3d:2f:99:49: 0c:2f:9b:38:16:fa:83:9e:34:f0:4a:a7:f4:f0:60: 26:2b:03:b9:58:45:3d:2a:33:e6:e6:ea:2f:e7:ac: c1:91:78:61:3c:2f:48:0b:99:db:d3:db:c0:5d:bf: 08:a3:6a:89:d0:6e:9b:71:fe:dc:4b:ef:bc:a1:47: 89:c3:51:19:87:16:20:89:0f:a8:22:e9:a9:15:08: b8:50:38:fe:22:c2:c7:5a:36:a3:35:d0:25:70:de: 31:29:0b:07:f6:85:30:ec:59:a0:3d:94:47:11:ef: 2c:64:d4:7a:9b:43:57:c7:88:0f:78:e8:19:23:b3: fa:24:64:54:92:fd:6b:3a:93:3b:57:47:7e:93:79: 7f:36:9d:bf:e7:84:a8:77:b0:4c:e6:04:77:64:af: 18:2e:11:c7:2a:09:ff:a6:29:4a:46:fa:6d:82:bb: 6b:39:57:bf:38:c6:93:dd:ca:c5:d8:86:de:a5:00: 77:39:78:06:c6:32:9c:7f:a7:1c:f3:75:c5:0e:93: c2:7b:e6:f7:30:29:8b:8f:b5:78:a8:a2:1f:9e:55: 00:8d:4b:a6:2c:ab:39:2b:b7:18:92:fc:52:3e:2a: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:38:06:93:77:84:3E:DE:7A:96:8C:A2:88:E4:A0:E2:08:BA:59:2D X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:dc:6b:25:a5:da:2b:40:0f:f5:f7:1d:fb:45:de:82:39:a4: 8e:80:c3:3a:9e:18:41:4a:9f:69:da:df:6d:cb:c3:2b:77:b7: 65:ba:81:2d:5b:9e:62:e5:fc:6e:00:dd:68:ab:1a:94:52:45: 2c:d8:7d:f9:ed:0e:ab:16:bf:d9:a6:36:9a:16:7c:84:62:31: 25:ed:86:7f:bd:00:d8:82:47:65:0e:27:2e:11:8f:6d:33:ac: 05:fb:3c:93:97:8d:10:e7:e2:ac:cc:a9:0a:d4:64:5c:82:c2: 43:c7:0f:79:99:e4:9d:57:e2:cb:9c:1a:d5:fe:de:ca:1f:bd: af:08:1b:9d:49:80:f1:98:41:41:20:ae:bd:32:7f:22:d8:58: 4d:7a:86:0c:1b:ca:18:a8:78:59:fc:22:68:43:15:d5:75:4e: 77:2d:3b:6d:b2:f0:51:94:b9:34:fd:49:b5:a1:e0:bc:10:13: 4a:1b:b4:02:99:8d:31:2b:cf:6f:b7:c8:3a:c0:67:bd:88:71: dc:c9:e1:ef:f2:7a:7d:44:00:b3:ff:8a:b5:5c:7c:b1:87:ff: b6:a0:b7:47:5d:da:25:13:bb:df:b1:c9:fe:13:3e:3c:f8:2f: 46:93:cc:ea:d4:e1:de:db:25:09:fb:eb:86:44:3d:cf:d9:90: 89:6f:f7:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjYwOTIxMDI0NDA2WhcNMjYwOTI4MDI0NDA2WjAYMRYwFAYD VQQDEw02YWIwOTlmNi1mNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bX1u+PfOZSgubC8Hy73SvJPNRThWAg+oj0vmUkML5s4FvqDnjTwSqf08GAm KwO5WEU9KjPm5uov56zBkXhhPC9IC5nb09vAXb8Io2qJ0G6bcf7cS++8oUeJw1EZ hxYgiQ+oIumpFQi4UDj+IsLHWjajNdAlcN4xKQsH9oUw7FmgPZRHEe8sZNR6m0NX x4gPeOgZI7P6JGRUkv1rOpM7V0d+k3l/Np2/54Sod7BM5gR3ZK8YLhHHKgn/pilK RvptgrtrOVe/OMaT3crF2IbepQB3OXgGxjKcf6cc83XFDpPCe+b3MCmLj7V4qKIf nlUAjUumLKs5K7cYkvxSPiohzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNc4BpN3 hD7eepaMoojkoOIIulktMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNxrJaXaK0AP9fcd+0XegjmkjoDDOp4YQUqfadrfbcvDK3e3ZbqBLVueYuX8 bgDdaKsalFJFLNh9+e0Oqxa/2aY2mhZ8hGIxJe2Gf70A2IJHZQ4nLhGPbTOsBfs8 k5eNEOfirMypCtRkXILCQ8cPeZnknVfiy5wa1f7eyh+9rwgbnUmA8ZhBQSCuvTJ/ IthYTXqGDBvKGKh4WfwiaEMV1XVOdy07bbLwUZS5NP1JtaHgvBATShu0ApmNMSvP b7fIOsBnvYhx3Mnh7/J6fUQAs/+KtVx8sYf/tqC3R13aJRO737HJ/hM+PPgvRpPM 6tTh3tslCfvrhkQ9z9mQiW/3Vw== -----END CERTIFICATE-----Generated at Mon Sep 21 15:42:33 2026 by rpki-client