$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json) Hash identifier: WN/7waqYOtJtRSKWmUmotT3mW4B3nfevCotO1mcu2Rw= Subject key identifier: 2F:EA:32:E5:8E:51:49:29:C6:EB:E3:A6:F2:4B:04:DB:FC:EB:A3:D0 Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft Manifest number: 0433 Signing time: Mon 21 Sep 2026 00:04:34 +0000 Manifest this update: Mon 21 Sep 2026 00:04:33 +0000 Manifest next update: Mon 28 Sep 2026 00:04:33 +0000 Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: pVMvgQYWeku198pQt3Qq2L5HcWUELS9AC9R0AmYtoz8=) 2: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: xh8ZzkScwUoVrKvZnOf/z0vy2KKYFXPO6zuhnInuTK4=) 3: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: 61tgJT9JBQD7/LnZY8sWrhXGon+4jXIx8zzVzR+mcYo=) 4: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: eyLRbf8L5PNErwQTJOk07CgThPMQFGU585OgUmJtuNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Sep 21 00:04:33 2026 GMT Not After : Sep 28 00:04:33 2026 GMT Subject: CN=6ab07491-9c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:94:b3:d4:2f:16:2f:ac:70:28:a2:4c:d9:87: 15:62:1a:73:bf:b1:7f:40:41:23:ad:fb:15:8e:e2: d9:ff:67:c4:2d:43:15:b6:44:f3:d3:c9:ca:c4:b8: dc:74:b8:c6:6f:a1:99:07:f0:7e:26:fe:9b:3e:5b: df:6b:06:da:47:fd:d6:71:0d:a6:ff:92:de:f9:cb: d9:b7:c9:c5:16:69:93:0f:f3:13:3d:30:f9:75:16: 5c:dd:8a:b0:7c:a3:48:8f:13:10:0a:9d:e3:0c:12: 12:bc:41:11:69:32:28:7e:cd:54:ee:68:ed:cb:9c: 47:45:1c:f3:91:6a:1a:48:fd:24:cb:91:ed:d1:a2: d9:1c:90:85:39:a0:b6:94:83:25:82:af:89:ce:dd: 40:67:99:ce:88:ec:51:11:34:66:b0:49:b2:19:d2: e5:51:19:e4:b5:1a:68:92:c0:42:79:76:f5:51:b5: fb:87:3b:58:d7:3a:8c:b5:fa:dc:08:e8:04:2b:dc: 2b:cc:9d:3d:69:1d:c7:3e:df:31:c8:13:2a:34:1c: ca:fa:a5:73:0f:94:a9:ae:85:02:e6:c5:5c:0b:4b: b2:87:50:50:c5:14:b5:f0:ea:4b:7b:7a:3a:8f:7d: 48:c9:1b:fe:4a:c1:cb:ba:a0:56:b5:df:2e:a0:51: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EA:32:E5:8E:51:49:29:C6:EB:E3:A6:F2:4B:04:DB:FC:EB:A3:D0 X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fd:3b:f7:63:be:88:53:7f:ff:cd:79:c2:8c:62:3e:ec:00: 4b:21:5d:ce:2d:1f:60:82:92:23:65:65:8a:bd:d0:0f:5f:dc: d3:25:d4:c6:b9:ec:9a:35:fc:76:aa:5d:5d:c1:dc:38:0e:66: 9c:36:99:01:84:89:de:22:e3:79:ad:15:f5:a4:01:e5:e7:89: 90:f6:be:1e:f6:c3:d7:96:ed:e9:79:b8:f3:fe:12:1e:9b:28: f5:6e:74:48:4d:51:fe:54:a6:8d:bf:79:fb:c2:7b:f7:b6:b3: 5e:34:98:8b:43:ab:37:60:9d:4c:83:a6:65:87:5b:18:50:94: ec:6c:81:7e:28:92:b7:18:42:e0:31:53:1a:6c:ba:4f:4d:fc: 15:10:2c:aa:27:67:c5:37:b2:ea:04:73:ab:d1:7e:16:6f:06: c5:05:08:b0:1a:4b:76:3d:a3:09:f5:92:61:9a:bd:09:36:39: 02:c0:b4:20:90:e5:1b:14:ae:b4:3b:dc:be:a1:7c:46:8c:20: 46:39:a5:b8:63:4d:b6:c7:cf:ef:9d:bb:55:f1:00:a8:50:95: 62:7d:85:7e:b7:11:90:fe:bf:df:ef:36:04:37:42:59:de:a8: 53:89:dd:5d:43:d4:20:b9:df:ee:ce:da:cb:73:a6:2f:82:81: b5:6f:d2:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjYwOTIxMDAwNDMzWhcNMjYwOTI4MDAwNDMzWjAYMRYwFAYD VQQDEw02YWIwNzQ5MS05YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65Sz1C8WL6xwKKJM2YcVYhpzv7F/QEEjrfsVjuLZ/2fELUMVtkTz08nKxLjc dLjGb6GZB/B+Jv6bPlvfawbaR/3WcQ2m/5Le+cvZt8nFFmmTD/MTPTD5dRZc3Yqw fKNIjxMQCp3jDBISvEERaTIofs1U7mjty5xHRRzzkWoaSP0ky5Ht0aLZHJCFOaC2 lIMlgq+Jzt1AZ5nOiOxRETRmsEmyGdLlURnktRpoksBCeXb1UbX7hztY1zqMtfrc COgEK9wrzJ09aR3HPt8xyBMqNBzK+qVzD5SproUC5sVcC0uyh1BQxRS18OpLe3o6 j31IyRv+SsHLuqBWtd8uoFGD6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/qMuWO UUkpxuvjpvJLBNv866PQMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjUyNy9ERDFBRTJGNkMyQUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVz Wk5ZR0JNekhUNVh3aXRwVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARP0792O+iFN//815woxiPuwASyFdzi0fYIKSI2Vlir3QD1/c0yXUxrnsmjX8 dqpdXcHcOA5mnDaZAYSJ3iLjea0V9aQB5eeJkPa+HvbD15bt6Xm48/4SHpso9W50 SE1R/lSmjb95+8J797azXjSYi0OrN2CdTIOmZYdbGFCU7GyBfiiStxhC4DFTGmy6 T038FRAsqidnxTey6gRzq9F+Fm8GxQUIsBpLdj2jCfWSYZq9CTY5AsC0IJDlGxSu tDvcvqF8RowgRjmluGNNtsfP7527VfEAqFCVYn2FfrcRkP6/3+82BDdCWd6oU4nd XUPUILnf7s7ay3OmL4KBtW/SPQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:15:54 2026 by rpki-client