$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: vojEqiMZPhO3ft2UjiBtXJHLUD9rjUwKV3vkxK+O1jQ= Subject key identifier: 06:9B:8D:06:74:6A:64:57:DC:E0:68:62:83:D9:67:91:43:09:8B:64 Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: 0123 Signing time: Mon 21 Sep 2026 05:49:15 +0000 Manifest this update: Mon 21 Sep 2026 05:49:15 +0000 Manifest next update: Mon 28 Sep 2026 05:49:15 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: ALs78eSkTAjskb/L6b0mGKeDrLATbg3a6EtBbaUT9NM=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: Sep 21 05:49:15 2026 GMT Not After : Sep 28 05:49:15 2026 GMT Subject: CN=6ab0c55b-7d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:99:80:68:b1:6f:4e:88:cf:3c:58:81:4f: 06:4a:96:a8:9d:fd:91:36:a8:4a:12:47:32:d5:27: 3e:7a:9a:b8:50:8d:45:b7:ff:db:d7:c6:2b:4b:4b: bd:b8:d3:75:3c:fb:62:ab:b1:01:dc:2a:e9:12:03: 39:64:5f:f0:2b:b0:12:7a:3d:22:2a:7a:ce:03:42: a4:6f:8a:3d:e7:34:7f:0e:94:4d:92:67:59:35:2f: 02:0b:44:40:e1:d9:c1:e1:e1:35:1d:01:1f:fa:41: f4:9e:30:33:47:c8:34:00:c3:e9:fc:90:19:10:ec: a8:7c:67:1f:23:1e:76:48:1c:d9:6b:25:54:cc:a2: 22:62:c8:4b:f3:3b:35:ee:b3:08:f1:e6:7d:54:1d: ee:b0:74:85:12:9d:fc:55:fd:72:d6:90:ee:b1:8b: e6:50:b9:e2:ed:7e:df:53:fa:b6:9c:96:21:ef:a3: b6:2b:b4:0a:1f:f7:b8:c9:e9:8d:04:75:4e:f3:c1: 2e:bb:90:78:13:c6:c0:7c:50:7f:32:04:62:c1:18: b7:57:9a:e3:0d:97:75:44:5b:fd:cc:e6:e6:ad:90: 19:fb:a6:d1:b1:71:56:7c:af:3e:01:47:ac:5f:53: 8d:03:85:eb:e8:18:42:6b:b4:17:07:c0:80:09:a5: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:8D:06:74:6A:64:57:DC:E0:68:62:83:D9:67:91:43:09:8B:64 X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:14:90:40:df:4d:10:fb:e8:55:5b:bf:1f:ed:a3:a3:05:31: e6:ef:96:92:6f:d3:5a:6f:b9:03:52:ad:97:d7:c4:f5:a9:e3: 82:1a:ef:e8:eb:ff:a6:f3:ad:09:83:aa:0e:ad:51:8b:8d:ce: d1:0b:87:a9:76:ba:93:94:b9:e2:81:b4:01:1f:ab:1b:38:25: a0:01:68:37:a7:dc:39:be:de:c6:f2:a1:f5:71:dd:48:8e:9d: 67:19:e8:12:09:fc:45:85:83:11:6d:3a:02:89:78:9e:15:90: b4:78:a8:19:db:7c:38:32:c4:d5:b4:40:dc:c9:ab:a1:a4:43: c1:ad:d8:34:a4:42:1c:9d:49:04:32:b6:77:c8:99:a7:0a:96: 99:7f:c3:bd:63:49:03:ca:2f:cb:35:f1:a2:9e:5a:fb:75:70: c3:1e:66:b1:30:5a:7e:b1:9c:75:b7:56:f7:57:20:67:5f:40: 1d:ce:a5:fe:7f:3b:1d:37:fd:0f:06:fc:4b:9b:ba:b5:50:4f: 1a:ef:3d:43:86:06:24:16:69:73:46:f5:4a:f3:6f:d0:6b:b6: 19:ba:ba:56:1c:ca:43:f9:01:2a:7d:f4:86:ec:77:c3:60:18: 14:a5:3e:a1:e1:e6:4d:7e:11:4a:2d:fa:1d:a9:79:d1:a6:b7: 6a:0e:7e:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDFGNERDRTM0MzlCMUY0MDM1RkZGOEM3MUNFMzU5RTVE MjBFNjlBMjQwHhcNMjYwOTIxMDU0OTE1WhcNMjYwOTI4MDU0OTE1WjAYMRYwFAYD VQQDEw02YWIwYzU1Yi03ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CqZgGixb06IzzxYgU8GSpaonf2RNqhKEkcy1Sc+epq4UI1Ft//b18YrS0u9 uNN1PPtiq7EB3CrpEgM5ZF/wK7ASej0iKnrOA0Kkb4o95zR/DpRNkmdZNS8CC0RA 4dnB4eE1HQEf+kH0njAzR8g0AMPp/JAZEOyofGcfIx52SBzZayVUzKIiYshL8zs1 7rMI8eZ9VB3usHSFEp38Vf1y1pDusYvmULni7X7fU/q2nJYh76O2K7QKH/e4yemN BHVO88Euu5B4E8bAfFB/MgRiwRi3V5rjDZd1RFv9zObmrZAZ+6bRsXFWfK8+AUes X1ONA4Xr6BhCa7QXB8CACaU8JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAabjQZ0 amRX3OBoYoPZZ5FDCYtkMB8GA1UdIwQYMBaAFB9NzjQ5sfQDX/+Mcc41nl0g5pok MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8yRjI1M0MxQUZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlBTmZfNHh4empXZVhTRG1t aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8yRjI1M0MxQUZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlB TmZfNHh4empXZVhTRG1taVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJBSQQN9NEPvoVVu/H+2jowUx5u+Wkm/TWm+5A1Ktl9fE9anjghrv6Ov/pvOt CYOqDq1Ri43O0QuHqXa6k5S54oG0AR+rGzgloAFoN6fcOb7exvKh9XHdSI6dZxno Egn8RYWDEW06Aol4nhWQtHioGdt8ODLE1bRA3MmroaRDwa3YNKRCHJ1JBDK2d8iZ pwqWmX/DvWNJA8ovyzXxop5a+3Vwwx5msTBafrGcdbdW91cgZ19AHc6l/n87HTf9 Dwb8S5u6tVBPGu89Q4YGJBZpc0b1SvNv0Gu2Gbq6VhzKQ/kBKn30hux3w2AYFKU+ oeHmTX4RSi36Hal50aa3ag5+1w== -----END CERTIFICATE-----Generated at Tue Sep 22 00:04:21 2026 by rpki-client