$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft File: _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json) Hash identifier: iRkpAPVXNVEKDsHT+GCzhYyGINa9n1TKNOmGEWanCdE= Subject key identifier: FA:7E:7A:FA:A7:3F:57:50:69:7A:C5:65:F2:BE:F2:89:AC:12:23:5E Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft Manifest number: 21E5 Signing time: Tue 22 Sep 2026 15:50:41 +0000 Manifest this update: Tue 22 Sep 2026 15:50:40 +0000 Manifest next update: Tue 29 Sep 2026 15:50:40 +0000 Files and hashes: 1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: sMsWjds9ZEZ6T0KMZMoCX5A1b07uCGJ0KFBaDMv/fSo=) 2: C0C6DAC87F6711F181B5257061A30FBC.roa (hash: LArdPYBxgbX/0yRiPiY4+A0fZe2+AgQXn+s/Md8nMsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8723 (0x2213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Sep 22 15:50:40 2026 GMT Not After : Sep 29 15:50:40 2026 GMT Subject: CN=6ab2a3d1-2dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:ca:48:f1:81:2d:0a:1c:0a:b7:cb:53:00: 47:ca:3e:4b:72:c2:84:f9:94:8e:9c:0f:63:ea:f4: 1d:1b:c8:8f:b8:df:d3:0e:9d:45:3f:8b:31:7a:77: 1f:36:72:81:d0:a8:98:56:5a:20:26:c8:6c:6e:b2: d5:d5:a4:c4:54:e6:a2:64:32:5f:ee:6c:17:43:00: 0c:78:84:2d:bb:65:2e:24:01:63:6e:a1:10:f7:33: 4e:9e:2d:16:f2:42:96:9a:27:e2:04:79:b7:0f:49: ba:65:db:13:17:9a:03:f0:87:f6:78:ff:f5:47:fc: fc:ea:aa:b5:60:29:f4:a1:4c:20:95:b1:37:17:68: aa:bf:e6:c2:ea:35:08:16:8a:23:0a:7e:10:43:ae: 7d:0b:d0:a2:15:05:f7:97:c3:44:51:3f:04:e0:80: c8:9f:c6:7c:97:8e:c6:0a:6f:04:73:e3:b2:45:f1: 24:a5:8b:84:93:8a:5d:5d:ff:fe:da:96:fd:a0:f1: b6:43:e4:c9:af:14:2a:d3:71:51:81:59:bb:36:1d: 4e:af:ba:1d:8d:f0:fa:1e:02:4a:f0:09:a6:41:b9: aa:8c:0a:7a:44:3a:cb:2c:f7:2f:7a:95:16:d0:5a: 2f:6a:f3:2c:b8:bc:c8:77:bb:f3:d8:de:b1:01:60: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7E:7A:FA:A7:3F:57:50:69:7A:C5:65:F2:BE:F2:89:AC:12:23:5E X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0c:e0:a7:da:34:5e:bc:65:c0:c4:50:3d:0b:7b:05:94:bb: d0:2f:e4:51:87:16:0a:00:9c:00:42:34:23:39:7b:91:14:5d: 95:85:31:28:52:a9:c6:ea:6b:8e:9b:19:78:12:93:76:6b:ea: 1a:96:46:7d:a9:29:ab:33:92:8a:8e:c5:22:f6:a7:b0:ee:c0: 97:73:db:98:73:67:0a:69:5a:77:fb:cb:35:23:68:f1:6c:4d: 9b:86:f2:fa:07:b0:e1:75:5b:0f:73:41:1a:03:42:c3:41:56: 6c:8a:8c:0f:18:02:c8:77:10:1b:11:0e:0a:23:b9:25:71:38: e3:65:c2:7c:8a:bf:1f:76:aa:82:7b:dc:db:8a:a2:c4:2f:08: 82:fe:9e:a8:0c:0b:29:da:f9:4a:2e:2f:60:c3:17:04:fb:f9: a6:34:2f:2b:ee:fa:e8:4c:95:7c:7f:d3:96:5d:fb:59:b7:28: bd:0e:4b:a6:11:ea:22:01:b6:d0:90:be:bd:a2:ac:c0:ef:3f: 02:68:2e:0f:29:a5:b7:77:ad:ea:8c:e3:f8:67:d2:ac:ad:4b: cf:49:4b:d5:b8:91:94:16:4c:3c:ac:ff:e2:3f:6c:c5:cd:08: f2:56:8d:7a:7c:e5:a7:1e:79:e5:aa:7c:e8:36:78:e3:4e:62: 05:85:0d:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjYwOTIyMTU1MDQwWhcNMjYwOTI5MTU1MDQwWjAYMRYwFAYD VQQDEw02YWIyYTNkMS0yZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E3KSPGBLQocCrfLUwBHyj5LcsKE+ZSOnA9j6vQdG8iPuN/TDp1FP4sxencf NnKB0KiYVlogJshsbrLV1aTEVOaiZDJf7mwXQwAMeIQtu2UuJAFjbqEQ9zNOni0W 8kKWmifiBHm3D0m6ZdsTF5oD8If2eP/1R/z86qq1YCn0oUwglbE3F2iqv+bC6jUI FoojCn4QQ659C9CiFQX3l8NEUT8E4IDIn8Z8l47GCm8Ec+OyRfEkpYuEk4pdXf/+ 2pb9oPG2Q+TJrxQq03FRgVm7Nh1Or7odjfD6HgJK8AmmQbmqjAp6RDrLLPcvepUW 0FovavMsuLzId7vz2N6xAWB5ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPp+evqn P1dQaXrFZfK+8omsEiNeMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT MS1DMTZZRFBrZHZmMHJ0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACwzgp9o0XrxlwMRQPQt7BZS70C/kUYcWCgCcAEI0Izl7kRRdlYUxKFKpxupr jpsZeBKTdmvqGpZGfakpqzOSio7FIvansO7Al3PbmHNnCmlad/vLNSNo8WxNm4by +gew4XVbD3NBGgNCw0FWbIqMDxgCyHcQGxEOCiO5JXE442XCfIq/H3aqgnvc24qi xC8Igv6eqAwLKdr5Si4vYMMXBPv5pjQvK+766EyVfH/Tll37WbcovQ5LphHqIgG2 0JC+vaKswO8/AmguDymlt3et6ozj+GfSrK1Lz0lL1biRlBZMPKz/4j9sxc0I8laN enzlpx555ap86DZ4405iBYUNXQ== -----END CERTIFICATE-----Generated at Wed Sep 23 20:17:49 2026 by rpki-client