$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft File: 4hHNheByVQ4z5MyGpj-8360dNTI.mft (raw, json) Hash identifier: bJFFXv/1irohe9GII1TTZHFxmcBMad/ThDcLFkafEnk= Subject key identifier: 9F:08:34:C9:26:96:B5:4A:42:D6:31:D4:33:43:1C:2B:3F:7F:F6:46 Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 Certificate issuer: /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft Manifest number: 091B Signing time: Sat 10 Oct 2026 20:20:56 +0000 Manifest this update: Sat 10 Oct 2026 20:20:55 +0000 Manifest next update: Sat 17 Oct 2026 20:20:55 +0000 Files and hashes: 1: 4hHNheByVQ4z5MyGpj-8360dNTI.crl (hash: ltfdNO0OwYCsQPA35isVYauRJXtVs5aeIQubsKFbP+8=) 2: 57BDB7A85E7011F1A73FCCD7147AAC22.roa (hash: D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=) 3: CEDD71FAE48811F09BEEC367446F56BC.roa (hash: v+w6FMXM2xR0r2SO7jbmxEeAiii0dpp5GEOdFjQ8hTM=) 4: 0694DE925E7011F18D994AD5147AAC22.roa (hash: 1VTps7TMblVtTtQQmFdN1wLLHWYElV09OvYdQPb9W90=) 5: AF3304C65E6F11F18B912BC3147AAC22.roa (hash: mugZ6N0u6WAwoUu9/alz8CzePymZa9nygy/+jo0Dw6g=) 6: 624086E2E99611EA930A5B74C4F9AE02.roa (hash: gGjRkko3vUXG2uHIO8NHVPfpIWdSndydd5tBp7Lr7bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Validity Not Before: Oct 10 20:20:55 2026 GMT Not After : Oct 17 20:20:55 2026 GMT Subject: CN=6aca9e27-f729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:a7:f5:df:1d:70:c5:c7:a5:8a:f3:b7:a2: 70:67:c7:f5:98:e5:74:67:29:e8:9d:45:12:52:1c: bf:c9:e1:e8:ba:05:61:9b:15:9c:03:b2:86:fd:cd: 11:4c:f3:0d:df:2d:fd:62:6a:ee:27:82:9c:b9:ff: 85:c6:f0:4b:7d:1f:0d:81:38:87:ed:8f:82:87:4b: ae:41:91:74:1e:78:40:90:ac:4d:dc:20:60:84:6a: 60:00:4b:0f:a4:a0:fd:70:4e:42:55:60:fa:15:8e: d6:c6:d6:07:de:c3:ff:d8:22:91:8d:e0:02:d9:c3: 69:2c:60:4e:66:15:9f:c8:1d:fb:1f:e3:9a:10:08: 12:a5:e8:2d:69:02:f9:d6:c3:8c:b1:e0:eb:d7:18: 55:3a:78:4c:1e:9e:8e:71:0e:c1:50:35:0e:fd:e2: 88:33:46:39:2c:f7:d5:60:c6:98:15:88:50:e3:a2: 9f:c3:14:ee:57:81:11:99:96:aa:8b:f2:65:66:4a: 51:bd:cc:04:72:b7:64:14:12:97:24:62:fb:50:d3: 9d:b8:df:ea:0e:47:f7:22:6b:24:77:79:e4:15:b0: 06:9d:89:fa:3a:62:d2:0e:ae:a7:a7:fe:61:73:de: a9:b4:c6:cd:55:95:94:e9:52:84:8a:2c:41:98:cf: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:08:34:C9:26:96:B5:4A:42:D6:31:D4:33:43:1C:2B:3F:7F:F6:46 X509v3 Authority Key Identifier: keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:04:63:72:cf:b1:50:7f:a7:07:4a:b0:17:50:6f:da:a9: 89:91:ce:78:9f:ac:d6:31:d0:70:80:62:39:65:88:23:ef:37: de:f0:21:cb:ac:4d:32:8c:16:9d:71:dc:8f:bd:7c:7a:21:bc: 97:53:56:27:71:e2:7a:5c:31:70:57:7f:61:d5:df:b1:5a:50: d4:f4:71:5f:14:ef:d5:a7:46:21:94:2d:7e:3d:a7:2a:e2:42: 9d:1c:fa:a4:2c:3b:d6:51:55:1b:66:c0:a0:88:6d:9c:12:a1: 40:54:bc:e6:f2:63:72:4d:fc:71:f7:8b:58:e9:38:d2:00:60: 83:a5:a2:9f:78:af:0c:a6:dd:62:12:81:2f:45:e7:b5:a9:04: 80:0e:65:74:d7:14:93:2a:f2:b4:9e:a0:ca:27:57:29:6c:3c: 77:e9:5d:10:f3:7b:61:31:49:48:0a:f2:c2:1c:dc:1a:80:51: 41:37:91:92:9a:fd:1f:06:08:8d:e4:0b:c0:b4:f4:cf:fa:48: 40:8a:87:c2:d9:24:32:9a:39:8d:2f:b9:c8:1d:ae:e0:28:07: c3:03:59:d7:c8:dc:c8:a3:0a:59:ce:e0:b0:80:5d:6e:25:b8: 31:1c:a2:99:33:92:bc:29:04:c8:46:cf:0f:6e:36:75:63:9d: 30:df:8d:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1Q0QxMTAvBgNVBAUTKEUyMTFDRDg1RTA3MjU1MEUzM0U0Q0M4NkE2M0ZCQ0RG QUQxRDM1MzIwHhcNMjYxMDEwMjAyMDU1WhcNMjYxMDE3MjAyMDU1WjAYMRYwFAYD VQQDEw02YWNhOWUyNy1mNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/mn9d8dcMXHpYrzt6JwZ8f1mOV0ZynonUUSUhy/yeHougVhmxWcA7KG/c0R TPMN3y39YmruJ4Kcuf+FxvBLfR8NgTiH7Y+Ch0uuQZF0HnhAkKxN3CBghGpgAEsP pKD9cE5CVWD6FY7WxtYH3sP/2CKRjeAC2cNpLGBOZhWfyB37H+OaEAgSpegtaQL5 1sOMseDr1xhVOnhMHp6OcQ7BUDUO/eKIM0Y5LPfVYMaYFYhQ46KfwxTuV4ERmZaq i/JlZkpRvcwEcrdkFBKXJGL7UNOduN/qDkf3Imskd3nkFbAGnYn6OmLSDq6np/5h c96ptMbNVZWU6VKEiixBmM/tWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8INMkm lrVKQtYx1DNDHCs/f/ZGMB8GA1UdIwQYMBaAFOIRzYXgclUOM+TMhqY/vN+tHTUy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODVDRC84QTUwNTU4OERE MTkxMUVBOTREMjYwMTFDNEY5QUUwMi80aEhOaGVCeVZRNHo1TXlHcGotODM2MGRO VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRoSE5oZUJ5VlE0ejVNeUdwai04MzYwZE5USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODVDRC84QTUwNTU4OEREMTkxMUVBOTREMjYwMTFDNEY5QUUwMi80aEhOaGVCeVZR NHo1TXlHcGotODM2MGROVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAipcEY3LPsVB/pwdKsBdQb9qpiZHOeJ+s1jHQcIBiOWWII+833vAhy6xNMowW nXHcj718eiG8l1NWJ3HielwxcFd/YdXfsVpQ1PRxXxTv1adGIZQtfj2nKuJCnRz6 pCw71lFVG2bAoIhtnBKhQFS85vJjck38cfeLWOk40gBgg6Win3ivDKbdYhKBL0Xn takEgA5ldNcUkyrytJ6gyidXKWw8d+ldEPN7YTFJSArywhzcGoBRQTeRkpr9HwYI jeQLwLT0z/pIQIqHwtkkMpo5jS+5yB2u4CgHwwNZ18jcyKMKWc7gsIBdbiW4MRyi mTOSvCkEyEbPD242dWOdMN+NWw== -----END CERTIFICATE-----Generated at Sun Oct 11 11:05:43 2026 by rpki-client