$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: EPC8pHbl0OvotsRJKngfAwADHUohcTzGUeFv+eGmrPI= Subject key identifier: 1D:5C:1E:F7:76:60:AF:F5:BA:73:4D:9B:E2:88:F0:D3:45:40:34:8B Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 07CF Signing time: Sun 20 Sep 2026 21:15:38 +0000 Manifest this update: Sun 20 Sep 2026 21:15:38 +0000 Manifest next update: Sun 27 Sep 2026 21:15:38 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: yG6Tui3rDYO4xC7dvF/W/sFmyNaR9/wvbcDI/q3JiU8=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: ZZOQZPDyiLZTqV8WbUexxdia9It2J3YHCvfk5XQ2eMo=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: +unTxmS/iLt2Dr1BIXJYLku10bUj+HTQ+FfTOg9lpds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Validity Not Before: Sep 20 21:15:38 2026 GMT Not After : Sep 27 21:15:38 2026 GMT Subject: CN=6ab04cfa-fdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:35:0e:b8:c3:a6:2b:15:e9:30:d4:85:ad: c1:97:2f:2d:31:39:18:fb:67:53:7e:81:54:5b:e2: b3:b1:6b:4f:66:d3:8a:69:17:06:fd:d8:d7:66:7f: 21:af:2c:ef:ee:43:8c:29:42:87:cd:2b:49:2b:fc: c1:5b:38:ce:7b:3d:39:55:0e:b1:f6:dd:29:04:e8: e1:ff:9e:d7:fb:7a:93:33:ce:5a:5a:e4:17:ff:2a: 7a:d1:90:bd:c7:d7:15:5e:94:2c:52:2a:72:87:3b: c2:0a:9c:45:00:9c:72:44:c3:65:26:79:e3:be:60: 31:4e:a5:b9:a3:bf:c2:33:82:a9:b5:93:12:07:9c: e4:5e:29:e2:76:40:a2:1c:d4:82:f6:67:0b:ba:58: 08:f0:7b:00:a2:dc:e8:52:46:65:1b:b3:99:cf:90: d6:ff:f0:52:5a:93:aa:ec:77:05:c6:ae:7f:5a:66: 05:15:d0:82:48:b4:ed:f2:40:ed:12:2b:4c:c5:cd: b6:30:36:c4:90:5b:d8:b5:94:2b:77:b0:24:dc:2d: a2:dd:df:8e:cb:0d:fe:8c:3d:17:e6:d8:bb:2f:31: bd:42:8f:e5:89:41:5f:34:c7:7d:bb:93:f7:27:3f: e1:e4:5a:62:ee:c8:9d:5e:a4:e1:c0:9a:a5:d1:65: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:1E:F7:76:60:AF:F5:BA:73:4D:9B:E2:88:F0:D3:45:40:34:8B X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a0:05:b0:73:76:1c:71:9d:a6:d1:10:27:7f:bb:f5:f3:4e: fa:bc:f6:da:f6:4e:f4:3e:73:95:28:ec:81:db:6a:c8:47:53: 70:e6:2a:8d:ce:25:b9:4f:a8:73:73:ff:1a:d6:58:aa:c5:02: d0:72:27:a9:af:49:b1:54:b7:fd:9f:e5:58:7f:44:80:c1:65: 72:1b:e9:21:9e:75:a5:d1:9f:de:f2:3d:31:4a:52:f9:cb:e2: ec:57:72:c3:88:6e:79:d2:72:3d:09:00:63:e9:d2:a0:e7:82: 95:62:15:e4:96:2d:1b:4b:8d:50:10:f9:22:1e:37:32:c3:e3: cd:36:1f:a4:69:2a:3a:d1:b1:b4:b1:6b:5c:8a:ba:bf:aa:e3: 3b:15:85:94:f5:7f:57:d9:76:d9:00:65:a4:7b:f2:fc:df:a8: 17:f5:cd:0b:91:d2:19:f2:04:0b:11:61:03:2f:3c:ff:8f:80: 2b:9d:81:d8:05:ef:66:60:73:de:38:6f:46:f0:a5:7d:77:9b: 4e:08:a3:bd:92:d6:fa:24:d7:71:7c:db:ab:b9:55:bd:49:cc: 45:b4:01:b6:c5:8a:6f:e9:fa:ea:1c:bd:34:71:2e:9d:75:a9: 14:c4:2f:93:8f:57:aa:c4:72:a0:ff:66:68:3f:f0:11:9b:45: aa:56:b9:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjYwOTIwMjExNTM4WhcNMjYwOTI3MjExNTM4WjAYMRYwFAYD VQQDEw02YWIwNGNmYS1mZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+M1DrjDpisV6TDUha3Bly8tMTkY+2dTfoFUW+KzsWtPZtOKaRcG/djXZn8h ryzv7kOMKUKHzStJK/zBWzjOez05VQ6x9t0pBOjh/57X+3qTM85aWuQX/yp60ZC9 x9cVXpQsUipyhzvCCpxFAJxyRMNlJnnjvmAxTqW5o7/CM4KptZMSB5zkXinidkCi HNSC9mcLulgI8HsAotzoUkZlG7OZz5DW//BSWpOq7HcFxq5/WmYFFdCCSLTt8kDt EitMxc22MDbEkFvYtZQrd7Ak3C2i3d+Oyw3+jD0X5ti7LzG9Qo/liUFfNMd9u5P3 Jz/h5Fpi7sidXqThwJql0WUziQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1cHvd2 YK/1unNNm+KI8NNFQDSLMB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmKAFsHN2HHGdptEQJ3+79fNO+rz22vZO9D5zlSjsgdtqyEdTcOYqjc4luU+o c3P/GtZYqsUC0HInqa9JsVS3/Z/lWH9EgMFlchvpIZ51pdGf3vI9MUpS+cvi7Fdy w4huedJyPQkAY+nSoOeClWIV5JYtG0uNUBD5Ih43MsPjzTYfpGkqOtGxtLFrXIq6 v6rjOxWFlPV/V9l22QBlpHvy/N+oF/XNC5HSGfIECxFhAy88/4+AK52B2AXvZmBz 3jhvRvClfXebTgijvZLW+iTXcXzbq7lVvUnMRbQBtsWKb+n66hy9NHEunXWpFMQv k49XqsRyoP9maD/wEZtFqla5CQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:09:26 2026 by rpki-client