$ rpki-client -vvvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json) Hash identifier: Q8Smpssyg3118E9oMpSekOLhSnHqwCT6Y/r5kPm+f+o= Subject key identifier: 9E:F5:7C:EA:48:26:CB:F1:4C:F7:61:0E:02:03:18:49:68:9B:94:D3 Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Certificate serial: 3581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft Manifest number: 3581 Signing time: Thu 24 Sep 2026 14:34:39 +0000 Manifest this update: Thu 24 Sep 2026 14:34:39 +0000 Manifest next update: Thu 01 Oct 2026 14:34:39 +0000 Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: DTA8u9dX0jvHWbGXzC2SJ1ZT5RQ3XAE3sOF7XLqJ14A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13697 (0x3581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509C4, serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Validity Not Before: Sep 24 14:34:39 2026 GMT Not After : Oct 1 14:34:39 2026 GMT Subject: CN=6ab534ff-c80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:1f:2b:ed:b3:ca:e4:ba:1b:0f:a2:4c:3d: ca:69:90:1d:df:76:1b:bd:c8:ae:cc:dc:b9:00:1d: d3:e0:37:05:26:89:29:33:6c:81:30:e0:b5:9a:4d: 82:c4:ca:08:ea:c3:08:5a:62:86:a4:de:84:97:5e: 96:c3:5b:3f:fa:ad:5d:42:17:1d:9f:a2:1e:1b:18: 50:1e:62:4d:a9:8f:3b:ca:9e:d0:19:38:7e:a8:9f: 55:34:7f:96:3f:73:23:a5:cd:49:3a:a1:d2:9c:ec: d4:33:6b:c4:34:67:fe:a0:62:4a:11:ec:75:48:5d: 10:cc:2e:77:e5:f3:60:6d:01:65:9f:96:d6:24:f2: 57:e5:e5:92:36:73:fe:73:99:29:9d:84:57:85:ea: c9:e1:18:3e:08:78:01:c1:50:c6:56:3e:24:3c:fd: 6e:f5:69:1d:98:a8:63:4f:5c:86:c6:75:5d:e7:16: c7:c7:c8:1f:b8:82:12:83:d9:d9:40:56:f5:a4:21: 50:cc:c0:c4:ba:4e:5e:13:62:a4:e5:e9:57:9d:12: 98:3e:7d:38:be:40:b7:d6:17:dd:44:59:cf:b8:2b: 88:83:80:79:5a:9a:1c:88:e4:be:90:27:98:9a:4d: 9a:af:62:cc:ec:f4:64:2b:90:a2:7d:9c:26:3c:ce: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F5:7C:EA:48:26:CB:F1:4C:F7:61:0E:02:03:18:49:68:9B:94:D3 X509v3 Authority Key Identifier: keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e4:9f:ac:ee:2c:38:92:f0:4d:9a:b1:4c:d0:4f:b9:a2:54: 9f:a6:75:ab:d6:ee:09:55:e6:b9:ee:76:59:2f:66:ab:29:78: f2:46:2f:6a:a6:e6:ad:67:da:5b:c1:4d:0d:ba:a0:cf:40:8a: 61:50:21:f9:b0:72:60:94:52:31:7b:0d:32:08:62:0c:9d:51: 0b:36:7f:48:17:85:ef:1e:9d:82:c3:28:45:67:a0:0a:c2:48: 85:cf:3d:92:e7:14:07:03:e2:6e:ac:13:4e:ff:f3:4f:1e:e9: 33:c9:82:4a:fa:8c:37:ec:75:d5:0e:f9:79:b8:d6:f6:9a:57: b1:5b:f6:d9:a8:65:76:84:20:8d:c3:59:92:ed:cb:f0:90:a6: 48:77:b4:ff:7b:95:5e:b4:1e:c4:55:93:b5:d2:ea:fb:f7:95: c6:34:90:91:3b:72:91:82:5e:a6:a1:8b:8b:9b:25:02:ee:dd: 71:b1:32:f8:e7:a3:2f:9e:c1:6b:f1:c5:c3:dc:d1:ce:b1:d6: c5:63:4b:54:55:79:a6:36:1c:00:5a:63:cd:ae:31:13:22:66: 1f:f9:14:40:97:87:bb:89:66:b2:7c:1b:ff:d6:6c:61:ed:71: 04:1a:76:e6:07:b6:81:13:52:1d:14:3b:d5:5e:e6:f5:3f:d5: 74:4e:a7:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QzQxMTAvBgNVBAUTKDg1MDY5ODU5RkJBM0NEREU4RUMxQjgxQTFFMDRERDYw NTBCMzgxMTMwHhcNMjYwOTI0MTQzNDM5WhcNMjYxMDAxMTQzNDM5WjAYMRYwFAYD VQQDEw02YWI1MzRmZi1jODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8sfK+2zyuS6Gw+iTD3KaZAd33YbvciuzNy5AB3T4DcFJokpM2yBMOC1mk2C xMoI6sMIWmKGpN6El16Ww1s/+q1dQhcdn6IeGxhQHmJNqY87yp7QGTh+qJ9VNH+W P3Mjpc1JOqHSnOzUM2vENGf+oGJKEex1SF0QzC535fNgbQFln5bWJPJX5eWSNnP+ c5kpnYRXherJ4Rg+CHgBwVDGVj4kPP1u9WkdmKhjT1yGxnVd5xbHx8gfuIISg9nZ QFb1pCFQzMDEuk5eE2Kk5elXnRKYPn04vkC31hfdRFnPuCuIg4B5WpociOS+kCeY mk2ar2LM7PRkK5CifZwmPM7vjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ71fOpI JsvxTPdhDgIDGElom5TTMB8GA1UdIwQYMBaAFIUGmFn7o83ejsG4Gh4E3WBQs4ET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlDNC80Qjg5NjEzODFE OEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpkNk93YmdhSGdUZFlGQ3pn Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRYVlXZnVqemQ2T3diZ2FIZ1RkWUZDemdSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlDNC80Qjg5NjEzODFEOEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpk Nk93YmdhSGdUZFlGQ3pnUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZuSfrO4sOJLwTZqxTNBPuaJUn6Z1q9buCVXmue52WS9mqyl48kYvaqbmrWfa W8FNDbqgz0CKYVAh+bByYJRSMXsNMghiDJ1RCzZ/SBeF7x6dgsMoRWegCsJIhc89 kucUBwPibqwTTv/zTx7pM8mCSvqMN+x11Q75ebjW9ppXsVv22ahldoQgjcNZku3L 8JCmSHe0/3uVXrQexFWTtdLq+/eVxjSQkTtykYJepqGLi5slAu7dcbEy+OejL57B a/HFw9zRzrHWxWNLVFV5pjYcAFpjza4xEyJmH/kUQJeHu4lmsnwb/9ZsYe1xBBp2 5ge2gRNSHRQ71V7m9T/VdE6nCw== -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:47 2026 by rpki-client