$ rpki-client -vvvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: rcEu8+hHCThQYz+8FXHrzLso4gbNKtaYpSHRYY8lftg= Subject key identifier: E4:D9:2E:42:AE:3A:94:E7:CB:4C:0B:8A:FC:8D:67:AE:2E:77:8C:45 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 0122 Signing time: Mon 21 Sep 2026 05:59:43 +0000 Manifest this update: Mon 21 Sep 2026 05:59:43 +0000 Manifest next update: Mon 28 Sep 2026 05:59:43 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: NnaqqRn63FUzwx8CcapAwmX3sLT9kf16zdFeG7immio=) 2: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) 3: bnK0NbUw8bBQTqHVz5DDKSrXEe4.asa (hash: 7A6SI6CQLWVcX0yr/SArmbn6gtHpeEIz0aBxOGnQ4bM=) 4: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Sep 21 05:59:43 2026 GMT Not After : Sep 28 05:59:43 2026 GMT Subject: CN=6ab0c7cf-1056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:e2:06:4d:74:66:dd:bd:ac:19:9f:5a:8e: 93:2d:cc:b8:97:54:91:de:70:a6:6d:ad:fe:68:df: 6a:fb:ba:c0:a1:b6:89:0c:cf:f6:d7:a0:97:e4:01: d5:d8:6a:f1:db:9d:f8:8e:0e:e6:3a:96:c1:47:cc: e7:84:41:89:e1:e8:c0:61:23:3a:e2:5e:d4:e3:0b: f3:63:d3:f8:3b:8e:8f:81:2a:a5:d7:2c:cf:6f:38: 9e:07:57:47:2b:cf:18:59:d7:d9:08:02:3d:e6:97: e9:cc:91:9e:da:c4:e2:b7:a0:87:44:a7:8d:ec:ea: dc:12:25:33:37:8a:01:66:f6:61:6c:f5:b6:7f:41: f2:db:39:61:a3:f4:10:e1:1d:4e:91:5a:0a:57:aa: 56:2b:42:cf:ae:aa:ae:ec:e2:25:fb:03:8f:1a:ba: a2:b0:75:7a:a4:00:b1:01:8f:77:d3:0f:d6:4c:fd: c1:74:1e:1b:10:b2:49:4d:bc:4b:a3:c9:4e:67:1c: 3a:70:06:f9:bc:be:5b:f1:d7:a7:fe:4c:77:da:5e: 84:0b:ed:07:08:56:39:98:3a:0c:78:d9:23:71:d5: 09:17:e0:59:b9:bc:44:ef:bd:e4:1a:fb:96:d2:15: d0:4e:cd:9e:2a:e1:c7:9d:74:bd:ce:d1:90:e4:5f: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:2E:42:AE:3A:94:E7:CB:4C:0B:8A:FC:8D:67:AE:2E:77:8C:45 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:01:3f:1d:5f:5f:14:c4:8a:2f:ba:ba:c6:61:1c:29:f8:49: 28:91:b0:c6:d1:73:81:3e:97:3f:db:65:97:21:31:15:3b:98: 51:a6:4e:95:24:de:47:e9:7a:8d:90:75:34:97:cc:79:a4:65: ef:b9:aa:2a:e5:e3:8f:37:b4:ef:3e:32:7a:3c:d0:46:06:84: 5a:c5:30:5b:93:30:f3:8e:b7:14:45:20:16:82:ea:51:e8:47: 97:c3:83:df:99:90:bf:e6:72:5f:3d:ab:9f:8c:98:18:38:4e: ed:fa:1c:0d:26:bc:39:00:49:76:4a:8e:12:a0:1c:fd:09:bd: 77:2d:cb:6d:f2:34:c7:2a:0a:d5:31:6c:6e:02:04:19:f7:6f: 2e:fe:5d:72:15:20:bb:d4:1e:65:fd:6b:d6:23:4c:be:14:d4: 82:f6:56:85:20:f9:52:a8:cd:5d:f3:62:6b:3a:ad:47:01:b6: ec:ae:71:36:41:83:ff:bd:0b:7b:54:73:5d:a3:4d:e3:26:41: 61:6b:e2:3a:f9:42:76:00:b9:9a:f7:89:2e:03:a8:e0:51:09: d7:5d:cb:7a:f3:79:64:de:f0:a5:76:a1:d9:a4:ff:be:4a:a0: 97:79:75:b2:b7:2e:66:05:40:b5:5c:25:6a:c9:f2:b6:8d:e4: bc:49:de:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYwOTIxMDU1OTQzWhcNMjYwOTI4MDU1OTQzWjAYMRYwFAYD VQQDEw02YWIwYzdjZi0xMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7biBk10Zt29rBmfWo6TLcy4l1SR3nCmba3+aN9q+7rAobaJDM/216CX5AHV 2Grx2534jg7mOpbBR8znhEGJ4ejAYSM64l7U4wvzY9P4O46PgSql1yzPbzieB1dH K88YWdfZCAI95pfpzJGe2sTit6CHRKeN7OrcEiUzN4oBZvZhbPW2f0Hy2zlho/QQ 4R1OkVoKV6pWK0LPrqqu7OIl+wOPGrqisHV6pACxAY930w/WTP3BdB4bELJJTbxL o8lOZxw6cAb5vL5b8den/kx32l6EC+0HCFY5mDoMeNkjcdUJF+BZubxE773kGvuW 0hXQTs2eKuHHnXS9ztGQ5F80xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTZLkKu OpTny0wLivyNZ64ud4xFMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADwE/HV9fFMSKL7q6xmEcKfhJKJGwxtFzgT6XP9tllyExFTuYUaZOlSTeR+l6 jZB1NJfMeaRl77mqKuXjjze07z4yejzQRgaEWsUwW5Mw8463FEUgFoLqUehHl8OD 35mQv+ZyXz2rn4yYGDhO7focDSa8OQBJdkqOEqAc/Qm9dy3LbfI0xyoK1TFsbgIE GfdvLv5dchUgu9QeZf1r1iNMvhTUgvZWhSD5UqjNXfNiazqtRwG27K5xNkGD/70L e1RzXaNN4yZBYWviOvlCdgC5mveJLgOo4FEJ113LevN5ZN7wpXah2aT/vkqgl3l1 srcuZgVAtVwlasnyto3kvEneHg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:00:21 2026 by rpki-client