$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: d3EECWyIRbKWTN8POppf0aYwHgRc28hXbv9FKDLI4lg= Subject key identifier: 42:23:53:60:9E:74:C3:75:30:21:87:27:D5:06:EA:7D:DF:FE:9A:F8 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 1119 Signing time: Sat 26 Sep 2026 14:25:23 +0000 Manifest this update: Sat 26 Sep 2026 14:25:23 +0000 Manifest next update: Sat 03 Oct 2026 14:25:23 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: mA6xKNktn+QaNIb6Xgh5JYgG+qQ+8qFYHwDsQn+8DOQ=) 2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=) 3: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=) 4: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4403 (0x1133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Sep 26 14:25:23 2026 GMT Not After : Oct 3 14:25:23 2026 GMT Subject: CN=6ab7d5d3-a790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:9b:ad:20:fb:e9:d8:ca:11:a0:71:c7:ff: bd:f3:e9:47:99:8b:2f:e8:7e:25:8b:12:21:fc:ac: 40:9c:c2:49:c8:7a:46:7d:63:9d:3f:55:37:af:23: d2:48:41:ee:11:ff:3a:28:a7:be:2a:68:c2:11:b8: 22:ae:be:ac:28:0e:d9:0f:7d:51:0d:23:fd:78:bc: 19:49:30:e8:33:97:67:c6:d2:b7:e4:5b:6c:44:e7: 0b:a3:27:6c:5a:0a:85:e2:02:6c:cb:ba:84:39:b6: 66:be:12:57:83:66:36:d5:63:01:f8:f8:16:51:e2: ea:77:5d:7a:f8:e5:5f:d4:78:2f:19:c8:c9:93:34: dd:0a:28:77:15:99:54:23:6f:31:9c:e8:f6:d2:22: b9:f7:70:f2:80:85:d5:76:e5:a8:e7:39:83:0d:86: 5d:49:30:c5:15:9d:14:a9:4e:f9:93:f4:0b:cc:8f: 29:67:ac:20:b0:34:00:d3:e4:65:b7:a3:fd:18:ce: 42:64:3a:14:ae:06:30:39:b7:09:92:32:55:18:07: 52:ae:5e:e0:05:63:62:33:99:9a:cf:6f:4e:d6:2c: 17:d6:32:b4:9e:5a:9c:a0:c4:5c:90:49:bf:d0:54: 05:63:ab:83:48:97:f1:9d:c6:61:25:e6:c8:07:1a: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:23:53:60:9E:74:C3:75:30:21:87:27:D5:06:EA:7D:DF:FE:9A:F8 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:01:2b:0f:44:0b:af:35:c1:57:3c:2a:c2:ea:8a:01:19:44: bd:a8:98:f7:49:50:8a:fa:c8:6d:7f:22:cd:1c:73:8e:df:a1: aa:1c:e0:89:97:01:be:ce:80:10:cc:d5:22:21:d2:0c:10:6e: 94:58:f0:66:f1:5c:49:29:88:33:c2:ce:44:95:d3:09:a4:47: 9e:17:7e:b0:86:41:95:1a:41:51:2b:ab:ef:5b:ba:06:5f:42: 76:48:91:d7:96:a9:cf:cd:8a:7b:37:a5:49:a5:97:2f:e7:27: f0:44:8d:96:6e:8b:93:d2:72:ab:95:74:ca:9c:4c:37:d4:c4: 58:33:90:d5:12:b6:88:03:94:55:01:96:1a:67:cc:35:3b:0d: 60:47:9b:ce:30:07:38:99:27:de:86:ca:20:28:f3:47:22:e2: b5:04:fe:7f:c0:50:54:26:db:bf:01:cb:4a:80:cb:47:1c:85: ad:b6:5c:ba:a9:fe:ea:38:bb:3a:62:87:76:c7:e9:5e:f6:98: 07:04:97:92:f8:49:62:77:e8:c1:55:d2:86:1c:60:6c:02:83: 23:38:0a:94:a0:aa:85:04:7c:8e:58:97:4c:48:2f:66:63:6f: 95:82:3a:56:f0:08:9d:57:dc:c3:4d:82:59:5e:b8:93:c9:b5: 41:3e:66:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICETMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjYwOTI2MTQyNTIzWhcNMjYxMDAzMTQyNTIzWjAYMRYwFAYD VQQDEw02YWI3ZDVkMy1hNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVabrSD76djKEaBxx/+98+lHmYsv6H4lixIh/KxAnMJJyHpGfWOdP1U3ryPS SEHuEf86KKe+KmjCEbgirr6sKA7ZD31RDSP9eLwZSTDoM5dnxtK35FtsROcLoyds WgqF4gJsy7qEObZmvhJXg2Y21WMB+PgWUeLqd116+OVf1HgvGcjJkzTdCih3FZlU I28xnOj20iK593DygIXVduWo5zmDDYZdSTDFFZ0UqU75k/QLzI8pZ6wgsDQA0+Rl t6P9GM5CZDoUrgYwObcJkjJVGAdSrl7gBWNiM5maz29O1iwX1jK0nlqcoMRckEm/ 0FQFY6uDSJfxncZhJebIBxpkVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEIjU2Ce dMN1MCGHJ9UG6n3f/pr4MB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKgErD0QLrzXBVzwqwuqKARlEvaiY90lQivrIbX8izRxzjt+hqhzgiZcBvs6A EMzVIiHSDBBulFjwZvFcSSmIM8LORJXTCaRHnhd+sIZBlRpBUSur71u6Bl9CdkiR 15apz82KezelSaWXL+cn8ESNlm6Lk9Jyq5V0ypxMN9TEWDOQ1RK2iAOUVQGWGmfM NTsNYEebzjAHOJkn3obKICjzRyLitQT+f8BQVCbbvwHLSoDLRxyFrbZcuqn+6ji7 OmKHdsfpXvaYBwSXkvhJYnfowVXShhxgbAKDIzgKlKCqhQR8jliXTEgvZmNvlYI6 VvAInVfcw02CWV64k8m1QT5mxw== -----END CERTIFICATE-----Generated at Sun Sep 27 21:12:23 2026 by rpki-client