$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: 05bSgundi9KDI6q6Fyko9C+OFS4pE1XPt9jeAs1tBsg= Subject key identifier: F2:AC:7C:83:02:26:DB:23:16:5D:96:19:C2:8D:61:1A:67:42:FE:13 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 0301 Signing time: Wed 23 Sep 2026 02:53:38 +0000 Manifest this update: Wed 23 Sep 2026 02:53:38 +0000 Manifest next update: Wed 30 Sep 2026 02:53:38 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: 8TIDqHeKs+eGRtHE233PNsB55b+y3HYsGgm+Y9eZe2I=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: TfhxYXEuzGwCmeMd3nNc0DOls3QWgWihrLMEBQlhbYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Sep 23 02:53:38 2026 GMT Not After : Sep 30 02:53:38 2026 GMT Subject: CN=6ab33f32-e846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:a9:52:de:9b:10:77:c1:91:4a:ec:6d:8d: 17:76:6f:30:7d:1e:dc:28:7b:5b:42:92:a9:c1:c0: be:b8:52:c9:83:01:7d:de:93:77:a8:0d:b3:49:81: ac:b8:d3:bd:5f:35:be:66:be:b5:2b:0e:7a:f6:54: 8b:39:d1:fa:4d:0b:3b:2b:5b:c9:cc:52:78:2a:4a: 0c:49:ef:5f:30:88:8d:46:83:6b:cd:07:57:07:91: 5d:ff:37:d6:7d:ef:9b:1b:dc:14:f6:0f:63:dd:34: 2c:6a:ba:f6:d0:ac:4f:c2:1c:22:36:6b:33:95:e9: 90:75:98:0a:34:cc:17:d9:87:5c:f6:ba:14:83:70: bb:2b:11:a6:dc:d9:5b:e0:a0:ca:b4:6b:94:23:2f: e9:a1:af:d6:6d:7e:59:f6:b3:e1:f8:9e:e0:df:08: 16:a7:9d:44:f9:30:c6:f0:ff:0d:3e:05:04:86:6e: 9c:60:f5:57:28:b8:54:e3:cd:e5:64:a6:7b:d3:26: 4c:4b:a8:fe:80:bd:0b:b2:47:f9:a3:04:36:fa:7c: a6:aa:2e:f2:76:ee:a3:7d:10:1b:6c:fb:15:8a:45: 11:8b:17:9f:ea:66:13:ee:6f:c4:d8:46:fc:97:09: 30:d2:7a:1f:90:62:5d:c9:c4:8b:44:4d:f3:5b:57: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AC:7C:83:02:26:DB:23:16:5D:96:19:C2:8D:61:1A:67:42:FE:13 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f5:06:5e:c2:11:61:42:0c:03:81:70:6b:b5:dc:34:57:58: 16:9b:46:1b:f0:6a:cf:11:10:89:7e:d9:22:96:fb:06:a9:58: 4a:21:10:4c:8a:ee:98:33:26:20:ce:e0:93:8b:d7:81:36:4d: bb:0b:ce:ee:ee:98:a6:37:58:ff:7d:38:c9:8e:7c:54:30:35: 48:6f:59:12:ec:e6:bd:94:53:3a:5c:28:06:25:8f:90:4c:33: 8c:cb:70:a3:41:2f:46:ae:1a:cb:91:55:ce:04:f6:6d:d6:82: e7:76:ff:1c:ef:47:86:e4:81:dc:ae:3a:a9:ac:8f:15:ec:a0: 4b:b7:6b:47:52:d8:1d:d8:6d:51:44:61:f9:ae:d3:e1:4c:8a: 9d:d7:de:66:04:99:49:84:a9:e3:24:30:f4:b7:e7:39:ec:a9: 00:9f:4d:51:e0:2b:5d:ef:a4:6b:09:86:9d:ce:9d:53:d6:c5: c9:07:cd:35:22:a9:47:15:9e:70:eb:d6:fd:b4:a7:47:1f:23: 1e:ec:bd:31:d0:02:b7:29:a2:81:14:84:9f:d6:6e:d1:d0:e7: 49:aa:44:c6:13:9b:27:d5:0e:66:c4:2a:ff:eb:d7:39:03:45: f1:31:7a:de:46:c1:18:52:5f:aa:e3:1c:f2:59:1c:3b:30:3f: 51:a2:4e:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdENTA5RUYwQkFD NzA2NjQ4NDQwHhcNMjYwOTIzMDI1MzM4WhcNMjYwOTMwMDI1MzM4WjAYMRYwFAYD VQQDEw02YWIzM2YzMi1lODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbSpUt6bEHfBkUrsbY0Xdm8wfR7cKHtbQpKpwcC+uFLJgwF93pN3qA2zSYGs uNO9XzW+Zr61Kw569lSLOdH6TQs7K1vJzFJ4KkoMSe9fMIiNRoNrzQdXB5Fd/zfW fe+bG9wU9g9j3TQsarr20KxPwhwiNmszlemQdZgKNMwX2Ydc9roUg3C7KxGm3Nlb 4KDKtGuUIy/poa/WbX5Z9rPh+J7g3wgWp51E+TDG8P8NPgUEhm6cYPVXKLhU483l ZKZ70yZMS6j+gL0Lskf5owQ2+nymqi7ydu6jfRAbbPsVikURixef6mYT7m/E2Eb8 lwkw0nofkGJdycSLRE3zW1fGTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKsfIMC JtsjFl2WGcKNYRpnQv4TMB8GA1UdIwQYMBaAFAh3f6OBvyWODKw31QnvC6xwZkhE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZNE1yRGZWQ2U4THJIQm1T RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZ NE1yRGZWQ2U4THJIQm1TRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/UGXsIRYUIMA4Fwa7XcNFdYFptGG/BqzxEQiX7ZIpb7BqlYSiEQTIrumDMm IM7gk4vXgTZNuwvO7u6YpjdY/304yY58VDA1SG9ZEuzmvZRTOlwoBiWPkEwzjMtw o0EvRq4ay5FVzgT2bdaC53b/HO9HhuSB3K46qayPFeygS7drR1LYHdhtUURh+a7T 4UyKndfeZgSZSYSp4yQw9LfnOeypAJ9NUeArXe+kawmGnc6dU9bFyQfNNSKpRxWe cOvW/bSnRx8jHuy9MdACtymigRSEn9Zu0dDnSapExhObJ9UOZsQq/+vXOQNF8TF6 3kbBGFJfquMc8lkcOzA/UaJO6A== -----END CERTIFICATE-----Generated at Thu Sep 24 12:05:27 2026 by rpki-client