$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: PcHEDBhrBR3g1BB7/L9lCJ0ZbcI7oB1RQ00nhD16mfE= Subject key identifier: B9:78:67:17:51:7B:53:CD:81:E0:A0:99:F7:6F:10:B8:55:2E:EA:FA Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 089C Signing time: Fri 02 Oct 2026 20:59:12 +0000 Manifest this update: Fri 02 Oct 2026 20:59:12 +0000 Manifest next update: Fri 09 Oct 2026 20:59:12 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: zoc76Ospk3/GvqKFpto7sXNRr0s3lQZb0ShLAH9v+QY=) 2: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: up860oLdxDIT/mm1S3+f0STyL0H48p0LlM1PJVy1wlM=) 3: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: lBZVT70GvcennulqomPX6yKmyI41Eity8xYXZSW9dN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Oct 2 20:59:12 2026 GMT Not After : Oct 9 20:59:12 2026 GMT Subject: CN=6ac01b20-3900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:5c:e0:35:9e:82:7c:17:9c:31:41:73:fe: cd:d4:1c:ce:d6:ad:99:46:eb:32:21:b2:bc:24:0e: b5:d3:7d:a7:8f:46:35:d0:de:94:af:cd:3c:41:77: 13:e6:a8:5c:b9:4e:07:ac:03:90:9a:78:b2:36:a4: 78:8e:28:2c:7b:56:3e:3b:b4:d7:d3:f9:7c:65:3a: c2:10:59:c2:3f:19:7c:66:91:4f:b9:70:01:17:a1: a8:68:66:c1:a4:7d:00:5c:7a:0c:1c:30:c5:ad:ed: c4:4c:43:41:86:c3:5f:84:ff:33:b8:35:8f:a6:12: 76:15:34:de:c3:f1:43:65:de:69:27:ce:d9:c6:77: 18:f8:bd:ac:4b:2f:db:5b:bf:86:3d:19:11:49:9d: fa:8a:93:c2:b7:69:61:80:19:73:fa:ce:ee:dc:a0: ac:8b:95:41:7d:65:a1:ee:1c:5c:3b:15:cf:93:0b: 06:9a:15:99:fd:c6:a6:94:f7:83:be:62:6b:36:a9: 99:ba:6a:8b:71:1f:45:92:a1:13:b6:01:ce:a5:27: d3:d2:1f:6f:72:0d:78:91:f3:05:d8:2f:8c:bd:d5: 5e:60:c0:9b:c3:56:4f:6a:1a:56:d5:76:77:0b:91: 73:78:a1:23:77:2a:09:8c:e7:a0:83:6e:98:42:8f: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:67:17:51:7B:53:CD:81:E0:A0:99:F7:6F:10:B8:55:2E:EA:FA X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:28:4f:ff:06:fd:cd:be:d3:be:a6:34:56:c3:29:04:23:e6: 83:d1:39:e7:c2:c9:0a:13:fb:a4:bc:e4:27:55:9d:d4:fe:32: 7b:b3:59:b0:b2:cf:20:8f:c2:36:3b:17:1f:3f:32:8d:5e:db: 06:4c:18:ab:17:55:3f:f0:c2:43:18:c2:cb:51:dc:61:f9:f7: ea:b0:4c:74:2f:54:86:a2:7f:d8:89:ee:f9:a3:1a:80:33:8d: 2d:e8:a8:84:cf:18:d9:28:75:b8:0f:2b:19:77:53:93:82:a5: 45:71:67:f7:de:16:2f:ec:4e:3a:90:8f:06:a5:ed:0c:57:5a: 21:a2:05:2c:de:6b:32:0e:9a:fe:dd:0c:5b:69:6e:41:d8:60: 82:15:f8:7f:9f:ea:e0:6c:0f:1c:b5:41:25:14:c9:0e:6c:93: 32:50:05:ee:12:ce:b1:f7:11:22:3c:25:b7:cf:a2:76:e1:69: 29:07:b0:1f:a2:7b:65:6c:c2:00:b9:13:af:bf:5d:44:11:6a: 59:4d:7f:d6:26:e0:bb:cd:d3:9d:76:dd:71:39:27:45:5a:f5: 55:fd:19:0f:4a:1a:7f:aa:63:79:86:b3:73:b3:43:6b:cc:30: 7e:93:d0:af:51:48:b2:eb:ed:87:2a:81:4b:9f:87:8f:e4:2d: 09:f8:cc:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjYxMDAyMjA1OTEyWhcNMjYxMDA5MjA1OTEyWjAYMRYwFAYD VQQDEw02YWMwMWIyMC0zOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0dc4DWegnwXnDFBc/7N1BzO1q2ZRusyIbK8JA61032nj0Y10N6Ur808QXcT 5qhcuU4HrAOQmniyNqR4jigse1Y+O7TX0/l8ZTrCEFnCPxl8ZpFPuXABF6GoaGbB pH0AXHoMHDDFre3ETENBhsNfhP8zuDWPphJ2FTTew/FDZd5pJ87ZxncY+L2sSy/b W7+GPRkRSZ36ipPCt2lhgBlz+s7u3KCsi5VBfWWh7hxcOxXPkwsGmhWZ/camlPeD vmJrNqmZumqLcR9FkqETtgHOpSfT0h9vcg14kfMF2C+MvdVeYMCbw1ZPahpW1XZ3 C5FzeKEjdyoJjOegg26YQo8OVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl4ZxdR e1PNgeCgmfdvELhVLur6MB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlihP/wb9zb7TvqY0VsMpBCPmg9E558LJChP7pLzkJ1Wd1P4ye7NZsLLPII/C NjsXHz8yjV7bBkwYqxdVP/DCQxjCy1HcYfn36rBMdC9UhqJ/2Inu+aMagDONLeio hM8Y2Sh1uA8rGXdTk4KlRXFn994WL+xOOpCPBqXtDFdaIaIFLN5rMg6a/t0MW2lu QdhgghX4f5/q4GwPHLVBJRTJDmyTMlAF7hLOsfcRIjwlt8+iduFpKQewH6J7ZWzC ALkTr79dRBFqWU1/1ibgu83TnXbdcTknRVr1Vf0ZD0oaf6pjeYazc7NDa8wwfpPQ r1FIsuvthyqBS5+Hj+QtCfjMXg== -----END CERTIFICATE-----Generated at Sun Oct 4 18:11:53 2026 by rpki-client