$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: WtJRvJb5fW5IkTnrGwqwGfcf1IWTuviGleWSMEqp/aw= Subject key identifier: 84:09:00:1E:04:2D:0A:AF:6D:AB:79:40:0F:9C:AC:EE:78:B9:E6:7A Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 38F5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 37CE Signing time: Thu 24 Sep 2026 14:33:09 +0000 Manifest this update: Thu 24 Sep 2026 14:33:09 +0000 Manifest next update: Thu 01 Oct 2026 14:33:09 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: CqoIGi/pkRQp7kYjNGAMBLvxQ4+bb58veAwv3KBYdGk=) 2: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: 5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=) 3: 803E1FB4844611F18199E4686DA30FBC.roa (hash: fb/gMuY4GCBBcmZDDJjLxvs0FTK9CO7zdEHnqESTxOE=) 4: F24EEED208C011F19DFF611F213D8C67.roa (hash: j8mZP70/+lxFmxKK+gaXtA4vlgcSiykk11UZrhv9x1I=) 5: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: 5aKDuZwd3Wn+m9JFqN35rRMwxZf4PwI1YL49pBMgje4=) 6: 317DA71E8B0811F1AFBFDAB07011F970.roa (hash: azVTOKF0NFIhb0K96Fo23InB6ezFswHqZ4YFdrcEIzk=) 7: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: cceRHowy60ndHsS0V7KTQnvxOpHcB4H7ok2enChJkmk=) 8: A3A79DD6923811F1800CA6646F11F970.roa (hash: 8Ci0/0Zg6lRMknA03QwPBAlCGKPE4eHasYGtycyfkGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14581 (0x38f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Sep 24 14:33:09 2026 GMT Not After : Oct 1 14:33:09 2026 GMT Subject: CN=6ab534a5-32f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:65:57:c0:b3:ca:55:24:4f:26:ac:29:60: bc:83:55:99:92:3a:65:44:c0:6a:73:79:73:47:11: 89:65:a3:11:b0:55:35:07:c7:b8:a4:97:51:41:fc: aa:1f:dd:87:f6:8b:28:1f:5a:07:cc:a1:aa:37:ee: 8d:dc:c3:f2:75:82:b1:1d:f1:62:e1:eb:6a:c5:0a: db:e0:25:63:05:60:f1:f0:b7:31:5c:5f:d6:40:42: 1a:1c:13:2d:08:bf:65:90:35:7c:b7:ce:b0:24:19: 43:6a:b1:c9:67:ae:91:b0:49:64:51:65:88:27:51: 91:8c:96:85:b6:27:0a:cc:cb:2f:68:c0:f6:0b:1d: a0:bd:31:c3:7b:c1:8d:39:24:98:90:7f:09:04:84: d9:fa:cd:84:fb:66:6a:18:4b:e1:d2:35:0a:59:90: 40:fd:80:04:3b:d3:1a:c7:1b:c9:09:de:89:56:94: e2:0b:17:59:fa:16:1e:f2:22:7f:17:89:43:96:dc: 2d:07:23:fa:e3:0f:7b:c9:07:a5:6a:2b:a4:b9:2e: f2:a9:04:b2:a5:18:2f:73:34:b2:58:97:34:24:d7: 9a:8e:99:73:aa:7b:d0:f2:f1:40:eb:c6:02:d0:21: a6:07:46:12:be:cb:a3:e7:a9:1c:88:8c:3f:b3:50: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:00:1E:04:2D:0A:AF:6D:AB:79:40:0F:9C:AC:EE:78:B9:E6:7A X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:59:f0:87:d9:cd:31:ef:54:53:11:88:d8:28:8b:62:cd:20: 57:de:63:1f:b6:a8:65:75:ab:bf:5f:96:59:47:2e:9f:38:cb: af:6b:d5:cb:9b:5a:93:ac:ea:30:8e:52:12:a1:52:18:05:fa: ec:9d:3e:b5:00:18:c8:40:4f:f3:33:ec:3a:a6:2d:72:c3:e1: cf:0c:e7:81:ca:bc:6a:73:3b:c0:73:48:3b:08:54:ba:c7:a2: 65:8b:62:38:e4:6f:80:3a:f7:6f:7f:7f:6b:ad:5f:2a:6f:bc: bd:f4:7e:0a:3b:3a:49:f8:92:b8:67:10:4a:49:27:e8:95:0a: 83:82:5a:e8:c8:0d:06:62:60:b5:0b:a8:30:65:a5:a8:b8:c5: 81:31:3a:55:1e:65:60:0d:d8:c5:1f:cf:98:c2:12:79:ea:b6: cc:a0:73:5d:89:97:a3:48:11:98:a5:13:c0:4d:0f:a1:11:d0: 98:d5:42:2e:61:ff:99:d5:1f:df:e8:56:56:93:9f:3e:d6:05: 45:44:0d:2f:89:ed:de:a9:cd:a7:a7:ec:15:e2:8e:e5:97:9c: 9a:13:59:d4:60:e6:4a:88:17:69:e0:78:7f:3b:1b:47:b8:3b: e6:ee:1e:7d:9a:dc:2f:31:b4:14:13:50:a9:a2:54:21:23:6c: 81:cc:b0:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwOTI0MTQzMzA5WhcNMjYxMDAxMTQzMzA5WjAYMRYwFAYD VQQDEw02YWI1MzRhNS0zMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5JlV8CzylUkTyasKWC8g1WZkjplRMBqc3lzRxGJZaMRsFU1B8e4pJdRQfyq H92H9osoH1oHzKGqN+6N3MPydYKxHfFi4etqxQrb4CVjBWDx8LcxXF/WQEIaHBMt CL9lkDV8t86wJBlDarHJZ66RsElkUWWIJ1GRjJaFticKzMsvaMD2Cx2gvTHDe8GN OSSYkH8JBITZ+s2E+2ZqGEvh0jUKWZBA/YAEO9MaxxvJCd6JVpTiCxdZ+hYe8iJ/ F4lDltwtByP64w97yQelaiukuS7yqQSypRgvczSyWJc0JNeajplzqnvQ8vFA68YC 0CGmB0YSvsuj56kciIw/s1CmWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQJAB4E LQqvbat5QA+crO54ueZ6MB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkFnwh9nNMe9UUxGI2CiLYs0gV95jH7aoZXWrv1+WWUcunzjLr2vVy5tak6zq MI5SEqFSGAX67J0+tQAYyEBP8zPsOqYtcsPhzwzngcq8anM7wHNIOwhUuseiZYti OORvgDr3b39/a61fKm+8vfR+Cjs6SfiSuGcQSkkn6JUKg4Ja6MgNBmJgtQuoMGWl qLjFgTE6VR5lYA3YxR/PmMISeeq2zKBzXYmXo0gRmKUTwE0PoRHQmNVCLmH/mdUf 3+hWVpOfPtYFRUQNL4nt3qnNp6fsFeKO5ZecmhNZ1GDmSogXaeB4fzsbR7g75u4e fZrcLzG0FBNQqaJUISNsgcywRw== -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:16 2026 by rpki-client