$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: MzDv0akiTr/t6uCP1SVH//I3ACHT+90FWe8rx61TCqo= Subject key identifier: 79:1C:1D:15:45:BC:7D:93:AA:C2:2D:B6:A9:B5:B1:75:3E:A9:23:A5 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D46 Signing time: Sun 04 Oct 2026 18:14:32 +0000 Manifest this update: Sun 04 Oct 2026 18:14:32 +0000 Manifest next update: Sun 11 Oct 2026 18:14:32 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: Q/Ugcb4hHC2vSR+cMVyHsQaoqWyt2J5FWAnZfjvaCGU=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 4 18:14:32 2026 GMT Not After : Oct 11 18:14:32 2026 GMT Subject: CN=6ac29788-5ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:1a:43:81:85:94:b8:fe:92:8e:f7:8c:12: f6:de:77:c2:35:4e:bf:8b:fa:0f:c7:ed:0d:7d:4e: 9a:b0:71:4a:c4:5c:99:70:0c:e1:e8:61:ec:5a:db: 11:a1:3f:67:1e:23:08:22:41:7b:d9:67:6e:1a:ac: 30:af:05:27:c2:59:27:f8:51:c3:bd:a2:1a:9d:4b: 3a:2c:bf:fc:af:b5:86:01:3e:d7:71:38:1c:72:b5: f7:83:31:ed:55:8e:33:b2:a5:dc:b7:f1:77:6b:43: ca:28:ce:63:44:c4:b9:14:5f:2b:ed:ec:3c:4e:6a: 27:30:be:e7:93:b2:d8:a0:ad:94:01:ab:5c:3a:e6: c2:0c:35:74:1c:74:5c:9c:91:67:54:bc:3a:17:12: 2c:72:37:21:2f:ec:f5:16:4e:97:39:ed:7d:0c:72: ba:6b:21:0b:3b:b6:59:26:b5:e9:e3:3b:f7:49:c9: f3:9e:42:88:eb:86:6e:b4:ee:45:64:d7:2e:c3:f6: 6e:78:ab:84:38:9e:7d:0a:49:92:23:03:12:6f:b9: 48:a9:9f:0f:88:26:d5:6c:b1:0d:25:89:fc:f9:40: 30:05:4a:6f:9a:08:e3:65:ba:97:5f:15:42:1c:df: 5a:8c:15:8b:f3:d3:67:4d:67:e6:0b:f0:52:39:5c: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:1D:15:45:BC:7D:93:AA:C2:2D:B6:A9:B5:B1:75:3E:A9:23:A5 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:e7:e0:31:3d:56:4e:e7:b9:c6:cb:4c:eb:e6:ea:47:38: 83:98:7d:e9:22:1d:49:10:88:61:68:d9:11:3e:96:1b:74:e0: c5:59:09:34:5e:df:fe:28:8e:e1:83:47:22:83:53:1b:aa:40: 1c:82:3c:a9:61:fd:d9:28:0e:7a:2d:ac:4b:b1:81:89:1e:2d: f8:c6:c6:5a:97:53:ab:77:44:7c:b8:c1:7f:ff:1f:39:65:dc: d9:0b:4d:21:50:23:cc:ed:e7:a0:0d:11:79:79:2f:54:6a:29: a0:72:bb:72:f0:41:f1:84:7b:a3:68:ef:4a:98:ae:35:e1:29: e0:1f:92:b7:db:2c:f0:01:03:41:b0:ac:f1:6e:92:98:56:ff: 15:25:ae:c9:64:5e:9e:c6:44:6e:f8:be:a1:b6:ac:13:74:cd: ff:f3:07:09:1a:40:20:cf:ef:7d:54:3d:b4:e4:77:cd:d8:52: 14:dd:98:ab:25:fb:7f:8f:3b:aa:4d:21:a3:5c:4e:4c:e6:53: 7e:19:94:1b:e9:02:21:65:a6:00:8c:0a:59:5a:55:cb:8a:e5: 9d:f5:81:d3:6c:f5:ba:47:5d:41:36:03:a4:7e:4b:63:91:a5: 61:ec:60:db:25:36:3e:9a:98:c4:84:6d:f8:ef:8c:20:4c:70: a8:ec:36:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYxMDA0MTgxNDMyWhcNMjYxMDExMTgxNDMyWjAYMRYwFAYD VQQDEw02YWMyOTc4OC01ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7AaQ4GFlLj+ko73jBL23nfCNU6/i/oPx+0NfU6asHFKxFyZcAzh6GHsWtsR oT9nHiMIIkF72WduGqwwrwUnwlkn+FHDvaIanUs6LL/8r7WGAT7XcTgccrX3gzHt VY4zsqXct/F3a0PKKM5jRMS5FF8r7ew8TmonML7nk7LYoK2UAatcOubCDDV0HHRc nJFnVLw6FxIscjchL+z1Fk6XOe19DHK6ayELO7ZZJrXp4zv3ScnznkKI64ZutO5F ZNcuw/ZueKuEOJ59CkmSIwMSb7lIqZ8PiCbVbLENJYn8+UAwBUpvmgjjZbqXXxVC HN9ajBWL89NnTWfmC/BSOVx0jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkcHRVF vH2TqsIttqm1sXU+qSOlMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgmTn4DE9Vk7nucbLTOvm6kc4g5h96SIdSRCIYWjZET6WG3TgxVkJNF7f/iiO 4YNHIoNTG6pAHII8qWH92SgOei2sS7GBiR4t+MbGWpdTq3dEfLjBf/8fOWXc2QtN IVAjzO3noA0ReXkvVGopoHK7cvBB8YR7o2jvSpiuNeEp4B+St9ss8AEDQbCs8W6S mFb/FSWuyWRensZEbvi+obasE3TN//MHCRpAIM/vfVQ9tOR3zdhSFN2YqyX7f487 qk0ho1xOTOZTfhmUG+kCIWWmAIwKWVpVy4rlnfWB02z1ukddQTYDpH5LY5GlYexg 2yU2PpqYxIRt+O+MIExwqOw2nA== -----END CERTIFICATE-----Generated at Sun Oct 4 23:14:11 2026 by rpki-client