$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json) Hash identifier: cueMxxcstg9XfLI8t2RQYP6aUERsQuY31Vf/8TlQ55Q= Subject key identifier: 60:CB:8C:29:20:9B:60:C0:E8:9D:46:AF:A5:C6:33:8A:6A:64:19:7A Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft Manifest number: CA Signing time: Wed 23 Sep 2026 06:37:38 +0000 Manifest this update: Wed 23 Sep 2026 06:37:38 +0000 Manifest next update: Wed 30 Sep 2026 06:37:38 +0000 Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: zknB8yvfZYUlg0ze5ppyjXNX1MAh+fthP4PzLJn/0kM=) 2: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=) 3: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=) 4: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Sep 23 06:37:38 2026 GMT Not After : Sep 30 06:37:38 2026 GMT Subject: CN=6ab373b2-4d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:73:9f:de:76:91:8a:27:3f:22:5c:15:ef: 5a:aa:50:e0:d7:6a:30:4d:41:3f:08:07:74:c8:57: b0:79:1f:a2:93:df:cd:76:c8:54:58:c5:47:cf:05: 54:43:eb:d9:f4:c9:b1:cc:24:dd:66:b2:9f:a6:62: 30:87:9b:0c:bb:fd:b7:79:bb:9d:a8:b3:1f:d2:d1: 73:71:2b:81:7e:02:50:4a:90:3d:72:08:c1:a5:10: e5:15:bf:8f:bf:8a:95:a1:fa:4d:44:7c:9b:1f:a8: d3:95:0b:dd:f8:1f:04:38:2f:aa:18:65:fc:bb:cc: 0e:8c:3c:f2:89:ed:a3:eb:e3:74:3c:c1:87:21:c7: 7e:4a:c5:83:5a:37:9c:30:a1:9e:76:26:19:ea:88: 55:3d:b2:1f:7a:50:ba:be:95:89:46:30:8b:f4:e8: 9d:9b:a9:54:cf:b7:33:be:69:de:64:04:24:ad:cb: 15:fe:3b:aa:3c:ac:d5:af:67:7e:7c:97:a2:18:a2: 23:93:70:60:cc:6e:dd:5c:e0:27:77:69:15:75:b1: 1a:fa:a8:f8:b8:7c:cc:4a:c8:57:a4:99:63:77:b4: e0:a0:b2:a4:5d:3e:1e:fb:45:14:1f:15:53:ce:5a: 11:68:6b:5e:89:39:04:92:90:2c:41:2a:c5:f4:19: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CB:8C:29:20:9B:60:C0:E8:9D:46:AF:A5:C6:33:8A:6A:64:19:7A X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8c:0f:c7:a6:85:5e:a7:d7:9b:4a:17:cf:81:76:7c:34:a9: 95:28:59:f5:a4:34:ae:4a:3f:2f:1a:bc:ba:52:de:00:e6:ce: 5d:44:5c:78:27:14:7f:a4:8a:5b:99:28:bb:12:96:20:34:4f: 9c:88:22:6e:2d:92:75:99:d7:b2:1e:0a:c6:40:cc:ca:66:d9: dd:12:12:eb:4f:1d:63:1b:1b:bb:b1:ef:60:c6:5b:9b:f9:ee: 4e:ce:f2:74:df:29:13:87:67:8b:2f:2e:20:b9:9d:a9:a9:be: 8f:7c:92:7d:f7:63:93:3e:05:1e:4f:13:10:43:cc:1d:18:5d: 8d:35:76:a2:04:a7:a0:29:e7:a9:ea:0a:5d:d5:cc:f2:a1:a6: 15:bf:e2:67:a8:0f:03:30:f6:97:01:cf:e8:0a:60:0a:d5:0c: c1:6a:1f:bd:a5:39:24:35:17:0c:b2:08:c3:4f:1e:84:cf:54: bd:1d:b8:75:13:f6:37:a8:ea:10:41:d4:87:7c:21:3e:d5:1a: a7:09:f1:c6:27:71:77:7e:6d:d8:f9:1d:9f:b2:76:3a:d4:1d: 2b:f1:22:fe:a8:e2:dc:45:1e:7e:ff:f3:7d:cd:8b:ec:ed:d5: 0c:57:5b:41:d7:2e:df:35:98:d0:02:ae:d3:86:f1:64:76:bb: 02:dd:82:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYwOTIzMDYzNzM4WhcNMjYwOTMwMDYzNzM4WjAYMRYwFAYD VQQDEw02YWIzNzNiMi00ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUlzn952kYonPyJcFe9aqlDg12owTUE/CAd0yFeweR+ik9/NdshUWMVHzwVU Q+vZ9MmxzCTdZrKfpmIwh5sMu/23ebudqLMf0tFzcSuBfgJQSpA9cgjBpRDlFb+P v4qVofpNRHybH6jTlQvd+B8EOC+qGGX8u8wOjDzyie2j6+N0PMGHIcd+SsWDWjec MKGediYZ6ohVPbIfelC6vpWJRjCL9Oidm6lUz7czvmneZAQkrcsV/juqPKzVr2d+ fJeiGKIjk3BgzG7dXOAnd2kVdbEa+qj4uHzMSshXpJljd7TgoLKkXT4e+0UUHxVT zloRaGteiTkEkpAsQSrF9BkmzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDLjCkg m2DA6J1Gr6XGM4pqZBl6MB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVm NGFaY3Z4VnpRVENvNVVHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFIwPx6aFXqfXm0oXz4F2fDSplShZ9aQ0rko/Lxq8ulLeAObOXURceCcUf6SK W5kouxKWIDRPnIgibi2SdZnXsh4KxkDMymbZ3RIS608dYxsbu7HvYMZbm/nuTs7y dN8pE4dniy8uILmdqam+j3ySffdjkz4FHk8TEEPMHRhdjTV2ogSnoCnnqeoKXdXM 8qGmFb/iZ6gPAzD2lwHP6ApgCtUMwWofvaU5JDUXDLIIw08ehM9UvR24dRP2N6jq EEHUh3whPtUapwnxxidxd35t2Pkdn7J2OtQdK/Ei/qji3EUefv/zfc2L7O3VDFdb Qdcu3zWY0AKu04bxZHa7At2C3w== -----END CERTIFICATE-----Generated at Thu Sep 24 19:18:54 2026 by rpki-client