$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: 86gBJuZ5RgTgUz+9DMA18OL9O8ajAKMEY4h5sQhcBz8= Subject key identifier: D1:58:7D:95:C6:4D:16:4C:82:12:5F:F4:59:61:7E:3B:EA:32:B6:F6 Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 0793 Signing time: Mon 28 Sep 2026 21:43:15 +0000 Manifest this update: Mon 28 Sep 2026 21:43:14 +0000 Manifest next update: Mon 05 Oct 2026 21:43:14 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: jr572gpSQNgZKaAQUiswM2fqJJhRws5/oHDJIC8z/Xg=) 2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: NXfieC6S74PlG+JtYRQQl5gMzeIDNhGSgnxY2WBkw18=) 3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: JK6/e0PvYBa8kGFQgLjtSrCPCDpo6wNDkFljh8D9dzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 21:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Sep 28 21:43:14 2026 GMT Not After : Oct 5 21:43:14 2026 GMT Subject: CN=6abadf73-4d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:42:10:8f:31:ac:6c:b1:d6:e5:cf:69:1d: d8:9d:02:27:b0:1c:a0:33:43:b0:fe:6f:28:1a:db: 92:06:32:11:18:89:a1:b1:2e:68:f9:5b:3f:ca:df: 18:e9:57:a8:33:6c:ed:ba:91:c3:8f:04:b2:06:ef: ca:90:00:a6:f7:2f:57:bd:b3:80:91:00:4d:24:b1: 12:a5:fb:cb:73:f6:f6:be:18:36:f7:a3:66:41:fe: 49:59:db:75:69:6e:71:a2:10:0c:59:03:8e:cf:01: f9:7f:28:3d:9c:7e:51:e9:df:69:4e:34:78:d1:88: 39:ee:5e:9c:d3:a8:8b:18:e0:fd:75:d2:9b:9e:6c: 64:cd:33:97:58:a4:94:62:d4:05:81:14:0e:4a:4c: e7:0e:6b:cc:48:a2:4c:5b:10:66:49:77:ec:08:a4: 0c:3d:b8:c4:b0:db:80:49:ef:ed:10:82:9e:9f:d4: 96:e6:db:60:ef:8b:af:78:34:39:f7:c7:91:16:4a: 5a:6c:88:4c:6b:9a:b1:ce:ed:00:87:aa:60:96:0a: 9f:07:ba:e8:54:58:6d:68:e0:98:d3:b5:b4:bd:f8: 0d:b7:1a:d4:b2:20:4e:1a:49:7d:3a:67:58:06:75: d4:6a:c2:ca:4e:d8:70:02:35:c1:32:72:f2:e8:aa: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:7D:95:C6:4D:16:4C:82:12:5F:F4:59:61:7E:3B:EA:32:B6:F6 X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:5b:b2:01:66:04:b9:a0:01:81:e6:93:10:2c:b3:e2:28: b7:85:51:c7:d0:71:e2:7b:ae:e7:6f:f3:78:08:d1:31:68:9c: 06:e0:ee:88:ed:3a:f7:45:e4:51:83:f2:92:8c:1c:e8:66:c4: 6b:72:a1:46:05:f2:7e:38:20:e4:00:87:9c:0d:9a:76:fd:93: cf:c3:f8:e5:75:6e:ce:aa:45:a8:20:62:2e:fa:24:00:ea:6f: 18:7f:d1:cc:e3:06:a5:5d:83:56:d9:94:ee:e9:c3:fb:e6:04: 0f:b4:c1:fe:b9:2c:3d:4f:d6:d2:e1:0b:3e:5c:e3:15:21:59: e4:1a:39:76:47:27:38:2c:b3:8c:65:40:c0:35:8c:3c:8e:b6: f1:d1:e2:e7:d5:52:40:ad:98:fb:e7:02:f8:59:c1:1f:ac:5f: da:d6:a0:ea:62:27:52:0e:e5:d8:b4:d7:5d:cf:c2:c1:d5:90: c5:79:ec:fb:2a:75:b7:67:95:23:6b:4f:a5:70:e5:22:6b:ea: 67:3c:23:4b:c5:cb:f5:ca:d1:52:d1:65:73:ef:0c:61:8f:d8: 73:74:25:ed:b7:37:4e:2a:43:d6:7f:56:34:7b:3e:d9:36:e6: 94:3e:52:fa:2a:ec:c3:5a:14:dc:36:ed:03:a6:d1:e9:bd:85: b9:4e:9d:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYwOTI4MjE0MzE0WhcNMjYxMDA1MjE0MzE0WjAYMRYwFAYD VQQDEw02YWJhZGY3My00ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1A5CEI8xrGyx1uXPaR3YnQInsBygM0Ow/m8oGtuSBjIRGImhsS5o+Vs/yt8Y 6VeoM2ztupHDjwSyBu/KkACm9y9XvbOAkQBNJLESpfvLc/b2vhg296NmQf5JWdt1 aW5xohAMWQOOzwH5fyg9nH5R6d9pTjR40Yg57l6c06iLGOD9ddKbnmxkzTOXWKSU YtQFgRQOSkznDmvMSKJMWxBmSXfsCKQMPbjEsNuASe/tEIKen9SW5ttg74uveDQ5 98eRFkpabIhMa5qxzu0Ah6pglgqfB7roVFhtaOCY07W0vfgNtxrUsiBOGkl9OmdY BnXUasLKTthwAjXBMnLy6KrZOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFYfZXG TRZMghJf9FlhfjvqMrb2MB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMhbsgFmBLmgAYHmkxAss+Iot4VRx9Bx4nuu52/zeAjRMWicBuDuiO0690Xk UYPykowc6GbEa3KhRgXyfjgg5ACHnA2adv2Tz8P45XVuzqpFqCBiLvokAOpvGH/R zOMGpV2DVtmU7unD++YED7TB/rksPU/W0uELPlzjFSFZ5Bo5dkcnOCyzjGVAwDWM PI628dHi59VSQK2Y++cC+FnBH6xf2tag6mInUg7l2LTXXc/CwdWQxXns+yp1t2eV I2tPpXDlImvqZzwjS8XL9crRUtFlc+8MYY/Yc3Ql7bc3TipD1n9WNHs+2TbmlD5S +irsw1oU3DbtA6bR6b2FuU6dEg== -----END CERTIFICATE-----Generated at Tue Sep 29 15:46:44 2026 by rpki-client