$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: azrsCr5EMModxp5NT3HwHbTGl9iZjTg5QgqnUMt4bU0= Subject key identifier: 7B:49:7B:7C:90:C5:A2:BF:B8:CE:A0:93:F2:23:18:89:51:0F:52:A6 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 0219 Signing time: Wed 23 Sep 2026 02:45:25 +0000 Manifest this update: Wed 23 Sep 2026 02:45:25 +0000 Manifest next update: Wed 30 Sep 2026 02:45:25 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: JJVRdB6e0iEp02AlPfjQoPu+652yKqo0I/HnFO6gaeU=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Sep 23 02:45:25 2026 GMT Not After : Sep 30 02:45:25 2026 GMT Subject: CN=6ab33d45-e145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:a3:64:b3:dd:a4:29:fd:a8:33:f8:80:5d: 5f:17:f1:37:14:00:9b:64:85:3b:98:be:c4:df:ed: 56:e1:4f:d5:c7:83:76:8a:85:a5:b4:25:f3:cf:5c: 3a:16:60:1b:6f:06:ae:d3:65:7d:16:f9:ea:d4:a0: 37:97:d4:a4:f6:2f:d1:61:bf:df:b2:bd:91:7d:46: 2f:d8:8a:a6:09:85:23:f3:55:33:78:40:2b:ca:1f: a3:25:1b:53:57:c8:97:ab:d6:96:f6:11:66:9a:6a: c1:73:d5:74:a0:50:77:49:e0:10:fa:db:b9:2f:cb: 5d:dd:0c:f5:d4:ad:64:d7:8d:21:d6:48:dd:d3:10: d1:eb:44:91:ad:88:78:8b:ca:a9:6c:fc:b7:60:c9: b5:b7:cc:4b:a1:f0:a9:3c:82:92:9d:20:dd:9e:db: 48:7a:7c:fd:8c:1b:ea:0f:34:b2:9d:c4:1e:b8:8e: ce:bb:6e:64:52:3c:d9:b7:11:c3:8b:5d:95:d7:15: c3:93:fb:21:25:9f:e7:57:81:f6:53:8a:ed:46:c3: 9c:94:74:3a:14:ef:51:bd:cb:76:74:f8:26:d6:55: 0b:94:75:b0:6a:10:e7:16:7d:ed:c3:4e:d7:cd:7b: 4d:7f:e2:61:e1:c7:46:9a:9c:c5:86:52:a9:49:f7: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:7B:7C:90:C5:A2:BF:B8:CE:A0:93:F2:23:18:89:51:0F:52:A6 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:64:32:0b:ab:e6:82:dc:7b:41:ed:23:f3:4b:0c:2c:db:dd: 5d:73:eb:01:4e:f4:4a:98:07:ce:2d:ed:02:ff:2f:50:ce:38: f8:b0:ae:a5:ca:66:81:77:92:99:4e:2f:a7:59:95:fc:d8:0a: 86:38:c1:b9:6e:7b:91:d3:96:7b:02:71:b2:3b:06:ef:79:76: 81:80:47:aa:c1:d8:86:64:14:28:5d:c9:da:d7:4a:ba:c0:c5: 28:c7:e0:65:3e:80:dd:a2:0c:52:07:4d:06:0c:1c:27:6b:28: 8e:06:4b:5a:ca:ff:4c:cd:26:40:e4:21:ba:27:3c:e2:59:04: 2c:7f:f9:18:7e:98:6d:ff:72:30:38:74:b4:8c:f0:17:9a:d0: d6:aa:32:37:1d:75:83:01:fd:f1:98:1d:7e:9c:00:7e:6e:25: 24:49:92:4b:22:4f:2c:a1:0a:7a:8d:55:39:67:0e:b2:fd:73: 72:2d:27:ed:c1:31:93:77:90:f8:af:78:5d:57:cd:27:2e:e4: 6c:8c:ee:df:e0:f8:8e:bc:e8:02:3b:aa:02:0f:41:2d:a4:e9: 42:41:11:75:30:84:65:ba:ed:22:b2:d5:62:24:4b:fb:a1:d0: 5c:43:24:29:d6:43:c7:54:55:cb:0c:aa:b4:7b:d3:7f:bd:ca: 43:91:fd:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwOTIzMDI0NTI1WhcNMjYwOTMwMDI0NTI1WjAYMRYwFAYD VQQDEw02YWIzM2Q0NS1lMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQKjZLPdpCn9qDP4gF1fF/E3FACbZIU7mL7E3+1W4U/Vx4N2ioWltCXzz1w6 FmAbbwau02V9Fvnq1KA3l9Sk9i/RYb/fsr2RfUYv2IqmCYUj81UzeEAryh+jJRtT V8iXq9aW9hFmmmrBc9V0oFB3SeAQ+tu5L8td3Qz11K1k140h1kjd0xDR60SRrYh4 i8qpbPy3YMm1t8xLofCpPIKSnSDdnttIenz9jBvqDzSyncQeuI7Ou25kUjzZtxHD i12V1xXDk/shJZ/nV4H2U4rtRsOclHQ6FO9Rvct2dPgm1lULlHWwahDnFn3tw07X zXtNf+Jh4cdGmpzFhlKpSfdBqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtJe3yQ xaK/uM6gk/IjGIlRD1KmMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEGQyC6vmgtx7Qe0j80sMLNvdXXPrAU70SpgHzi3tAv8vUM44+LCupcpmgXeS mU4vp1mV/NgKhjjBuW57kdOWewJxsjsG73l2gYBHqsHYhmQUKF3J2tdKusDFKMfg ZT6A3aIMUgdNBgwcJ2sojgZLWsr/TM0mQOQhuic84lkELH/5GH6Ybf9yMDh0tIzw F5rQ1qoyNx11gwH98ZgdfpwAfm4lJEmSSyJPLKEKeo1VOWcOsv1zci0n7cExk3eQ +K94XVfNJy7kbIzu3+D4jrzoAjuqAg9BLaTpQkERdTCEZbrtIrLVYiRL+6HQXEMk KdZDx1RVywyqtHvTf73KQ5H9hg== -----END CERTIFICATE-----Generated at Thu Sep 24 18:40:56 2026 by rpki-client