$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft File: hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft (raw, json) Hash identifier: 6ywWgPAFlu9R8+E7atw4TG7aOiVoERBkjraUadMWLr4= Subject key identifier: E5:CC:71:7D:2B:0F:B2:41:81:2F:03:D3:E8:D3:B4:70:15:38:61:ED Authority key identifier: 85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4 Certificate issuer: /CN=A91BF578/serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft Manifest number: 32 Signing time: Fri 09 Oct 2026 09:29:18 +0000 Manifest this update: Fri 09 Oct 2026 09:29:17 +0000 Manifest next update: Fri 16 Oct 2026 09:29:17 +0000 Files and hashes: 1: hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl (hash: pBeM7kGzKGg0OFSn2RAZIdEOA8uBrWzv8PjrLa7mp7o=) 2: EDD96AAE7F4811F19E46568395A30FBC.roa (hash: Wmt85iJENOVXXmg3SFuE0XKh364Rsjv2WardtpRUQfE=) 3: 26433904A5BB11F185CE55806D11F970.roa (hash: EqMBCVv0GHS858ZexkI81MSBkDl0Le386d19oSQOLFY=) 4: _gn-fiJmAGqHg6QjJvux2P7Q-2U.asa (hash: mNY7jZ++ojwKU6sNjpOXs8aUr3BW55CUq2uzq8SgE60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF578, serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4 Validity Not Before: Oct 9 09:29:17 2026 GMT Not After : Oct 16 09:29:17 2026 GMT Subject: CN=6ac8b3ee-9fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:da:c3:28:40:2f:ff:50:10:c4:ee:c3:43: 6f:3b:6b:30:24:2b:23:bb:ff:2b:b3:3f:16:5e:b2: 57:ed:d9:7f:33:bd:20:36:55:b8:ad:72:06:f7:14: e2:6b:10:ea:6f:d6:68:11:c2:55:77:e1:96:c6:d2: 57:d2:01:a8:5c:d4:ac:2e:2b:26:3d:9b:74:30:7e: 99:b3:bf:2e:da:6a:22:3c:53:c8:07:d3:88:01:ba: a6:7e:77:6b:3c:d5:b1:eb:4c:37:dc:ed:94:e8:0a: e7:33:c9:31:e7:3f:02:ca:02:a5:f7:c2:8e:3f:28: 2f:f8:0c:83:bf:16:1f:48:d0:83:22:84:a4:2d:61: bf:81:0f:13:1d:be:9c:cd:a6:8c:9e:d3:b5:cf:70: f6:03:8d:98:0b:6b:36:63:93:d6:20:bd:41:7a:1d: 84:85:27:d2:e7:f6:f7:6a:19:19:dc:04:46:e1:ec: 17:53:9b:a9:14:f7:7d:69:a5:68:39:e2:d7:46:0c: 34:43:38:c4:1d:a5:52:05:2f:a4:2f:35:67:69:70: 20:36:23:c9:a3:8c:62:c5:08:c8:1e:a1:0f:b5:cd: 33:8e:fa:a7:e3:33:77:8a:d9:25:80:3a:33:5f:5d: 3b:7c:fc:1c:70:0e:d6:c8:63:b6:41:31:ee:eb:ef: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:71:7D:2B:0F:B2:41:81:2F:03:D3:E8:D3:B4:70:15:38:61:ED X509v3 Authority Key Identifier: keyid:85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:29:b9:8b:29:6b:29:6d:ae:9c:9a:ec:e8:4f:0d:3f:72: ed:f1:ce:72:21:2f:ca:8a:27:f7:4e:e6:c4:a8:1c:56:76:a9: de:c2:66:99:ff:1b:6c:6d:af:69:29:19:82:cc:7d:d3:fd:71: 49:9d:31:07:bb:f3:46:f0:5b:63:08:df:ae:37:90:e9:f0:61: f5:3b:69:25:66:06:71:d5:9a:45:b7:0b:8e:d7:51:c7:c4:2b: 6b:d3:d7:86:1f:b2:39:6f:87:72:72:9c:cc:d4:2f:7f:e0:2b: e2:1d:90:f0:30:d1:f5:bb:3f:52:1f:c0:b8:5c:3c:b7:52:f1: 18:71:df:50:30:1c:a7:a8:bb:75:52:41:45:31:4d:e2:32:7e: b1:ca:61:fc:5d:11:c3:70:37:15:a3:36:cd:4a:56:18:10:92: 83:90:4e:a8:ab:10:bb:15:1f:f9:8b:61:66:46:b1:bf:cc:b3: 9f:0c:97:2d:43:32:31:75:6f:47:aa:45:d2:67:5e:33:24:65: eb:7d:90:04:2d:ec:13:da:27:ad:3f:f7:47:e9:4b:cd:d5:89: 0f:ce:15:59:b4:51:af:4a:a1:55:4d:60:b2:4a:f4:cc:42:1b: 8d:91:d8:9f:53:47:48:39:09:f8:af:de:95:a8:f6:30:92:12: f0:27:9b:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjU3ODExMC8GA1UEBRMoODUzRUNCNEY3N0NDMjE0MURCQThERDE4QzEyMTM1QzlE NzcwRkVFNDAeFw0yNjEwMDkwOTI5MTdaFw0yNjEwMTYwOTI5MTdaMBgxFjAUBgNV BAMTDTZhYzhiM2VlLTlmZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzTNrDKEAv/1AQxO7DQ287azAkKyO7/yuzPxZeslft2X8zvSA2Vbitcgb3FOJr EOpv1mgRwlV34ZbG0lfSAahc1KwuKyY9m3Qwfpmzvy7aaiI8U8gH04gBuqZ+d2s8 1bHrTDfc7ZToCuczyTHnPwLKAqX3wo4/KC/4DIO/Fh9I0IMihKQtYb+BDxMdvpzN poye07XPcPYDjZgLazZjk9YgvUF6HYSFJ9Ln9vdqGRncBEbh7BdTm6kU931ppWg5 4tdGDDRDOMQdpVIFL6QvNWdpcCA2I8mjjGLFCMgeoQ+1zTOO+qfjM3eK2SWAOjNf XTt8/BxwDtbIY7ZBMe7r71prAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5cxxfSsP skGBLwPT6NO0cBU4Ye0wHwYDVR0jBBgwFoAUhT7LT3fMIUHbqN0YwSE1yddw/uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNTc4L0EwM0JBMjU4N0Y0 ODExRjFBM0VBMEU4MTk1QTMwRkJDL2hUN0xUM2ZNSVVIYnFOMFl3U0UxeWRkd191 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFQ3TFQzZk1JVUhicU4wWXdTRTF5ZGR3X3VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NTc4L0EwM0JBMjU4N0Y0ODExRjFBM0VBMEU4MTk1QTMwRkJDL2hUN0xUM2ZNSVVI YnFOMFl3U0UxeWRkd191US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCB4ym5iylrKW2unJrs6E8NP3Lt8c5yIS/Kiif3TubEqBxWdqnewmaZ/xtsba9p KRmCzH3T/XFJnTEHu/NG8FtjCN+uN5Dp8GH1O2klZgZx1ZpFtwuO11HHxCtr09eG H7I5b4dycpzM1C9/4CviHZDwMNH1uz9SH8C4XDy3UvEYcd9QMBynqLt1UkFFMU3i Mn6xymH8XRHDcDcVozbNSlYYEJKDkE6oqxC7FR/5i2FmRrG/zLOfDJctQzIxdW9H qkXSZ14zJGXrfZAELewT2ietP/dH6UvN1YkPzhVZtFGvSqFVTWCySvTMQhuNkdif U0dIOQn4r96VqPYwkhLwJ5sI -----END CERTIFICATE-----Generated at Sun Oct 11 08:57:58 2026 by rpki-client