$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: 5Vour+yn9D+yx0kTOZQLrc/DYQAnEppJakYW6veXTBg= Subject key identifier: 0D:46:60:05:6C:A0:2D:0C:E9:36:ED:E2:55:7D:06:EA:06:C5:61:7A Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0CAB Signing time: Thu 24 Sep 2026 18:33:46 +0000 Manifest this update: Thu 24 Sep 2026 18:33:46 +0000 Manifest next update: Thu 01 Oct 2026 18:33:46 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: Die/OCqBHecjPUb5bNytGHspRnFKCf9pB+EzxHsnQA0=) 2: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) 3: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Sep 24 18:33:46 2026 GMT Not After : Oct 1 18:33:46 2026 GMT Subject: CN=6ab56d0a-ccaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:3a:ca:d0:3c:be:98:e0:b1:8d:c5:07:22: 4c:ad:5b:0e:8e:68:ab:a7:64:90:08:d0:98:2b:fa: 25:90:3b:65:d1:6c:9e:60:b1:50:27:76:77:b8:6d: 50:78:12:5f:c8:2c:3d:62:51:d0:fd:96:41:8f:15: 44:d9:d5:40:7c:1c:2b:36:47:3e:89:3c:55:5c:c7: 1f:b9:2e:1a:d2:51:16:22:88:c0:ab:20:6e:7c:78: 55:a6:83:0c:e4:14:71:cc:21:8e:ba:a4:df:1e:dc: 0e:c7:5c:92:c7:ba:06:7f:dd:ab:2b:29:e0:b6:ca: 3b:79:de:e4:50:5b:f7:46:9a:bf:f7:1e:a1:ba:1a: be:cf:0d:fd:91:92:d7:48:e9:5f:6f:62:ba:8c:42: 4e:ac:24:0d:bd:9c:22:62:0f:4a:c5:7f:da:23:cf: 5c:38:20:16:4e:d2:e4:0d:32:c9:65:79:9d:7c:2b: 86:ce:00:db:a9:ed:64:70:8f:d5:0f:58:46:93:c3: e7:f6:c1:7d:48:2c:00:e3:0f:1d:73:e7:9a:7b:ef: 87:51:44:f0:cb:3b:2c:ea:8e:32:44:5c:6e:3b:e4: 4a:00:e3:6d:5e:3a:20:4b:14:e6:fb:02:b3:98:d3: 97:4f:fd:c5:cd:cb:2b:45:0a:2e:c1:54:50:85:c0: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:46:60:05:6C:A0:2D:0C:E9:36:ED:E2:55:7D:06:EA:06:C5:61:7A X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3b:0f:bb:23:87:1e:54:50:5e:d9:37:62:fe:a2:de:10:ff: 25:18:70:09:a7:86:c7:03:28:ce:54:57:bb:5d:ea:73:3b:25: 03:7b:18:00:5c:8e:01:ca:85:6d:f7:0b:3a:2a:b6:c6:50:90: dc:57:55:cc:23:0e:bc:f2:ac:b8:fe:d8:61:d7:0d:65:6c:a9: e0:7e:b6:ac:dc:84:29:34:e3:af:57:50:57:07:b7:50:47:53: af:a6:a3:9f:00:72:bb:93:ff:58:9a:77:50:07:71:45:34:8d: c1:8c:7a:6b:a2:f9:3b:6e:b4:9b:f7:47:8f:5d:7b:45:5d:78: a3:f6:2e:12:6c:83:f8:23:0b:27:95:94:fa:dc:9d:4a:4c:36: 1a:db:d1:6d:ac:64:1c:c2:3c:b2:01:24:7c:72:4f:47:f8:53: 24:4c:5d:07:bc:37:ed:34:9a:93:fe:99:ab:b9:c4:61:5f:b5: 8d:b4:74:0f:72:5b:bb:ee:27:d2:cb:92:55:2b:91:75:3a:26: 89:25:8a:16:37:f5:90:02:15:fe:b9:68:53:87:2b:49:47:c4: ab:20:99:76:6e:39:34:07:7c:aa:5c:1e:b0:8d:98:db:ad:e6: 4b:4c:9c:b7:4b:b6:88:52:2d:ec:f0:b6:1c:f8:2c:bd:dc:e4: 5b:19:f0:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYwOTI0MTgzMzQ2WhcNMjYxMDAxMTgzMzQ2WjAYMRYwFAYD VQQDEw02YWI1NmQwYS1jY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZI6ytA8vpjgsY3FByJMrVsOjmirp2SQCNCYK/olkDtl0WyeYLFQJ3Z3uG1Q eBJfyCw9YlHQ/ZZBjxVE2dVAfBwrNkc+iTxVXMcfuS4a0lEWIojAqyBufHhVpoMM 5BRxzCGOuqTfHtwOx1ySx7oGf92rKyngtso7ed7kUFv3Rpq/9x6huhq+zw39kZLX SOlfb2K6jEJOrCQNvZwiYg9KxX/aI89cOCAWTtLkDTLJZXmdfCuGzgDbqe1kcI/V D1hGk8Pn9sF9SCwA4w8dc+eae++HUUTwyzss6o4yRFxuO+RKAONtXjogSxTm+wKz mNOXT/3FzcsrRQouwVRQhcA4BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1GYAVs oC0M6Tbt4lV9BuoGxWF6MB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAETsPuyOHHlRQXtk3Yv6i3hD/JRhwCaeGxwMozlRXu13qczslA3sYAFyOAcqF bfcLOiq2xlCQ3FdVzCMOvPKsuP7YYdcNZWyp4H62rNyEKTTjr1dQVwe3UEdTr6aj nwByu5P/WJp3UAdxRTSNwYx6a6L5O260m/dHj117RV14o/YuEmyD+CMLJ5WU+tyd Skw2GtvRbaxkHMI8sgEkfHJPR/hTJExdB7w37TSak/6Zq7nEYV+1jbR0D3Jbu+4n 0suSVSuRdTomiSWKFjf1kAIV/rloU4crSUfEqyCZdm45NAd8qlwesI2Y263mS0yc t0u2iFIt7PC2HPgsvdzkWxnwgg== -----END CERTIFICATE-----Generated at Fri Sep 25 14:24:26 2026 by rpki-client