$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft File: DHT8APVkd7MNxjxYlDlCKryGiIM.mft (raw, json) Hash identifier: 3iniMMtVkVFIN7V/zK+mrzBJ4x04fwyI+fT4vMm7lcU= Subject key identifier: AF:3D:CA:A8:F2:86:BE:2E:08:75:FF:5D:3F:B8:C0:EF:8A:89:06:D7 Authority key identifier: 0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 Certificate issuer: /CN=A91D2DDF/serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft Manifest number: 07 Signing time: Wed 23 Sep 2026 09:01:35 +0000 Manifest this update: Wed 23 Sep 2026 09:01:35 +0000 Manifest next update: Wed 30 Sep 2026 09:01:35 +0000 Files and hashes: 1: DHT8APVkd7MNxjxYlDlCKryGiIM.crl (hash: xnb/dTAu8lxh6/XW25HyuVGWw4F7GWrKQgkfedUDJng=) 2: 8D5261CEB23611F193647F1D6011F970.roa (hash: Swyj/xtXs6B4h5z1HMQ81Ug9t/0dfmEs33ixMbbL9hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2DDF, serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Validity Not Before: Sep 23 09:01:35 2026 GMT Not After : Sep 30 09:01:35 2026 GMT Subject: CN=6ab3956f-924f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:1f:93:6d:66:43:53:c5:38:93:a1:48:40: 28:9c:bc:69:d6:6d:cb:12:9d:12:17:12:9a:91:c0: 17:1f:a3:b7:8d:47:23:69:20:0b:62:03:c6:db:03: 39:67:51:65:7b:c8:8a:5f:f6:24:04:58:2e:57:24: 12:51:df:1a:94:ba:2b:75:40:ed:93:95:46:65:6b: aa:59:5a:fe:72:26:16:b3:66:ae:87:4e:04:9b:2f: 4c:7f:05:49:d1:dc:85:07:53:49:e7:72:09:5a:b2: ee:ff:a3:bd:22:8a:fc:8a:d6:5f:ba:c2:de:05:4d: 5d:1c:86:20:15:ac:95:bb:ec:93:17:e9:2f:21:f8: e4:3c:e5:25:f7:b9:ee:a2:99:7e:09:8e:73:22:30: f3:10:45:bd:69:b1:e5:af:bd:96:8c:71:0d:a4:bd: 7f:be:44:d4:a1:58:7e:2f:d5:7f:99:6a:2c:13:37: 3e:87:95:b5:7b:f7:13:03:09:0f:0b:8a:c9:52:c0: bf:e7:5d:48:1b:32:4f:c0:eb:95:a0:7f:0f:aa:89: b5:3d:2a:03:bc:62:28:74:3f:1d:83:c0:20:de:4d: 44:19:1c:05:5c:94:a8:b0:47:48:b5:c7:40:94:89: 3f:83:33:2c:bb:c4:ee:3e:f1:f4:e0:54:d8:dd:85: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:CA:A8:F2:86:BE:2E:08:75:FF:5D:3F:B8:C0:EF:8A:89:06:D7 X509v3 Authority Key Identifier: keyid:0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3f:b2:dd:03:01:7a:78:13:ce:86:6f:c2:70:4f:ef:70:53: 8a:4a:9d:44:6e:33:92:52:f4:ff:02:17:54:fb:30:87:3b:d8: 56:2e:af:27:86:7c:35:cb:b9:a2:b8:e6:b0:c8:82:0c:c4:be: 70:95:02:87:7c:23:cb:f5:f5:17:01:a5:3e:85:63:b3:2b:54: 04:61:f0:b1:c9:50:cf:58:4d:11:49:4a:55:cb:3f:07:ef:3d: bd:18:39:ab:92:03:26:7c:f6:7f:ee:25:a1:ef:8a:11:ec:56: 64:39:18:c0:1f:4e:da:5a:29:02:18:b5:f2:2b:24:41:7f:b7: 7a:ee:d0:f9:1e:fc:e9:c3:83:6f:9f:ed:bf:43:63:d4:44:8a: d8:f6:10:bb:ce:2d:e3:02:4f:1d:53:b1:4a:2e:5a:5a:4c:ae: fe:32:cf:c9:cd:fa:ac:79:42:4d:c5:10:39:82:51:30:84:85: b8:21:92:86:5b:89:37:21:5e:e2:68:28:fa:a6:29:02:77:60: cc:69:af:55:0f:c4:ca:83:47:15:8b:94:f0:ea:6c:dd:0b:bb: 66:e4:1e:91:f4:69:06:ac:37:f9:8a:4c:13:a5:c0:f6:ea:28: 76:b1:da:42:50:b3:06:e1:7b:a2:45:1c:15:63:2c:8d:e5:cc: 72:63:42:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkRERjExMC8GA1UEBRMoMEM3NEZDMDBGNTY0NzdCMzBEQzYzQzU4OTQzOTQyMkFC Qzg2ODg4MzAeFw0yNjA5MjMwOTAxMzVaFw0yNjA5MzAwOTAxMzVaMBgxFjAUBgNV BAMTDTZhYjM5NTZmLTkyNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbeh+TbWZDU8U4k6FIQCicvGnWbcsSnRIXEpqRwBcfo7eNRyNpIAtiA8bbAzln UWV7yIpf9iQEWC5XJBJR3xqUuit1QO2TlUZla6pZWv5yJhazZq6HTgSbL0x/BUnR 3IUHU0nncglasu7/o70iivyK1l+6wt4FTV0chiAVrJW77JMX6S8h+OQ85SX3ue6i mX4JjnMiMPMQRb1pseWvvZaMcQ2kvX++RNShWH4v1X+ZaiwTNz6HlbV79xMDCQ8L islSwL/nXUgbMk/A65Wgfw+qibU9KgO8Yih0Px2DwCDeTUQZHAVclKiwR0i1x0CU iT+DMyy7xO4+8fTgVNjdhc0vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrz3KqPKG vi4Idf9dP7jA74qJBtcwHwYDVR0jBBgwFoAUDHT8APVkd7MNxjxYlDlCKryGiIMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyRERGLzRGODZGNTk2QjIz NDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdNTnhqeFlsRGxDS3J5R2lJ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREhUOEFQVmtkN01OeGp4WWxEbENLcnlHaUlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy RERGLzRGODZGNTk2QjIzNDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdN TnhqeFlsRGxDS3J5R2lJTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsP7LdAwF6eBPOhm/CcE/vcFOKSp1EbjOSUvT/AhdU+zCHO9hWLq8nhnw1y7mi uOawyIIMxL5wlQKHfCPL9fUXAaU+hWOzK1QEYfCxyVDPWE0RSUpVyz8H7z29GDmr kgMmfPZ/7iWh74oR7FZkORjAH07aWikCGLXyKyRBf7d67tD5Hvzpw4Nvn+2/Q2PU RIrY9hC7zi3jAk8dU7FKLlpaTK7+Ms/JzfqseUJNxRA5glEwhIW4IZKGW4k3IV7i aCj6pikCd2DMaa9VD8TKg0cVi5Tw6mzdC7tm5B6R9GkGrDf5ikwTpcD26ih2sdpC ULMG4XuiRRwVYyyN5cxyY0K9 -----END CERTIFICATE-----Generated at Thu Sep 24 04:48:22 2026 by rpki-client