$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: toA+ER5XXMpb2tzA5/7gnWubrVPXOATWdYaK3KHdSBM= Subject key identifier: 58:4F:7B:E8:87:DD:34:33:D3:54:08:88:86:12:76:D0:7A:8E:6C:BA Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: AA Signing time: Sat 03 Oct 2026 07:49:54 +0000 Manifest this update: Sat 03 Oct 2026 07:49:54 +0000 Manifest next update: Sat 10 Oct 2026 07:49:54 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: 8sFYdxw9MjyRJcx/VWorB5RgwvF5Z3346s6626log5c=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: ja0OZOGeFBq/r+C9BOWsx8RNkhECKOugDQ//GAsGzcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Oct 3 07:49:54 2026 GMT Not After : Oct 10 07:49:54 2026 GMT Subject: CN=6ac0b3a2-543d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:2e:54:ad:c5:dc:f6:0b:73:76:80:6c:8e: c4:eb:22:a5:95:93:96:56:71:b6:a3:d7:03:f3:c9: 11:ee:e4:f9:77:60:87:ab:39:72:e8:91:b4:b0:3a: c9:3c:3c:9c:ea:8e:ba:cf:cd:5e:86:77:a8:6b:68: 4a:2e:b0:4b:4a:43:9c:77:49:f1:7e:db:f2:ec:74: 85:96:0a:cd:f4:da:f6:ea:18:e3:d4:91:9c:ee:82: 67:ef:ba:dd:b6:34:8f:78:88:05:87:60:bb:e0:9b: 7d:e7:4d:ac:eb:82:4f:e0:40:a3:77:6b:fa:09:fc: 38:af:f4:7b:e1:b4:9d:b9:d8:27:b5:34:5b:99:cc: 1a:6e:5e:df:9d:4a:e8:49:3e:0c:56:c1:30:01:24: f9:32:61:0d:21:17:eb:28:45:c7:6e:c0:bf:b7:2b: 1b:16:b8:e7:85:58:ba:f3:82:5a:18:51:9d:31:15: bd:e1:4f:12:b6:1a:8a:d3:10:ac:b4:cf:dc:3b:55: c3:01:ff:74:93:8e:e3:ca:1d:82:d4:54:0b:18:bb: 16:e4:b0:eb:be:c8:53:25:4e:c1:02:18:e8:a1:b9: cb:20:2e:ef:cd:44:83:19:8b:ea:bb:4c:7c:87:67: db:95:f1:4c:6c:87:da:f3:c2:ca:f6:36:a0:a7:56: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4F:7B:E8:87:DD:34:33:D3:54:08:88:86:12:76:D0:7A:8E:6C:BA X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:df:fb:65:57:4a:98:6a:47:08:8d:65:90:a8:d4:35:1b:9b: 24:2d:ca:cf:b6:1b:75:9a:33:4a:a7:09:20:95:c5:f3:c1:58: bc:4e:d1:5e:44:7b:cf:22:f4:64:ab:e9:04:be:7e:47:4a:a0: d3:3f:8f:fc:77:dd:d7:c1:0c:44:b2:72:b2:7e:51:cf:aa:7a: f8:e1:a5:29:85:33:6f:24:67:64:83:a6:b2:d0:96:95:e9:c9: ba:38:c6:2e:8e:fd:5a:39:f3:30:f7:ba:af:9c:5c:d2:31:18: 98:8b:6a:f3:4d:1d:65:79:ec:80:cc:b8:89:0d:f1:a5:e5:0a: c0:0f:64:cb:0f:8d:88:74:63:08:02:77:d6:38:56:c2:f8:3e: a2:c8:a0:f9:87:1b:ca:3d:0e:43:a6:3d:74:61:72:fe:9b:f2: a2:d6:fb:aa:bb:f2:a2:82:d3:ad:58:4f:9c:87:0f:d5:ad:6d: 7c:8d:ca:ed:67:23:71:9f:f8:5c:ee:ec:05:45:f2:94:ae:e8: 82:4e:68:94:d6:b9:87:31:6f:6d:34:c1:1a:c5:68:9b:fa:a7: 4b:c2:a9:da:f6:86:a0:78:c9:6c:9d:d7:7d:8c:3d:a1:44:30: 08:11:f0:31:55:73:84:b6:3f:36:e0:eb:07:a8:4d:28:a0:af: 56:44:5f:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUwMUUxMTAvBgNVBAUTKDg1MDg3RDA4RURCMzM3RUUwMUVCMUFFRUI4MTJDQkVF MzRBRDhFNjMwHhcNMjYxMDAzMDc0OTU0WhcNMjYxMDEwMDc0OTU0WjAYMRYwFAYD VQQDEw02YWMwYjNhMi01NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmAuVK3F3PYLc3aAbI7E6yKllZOWVnG2o9cD88kR7uT5d2CHqzly6JG0sDrJ PDyc6o66z81ehneoa2hKLrBLSkOcd0nxftvy7HSFlgrN9Nr26hjj1JGc7oJn77rd tjSPeIgFh2C74Jt9502s64JP4ECjd2v6Cfw4r/R74bSdudgntTRbmcwabl7fnUro ST4MVsEwAST5MmENIRfrKEXHbsC/tysbFrjnhVi684JaGFGdMRW94U8SthqK0xCs tM/cO1XDAf90k47jyh2C1FQLGLsW5LDrvshTJU7BAhjoobnLIC7vzUSDGYvqu0x8 h2fblfFMbIfa88LK9jagp1Z/uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhPe+iH 3TQz01QIiIYSdtB6jmy6MB8GA1UdIwQYMBaAFIUIfQjtszfuAesa7rgSy+40rY5j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTAxRS8xNDQ3QzBEOEJF QzgxMUYwODI3MzY2MEJDNEY5QUUwMi9oUWg5Q08yek4tNEI2eHJ1dUJMTDdqU3Rq bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGptTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTAxRS8xNDQ3QzBEOEJFQzgxMUYwODI3MzY2MEJDNEY5QUUwMi9oUWg5Q08yek4t NEI2eHJ1dUJMTDdqU3RqbU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk9/7ZVdKmGpHCI1lkKjUNRubJC3Kz7YbdZozSqcJIJXF88FYvE7RXkR7zyL0 ZKvpBL5+R0qg0z+P/Hfd18EMRLJysn5Rz6p6+OGlKYUzbyRnZIOmstCWlenJujjG Lo79WjnzMPe6r5xc0jEYmItq800dZXnsgMy4iQ3xpeUKwA9kyw+NiHRjCAJ31jhW wvg+osig+Ycbyj0OQ6Y9dGFy/pvyotb7qrvyooLTrVhPnIcP1a1tfI3K7WcjcZ/4 XO7sBUXylK7ogk5olNa5hzFvbTTBGsVom/qnS8Kp2vaGoHjJbJ3XfYw9oUQwCBHw MVVzhLY/NuDrB6hNKKCvVkRf5w== -----END CERTIFICATE-----Generated at Sun Oct 4 21:51:16 2026 by rpki-client