$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: +HxOaZtqXWPdidCQnusRtbxZvh45LYNvUIIJSivYl3g= Subject key identifier: 5E:F2:8B:8A:BB:4E:83:0D:9B:A4:0F:51:31:63:8C:23:5D:6C:75:B4 Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 09F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 09EA Signing time: Sat 26 Sep 2026 19:55:40 +0000 Manifest this update: Sat 26 Sep 2026 19:55:40 +0000 Manifest next update: Sat 03 Oct 2026 19:55:40 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: lbfJ4RpivOZOkMAFTIJkUKNkaEZZiW/dlxvOQei5qIc=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Sep 26 19:55:40 2026 GMT Not After : Oct 3 19:55:40 2026 GMT Subject: CN=6ab8233c-6ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:b8:de:f6:5a:3f:eb:12:63:a1:0d:dc:bc: d5:8a:a1:a6:45:38:70:60:93:cf:b9:af:1d:40:7b: 66:17:65:b8:2d:61:e1:08:8e:94:b6:07:d5:31:3b: dc:1a:89:86:3a:e6:a1:05:96:95:da:1b:1a:03:98: c1:d6:98:a8:c6:27:b4:6f:77:69:a3:48:40:36:53: 57:49:3c:80:b5:0f:ac:18:d4:b2:80:4d:97:ba:bc: c5:3f:c8:20:f7:99:3d:bb:bf:f8:8a:ea:95:22:7c: 7a:42:7e:6e:b0:ec:45:e9:c1:c3:05:fa:66:af:49: 09:46:64:73:60:38:f9:db:13:95:a4:7f:04:43:f2: 1d:b6:fb:e5:4a:0b:ea:ff:3e:a2:59:6f:59:56:1f: 20:7c:90:12:34:5c:91:ac:0a:2c:4a:81:cd:95:51: 53:95:ac:50:24:b6:81:5f:96:7a:27:3c:51:63:8b: b9:38:ae:57:1d:41:d5:7e:a1:61:89:30:37:7f:ab: fd:c7:f8:c1:d6:ab:e5:e5:af:4c:d5:15:3b:a8:ac: 74:0c:c0:af:0e:2d:30:e5:ae:dc:89:ca:a8:b7:04: 40:c2:db:3f:31:2d:a7:f7:e9:5f:e6:ad:7f:62:f2: 08:2e:3e:59:9d:4c:b3:09:c9:71:71:4b:de:98:3b: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F2:8B:8A:BB:4E:83:0D:9B:A4:0F:51:31:63:8C:23:5D:6C:75:B4 X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1b:7d:b3:e8:d7:24:f8:0a:10:db:03:1a:53:ee:ff:bf:77: 61:28:b0:85:27:e5:38:d8:97:c2:d9:da:bf:94:93:66:e3:38: 96:a1:24:e1:ce:ce:47:f2:c4:1f:80:65:6a:37:03:17:4c:71: 00:0d:92:4e:0d:5a:46:f1:a4:32:ed:19:6e:ae:f7:5a:d5:24: 50:ce:f8:f3:e0:b7:d9:97:43:74:85:9d:f9:f9:ea:60:63:37: 3f:97:4c:1b:85:9e:3c:68:9f:6b:54:09:d5:93:aa:19:44:72: 77:70:ba:66:20:54:70:d1:6e:72:ec:33:84:33:7b:42:5a:7d: d6:54:9c:93:5c:5c:b6:d1:4a:b0:26:7f:bf:63:e6:a0:13:62: b5:f5:1b:42:21:e1:dd:05:80:8f:e6:c0:1b:63:02:ab:d5:60: 2b:bd:dc:2f:ca:78:d9:a2:21:2c:a5:f7:13:7f:9a:da:67:5d: c9:fc:12:95:64:3e:92:8e:e8:65:c3:0d:d4:36:75:63:7b:44: c1:15:df:8a:87:3a:24:32:aa:98:4d:8b:5e:f1:79:5c:0a:21: e3:92:0d:45:0d:9b:94:1e:dd:80:dc:df:4a:c1:2b:12:e3:56: f3:df:cd:a0:26:aa:7d:88:f1:5e:69:48:01:80:95:f9:d5:64: bc:76:7e:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjYwOTI2MTk1NTQwWhcNMjYxMDAzMTk1NTQwWjAYMRYwFAYD VQQDEw02YWI4MjMzYy02ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLO43vZaP+sSY6EN3LzViqGmRThwYJPPua8dQHtmF2W4LWHhCI6UtgfVMTvc GomGOuahBZaV2hsaA5jB1pioxie0b3dpo0hANlNXSTyAtQ+sGNSygE2XurzFP8gg 95k9u7/4iuqVInx6Qn5usOxF6cHDBfpmr0kJRmRzYDj52xOVpH8EQ/IdtvvlSgvq /z6iWW9ZVh8gfJASNFyRrAosSoHNlVFTlaxQJLaBX5Z6JzxRY4u5OK5XHUHVfqFh iTA3f6v9x/jB1qvl5a9M1RU7qKx0DMCvDi0w5a7cicqotwRAwts/MS2n9+lf5q1/ YvIILj5ZnUyzCclxcUvemDtmQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7yi4q7 ToMNm6QPUTFjjCNdbHW0MB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEBt9s+jXJPgKENsDGlPu/793YSiwhSflONiXwtnav5STZuM4lqEk4c7OR/LE H4BlajcDF0xxAA2STg1aRvGkMu0Zbq73WtUkUM748+C32ZdDdIWd+fnqYGM3P5dM G4WePGifa1QJ1ZOqGURyd3C6ZiBUcNFucuwzhDN7Qlp91lSck1xcttFKsCZ/v2Pm oBNitfUbQiHh3QWAj+bAG2MCq9VgK73cL8p42aIhLKX3E3+a2mddyfwSlWQ+ko7o ZcMN1DZ1Y3tEwRXfioc6JDKqmE2LXvF5XAoh45INRQ2blB7dgNzfSsErEuNW89/N oCaqfYjxXmlIAYCV+dVkvHZ+UA== -----END CERTIFICATE-----Generated at Sun Sep 27 08:43:34 2026 by rpki-client