$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: B3ZyVYi44/D8HrB484caIK69iFCuo1MybBRww9JxTzg= Subject key identifier: 88:F4:0E:DA:38:3F:2E:8C:18:0F:AB:AE:FB:E0:86:B1:8D:CA:51:CD Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 0238 Signing time: Wed 23 Sep 2026 02:33:21 +0000 Manifest this update: Wed 23 Sep 2026 02:33:20 +0000 Manifest next update: Wed 30 Sep 2026 02:33:20 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: K2X/pD/K8IyOA5tf3kdm7ARqFSuYwUY/2OUgRvEvsIU=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: cF057REBd5D/+vcFWsOPGez1VoQjLibEv7GnA24pPRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Sep 23 02:33:20 2026 GMT Not After : Sep 30 02:33:20 2026 GMT Subject: CN=6ab33a71-d274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:4d:01:e2:cf:95:8a:de:99:22:7e:f1:fa: 9e:3f:62:65:fa:fd:9f:2c:27:af:85:5d:20:63:81: db:42:17:be:c4:b7:ff:e7:77:ca:06:e8:8f:ca:90: fd:b8:41:6f:48:b5:ae:10:b5:06:59:b9:10:cd:3e: 35:32:61:73:f7:6c:f6:59:a2:e9:c2:e3:3a:be:88: ad:09:1d:67:e9:dc:b7:e1:89:eb:b0:e0:8a:84:ab: 42:e1:ce:75:66:c7:5a:1d:ce:a2:82:7b:5b:af:d5: 24:ef:41:d6:06:40:cf:68:96:cc:98:d2:51:c5:70: 8a:b5:3c:a4:83:33:9b:e3:c6:72:89:f5:9f:c0:cf: 83:e5:91:85:00:50:ca:fd:ec:7d:03:52:f7:c8:9e: 69:ff:0a:92:5a:68:2d:d0:8f:1f:77:29:c3:59:a4: d6:2e:cb:f6:10:49:01:e7:9a:a1:22:1c:b5:b0:5c: 4a:62:88:62:b9:b1:16:47:22:98:80:b3:49:19:df: 89:13:cc:e5:cc:8a:3e:5a:8e:2a:03:99:d7:20:9d: ad:51:ef:fa:5e:46:9d:65:20:3c:64:c5:f6:a7:f5: 4d:fa:5e:f3:2b:2e:d0:51:57:23:c9:b6:6c:9e:a6: 50:9f:12:96:cd:86:79:b4:72:00:b8:82:d9:da:56: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F4:0E:DA:38:3F:2E:8C:18:0F:AB:AE:FB:E0:86:B1:8D:CA:51:CD X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8f:cf:bf:5b:d1:96:19:c3:77:c0:4d:2c:16:be:79:d1:56: 49:17:14:b0:25:f0:ed:b6:6a:d4:3c:d2:97:20:dd:58:20:69: a1:4a:73:85:e2:60:b8:b4:09:4d:db:06:48:58:d3:67:14:33: ac:15:e0:7a:07:82:dc:aa:fd:21:45:02:a2:66:25:e8:ac:83: e7:b5:15:a3:6d:c8:7f:72:c0:25:18:03:34:73:ef:b1:20:c7: 97:99:3e:01:e9:ad:1e:95:b5:23:01:c1:d7:b5:62:db:8c:0e: 8b:5d:67:72:83:ef:63:fd:ad:4e:1d:1e:6c:79:29:40:6f:3c: 58:d9:0f:96:b8:c0:f8:48:b4:4b:4b:59:74:8d:46:93:96:32: 42:9b:7f:a5:db:40:d6:48:25:ab:3b:1b:95:36:c1:43:e1:44: 8b:3b:65:6f:3f:d4:8f:3d:9c:fd:0f:7e:87:70:7e:85:9d:aa: f3:ab:27:68:df:bd:39:b8:b3:a7:03:b6:fe:be:34:9b:de:6c: 8b:73:c8:fe:cd:db:6e:be:a2:f0:f5:06:ea:d6:f8:6d:80:78: 77:5c:01:fd:f6:4d:d9:4a:3d:c5:1f:64:42:96:86:4d:15:60: 18:47:de:b7:3b:6e:28:e7:78:01:69:35:2e:b9:a0:9d:1c:a7: df:30:2a:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjYwOTIzMDIzMzIwWhcNMjYwOTMwMDIzMzIwWjAYMRYwFAYD VQQDEw02YWIzM2E3MS1kMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDtNAeLPlYremSJ+8fqeP2Jl+v2fLCevhV0gY4HbQhe+xLf/53fKBuiPypD9 uEFvSLWuELUGWbkQzT41MmFz92z2WaLpwuM6voitCR1n6dy34YnrsOCKhKtC4c51 ZsdaHc6igntbr9Uk70HWBkDPaJbMmNJRxXCKtTykgzOb48ZyifWfwM+D5ZGFAFDK /ex9A1L3yJ5p/wqSWmgt0I8fdynDWaTWLsv2EEkB55qhIhy1sFxKYohiubEWRyKY gLNJGd+JE8zlzIo+Wo4qA5nXIJ2tUe/6XkadZSA8ZMX2p/VN+l7zKy7QUVcjybZs nqZQnxKWzYZ5tHIAuILZ2lY1CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj0Dto4 Py6MGA+rrvvghrGNylHNMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAio/Pv1vRlhnDd8BNLBa+edFWSRcUsCXw7bZq1DzSlyDdWCBpoUpzheJguLQJ TdsGSFjTZxQzrBXgegeC3Kr9IUUComYl6KyD57UVo23If3LAJRgDNHPvsSDHl5k+ AemtHpW1IwHB17Vi24wOi11ncoPvY/2tTh0ebHkpQG88WNkPlrjA+Ei0S0tZdI1G k5YyQpt/pdtA1kglqzsblTbBQ+FEiztlbz/Ujz2c/Q9+h3B+hZ2q86snaN+9Obiz pwO2/r40m95si3PI/s3bbr6i8PUG6tb4bYB4d1wB/fZN2Uo9xR9kQpaGTRVgGEfe tztuKOd4AWk1LrmgnRyn3zAqYw== -----END CERTIFICATE-----Generated at Wed Sep 23 08:08:43 2026 by rpki-client