$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: SxtdweMjmMAjm+gIZk4orJorBJwnHzcYxGhs+iIDytM= Subject key identifier: 44:32:CD:1B:A9:2B:D1:5D:9A:C3:A9:55:0D:0B:9C:70:2F:57:C0:27 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 10C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 107E Signing time: Thu 24 Sep 2026 17:20:36 +0000 Manifest this update: Thu 24 Sep 2026 17:20:36 +0000 Manifest next update: Thu 01 Oct 2026 17:20:36 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: zNHi0QtMpEX971lerpSV7uTrWaznD03tTYJmwsnC32k=) 2: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WR/88pfaCczDigHpfgd4GYy1P6qmyhWsOy4WabOWrlU=) 3: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: RfbqC8GS1hHzeb5ag3voBDbpoO632YWZC1e96BmW8tY=) 4: B3876B1821C911EB991D562EC4F9AE02.roa (hash: PAJXVnplsOIegEPXMbATwr923PfH+sXu4QP6bOY+9aU=) 5: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: bx80odAXkY0MYIUdPq3Se5Z99i5ov0hqTySdt08ambI=) 6: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) 7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: m1jd0Q2D9k3+2i/d4GmRzebyVctCB9sAwMGAQxkAF/8=) 8: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: j42PYjWNb/mnyEI0E6+iq6JxrFxqeSi6M5a2jMZwTdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4296 (0x10c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Sep 24 17:20:36 2026 GMT Not After : Oct 1 17:20:36 2026 GMT Subject: CN=6ab55be4-78a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:2b:e6:be:1a:29:88:5d:1d:7e:9d:1e:97: d9:e3:0b:70:ad:66:74:eb:89:66:a6:5d:14:4a:42: 10:a8:3b:ef:9f:9e:4d:24:6c:12:ac:26:87:95:93: b1:2e:f9:a3:5f:10:94:f2:e8:50:6c:a6:33:88:62: bb:cf:0b:88:fc:97:40:48:35:fd:a0:3d:63:42:52: a2:f1:94:53:fe:61:62:c3:a5:9f:5c:41:34:1b:4e: 8d:cf:9b:af:4b:21:21:6e:d1:5b:29:b0:df:b9:cd: 5c:a6:b2:14:c0:3c:e6:b4:85:4e:2b:30:3a:b3:ba: 5f:93:9c:25:56:c4:6d:48:0c:76:87:fa:c6:40:12: db:a9:cb:63:cd:54:99:48:14:bc:88:ba:d4:4e:84: 98:be:aa:fd:41:02:10:a7:ad:f6:ac:75:4f:62:0f: 6a:cb:bb:8c:57:7d:c4:50:c5:14:63:1a:df:e1:57: 5c:2c:6a:38:33:06:80:02:b4:0f:46:74:cb:7b:fe: 19:f8:13:00:97:13:bb:c5:cd:46:ba:a2:af:12:ba: 18:bc:d7:1e:8c:86:af:a7:d3:07:b3:a4:5e:28:37: a9:fa:ea:d1:59:78:2b:59:c8:0f:7b:0b:30:19:31: 90:53:46:5d:46:7f:a8:d8:b1:eb:4e:20:89:51:5b: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:CD:1B:A9:2B:D1:5D:9A:C3:A9:55:0D:0B:9C:70:2F:57:C0:27 X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:5f:b0:71:7f:27:2c:0e:3d:9f:38:f5:78:28:4d:92:02: f9:82:73:aa:3e:48:93:ea:00:c9:01:99:ed:96:64:80:3f:29: 1f:cb:bd:3b:9c:6e:8f:88:dc:e9:ce:a0:de:b2:c3:3d:37:82: a8:dd:14:5c:25:24:37:60:52:96:74:76:e9:87:b6:c3:be:0d: ff:fd:83:f2:ba:b3:b5:d1:6a:e4:55:ae:26:9d:11:3e:77:f1: c0:8c:88:fe:0b:8e:a8:42:a2:b3:b3:85:53:e2:13:df:3f:cb: 74:7e:65:0b:6f:52:fe:95:c2:8a:cd:25:ee:f4:36:7c:3a:bf: 95:55:e0:e0:9e:07:c2:51:89:3c:f0:96:4e:cb:93:1a:86:3d: 7f:57:85:5e:b1:04:b4:2f:48:23:f7:02:9a:48:bd:06:18:6c: 98:1d:68:ca:4e:bb:97:8b:c3:c6:4c:46:2b:78:b4:57:b3:bc: ac:14:a0:36:ba:f2:bf:61:bf:71:3c:38:78:99:cd:42:30:06: e4:27:0b:3b:32:06:84:b4:57:76:4d:b4:92:93:44:b0:11:4a: 33:59:83:3f:67:95:ef:97:c1:3e:1d:f6:85:aa:ff:6a:45:8f: 94:2d:9a:a3:31:ec:a1:9d:97:17:ed:10:84:9e:bd:ce:7f:f7: bf:bb:74:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYwOTI0MTcyMDM2WhcNMjYxMDAxMTcyMDM2WjAYMRYwFAYD VQQDEw02YWI1NWJlNC03OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDMr5r4aKYhdHX6dHpfZ4wtwrWZ064lmpl0USkIQqDvvn55NJGwSrCaHlZOx LvmjXxCU8uhQbKYziGK7zwuI/JdASDX9oD1jQlKi8ZRT/mFiw6WfXEE0G06Nz5uv SyEhbtFbKbDfuc1cprIUwDzmtIVOKzA6s7pfk5wlVsRtSAx2h/rGQBLbqctjzVSZ SBS8iLrUToSYvqr9QQIQp632rHVPYg9qy7uMV33EUMUUYxrf4VdcLGo4MwaAArQP RnTLe/4Z+BMAlxO7xc1GuqKvEroYvNcejIavp9MHs6ReKDep+urRWXgrWcgPewsw GTGQU0ZdRn+o2LHrTiCJUVvNoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQyzRup K9FdmsOpVQ0LnHAvV8AnMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPXxfsHF/JywOPZ849XgoTZIC+YJzqj5Ik+oAyQGZ7ZZkgD8pH8u9O5xuj4jc 6c6g3rLDPTeCqN0UXCUkN2BSlnR26Ye2w74N//2D8rqztdFq5FWuJp0RPnfxwIyI /guOqEKis7OFU+IT3z/LdH5lC29S/pXCis0l7vQ2fDq/lVXg4J4HwlGJPPCWTsuT GoY9f1eFXrEEtC9II/cCmki9BhhsmB1oyk67l4vDxkxGK3i0V7O8rBSgNrryv2G/ cTw4eJnNQjAG5CcLOzIGhLRXdk20kpNEsBFKM1mDP2eV75fBPh32har/akWPlC2a ozHsoZ2XF+0QhJ69zn/3v7t0cw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:28:33 2026 by rpki-client