$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json) Hash identifier: /9i1OO9/CKFgkhueeO8pXLQVMZW91dibDaVnczFnafc= Subject key identifier: FB:A2:A6:46:7B:AA:6C:98:3F:50:33:27:2D:94:C1:86:5C:51:C6:0F Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Certificate serial: 1614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft Manifest number: 15FF Signing time: Tue 22 Sep 2026 16:39:11 +0000 Manifest this update: Tue 22 Sep 2026 16:39:10 +0000 Manifest next update: Tue 29 Sep 2026 16:39:10 +0000 Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: pbJHTgoDfC/c8ChthqXtlekKoLJ6VZwEH6+LIKoqjmY=) 2: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=) 3: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5652 (0x1614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Validity Not Before: Sep 22 16:39:10 2026 GMT Not After : Sep 29 16:39:10 2026 GMT Subject: CN=6ab2af2f-3182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:e3:b9:4b:03:ed:29:db:e5:af:9c:b9:ba: 94:b4:26:79:1c:21:bc:c3:10:3c:b3:37:88:79:00: 50:8b:81:c0:73:1d:8b:6a:63:fa:ec:1b:46:fd:99: 81:ad:f5:6d:22:7c:ca:0e:87:6b:b6:3c:c3:c9:15: 09:bb:bc:3c:a9:f4:db:9b:8d:e7:e8:36:38:ac:3b: d0:90:e8:72:28:6b:c6:2e:78:f0:97:eb:53:de:20: 4f:07:e3:48:6a:92:9d:80:0b:3b:c3:17:ce:20:87: 00:d8:d0:8a:aa:d4:13:42:aa:75:3b:67:2f:d9:35: c1:65:48:52:7a:aa:75:a5:88:7f:45:af:4e:3c:3b: 28:65:5c:4f:19:2f:2a:9c:48:19:8f:23:94:55:7a: fc:95:45:b0:c8:7b:f4:31:f5:6b:93:74:61:bb:33: 8b:49:96:a9:0c:c9:d8:ad:27:15:4d:d5:c9:a2:90: 24:be:e3:24:f6:2b:fb:43:e3:57:8d:64:bd:01:34: 47:1b:a6:04:15:13:65:85:a4:25:2e:d4:28:bd:1a: 5d:04:97:78:12:e6:ef:2b:b6:ee:1c:18:3a:5c:97: 05:9d:9a:33:e6:61:0f:a9:88:ac:1e:25:dc:c5:a3: b1:c0:7a:be:fe:e6:90:e8:82:57:01:c2:0a:b1:ff: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A2:A6:46:7B:AA:6C:98:3F:50:33:27:2D:94:C1:86:5C:51:C6:0F X509v3 Authority Key Identifier: keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ca:2e:b2:c0:bb:91:09:c3:15:99:05:4a:1f:46:ae:5c:07: d8:ec:1d:44:3e:66:3a:5c:4e:7d:0c:e2:70:a6:50:c9:85:73: dd:2a:7a:c8:89:29:ea:55:73:5b:81:96:9f:f4:35:8e:3e:68: e1:2a:91:26:44:a5:9a:5b:dd:f4:b4:e8:0c:a8:6a:ed:76:d8: e8:d5:2e:2f:ce:c2:98:df:09:e0:16:33:d8:3c:c7:4b:32:ec: 5a:e5:b8:52:16:cb:46:e7:56:f9:4e:e7:88:df:98:df:90:40: f8:e8:f5:b9:ae:ae:0b:16:30:94:66:55:cf:7b:85:1b:b4:6b: 13:c5:8f:1b:51:ae:8d:fd:f0:99:d5:fd:45:8b:b2:50:4a:45: f6:ed:01:02:93:8d:a3:65:ef:25:ac:3b:d4:93:51:63:d6:f7: af:d7:de:d7:f8:b6:95:40:6e:12:fc:e9:8d:f8:3d:e1:64:7d: 02:c5:e2:c0:79:22:13:8c:a3:0b:c1:cc:54:59:79:1f:6c:62: 76:a7:bb:7f:38:7f:a5:2d:66:f6:dc:35:2f:32:bb:87:ac:ee: e5:eb:9f:99:5b:14:c3:a1:79:16:cd:26:c6:43:04:90:52:82: 41:f5:91:e8:90:f6:5c:b4:17:e6:f6:c1:13:af:43:21:5d:12: 10:df:39:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RTQxMTAvBgNVBAUTKDg3Q0EzOTQ4Q0UxQ0NCRTFBMjA0QzVGODBEQjQzMDQx MDlBODMxN0MwHhcNMjYwOTIyMTYzOTEwWhcNMjYwOTI5MTYzOTEwWjAYMRYwFAYD VQQDEw02YWIyYWYyZi0zMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR3juUsD7Snb5a+cubqUtCZ5HCG8wxA8szeIeQBQi4HAcx2LamP67BtG/ZmB rfVtInzKDodrtjzDyRUJu7w8qfTbm43n6DY4rDvQkOhyKGvGLnjwl+tT3iBPB+NI apKdgAs7wxfOIIcA2NCKqtQTQqp1O2cv2TXBZUhSeqp1pYh/Ra9OPDsoZVxPGS8q nEgZjyOUVXr8lUWwyHv0MfVrk3RhuzOLSZapDMnYrScVTdXJopAkvuMk9iv7Q+NX jWS9ATRHG6YEFRNlhaQlLtQovRpdBJd4EubvK7buHBg6XJcFnZoz5mEPqYisHiXc xaOxwHq+/uaQ6IJXAcIKsf+ZwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuipkZ7 qmyYP1AzJy2UwYZcUcYPMB8GA1UdIwQYMBaAFIfKOUjOHMvhogTF+A20MEEJqDF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVFNC83OTM5NzMyMDRE MDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3ktR2lCTVg0RGJRd1FRbW9N WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4bzVTTTRjeS1HaUJNWDREYlF3UVFtb01Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVFNC83OTM5NzMyMDREMDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3kt R2lCTVg0RGJRd1FRbW9NWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ8oussC7kQnDFZkFSh9GrlwH2OwdRD5mOlxOfQzicKZQyYVz3Sp6yIkp6lVz W4GWn/Q1jj5o4SqRJkSlmlvd9LToDKhq7XbY6NUuL87CmN8J4BYz2DzHSzLsWuW4 UhbLRudW+U7niN+Y35BA+Oj1ua6uCxYwlGZVz3uFG7RrE8WPG1Gujf3wmdX9RYuy UEpF9u0BApONo2XvJaw71JNRY9b3r9fe1/i2lUBuEvzpjfg94WR9AsXiwHkiE4yj C8HMVFl5H2xidqe7fzh/pS1m9tw1LzK7h6zu5eufmVsUw6F5Fs0mxkMEkFKCQfWR 6JD2XLQX5vbBE69DIV0SEN85dA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:30:30 2026 by rpki-client