$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: rIjMhJzBTKGV6tdO9HIZdII751yYGGH8WbofVU80IOA= Subject key identifier: C9:50:B1:08:21:29:3F:40:89:5E:2A:DB:19:4D:98:82:8B:88:C4:08 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 110E Signing time: Fri 04 Sep 2026 14:24:50 +0000 Manifest this update: Fri 04 Sep 2026 14:24:50 +0000 Manifest next update: Fri 11 Sep 2026 14:24:50 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: TuCgNolIKCP2ovsu0/CkGgiU3EFVHkUu46pBTSAsrtc=) 2: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=) 3: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=) 4: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4392 (0x1128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Sep 4 14:24:50 2026 GMT Not After : Sep 11 14:24:50 2026 GMT Subject: CN=6a9ad4b2-d2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:91:32:bb:6d:a0:7b:9c:7b:dc:81:f0:39: 2a:8b:0e:56:9d:8d:91:df:fe:bd:44:02:64:ea:ee: e8:07:b0:2b:c7:47:8e:c6:82:e4:f3:82:0c:6d:13: a8:97:fa:b9:77:e3:5f:7c:15:ec:07:57:70:42:b9: 3c:89:2c:4b:9b:45:6b:26:af:51:68:1b:77:63:e9: 8b:a4:a0:a9:cc:05:5a:30:d7:c3:65:00:99:b6:b1: 46:a1:66:11:36:3a:a5:9b:e1:ac:9c:7d:33:d0:7b: 77:e9:3a:dc:32:00:d8:d7:ee:46:ea:3a:36:d3:0a: b2:12:d5:85:46:97:f4:0c:f9:9a:2e:37:ca:0d:28: 27:95:8b:d3:01:92:c1:b3:49:f6:29:0a:11:ab:81: c2:75:c3:fe:8c:5c:cc:38:44:ed:b5:5a:d0:0b:1a: fa:72:9c:dc:56:61:04:28:04:96:12:93:49:2f:7a: 44:35:ef:e7:90:4d:13:99:03:d9:30:ed:1d:b8:f4: db:35:91:70:ee:92:27:9b:c2:1a:7a:63:d8:3a:cb: e4:60:4c:1f:64:90:7d:bf:62:a6:b8:35:fa:14:3e: 32:ed:02:29:c7:f2:39:77:88:23:fe:cb:70:3a:4d: d3:e0:8c:c5:0e:ab:a8:2f:4a:de:74:91:1c:05:c2: 58:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:B1:08:21:29:3F:40:89:5E:2A:DB:19:4D:98:82:8B:88:C4:08 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:4a:f6:09:7a:99:c4:ae:a2:5a:3c:b5:f2:da:c1:b6:3e:36: 11:98:fa:39:2a:0f:25:51:13:7b:3b:55:46:ab:46:88:5b:e0: bc:7c:ff:6b:1b:23:e4:14:1a:6d:4b:44:9f:94:68:2a:0c:98: ae:56:fb:69:6d:99:20:45:7f:e6:ab:16:0a:d7:d7:99:36:21: d2:2b:1b:51:b8:2a:34:cb:a7:24:bb:de:fd:6f:6c:e1:b5:7d: 7a:c4:74:70:79:ba:72:0f:c4:2a:13:b8:53:ce:ad:4f:fa:2c: 79:cb:f1:7b:1f:1e:07:4d:13:94:e7:63:3e:c3:d2:04:6c:88: 66:46:28:37:ea:47:e3:fe:41:3d:58:77:82:24:93:49:f0:1e: 04:0b:8d:45:c0:f5:17:ee:2e:42:99:e9:5a:29:ee:97:f8:02: 03:28:fc:fb:7f:0b:2d:df:58:12:c6:b8:c1:b9:1c:b5:3f:e1: 8c:00:c5:b3:20:eb:f2:34:47:62:d1:4c:3a:90:ab:8c:5a:95: 7d:c8:91:ce:c9:b2:52:46:b5:e5:1c:6f:d8:03:0f:29:5e:82: a7:4d:9e:79:9d:5e:29:21:95:8e:70:44:aa:f6:f4:ba:b7:74: 84:a3:b7:00:54:49:11:f2:29:38:aa:21:1a:bf:3d:89:a4:b7: cb:1d:cd:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjYwOTA0MTQyNDUwWhcNMjYwOTExMTQyNDUwWjAYMRYwFAYD VQQDEw02YTlhZDRiMi1kMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt76RMrttoHuce9yB8Dkqiw5WnY2R3/69RAJk6u7oB7Arx0eOxoLk84IMbROo l/q5d+NffBXsB1dwQrk8iSxLm0VrJq9RaBt3Y+mLpKCpzAVaMNfDZQCZtrFGoWYR Njqlm+GsnH0z0Ht36TrcMgDY1+5G6jo20wqyEtWFRpf0DPmaLjfKDSgnlYvTAZLB s0n2KQoRq4HCdcP+jFzMOETttVrQCxr6cpzcVmEEKASWEpNJL3pENe/nkE0TmQPZ MO0duPTbNZFw7pInm8IaemPYOsvkYEwfZJB9v2KmuDX6FD4y7QIpx/I5d4gj/stw Ok3T4IzFDquoL0redJEcBcJYFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlQsQgh KT9AiV4q2xlNmIKLiMQIMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ0r2CXqZxK6iWjy18trBtj42EZj6OSoPJVETeztVRqtGiFvgvHz/axsj5BQa bUtEn5RoKgyYrlb7aW2ZIEV/5qsWCtfXmTYh0isbUbgqNMunJLve/W9s4bV9esR0 cHm6cg/EKhO4U86tT/osecvxex8eB00TlOdjPsPSBGyIZkYoN+pH4/5BPVh3giST SfAeBAuNRcD1F+4uQpnpWinul/gCAyj8+38LLd9YEsa4wbkctT/hjADFsyDr8jRH YtFMOpCrjFqVfciRzsmyUka15Rxv2AMPKV6Cp02eeZ1eKSGVjnBEqvb0urd0hKO3 AFRJEfIpOKohGr89iaS3yx3NYA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:33:31 2026 by rpki-client