$ rpki-client -vvvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: yXzO1zwbLU3O30mAaNKvqjtuh+7+ZN5NnRQTtglrUbE= Subject key identifier: 3A:67:4B:89:5E:41:80:F5:B6:A6:4B:E1:71:2A:56:B9:EC:2F:43:F0 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0239 Signing time: Sun 11 Oct 2026 03:10:37 +0000 Manifest this update: Sun 11 Oct 2026 03:10:37 +0000 Manifest next update: Sun 18 Oct 2026 03:10:37 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: UXYYlgdJuy/QLnQasfq3dgRBQV0BfnMlixUTAkrrP4A=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=) 3: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: vugsK16sJjvSr8OK0LSYKyoQkwn8bb1O/z7sIhYr5Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Oct 11 03:10:37 2026 GMT Not After : Oct 18 03:10:37 2026 GMT Subject: CN=6acafe2d-a8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:78:4d:bf:67:b1:14:f6:78:ac:bd:dc:57: 64:43:47:a1:e9:50:43:cf:34:95:d0:b1:ca:74:01: 39:59:cb:e8:8e:2b:4a:7a:56:5d:be:1a:4e:c3:15: a7:12:62:49:da:26:d9:01:28:f4:db:f7:20:50:d1: b4:2d:d2:a1:19:70:6e:32:7b:25:fe:e7:02:f8:07: 3b:ca:40:d8:21:f0:a0:8f:8b:e4:28:f2:2f:bd:ff: 24:2d:15:09:06:42:56:3d:0b:cb:09:a1:aa:c5:22: 5a:56:b7:d2:fb:30:de:a2:8b:95:69:33:6c:cb:b8: 5e:2f:b7:04:0f:cf:11:bf:33:9b:27:ae:a0:31:f6: 27:91:89:dc:7e:52:13:5a:d3:d1:4b:ae:30:5e:60: f7:02:87:e3:53:e1:e6:90:ed:81:f3:3c:aa:52:ad: a5:a7:5c:78:8a:cf:ab:1a:ea:c4:35:c5:c2:bb:79: 12:84:a9:b5:c4:1f:c4:51:92:9b:e3:bd:af:f7:1d: 6c:a8:31:3f:eb:fc:3f:20:2c:9c:63:4b:20:b6:f7: b7:c4:8e:db:88:0f:43:c4:ad:27:8b:b3:49:02:1d: 38:0b:db:26:cd:6c:9b:3d:66:97:ec:55:a1:ea:7b: 51:b5:5f:29:cd:70:d5:3a:91:cc:9f:fd:2d:a2:a1: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:4B:89:5E:41:80:F5:B6:A6:4B:E1:71:2A:56:B9:EC:2F:43:F0 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4c:3c:9d:cb:4e:d6:37:f4:d1:70:45:49:34:0f:df:32:fd: 57:e5:28:bd:e0:4a:e8:df:22:ad:3b:86:39:9b:c0:be:fd:88: 6d:5a:7f:89:25:d8:55:0d:25:15:93:78:f1:27:0b:3e:14:52: fa:29:7a:a5:75:fa:66:fb:ed:d2:10:87:2d:33:ab:5a:ae:f0: aa:85:dd:08:80:9b:5d:96:15:07:58:7a:50:6f:42:f8:e5:66: ad:0c:f1:b7:7d:38:0b:2b:1e:24:19:f5:14:0b:16:79:9c:fc: 98:33:14:23:fc:54:11:ce:03:75:86:1a:44:62:42:73:a0:3c: 60:55:f5:52:4c:6f:c5:2a:99:57:2d:ad:b3:75:53:13:7f:4a: 17:eb:77:62:c6:f4:b3:0c:e1:0c:60:91:a1:da:50:70:a7:f0: 8d:fa:56:48:3d:48:ec:dd:d8:12:a8:39:f8:b1:86:e6:eb:3d: 99:41:47:8d:16:71:ee:1b:43:88:48:2a:72:07:09:d1:9b:bd: 7f:5c:92:5a:4a:b4:7e:60:ab:6d:72:3f:f5:65:0c:4d:76:7f: d2:e6:97:56:d0:15:b3:45:29:54:89:bb:0f:2a:fa:66:0b:37: d0:f3:f3:98:3a:ab:ee:b2:d9:97:e2:2a:f3:77:0b:fc:42:d7: a8:b0:7a:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYxMDExMDMxMDM3WhcNMjYxMDE4MDMxMDM3WjAYMRYwFAYD VQQDEw02YWNhZmUyZC1hOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorN4Tb9nsRT2eKy93FdkQ0eh6VBDzzSV0LHKdAE5WcvojitKelZdvhpOwxWn EmJJ2ibZASj02/cgUNG0LdKhGXBuMnsl/ucC+Ac7ykDYIfCgj4vkKPIvvf8kLRUJ BkJWPQvLCaGqxSJaVrfS+zDeoouVaTNsy7heL7cED88RvzObJ66gMfYnkYncflIT WtPRS64wXmD3AofjU+HmkO2B8zyqUq2lp1x4is+rGurENcXCu3kShKm1xB/EUZKb 472v9x1sqDE/6/w/ICycY0sgtve3xI7biA9DxK0ni7NJAh04C9smzWybPWaX7FWh 6ntRtV8pzXDVOpHMn/0toqG4NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpnS4le QYD1tqZL4XEqVrnsL0PwMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO0w8nctO1jf00XBFSTQP3zL9V+UoveBK6N8irTuGOZvAvv2IbVp/iSXYVQ0l FZN48ScLPhRS+il6pXX6Zvvt0hCHLTOrWq7wqoXdCICbXZYVB1h6UG9C+OVmrQzx t304CyseJBn1FAsWeZz8mDMUI/xUEc4DdYYaRGJCc6A8YFX1UkxvxSqZVy2ts3VT E39KF+t3Ysb0swzhDGCRodpQcKfwjfpWSD1I7N3YEqg5+LGG5us9mUFHjRZx7htD iEgqcgcJ0Zu9f1ySWkq0fmCrbXI/9WUMTXZ/0uaXVtAVs0UpVIm7Dyr6Zgs30PPz mDqr7rLZl+Iq83cL/ELXqLB6EA== -----END CERTIFICATE-----Generated at Sun Oct 11 20:44:38 2026 by rpki-client