$ rpki-client -vvvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: 1izPnkM7OTw1Y8H36J8bGmcNhRPh9BpVubBHXpbPbQo= Subject key identifier: B8:4F:0B:D5:A1:64:CA:FA:3A:B4:2A:2D:63:E5:14:A7:D8:3E:AF:55 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 0487 Signing time: Mon 05 Oct 2026 00:04:23 +0000 Manifest this update: Mon 05 Oct 2026 00:04:23 +0000 Manifest next update: Mon 12 Oct 2026 00:04:23 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: lQY1yFgyqntgf9xC6aUNnmOyqHRqAMWtQ0E2yWln1uc=) 2: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=) 4: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Oct 5 00:04:23 2026 GMT Not After : Oct 12 00:04:23 2026 GMT Subject: CN=6ac2e987-5d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:19:19:f4:b5:1f:27:47:c5:b4:83:a3:de: 23:e3:0e:c9:23:20:88:66:4d:84:18:96:d1:f3:c3: 66:a4:cd:87:f6:d8:1a:bb:40:ff:a0:38:a4:ff:6d: e3:2a:bc:07:58:a9:f5:10:dd:9d:d1:74:86:5e:31: 5d:e7:f4:69:8e:5d:f9:9a:99:6b:d6:a8:84:6a:13: 93:f4:86:66:3f:92:d2:6c:97:73:af:e3:8d:29:3c: e1:d9:b1:c0:e9:95:45:b6:3c:b4:a9:7a:6d:bc:03: 07:16:8b:d3:1e:b1:86:b9:e6:99:6b:65:94:e1:f7: 6f:18:c9:4b:61:0d:16:75:ae:45:c9:5d:2b:d1:6e: d8:af:d8:ef:4d:5c:8a:3e:fa:fc:a7:7f:f1:0e:3e: ac:1c:ee:40:40:11:9c:24:eb:00:c1:b1:ba:03:f2: 33:0d:ff:8f:be:4c:0d:ad:dc:4a:aa:db:93:aa:45: 0b:3c:70:58:d4:32:51:74:ca:da:1c:c1:c3:36:5e: bc:76:0d:77:00:c6:c8:80:c4:cf:18:86:4c:ef:ed: ca:11:cd:79:0c:d5:44:16:c1:59:4e:0a:a7:22:8e: 85:10:ee:27:a6:48:1a:0c:e9:a8:93:2d:8a:32:8d: cd:95:e4:6a:ea:50:9c:aa:fd:2e:13:bd:6c:0a:8d: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4F:0B:D5:A1:64:CA:FA:3A:B4:2A:2D:63:E5:14:A7:D8:3E:AF:55 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f7:a2:16:d9:77:2e:50:93:20:76:64:6d:1a:86:ed:0f:f5: bc:ec:88:1c:54:67:b6:33:b3:b6:27:40:1d:d4:c2:5f:cf:a2: aa:34:eb:3b:f5:84:94:69:b7:7f:f2:b2:d9:33:6f:b4:44:0e: 98:85:df:0e:35:a7:85:f9:af:2c:44:50:29:85:df:20:f1:ca: 6f:65:c2:3a:75:73:14:05:60:72:23:7f:a0:4b:dd:3f:3a:f3: a4:7a:52:f3:0f:c3:c5:27:ef:ce:36:5b:9c:cf:fc:b4:2d:64: eb:8d:6e:53:1f:2c:6d:4b:02:27:8e:ae:bf:5c:53:39:c3:b0: 67:0a:4d:5a:0a:e2:9e:63:80:a1:30:b7:23:c3:ea:7a:8d:9c: f2:c1:b9:1d:42:8f:8d:19:20:7f:e1:1c:4c:30:15:01:e6:71: ad:cb:f4:4f:f7:37:db:2c:63:88:83:4c:60:55:a3:d8:bd:09: 1f:b6:f2:21:2d:f9:6c:f2:4a:bb:07:35:48:6a:c8:68:bc:51: f6:3d:9d:29:5d:01:f2:f7:ac:76:80:07:fe:d1:60:ed:3a:f5: 74:5d:34:7a:72:7f:04:2c:94:af:53:55:a2:2b:35:8d:bf:83: 48:c6:81:2c:92:3d:40:96:c6:2c:93:cb:5a:6f:68:8a:52:99: 67:e0:90:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYxMDA1MDAwNDIzWhcNMjYxMDEyMDAwNDIzWjAYMRYwFAYD VQQDEw02YWMyZTk4Ny01ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL4ZGfS1HydHxbSDo94j4w7JIyCIZk2EGJbR88NmpM2H9tgau0D/oDik/23j KrwHWKn1EN2d0XSGXjFd5/Rpjl35mplr1qiEahOT9IZmP5LSbJdzr+ONKTzh2bHA 6ZVFtjy0qXptvAMHFovTHrGGueaZa2WU4fdvGMlLYQ0Wda5FyV0r0W7Yr9jvTVyK Pvr8p3/xDj6sHO5AQBGcJOsAwbG6A/IzDf+PvkwNrdxKqtuTqkULPHBY1DJRdMra HMHDNl68dg13AMbIgMTPGIZM7+3KEc15DNVEFsFZTgqnIo6FEO4npkgaDOmoky2K Mo3NleRq6lCcqv0uE71sCo3AtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhPC9Wh ZMr6OrQqLWPlFKfYPq9VMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlveiFtl3LlCTIHZkbRqG7Q/1vOyIHFRntjOztidAHdTCX8+iqjTrO/WElGm3 f/Ky2TNvtEQOmIXfDjWnhfmvLERQKYXfIPHKb2XCOnVzFAVgciN/oEvdPzrzpHpS 8w/DxSfvzjZbnM/8tC1k641uUx8sbUsCJ46uv1xTOcOwZwpNWgrinmOAoTC3I8Pq eo2c8sG5HUKPjRkgf+EcTDAVAeZxrcv0T/c32yxjiINMYFWj2L0JH7byIS35bPJK uwc1SGrIaLxR9j2dKV0B8vesdoAH/tFg7Tr1dF00enJ/BCyUr1NVois1jb+DSMaB LJI9QJbGLJPLWm9oilKZZ+CQEw== -----END CERTIFICATE-----Generated at Tue Oct 6 22:58:55 2026 by rpki-client