$ rpki-client -vvvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: olXYhoBvjV7FDjeIj1UGt5XUIBPGEhBfHeKxHgDKpcc= Subject key identifier: 48:A5:25:F5:F6:C5:EA:49:9B:22:D6:EF:E4:C0:65:7B:59:8D:9B:64 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 0134 Signing time: Tue 27 Oct 2026 06:04:45 +0000 Manifest this update: Tue 27 Oct 2026 06:04:44 +0000 Manifest next update: Tue 03 Nov 2026 06:04:44 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: V2v7gW3ierlE8W/uMB+6IAI5mVq3BTrMaCxT4C9E7B0=) 2: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) 3: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) 4: bnK0NbUw8bBQTqHVz5DDKSrXEe4.asa (hash: 7A6SI6CQLWVcX0yr/SArmbn6gtHpeEIz0aBxOGnQ4bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Oct 27 06:04:44 2026 GMT Not After : Nov 3 06:04:44 2026 GMT Subject: CN=6ae03efc-dece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:b1:b3:c1:c8:ab:12:d3:2e:23:e5:35:ee: 19:a7:61:62:f3:ee:5e:7a:7c:6d:2e:0d:d8:3a:e8: b4:c4:f7:9a:23:6e:8b:79:1c:5d:01:4f:df:9d:7a: 5b:5f:ea:ab:f2:b9:b9:2d:44:e7:e6:a8:5f:55:98: 87:5b:69:4b:d1:e3:a7:43:cb:c2:ac:e2:e4:f1:55: 21:11:cc:b9:b2:fc:6a:5b:b5:ff:85:39:10:ea:9c: 0a:f5:c6:e3:0d:b3:96:9a:b1:22:a5:d4:82:a6:b7: 89:83:43:a4:9c:ca:de:90:9e:b4:23:ae:c9:97:12: b8:fb:55:3c:72:c7:af:96:9a:f4:9a:64:60:5c:64: 2d:7a:e8:ff:59:dd:ee:bc:5d:49:8e:46:c3:2a:0c: 82:00:19:11:ce:ed:7b:0a:ef:bf:04:e5:cd:e5:f4: 43:34:a7:68:e4:59:20:98:17:49:8f:96:df:f6:49: 3c:40:e4:28:3e:ff:7c:65:57:98:58:0c:ef:32:f3: b6:26:19:34:6c:a6:69:15:eb:a2:a9:eb:fe:cc:8c: f4:8b:f9:27:2f:4a:b7:99:c8:83:f8:d3:61:d5:b8: 32:d0:89:f6:76:b2:d7:e6:99:39:5a:4a:3d:9c:26: ad:8b:54:3b:3f:2e:93:59:fd:8c:20:b0:8f:26:33: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A5:25:F5:F6:C5:EA:49:9B:22:D6:EF:E4:C0:65:7B:59:8D:9B:64 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:fc:a4:6d:5a:9d:3d:7f:64:56:bf:9e:b8:b4:82:ed:68:3f: ea:1b:4d:c8:ee:30:2f:d2:5f:99:1f:17:98:3f:0d:53:1d:f8: 9e:df:ed:65:f6:2b:b7:49:89:16:70:80:41:fb:21:cf:e9:55: 9b:a1:e2:9c:9c:ac:d4:31:6c:a1:92:1a:e8:55:9c:c8:cd:df: 48:73:e3:d0:e0:c0:6d:8a:cc:91:ac:ab:4a:d7:80:3a:2b:c0: d6:c4:17:52:b1:99:e4:73:c5:e8:ac:fc:bb:c7:ce:8f:b6:cc: 2f:7d:0f:a5:93:45:b6:53:74:09:8a:63:f1:5a:f2:4b:c9:c8: 52:9c:9d:a8:25:a4:f8:66:01:4a:d7:49:94:b5:10:4e:80:8d: e9:7e:31:52:c0:86:ad:88:50:ad:22:0e:86:45:b6:78:36:04: fb:ee:f0:54:d9:e7:53:82:49:2a:06:4f:53:cd:83:1d:ec:55: 7e:09:50:d1:87:21:cb:42:84:7a:99:bf:38:fc:00:4e:25:03: 2b:a5:df:2e:5b:7c:9d:37:5d:c0:53:6e:4d:f9:45:e8:87:43: 58:00:5d:97:76:4e:41:eb:25:ae:66:76:31:bc:ee:b9:58:bb: ef:46:5c:a4:80:6a:0f:83:1f:9a:21:d5:64:b0:ed:a2:cc:a0: de:dc:b7:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYxMDI3MDYwNDQ0WhcNMjYxMTAzMDYwNDQ0WjAYMRYwFAYD VQQDEw02YWUwM2VmYy1kZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkU6xs8HIqxLTLiPlNe4Zp2Fi8+5eenxtLg3YOui0xPeaI26LeRxdAU/fnXpb X+qr8rm5LUTn5qhfVZiHW2lL0eOnQ8vCrOLk8VUhEcy5svxqW7X/hTkQ6pwK9cbj DbOWmrEipdSCpreJg0OknMrekJ60I67JlxK4+1U8csevlpr0mmRgXGQteuj/Wd3u vF1JjkbDKgyCABkRzu17Cu+/BOXN5fRDNKdo5FkgmBdJj5bf9kk8QOQoPv98ZVeY WAzvMvO2Jhk0bKZpFeuiqev+zIz0i/knL0q3mciD+NNh1bgy0In2drLX5pk5Wko9 nCati1Q7Py6TWf2MILCPJjP5YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEilJfX2 xepJmyLW7+TAZXtZjZtkMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0fykbVqdPX9kVr+euLSC7Wg/6htNyO4wL9JfmR8XmD8NUx34nt/tZfYrt0mJ FnCAQfshz+lVm6HinJys1DFsoZIa6FWcyM3fSHPj0ODAbYrMkayrSteAOivA1sQX UrGZ5HPF6Kz8u8fOj7bML30PpZNFtlN0CYpj8VryS8nIUpydqCWk+GYBStdJlLUQ ToCN6X4xUsCGrYhQrSIOhkW2eDYE++7wVNnnU4JJKgZPU82DHexVfglQ0Ychy0KE epm/OPwATiUDK6XfLlt8nTddwFNuTflF6IdDWABdl3ZOQeslrmZ2MbzuuVi770Zc pIBqD4MfmiHVZLDtosyg3ty3Ig== -----END CERTIFICATE-----Generated at Tue Oct 27 20:38:13 2026 by rpki-client