$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft File: 38k2Rbnm9TdyUHTptErqgKn1YIg.mft (raw, json) Hash identifier: XUcK1IktFpTuzuz41iPHlON6qKGRA641xbTnUXZ0ocM= Subject key identifier: 84:7F:B9:A6:54:FD:D2:0A:DC:B3:60:46:BB:B7:8F:3C:DB:09:9B:EE Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft Manifest number: 22 Signing time: Fri 23 Oct 2026 09:32:13 +0000 Manifest this update: Fri 23 Oct 2026 09:32:12 +0000 Manifest next update: Fri 30 Oct 2026 09:32:12 +0000 Files and hashes: 1: 38k2Rbnm9TdyUHTptErqgKn1YIg.crl (hash: 3rqvnXJIoj9XuJmu6XoUkPKvPdnJSXs58w5jrwSP9a4=) 2: E608CE06AA8A11F1B24D5C986C11F970.roa (hash: HJbOP6dmHIH/GCIYSblnQZgwlybWB4EX3yuOhTf7yOc=) 3: 8558E5CABCD511F1A1D34A233511F970.roa (hash: lM5d8k3rrRrnT/VDaZJoLEDG1leveh7J7n7gCZUeUJ0=) 4: E5163B82AA8A11F1B24D5C986C11F970.roa (hash: xhcHEPURG9+lzbo3uoCbCYX9fbPEr9b8rbLdKw7DUTc=) 5: 8038DB82BCD411F1A81F77143511F970.roa (hash: +uFzQciPvxgh/je7bv4v6W/xPiJxE8mzr7j7+oesDsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Validity Not Before: Oct 23 09:32:12 2026 GMT Not After : Oct 30 09:32:12 2026 GMT Subject: CN=6adb299d-03da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:cc:97:27:8e:dc:c3:7e:42:0c:8d:b2:c9: 5f:30:c3:53:7f:3a:2a:d2:fb:66:91:3f:62:01:5f: b6:52:12:cb:ab:d0:75:00:93:27:90:71:91:80:bc: 2a:1a:34:d1:14:3c:95:e0:c0:fa:38:8f:3f:06:ba: 56:e9:f8:2a:65:ad:f0:ed:ce:83:cc:78:53:2a:b0: da:f5:93:89:0c:fa:64:5e:99:83:ae:7a:81:ea:86: 9e:9d:6b:7f:23:43:ba:2d:30:e3:e7:9d:83:b1:36: a1:2f:ed:02:18:70:71:5f:df:b8:50:9e:84:c6:03: 2b:c2:91:06:02:65:d5:39:81:b8:ee:e1:84:75:81: 1e:49:77:9d:8e:00:7f:07:c1:57:02:76:7f:3e:0a: 9c:8c:53:20:19:c9:68:fb:68:eb:49:e0:75:8f:79: a1:29:ef:0c:68:f0:77:bf:ff:28:c6:6c:f0:57:69: ed:06:68:33:53:76:1e:52:f4:ab:f8:48:45:11:8b: cb:20:dc:e5:28:99:ae:03:af:74:87:86:5d:52:44: 4e:42:eb:f6:ac:c1:2f:68:e4:db:e6:31:0e:5f:d3: 63:0c:e0:22:d2:29:0e:8b:f5:58:a5:e9:aa:47:ec: 0c:fe:b8:5d:f1:cb:64:e7:18:c6:e7:6f:25:84:e0: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:B9:A6:54:FD:D2:0A:DC:B3:60:46:BB:B7:8F:3C:DB:09:9B:EE X509v3 Authority Key Identifier: keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:23:74:b2:58:af:fa:9d:0d:d7:a3:94:b1:ae:b4:91:f1:bb: 8a:d3:6d:47:cd:5b:68:28:7a:12:53:5e:27:09:e4:c5:68:dc: db:9f:e4:54:f9:56:8b:76:e5:48:1c:0c:9a:e3:f0:09:9b:9a: b8:87:05:9a:25:00:a9:eb:1c:cc:82:25:0e:af:05:1a:17:e3: 82:28:d2:d8:1c:10:86:4b:7a:5f:a9:88:51:67:7b:e5:9b:ff: 09:b6:f5:bf:57:e4:1a:89:20:6a:46:4e:b0:28:5f:81:6a:da: 62:23:49:84:fa:33:99:6d:92:eb:21:a5:a9:c9:d8:1e:5f:ec: 8b:15:8e:6f:8c:cf:51:d6:a0:1d:3b:a7:71:35:99:ed:10:87: bd:c7:6a:6f:ee:77:7f:f6:4e:07:9f:cf:86:0a:d1:4e:4a:b9: ec:0d:e7:90:1e:44:4f:2b:b8:6f:a8:51:d6:ed:9a:26:d8:45: 93:56:59:e0:38:0b:27:16:0f:a1:13:d5:78:74:4a:f2:2d:24: a6:b4:35:b1:f9:26:8a:4b:d6:01:34:2c:a2:16:b5:c3:ff:77: 2a:83:69:e7:12:53:da:d9:7f:24:77:32:10:48:62:29:f4:c5: d1:98:a9:50:68:f4:61:46:6e:15:38:b9:af:e6:b8:4a:70:5c: 6d:1a:89:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTZCMjExMC8GA1UEBRMoREZDOTM2NDVCOUU2RjUzNzcyNTA3NEU5QjQ0QUVBODBB OUY1NjA4ODAeFw0yNjEwMjMwOTMyMTJaFw0yNjEwMzAwOTMyMTJaMBgxFjAUBgNV BAMTDTZhZGIyOTlkLTAzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa8cyXJ47cw35CDI2yyV8ww1N/OirS+2aRP2IBX7ZSEsur0HUAkyeQcZGAvCoa NNEUPJXgwPo4jz8Gulbp+CplrfDtzoPMeFMqsNr1k4kM+mRemYOueoHqhp6da38j Q7otMOPnnYOxNqEv7QIYcHFf37hQnoTGAyvCkQYCZdU5gbju4YR1gR5Jd52OAH8H wVcCdn8+CpyMUyAZyWj7aOtJ4HWPeaEp7wxo8He//yjGbPBXae0GaDNTdh5S9Kv4 SEURi8sg3OUoma4Dr3SHhl1SRE5C6/aswS9o5NvmMQ5f02MM4CLSKQ6L9Vil6apH 7Az+uF3xy2TnGMbnbyWE4KdPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhH+5plT9 0grcs2BGu7ePPNsJm+4wHwYDVR0jBBgwFoAU38k2Rbnm9TdyUHTptErqgKn1YIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NkIyL0Q0QTQ4RUZDQTVF OTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRkeVVIVHB0RXJxZ0tuMVlJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzhrMlJibm05VGR5VUhUcHRFcnFnS24xWUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NkIyL0Q0QTQ4RUZDQTVFOTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRk eVVIVHB0RXJxZ0tuMVlJZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4I3SyWK/6nQ3Xo5SxrrSR8buK021HzVtoKHoSU14nCeTFaNzbn+RU+VaLduVI HAya4/AJm5q4hwWaJQCp6xzMgiUOrwUaF+OCKNLYHBCGS3pfqYhRZ3vlm/8JtvW/ V+QaiSBqRk6wKF+BatpiI0mE+jOZbZLrIaWpydgeX+yLFY5vjM9R1qAdO6dxNZnt EIe9x2pv7nd/9k4Hn8+GCtFOSrnsDeeQHkRPK7hvqFHW7Zom2EWTVlngOAsnFg+h E9V4dEryLSSmtDWx+SaKS9YBNCyiFrXD/3cqg2nnElPa2X8kdzIQSGIp9MXRmKlQ aPRhRm4VOLmv5rhKcFxtGomt -----END CERTIFICATE-----Generated at Sat Oct 24 17:54:47 2026 by rpki-client