$ rpki-client -vvvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: Fd3nfM6hJDlYfrnhHGOOVd/bb05kjbc0h9BaIvuj7yg= Subject key identifier: 68:16:3E:9E:BB:19:14:ED:0B:71:F3:E9:74:84:95:5E:4B:2F:A3:8D Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 0284 Signing time: Sat 05 Sep 2026 01:44:00 +0000 Manifest this update: Sat 05 Sep 2026 01:43:59 +0000 Manifest next update: Sat 12 Sep 2026 01:43:59 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: djnpdxwLetCap/ZTaOOBOI2Y/pqfie5qlWUw+stSAjY=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: XRam2F4FC1VRB1bzeJbTRlXhvSOCTuW1Ti0TuLeUucE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Sep 5 01:43:59 2026 GMT Not After : Sep 12 01:43:59 2026 GMT Subject: CN=6a9b73df-4b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:7e:b8:39:45:ec:b0:bd:4c:33:6c:ca:c9: 78:19:aa:ad:80:f5:c8:6c:d1:83:1b:00:a1:40:8b: 6e:3a:f4:3c:94:7a:72:c8:3c:38:7f:2e:3f:7c:b9: d9:ea:6c:3c:72:71:50:af:9a:45:0e:6c:74:55:45: 3d:4a:57:67:4d:4e:2c:b2:97:2e:0b:96:4e:22:cf: aa:0e:57:8c:52:0d:41:a9:b3:83:8e:a1:aa:65:dc: 62:1e:d6:03:d9:28:16:4f:04:e9:6c:a8:ad:b6:f6: ec:f6:ab:84:47:51:fb:71:c0:c6:14:18:d0:45:2f: 43:78:7e:f4:c1:56:30:c1:31:d3:27:61:18:33:e5: 43:4e:cb:0a:7f:59:76:e0:90:fd:7f:5f:9e:7f:a8: d7:34:0d:63:87:5e:9c:67:a6:11:85:f5:96:f2:a0: 0e:43:dc:8e:36:60:65:52:cf:e8:84:d1:cf:3b:37: 75:1a:be:48:84:21:2c:a4:6e:9a:a1:8a:bf:c1:f8: ae:b9:c6:ef:a9:69:cd:e1:9f:7f:fc:35:9f:d3:3f: 9a:04:79:3b:a9:e8:ba:ae:dd:96:7c:6a:10:4f:ed: e4:10:a5:d6:26:67:fe:78:26:df:20:a5:27:a1:20: e8:72:bf:bd:e2:c7:a2:ca:71:a4:7d:b1:cb:8e:4a: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:3E:9E:BB:19:14:ED:0B:71:F3:E9:74:84:95:5E:4B:2F:A3:8D X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:19:8a:21:01:c0:38:03:f9:31:c3:b5:27:2e:7f:46:d7:c9: 3f:d1:ae:5a:74:14:24:ad:dd:b3:77:65:45:83:6e:57:9f:10: c0:b6:8f:9f:b0:76:69:a3:96:a9:6b:4a:60:a7:f1:56:5c:45: df:df:db:68:c4:33:25:e4:17:20:a8:eb:40:db:9f:eb:45:17: 02:a0:0c:ab:fc:01:44:37:5b:fd:36:db:50:90:fa:71:f1:70: 2e:7d:97:17:4e:23:b0:c8:5d:79:b5:30:6e:eb:e6:f9:3a:fb: 41:7c:fa:4a:c4:22:49:55:55:e6:3a:ca:86:b9:c9:05:9b:1d: 5a:08:c5:a3:28:26:2d:a7:40:02:ee:d9:aa:fa:7d:e3:a6:5e: 48:85:53:08:02:8b:6a:37:56:b9:ae:d4:5e:49:fa:a3:33:34: 11:2b:07:ee:43:1e:27:10:28:c9:14:bf:a1:32:8e:90:f2:5d: f4:9e:fc:15:f9:db:2d:fe:75:2b:f8:09:d5:25:a5:53:a7:fa: 3b:60:e3:50:df:fd:37:83:2f:5c:4e:28:15:10:e2:09:0f:24: f2:59:59:cb:fe:23:27:ae:6b:ed:09:00:68:fc:2d:14:45:8a: 88:36:eb:95:11:fd:76:ee:50:a2:3f:72:17:c5:ef:45:3e:c9: e8:92:c8:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjYwOTA1MDE0MzU5WhcNMjYwOTEyMDE0MzU5WjAYMRYwFAYD VQQDEw02YTliNzNkZi00YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHV+uDlF7LC9TDNsysl4GaqtgPXIbNGDGwChQItuOvQ8lHpyyDw4fy4/fLnZ 6mw8cnFQr5pFDmx0VUU9SldnTU4sspcuC5ZOIs+qDleMUg1BqbODjqGqZdxiHtYD 2SgWTwTpbKittvbs9quER1H7ccDGFBjQRS9DeH70wVYwwTHTJ2EYM+VDTssKf1l2 4JD9f1+ef6jXNA1jh16cZ6YRhfWW8qAOQ9yONmBlUs/ohNHPOzd1Gr5IhCEspG6a oYq/wfiuucbvqWnN4Z9//DWf0z+aBHk7qei6rt2WfGoQT+3kEKXWJmf+eCbfIKUn oSDocr+94seiynGkfbHLjkrMVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgWPp67 GRTtC3Hz6XSElV5LL6ONMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALhmKIQHAOAP5McO1Jy5/RtfJP9GuWnQUJK3ds3dlRYNuV58QwLaPn7B2aaOW qWtKYKfxVlxF39/baMQzJeQXIKjrQNuf60UXAqAMq/wBRDdb/TbbUJD6cfFwLn2X F04jsMhdebUwbuvm+Tr7QXz6SsQiSVVV5jrKhrnJBZsdWgjFoygmLadAAu7Zqvp9 46ZeSIVTCAKLajdWua7UXkn6ozM0ESsH7kMeJxAoyRS/oTKOkPJd9J78FfnbLf51 K/gJ1SWlU6f6O2DjUN/9N4MvXE4oFRDiCQ8k8llZy/4jJ65r7QkAaPwtFEWKiDbr lRH9du5Qoj9yF8XvRT7J6JLIdw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:00:24 2026 by rpki-client