$ rpki-client -vvvf rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft File: 40OUNNCvshlJ60kGLwBsphEvOoQ.mft (raw, json) Hash identifier: 0fXrOkD3ojE+Oydp+1NANbOyu0HfFpcn8UqcR+xDgy4= Subject key identifier: 89:85:A5:1D:6A:A0:A6:15:71:5F:2B:33:3B:B8:1A:15:8A:5A:94:36 Authority key identifier: E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 Certificate issuer: /CN=A91784CD/serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft Manifest number: 38 Signing time: Mon 05 Oct 2026 09:04:46 +0000 Manifest this update: Mon 05 Oct 2026 09:04:45 +0000 Manifest next update: Mon 12 Oct 2026 09:04:45 +0000 Files and hashes: 1: 40OUNNCvshlJ60kGLwBsphEvOoQ.crl (hash: Gy2JDow+3fYilCNmZZQ6a8ivn2oBj3QPLt+xuAwLwxs=) 2: 7CE8E4446F9111F1A8C39A2C6CA30FBC.roa (hash: wEYk8+b/zlouMRDVVaad91i65oh9NEMZk+zI9rvUNyY=) 3: lE7_4HoZ7tf2LQA7qUu8FNcWCOY.asa (hash: 8IY1eCsxleP2Da/Kk/zuY7DssggWmOgbxdL5nuxKTmc=) 4: 38504AE86F9111F19A5C332C6CA30FBC.roa (hash: ctFJMNlLmb24KK/hUvuG9PeuIx9ZmlcOLpD5Hrci6io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91784CD, serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Validity Not Before: Oct 5 09:04:45 2026 GMT Not After : Oct 12 09:04:45 2026 GMT Subject: CN=6ac3682e-f0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:f7:71:bd:f2:d7:10:c0:30:b5:58:10:74: 8f:bb:cd:c4:5a:48:95:22:47:1f:07:eb:dc:ec:83: de:bd:a5:69:0d:d3:3d:fa:ea:7a:0e:65:4e:cf:e8: 71:37:59:3f:ee:56:d6:0c:48:72:f1:13:d1:40:0a: 44:09:92:98:a3:8f:db:7c:eb:06:c7:49:4f:7d:73: 05:f4:df:c1:68:4b:e4:c8:67:11:c0:99:9c:6d:2e: f9:12:55:72:05:46:0c:bd:ca:e2:bd:e8:f0:69:ec: 4a:36:63:2c:34:f7:09:af:84:a0:b4:c8:74:91:77: 58:f6:aa:d1:c4:4c:26:5b:09:8a:bf:84:d2:84:df: 87:83:a5:b1:7a:b6:9e:27:aa:25:23:f4:90:4c:e1: 8d:97:a3:cd:9c:9a:92:f3:c5:d7:23:c6:e7:51:e1: 8e:be:29:c6:99:f2:f4:5d:3f:15:6e:94:51:7d:1c: e8:8f:27:b4:aa:75:df:3b:1f:c5:e4:0d:e8:e3:ef: a6:66:19:e8:52:5b:3c:11:b3:ef:6f:f4:1e:62:73: 7a:7e:2b:13:bd:65:80:88:0a:e0:8f:30:b8:70:dc: 72:c7:26:54:77:20:90:11:c5:98:e1:e2:44:b5:74: bd:bb:cc:a5:ac:bf:9d:ec:1d:ba:7a:b1:6a:9d:b3: d9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:A5:1D:6A:A0:A6:15:71:5F:2B:33:3B:B8:1A:15:8A:5A:94:36 X509v3 Authority Key Identifier: keyid:E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1c:b3:72:bb:97:3c:50:5a:58:a2:e4:13:76:f1:3d:1e:f9: 4d:d9:17:d8:e4:30:1c:f7:a9:7c:94:ec:95:90:97:35:52:52: 6f:48:0d:66:c7:48:95:d9:bd:51:2f:ed:0c:4f:47:e8:a7:77: b5:95:6c:c7:45:a8:fe:73:b6:ff:27:4b:84:9c:a5:f4:39:2a: 96:c0:db:39:cb:0a:7e:1d:45:ad:9d:c4:f1:94:b3:c9:57:fa: 4c:49:f4:7f:f2:57:a7:fa:81:b1:0c:32:ae:09:cd:21:e2:67: 68:c8:f1:24:95:37:f8:29:3b:50:f4:12:56:b0:94:60:2f:24: f4:a6:28:71:aa:94:9b:69:02:5d:08:33:23:71:63:8c:68:0a: 36:08:53:65:06:da:3a:48:28:ae:5c:f9:6a:d3:81:07:25:9b: c7:da:7a:cd:bd:0e:65:0c:fd:a4:90:83:c9:bd:fd:5b:07:7c: e4:6a:1c:52:2b:96:af:d8:c4:23:88:50:e5:f8:b9:f8:c6:1c: 70:46:60:e8:e0:03:cc:ca:c7:e8:ac:cf:46:cd:e5:4c:6e:0d: 8b:ba:18:9f:c0:10:50:12:86:9e:0d:91:3f:41:3a:9e:b6:59: ff:e1:23:13:3e:75:0c:ef:c8:ec:37:65:20:0c:ed:23:32:5b: 33:aa:65:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODRDRDExMC8GA1UEBRMoRTM0Mzk0MzREMEFGQjIxOTQ5RUI0OTA2MkYwMDZDQTYx MTJGM0E4NDAeFw0yNjEwMDUwOTA0NDVaFw0yNjEwMTIwOTA0NDVaMBgxFjAUBgNV BAMTDTZhYzM2ODJlLWYwZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCywfdxvfLXEMAwtVgQdI+7zcRaSJUiRx8H69zsg969pWkN0z366noOZU7P6HE3 WT/uVtYMSHLxE9FACkQJkpijj9t86wbHSU99cwX038FoS+TIZxHAmZxtLvkSVXIF Rgy9yuK96PBp7Eo2Yyw09wmvhKC0yHSRd1j2qtHETCZbCYq/hNKE34eDpbF6tp4n qiUj9JBM4Y2Xo82cmpLzxdcjxudR4Y6+KcaZ8vRdPxVulFF9HOiPJ7Sqdd87H8Xk Dejj76ZmGehSWzwRs+9v9B5ic3p+KxO9ZYCICuCPMLhw3HLHJlR3IJARxZjh4kS1 dL27zKWsv53sHbp6sWqds9mJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiYWlHWqg phVxXyszO7gaFYpalDYwHwYDVR0jBBgwFoAU40OUNNCvshlJ60kGLwBsphEvOoQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NENEL0NDRERBOTg2NkY5 MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hsSjYwa0dMd0JzcGhFdk9v US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDBPVU5OQ3ZzaGxKNjBrR0x3QnNwaEV2T29RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NENEL0NDRERBOTg2NkY5MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hs SjYwa0dMd0JzcGhFdk9vUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLHLNyu5c8UFpYouQTdvE9HvlN2RfY5DAc96l8lOyVkJc1UlJvSA1mx0iV2b1R L+0MT0fop3e1lWzHRaj+c7b/J0uEnKX0OSqWwNs5ywp+HUWtncTxlLPJV/pMSfR/ 8len+oGxDDKuCc0h4mdoyPEklTf4KTtQ9BJWsJRgLyT0pihxqpSbaQJdCDMjcWOM aAo2CFNlBto6SCiuXPlq04EHJZvH2nrNvQ5lDP2kkIPJvf1bB3zkahxSK5av2MQj iFDl+Ln4xhxwRmDo4APMysforM9GzeVMbg2LuhifwBBQEoaeDZE/QTqetln/4SMT PnUM78jsN2UgDO0jMlszqmVD -----END CERTIFICATE-----Generated at Tue Oct 6 08:41:12 2026 by rpki-client