$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: kxxoM7FavJf6oBwaTzRevjC2qnOYv95KevUQvjQ1k1w= Subject key identifier: 3D:2C:54:DC:2F:AD:7D:08:D0:89:AE:17:6B:F4:9C:8B:74:E6:E3:14 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0C88 Signing time: Tue 06 Oct 2026 18:46:51 +0000 Manifest this update: Tue 06 Oct 2026 18:46:50 +0000 Manifest next update: Tue 13 Oct 2026 18:46:50 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: KRbPuNMjDT0Tv8ct2uwgrt/oDtSXsmmtxmeyOU8bhxg=) 2: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Oct 6 18:46:50 2026 GMT Not After : Oct 13 18:46:50 2026 GMT Subject: CN=6ac5421a-cfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:5f:99:9d:d8:b6:16:3f:b8:33:1a:b1:e1: c2:16:c0:73:02:2d:5a:a0:01:bd:c7:7f:4b:b6:f1: 17:fe:80:03:80:b9:c7:ae:d1:f4:d8:7c:88:f7:67: 87:1c:fe:ad:09:81:6d:bb:cd:34:43:95:10:75:f7: b6:fa:05:57:d3:79:1d:d6:0f:21:c8:c1:76:fe:2f: 1f:b6:c1:b4:91:11:d1:41:29:d1:6a:4d:84:38:9e: 19:41:45:26:9e:e5:20:3e:de:be:59:58:a1:be:18: f6:fb:1b:9e:9d:0f:ef:74:67:24:78:54:4f:02:c2: 91:08:ea:26:6c:e7:fc:cb:b1:82:57:25:96:c2:f2: 13:f2:e1:ca:1f:c1:be:6b:a6:f3:33:80:8b:f5:1b: a2:d1:d2:5b:da:c2:4f:69:69:ab:cc:d3:d7:ec:da: 9b:07:75:c9:51:c7:6b:bb:5d:42:2f:1e:bc:f8:e5: 0b:a4:cf:1d:00:dd:4b:46:cc:06:8b:38:ca:5c:d0: e0:94:3a:2c:79:b1:14:3d:2e:48:d2:de:6a:aa:cd: 1e:dd:d3:02:07:3c:a6:58:68:0c:d5:ac:34:7d:7d: 69:f9:ef:99:e0:e7:62:e3:aa:02:54:fa:28:a0:ab: 46:94:39:34:76:2f:0e:00:63:33:46:42:17:c9:70: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2C:54:DC:2F:AD:7D:08:D0:89:AE:17:6B:F4:9C:8B:74:E6:E3:14 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:cd:06:dd:a5:10:2d:17:5f:ef:74:e9:52:35:72:7d:a8:fb: cc:bf:87:24:c2:6d:38:61:41:a4:2c:db:6f:78:dc:50:5d:5f: 25:e1:90:f0:08:d5:29:d6:ca:29:1a:d3:6c:66:55:fb:b0:ff: 56:4d:31:00:f0:9d:88:c1:89:da:ef:e0:d3:56:74:65:28:39: f5:77:e3:ac:4a:f6:08:c0:97:a5:f2:ab:ce:95:01:6c:45:cb: b8:85:91:67:48:7a:47:87:c7:ee:0f:4a:69:c4:ac:df:cf:9e: 16:88:3f:9e:35:d3:21:7f:52:5d:69:c5:06:84:e3:a2:c8:b4: f3:0a:b2:78:3e:49:79:70:0b:d5:3b:77:49:48:e8:87:7c:93: f3:27:7f:3b:e3:57:e7:24:d1:4f:9d:e1:3d:e6:33:54:3b:5e: 7a:36:a9:c2:75:c5:f0:67:29:9e:06:98:78:12:9d:19:88:69: 24:36:66:8d:ab:1e:a3:bc:b6:22:4d:56:9a:a4:7d:db:6e:e7: a2:5e:4f:99:21:aa:ef:5b:50:b2:97:2d:eb:c8:c0:c1:6e:87: 83:35:b8:94:cd:10:5d:fd:e6:b1:02:cd:c7:7c:bd:91:c6:9b: 84:87:39:bd:d8:fb:ad:de:68:a1:67:91:19:ef:80:46:26:f9: 32:48:a5:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjYxMDA2MTg0NjUwWhcNMjYxMDEzMTg0NjUwWjAYMRYwFAYD VQQDEw02YWM1NDIxYS1jZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo9fmZ3YthY/uDMaseHCFsBzAi1aoAG9x39LtvEX/oADgLnHrtH02HyI92eH HP6tCYFtu800Q5UQdfe2+gVX03kd1g8hyMF2/i8ftsG0kRHRQSnRak2EOJ4ZQUUm nuUgPt6+WVihvhj2+xuenQ/vdGckeFRPAsKRCOombOf8y7GCVyWWwvIT8uHKH8G+ a6bzM4CL9Rui0dJb2sJPaWmrzNPX7NqbB3XJUcdru11CLx68+OULpM8dAN1LRswG izjKXNDglDosebEUPS5I0t5qqs0e3dMCBzymWGgM1aw0fX1p+e+Z4Odi46oCVPoo oKtGlDk0di8OAGMzRkIXyXByAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0sVNwv rX0I0ImuF2v0nIt05uMUMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAc0G3aUQLRdf73TpUjVyfaj7zL+HJMJtOGFBpCzbb3jcUF1fJeGQ8AjVKdbK KRrTbGZV+7D/Vk0xAPCdiMGJ2u/g01Z0ZSg59XfjrEr2CMCXpfKrzpUBbEXLuIWR Z0h6R4fH7g9KacSs38+eFog/njXTIX9SXWnFBoTjosi08wqyeD5JeXAL1Tt3SUjo h3yT8yd/O+NX5yTRT53hPeYzVDteejapwnXF8GcpngaYeBKdGYhpJDZmjaseo7y2 Ik1WmqR9227nol5PmSGq71tQspct68jAwW6HgzW4lM0QXf3msQLNx3y9kcabhIc5 vdj7rd5ooWeRGe+ARib5Mkil6A== -----END CERTIFICATE-----Generated at Thu Oct 8 05:24:50 2026 by rpki-client