$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: k1nUYMn72sFWFxvFUowDlADlFwif95g8C8pQyRMyMcM= Subject key identifier: EB:E9:B3:15:71:C2:10:04:33:DE:6C:3E:1E:AD:2E:6B:2D:46:31:0D Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 089D Signing time: Sun 04 Oct 2026 20:46:04 +0000 Manifest this update: Sun 04 Oct 2026 20:46:03 +0000 Manifest next update: Sun 11 Oct 2026 20:46:03 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: 0IrkL0hA/p0vHjOL/2r31mIHQpGxSwDNeZc3Otu035g=) 2: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: up860oLdxDIT/mm1S3+f0STyL0H48p0LlM1PJVy1wlM=) 3: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: lBZVT70GvcennulqomPX6yKmyI41Eity8xYXZSW9dN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Oct 4 20:46:03 2026 GMT Not After : Oct 11 20:46:03 2026 GMT Subject: CN=6ac2bb0c-0bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5d:26:78:10:c9:4f:cd:4f:65:ee:ee:b9:3b: 8b:3a:68:60:4e:8f:76:51:13:d7:e6:7e:e5:40:91: 00:16:1c:f2:d9:39:9d:e1:09:d0:2a:10:0b:81:e3: 3f:6a:93:2f:8a:23:4c:00:47:85:03:34:45:72:5e: 7c:ba:68:e1:35:e2:26:a6:62:35:37:ad:e9:93:b5: e8:8d:ea:d5:a8:84:a9:25:c2:7c:1d:51:bc:fd:f6: ab:a8:8e:bb:86:9b:c4:db:0c:2c:00:b8:24:ea:32: c4:b8:39:e7:05:ab:c4:68:de:9f:4d:9a:43:f4:b0: b6:59:81:2a:b4:ef:6d:9a:5b:8b:46:eb:77:96:80: d4:61:2c:8c:d7:8a:2f:b5:11:5e:21:a6:a1:8f:10: a3:0e:b8:d9:14:a1:ed:8a:a7:bd:ff:34:96:df:76: c5:2d:05:7a:db:0d:37:53:0d:ee:3e:f0:1d:ce:9d: 23:09:e8:03:27:e3:d4:d5:c3:37:b4:49:6e:a8:9b: 19:e1:10:98:34:db:a0:5a:34:52:e7:09:77:ab:3b: 51:6a:92:99:57:9a:22:57:0a:09:54:5a:14:f1:87: 06:33:35:87:62:66:a2:c9:63:87:f7:e2:cf:b8:88: f7:12:c6:99:6e:d7:57:de:26:a2:de:b8:eb:f6:03: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E9:B3:15:71:C2:10:04:33:DE:6C:3E:1E:AD:2E:6B:2D:46:31:0D X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2d:8a:6e:ea:8a:87:89:94:bf:2f:93:aa:0e:0a:1d:93:42: 67:1d:10:1a:3c:d6:b0:f4:09:fa:f9:02:a6:0c:70:bd:82:19: 7a:24:f5:f6:70:cc:f2:f3:f0:fb:3c:d3:56:6a:fd:5b:da:ff: ec:9f:28:21:71:92:c4:8e:8b:a7:6c:59:ad:1b:86:34:61:76: 2e:67:a8:6a:da:7c:f7:d9:d4:7a:33:45:a4:f4:17:ac:e4:db: e3:20:d2:bf:7f:eb:0c:02:85:84:8e:6f:3c:92:cb:34:ce:ac: 35:d5:16:92:4b:6a:51:85:ef:2b:45:16:91:09:fa:1b:8f:9a: 08:a0:04:cf:cd:95:5b:5c:b5:c1:5b:a4:eb:81:3c:cc:ef:b5: d6:59:9f:67:a8:47:b5:b4:0e:25:2b:34:59:a8:ad:f8:99:32: 27:fd:d3:41:42:87:75:21:01:ee:0a:1d:b9:0c:cd:aa:ed:a5: e8:d3:29:1e:92:6b:b0:73:df:aa:70:43:57:3e:20:dc:5f:09: 8b:51:fa:e2:65:00:b8:e3:19:bb:79:30:ba:1a:ea:e1:ac:10: b8:94:17:ce:80:4c:43:8c:00:4a:16:9b:33:0d:be:a1:72:3e: db:2e:4e:71:69:52:c4:41:ad:86:31:51:a7:fb:ed:de:7f:3a: 2a:67:71:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjYxMDA0MjA0NjAzWhcNMjYxMDExMjA0NjAzWjAYMRYwFAYD VQQDEw02YWMyYmIwYy0wYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7l0meBDJT81PZe7uuTuLOmhgTo92URPX5n7lQJEAFhzy2Tmd4QnQKhALgeM/ apMviiNMAEeFAzRFcl58umjhNeImpmI1N63pk7XojerVqISpJcJ8HVG8/farqI67 hpvE2wwsALgk6jLEuDnnBavEaN6fTZpD9LC2WYEqtO9tmluLRut3loDUYSyM14ov tRFeIaahjxCjDrjZFKHtiqe9/zSW33bFLQV62w03Uw3uPvAdzp0jCegDJ+PU1cM3 tEluqJsZ4RCYNNugWjRS5wl3qztRapKZV5oiVwoJVFoU8YcGMzWHYmaiyWOH9+LP uIj3EsaZbtdX3iai3rjr9gPG5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvpsxVx whAEM95sPh6tLmstRjENMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmC2KbuqKh4mUvy+Tqg4KHZNCZx0QGjzWsPQJ+vkCpgxwvYIZeiT19nDM8vPw +zzTVmr9W9r/7J8oIXGSxI6Lp2xZrRuGNGF2Lmeoatp899nUejNFpPQXrOTb4yDS v3/rDAKFhI5vPJLLNM6sNdUWkktqUYXvK0UWkQn6G4+aCKAEz82VW1y1wVuk64E8 zO+11lmfZ6hHtbQOJSs0Wait+JkyJ/3TQUKHdSEB7goduQzNqu2l6NMpHpJrsHPf qnBDVz4g3F8Ji1H64mUAuOMZu3kwuhrq4awQuJQXzoBMQ4wAShabMw2+oXI+2y5O cWlSxEGthjFRp/vt3n86KmdxUw== -----END CERTIFICATE-----Generated at Tue Oct 6 02:26:22 2026 by rpki-client