$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: Dz0wxkYIOQLJ/FpkeOeVZmh6wA7FTOzyDm1Um6W0Aoc= Subject key identifier: 63:70:32:32:A1:A8:76:1D:E5:B9:49:8D:5D:A6:DB:20:70:DB:46:43 Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 388B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 3783 Signing time: Fri 04 Sep 2026 14:32:50 +0000 Manifest this update: Fri 04 Sep 2026 14:32:50 +0000 Manifest next update: Fri 11 Sep 2026 14:32:50 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: /+s493/invD9TJEnzPXM8zaeRJ7ZFtjXdmFk+KCuu/I=) 2: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: 5aKDuZwd3Wn+m9JFqN35rRMwxZf4PwI1YL49pBMgje4=) 3: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: Zntrf+XRFU/LUFPqt460t/df6T24vxpmkd5azGcAX5E=) 4: F24EEED208C011F19DFF611F213D8C67.roa (hash: j8mZP70/+lxFmxKK+gaXtA4vlgcSiykk11UZrhv9x1I=) 5: 317DA71E8B0811F1AFBFDAB07011F970.roa (hash: azVTOKF0NFIhb0K96Fo23InB6ezFswHqZ4YFdrcEIzk=) 6: 803E1FB4844611F18199E4686DA30FBC.roa (hash: fb/gMuY4GCBBcmZDDJjLxvs0FTK9CO7zdEHnqESTxOE=) 7: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: 5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=) 8: A3A79DD6923811F1800CA6646F11F970.roa (hash: 8Ci0/0Zg6lRMknA03QwPBAlCGKPE4eHasYGtycyfkGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14475 (0x388b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Sep 4 14:32:50 2026 GMT Not After : Sep 11 14:32:50 2026 GMT Subject: CN=6a9ad692-46e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:09:f3:ac:db:b5:1c:0b:1f:7d:f0:b7:d7: 22:44:c0:2c:87:9f:d2:41:7c:a2:f2:24:3d:20:7c: 2e:aa:99:0c:0c:47:44:41:ea:bd:39:2c:10:28:09: 15:f5:7c:c6:06:d1:37:97:db:56:d6:61:fe:e6:09: f8:67:8a:37:ab:53:d0:77:45:08:cb:ea:4b:33:ac: ad:4d:fc:f6:90:4b:4d:d5:d8:09:c3:86:ef:6e:d4: 92:c0:a0:12:6c:50:6f:45:19:e3:a6:aa:7f:8c:b6: 24:fd:b1:d8:eb:63:46:ae:07:b9:50:3e:24:63:cc: ec:89:31:f3:8d:ba:63:ea:ba:61:86:be:4e:2e:e6: a7:63:ed:2d:08:d4:fe:78:20:45:e1:6f:35:9f:64: ea:f8:81:4f:c6:05:e1:d0:3d:39:66:d0:72:6d:44: f8:7f:c3:81:db:1d:c8:e3:76:73:49:bc:1b:b5:dd: 04:ea:01:e0:18:1a:66:66:b2:1b:08:df:61:68:c5: 9f:f3:14:9b:0d:b5:a1:ef:df:4b:e4:1a:32:70:d1: 22:37:5c:4a:62:84:82:49:63:e7:90:7d:74:88:6f: 51:f1:57:9c:f9:5e:06:aa:d9:4c:2b:19:22:00:0f: 4b:78:8f:55:7c:04:27:96:23:19:f8:fd:d7:a2:cf: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:70:32:32:A1:A8:76:1D:E5:B9:49:8D:5D:A6:DB:20:70:DB:46:43 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:28:9d:3b:09:11:7b:84:b0:39:37:3b:82:b3:d5:2e:8b:d9: 36:14:4b:5e:eb:55:03:a7:2e:4b:3b:75:04:dc:f6:4b:65:52: d5:be:eb:c5:d8:8d:e2:81:e5:27:54:a2:ec:e7:28:87:61:39: 16:ba:2e:01:21:91:78:0e:8a:5c:bd:8b:6a:e2:b7:6b:93:56: 51:19:19:67:b6:df:be:81:66:85:81:cf:d1:33:c7:17:9b:59: d9:31:1f:f0:4c:92:a6:47:a8:4d:11:bb:51:04:bc:ff:6e:a8: a5:fd:4f:7d:33:1b:17:14:a6:7e:ff:7f:82:e2:7f:dc:8d:03: f0:aa:80:03:3d:ce:71:97:13:f1:2b:67:e2:52:51:bc:e3:e7: 8d:12:59:92:04:96:b1:4d:a6:87:4f:3b:d4:60:97:e6:41:21: 66:56:76:a3:61:c3:25:50:a9:e5:f8:16:d7:03:99:ef:f7:68: 8b:a8:4c:49:d5:0d:e0:8a:14:a1:83:4e:67:6a:cb:6d:a6:71: 1b:ea:8d:5d:74:ee:18:94:c3:b6:7d:7f:43:63:aa:ac:d7:89: 20:0b:c0:8f:91:99:28:9c:c7:84:31:8a:76:2e:b5:ae:6b:82: f2:95:9c:ef:f8:9b:b1:c3:94:ea:79:06:74:3a:86:f5:a3:03: 77:ea:52:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwOTA0MTQzMjUwWhcNMjYwOTExMTQzMjUwWjAYMRYwFAYD VQQDEw02YTlhZDY5Mi00NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqAJ86zbtRwLH33wt9ciRMAsh5/SQXyi8iQ9IHwuqpkMDEdEQeq9OSwQKAkV 9XzGBtE3l9tW1mH+5gn4Z4o3q1PQd0UIy+pLM6ytTfz2kEtN1dgJw4bvbtSSwKAS bFBvRRnjpqp/jLYk/bHY62NGrge5UD4kY8zsiTHzjbpj6rphhr5OLuanY+0tCNT+ eCBF4W81n2Tq+IFPxgXh0D05ZtBybUT4f8OB2x3I43ZzSbwbtd0E6gHgGBpmZrIb CN9haMWf8xSbDbWh799L5BoycNEiN1xKYoSCSWPnkH10iG9R8Vec+V4GqtlMKxki AA9LeI9VfAQnliMZ+P3Xos/fOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNwMjKh qHYd5blJjV2m2yBw20ZDMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhyidOwkRe4SwOTc7grPVLovZNhRLXutVA6cuSzt1BNz2S2VS1b7rxdiN4oHl J1Si7Ocoh2E5FrouASGReA6KXL2LauK3a5NWURkZZ7bfvoFmhYHP0TPHF5tZ2TEf 8EySpkeoTRG7UQS8/26opf1PfTMbFxSmfv9/guJ/3I0D8KqAAz3OcZcT8Stn4lJR vOPnjRJZkgSWsU2mh0871GCX5kEhZlZ2o2HDJVCp5fgW1wOZ7/doi6hMSdUN4IoU oYNOZ2rLbaZxG+qNXXTuGJTDtn1/Q2OqrNeJIAvAj5GZKJzHhDGKdi61rmuC8pWc 7/ibscOU6nkGdDqG9aMDd+pS0Q== -----END CERTIFICATE-----Generated at Sat Sep 5 06:45:01 2026 by rpki-client