$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft File: htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft (raw, json) Hash identifier: xHPbUNu94CBPNL6gAfDJbRLIJYQgpQNgsMDfPBuDw/U= Subject key identifier: 53:04:38:D2:68:FE:EF:FB:EE:B4:BC:C1:72:37:A7:0C:5F:06:5C:B2 Authority key identifier: 86:D9:5F:41:ED:19:81:FA:8D:0B:59:08:D6:44:46:51:0E:6E:AC:7D Certificate issuer: /CN=A91A99C5/serialNumber=86D95F41ED1981FA8D0B5908D64446510E6EAC7D Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htlfQe0ZgfqNC1kI1kRGUQ5urH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft Manifest number: E9 Signing time: Sat 03 Oct 2026 07:09:16 +0000 Manifest this update: Sat 03 Oct 2026 07:09:16 +0000 Manifest next update: Sat 10 Oct 2026 07:09:16 +0000 Files and hashes: 1: htlfQe0ZgfqNC1kI1kRGUQ5urH0.crl (hash: Z8dyxMGnpGlqaNcEVeNvAIwXVlw+UDjMkFeb0A5/uCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.crl rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htlfQe0ZgfqNC1kI1kRGUQ5urH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=86D95F41ED1981FA8D0B5908D64446510E6EAC7D Validity Not Before: Oct 3 07:09:16 2026 GMT Not After : Oct 10 07:09:16 2026 GMT Subject: CN=6ac0aa1c-c5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0a:c2:9f:9b:b4:7f:d6:c3:e0:e2:b5:3b:e2: 39:fd:95:49:00:c3:cc:89:5c:39:05:e3:c2:96:cd: 7d:ab:47:6b:3e:99:fa:1e:9b:7d:44:a6:e5:ee:18: c4:87:fc:44:f6:15:ed:33:e2:e6:27:e9:8f:bc:d4: 26:79:1e:46:bf:c9:3f:10:b6:3f:f1:7b:92:61:1a: 31:8c:4a:0e:71:f3:06:08:64:72:13:62:90:83:d8: ec:8a:dd:18:82:a5:a1:c6:36:ba:e6:61:b0:40:f3: 00:a1:48:73:84:16:4c:5b:d1:b1:e3:69:4d:31:fc: 3e:e2:d9:cf:58:8b:ff:8b:b7:8f:77:09:00:3a:d4: f2:35:c8:e3:b0:e8:fd:03:38:a1:ea:d6:29:9c:d3: c1:e7:a8:9f:57:48:47:d4:fd:11:af:13:6b:7c:ab: 13:3e:66:0e:77:bc:72:47:19:31:11:b5:46:87:32: 7b:38:77:db:02:8f:90:39:28:c7:d4:fd:e3:ab:c4: 5b:77:b3:8e:19:e8:8f:74:bc:34:11:79:89:ec:1f: dd:e5:3b:55:8e:d4:92:b4:63:23:da:cf:15:fe:79: ff:43:dc:f4:52:24:bf:76:34:dd:16:1d:eb:ff:b3: 42:22:d6:42:7d:04:7b:dd:aa:cd:ff:d5:9a:1b:f0: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:38:D2:68:FE:EF:FB:EE:B4:BC:C1:72:37:A7:0C:5F:06:5C:B2 X509v3 Authority Key Identifier: keyid:86:D9:5F:41:ED:19:81:FA:8D:0B:59:08:D6:44:46:51:0E:6E:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htlfQe0ZgfqNC1kI1kRGUQ5urH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b3:7c:31:fd:9f:df:6c:bc:55:37:48:3b:42:5b:42:ab:27: 1f:ab:fe:3e:fc:ad:0c:60:fe:06:aa:65:81:7d:20:d8:62:8d: 69:2e:2e:ad:73:2f:bf:43:f8:ee:aa:e3:45:cc:fb:a9:2b:99: da:99:8d:d8:e6:85:0e:58:c1:4d:b8:35:9a:d6:35:e4:cf:f1: 2e:8d:64:b4:dc:29:70:db:ab:f5:f6:83:65:e2:44:14:cc:96: 43:e8:25:0c:7a:3e:66:6f:35:a2:6a:8b:bc:72:af:d7:40:a9: b1:93:c5:55:1b:e1:9a:9f:12:79:56:a2:31:d8:c8:c6:8a:8a: 26:06:32:dd:67:d5:40:23:b7:3f:02:ef:6e:0d:4d:70:d4:9c: d1:61:60:b4:ad:3b:4c:a4:91:e7:2b:cb:56:c5:a1:d0:32:4d: 5e:b7:96:d7:88:d3:95:2f:d2:41:25:5d:fa:cd:36:43:79:50: 8c:73:b6:1e:f6:6b:8c:a7:a5:db:8e:7d:1e:77:e3:82:5d:5f: 23:6d:1c:07:72:b2:8d:59:61:a8:67:3c:52:74:8f:77:30:d5: 51:bb:ed:b0:4d:26:fc:0e:fc:5c:1a:1b:ec:07:45:b2:22:ef: 1c:58:9e:a9:0c:a2:3c:94:a0:33:0e:fb:30:70:a4:1d:63:67: 72:56:ce:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5QzUxMTAvBgNVBAUTKDg2RDk1RjQxRUQxOTgxRkE4RDBCNTkwOEQ2NDQ0NjUx MEU2RUFDN0QwHhcNMjYxMDAzMDcwOTE2WhcNMjYxMDEwMDcwOTE2WjAYMRYwFAYD VQQDEw02YWMwYWExYy1jNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+QrCn5u0f9bD4OK1O+I5/ZVJAMPMiVw5BePCls19q0drPpn6Hpt9RKbl7hjE h/xE9hXtM+LmJ+mPvNQmeR5Gv8k/ELY/8XuSYRoxjEoOcfMGCGRyE2KQg9jsit0Y gqWhxja65mGwQPMAoUhzhBZMW9Gx42lNMfw+4tnPWIv/i7ePdwkAOtTyNcjjsOj9 Azih6tYpnNPB56ifV0hH1P0RrxNrfKsTPmYOd7xyRxkxEbVGhzJ7OHfbAo+QOSjH 1P3jq8Rbd7OOGeiPdLw0EXmJ7B/d5TtVjtSStGMj2s8V/nn/Q9z0UiS/djTdFh3r /7NCItZCfQR73arN/9WaG/AVgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMEONJo /u/77rS8wXI3pwxfBlyyMB8GA1UdIwQYMBaAFIbZX0HtGYH6jQtZCNZERlEObqx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS8wNjAzRTVCRTVE QkMxMUYwOUFBMTc4NTBDNEY5QUUwMi9odGxmUWUwWmdmcU5DMWtJMWtSR1VRNXVy SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0bGZRZTBaZ2ZxTkMxa0kxa1JHVVE1dXJIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTlDNS8wNjAzRTVCRTVEQkMxMUYwOUFBMTc4NTBDNEY5QUUwMi9odGxmUWUwWmdm cU5DMWtJMWtSR1VRNXVySDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUrN8Mf2f32y8VTdIO0JbQqsnH6v+PvytDGD+BqplgX0g2GKNaS4urXMvv0P4 7qrjRcz7qSuZ2pmN2OaFDljBTbg1mtY15M/xLo1ktNwpcNur9faDZeJEFMyWQ+gl DHo+Zm81omqLvHKv10CpsZPFVRvhmp8SeVaiMdjIxoqKJgYy3WfVQCO3PwLvbg1N cNSc0WFgtK07TKSR5yvLVsWh0DJNXreW14jTlS/SQSVd+s02Q3lQjHO2HvZrjKel 2459Hnfjgl1fI20cB3KyjVlhqGc8UnSPdzDVUbvtsE0m/A78XBob7AdFsiLvHFie qQyiPJSgMw77MHCkHWNnclbOCg== -----END CERTIFICATE-----Generated at Sun Oct 4 12:57:44 2026 by rpki-client