$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: unO+ZIgPaCy/c7+omzEtRGzNBmS5duYvRuAMYs3FO+4= Subject key identifier: 33:C0:21:DD:AE:CF:AC:89:29:30:A5:AC:6B:81:A8:1C:5A:D8:B8:FD Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D32 Signing time: Wed 26 Aug 2026 18:09:54 +0000 Manifest this update: Wed 26 Aug 2026 18:09:53 +0000 Manifest next update: Wed 02 Sep 2026 18:09:53 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: SazyYqz9vd2Loj93fagyosDCWqSLcL7TvK6vIVfVXbE=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Aug 26 18:09:53 2026 GMT Not After : Sep 2 18:09:53 2026 GMT Subject: CN=6a8f2bf2-1409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e0:b5:e3:b6:0e:98:94:41:fa:cf:a3:d3:7d: bb:a5:4c:3a:17:dc:3c:e3:5b:73:50:b1:53:6c:63: be:c9:3e:50:04:c5:f1:e3:6e:04:f8:42:ea:55:38: 3d:38:58:ee:ec:13:b1:c1:e7:61:5c:7b:22:7d:27: 73:df:4e:04:ec:7b:83:2e:d1:89:f7:6c:b2:f0:9f: c6:ca:fc:1e:b9:4f:cf:5f:0d:7e:4c:e2:61:59:1f: cc:77:ac:50:11:90:14:8a:31:11:9b:d8:05:cf:d6: 42:f2:ae:e8:9b:fb:b7:0f:84:85:6f:68:82:fb:5b: b0:d3:21:e8:35:21:36:fe:62:95:ac:c6:60:12:4f: 2e:60:aa:81:10:d3:18:c5:d8:bd:89:b2:6a:57:b2: 68:15:ad:28:0e:16:44:11:ff:95:30:ba:3d:1f:f5: 17:e1:fc:fb:c1:32:b3:a0:e0:ca:28:0d:d5:9f:72: d3:11:bf:d3:a6:c7:36:cd:a4:0b:45:5f:ae:4d:fa: 51:37:00:2f:dc:32:0c:d9:0a:60:92:25:33:3d:98: 30:e3:68:c3:d8:56:43:70:96:c8:d9:1d:80:63:6a: 02:3b:6c:2e:36:0b:8c:da:76:5e:01:f8:7d:de:c7: ce:e7:8a:08:72:db:91:76:64:cd:ee:e9:18:d0:93: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C0:21:DD:AE:CF:AC:89:29:30:A5:AC:6B:81:A8:1C:5A:D8:B8:FD X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:71:d6:a5:c6:d5:2b:a0:fe:48:c9:f6:b1:eb:15:5e:a1:1e: 11:90:9b:a5:e2:36:82:4f:36:ec:e7:d6:2a:c4:68:d5:0e:78: 62:28:d3:d9:6a:4e:17:d3:8f:c6:54:77:36:85:10:b3:9b:bf: cc:8c:6d:f0:25:11:5b:fa:5d:2d:8c:de:47:c5:8b:25:d5:da: 58:93:26:b6:a2:a4:ed:47:60:0c:24:84:56:f3:35:5b:b8:bf: 8f:e2:88:6f:d8:98:d8:f8:4a:09:3d:8f:e5:dd:ea:a1:fc:ce: 95:29:a9:0e:1f:91:0d:fc:a3:bf:c6:8d:eb:1d:e1:02:b3:81: b1:5e:5e:bd:57:77:39:66:15:3d:f7:80:6f:c3:f2:87:f2:10: ef:de:92:0b:b8:4f:3f:ab:35:27:ae:58:1e:3b:ff:41:87:c8: 7f:c7:c6:2c:02:bd:5d:da:27:f5:0c:c0:ef:1c:3f:cf:e6:9b: 5c:4b:96:bc:c3:35:97:54:6d:6c:e3:15:ae:c6:ac:1e:95:35: c5:fd:46:fa:e3:70:f9:4c:4f:cc:28:77:dd:10:ff:ad:17:11: e1:05:e3:05:e6:06:2a:92:66:c3:1e:3c:5c:3b:9c:1e:6a:3e: 24:5e:c6:fb:91:f3:4c:c0:1e:e2:18:09:3d:53:5f:44:88:ce: 4c:85:cc:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwODI2MTgwOTUzWhcNMjYwOTAyMTgwOTUzWjAYMRYwFAYD VQQDEw02YThmMmJmMi0xNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eC147YOmJRB+s+j0327pUw6F9w841tzULFTbGO+yT5QBMXx424E+ELqVTg9 OFju7BOxwedhXHsifSdz304E7HuDLtGJ92yy8J/GyvweuU/PXw1+TOJhWR/Md6xQ EZAUijERm9gFz9ZC8q7om/u3D4SFb2iC+1uw0yHoNSE2/mKVrMZgEk8uYKqBENMY xdi9ibJqV7JoFa0oDhZEEf+VMLo9H/UX4fz7wTKzoODKKA3Vn3LTEb/Tpsc2zaQL RV+uTfpRNwAv3DIM2QpgkiUzPZgw42jD2FZDcJbI2R2AY2oCO2wuNguM2nZeAfh9 3sfO54oIctuRdmTN7ukY0JOprQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPAId2u z6yJKTClrGuBqBxa2Lj9MB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnHWpcbVK6D+SMn2sesVXqEeEZCbpeI2gk827OfWKsRo1Q54YijT2WpOF9OP xlR3NoUQs5u/zIxt8CURW/pdLYzeR8WLJdXaWJMmtqKk7UdgDCSEVvM1W7i/j+KI b9iY2PhKCT2P5d3qofzOlSmpDh+RDfyjv8aN6x3hArOBsV5evVd3OWYVPfeAb8Py h/IQ796SC7hPP6s1J65YHjv/QYfIf8fGLAK9Xdon9QzA7xw/z+abXEuWvMM1l1Rt bOMVrsasHpU1xf1G+uNw+UxPzCh33RD/rRcR4QXjBeYGKpJmwx48XDucHmo+JF7G +5HzTMAe4hgJPVNfRIjOTIXMaA== -----END CERTIFICATE-----Generated at Thu Aug 27 05:36:44 2026 by rpki-client