$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: /yWKv+Mq4ibZK6WqFOkaggZhalTOOz6HoBfHbWPe3MM= Subject key identifier: 23:15:81:F0:40:1F:48:FB:81:59:2B:4C:66:33:74:8C:C1:33:A8:71 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D51 Signing time: Mon 26 Oct 2026 18:10:58 +0000 Manifest this update: Mon 26 Oct 2026 18:10:57 +0000 Manifest next update: Mon 02 Nov 2026 18:10:57 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: imn7z4gn48ltdvaHdww1aNH30Jg3VaLZvjpNoKmrLsw=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 26 18:10:57 2026 GMT Not After : Nov 2 18:10:57 2026 GMT Subject: CN=6adf97b2-02d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:94:8c:53:70:f6:ca:66:fd:48:ba:af:19: 08:cc:e2:7e:24:d0:9f:8e:d4:f4:a8:44:aa:48:c4: 7d:63:26:96:6b:d3:d2:f0:9b:5d:0f:c4:9b:c2:9d: 88:21:48:07:b2:a4:82:43:33:2e:32:68:13:f3:55: 02:5c:ef:19:5d:fc:d0:d5:4c:1c:64:46:51:55:a3: 92:9d:ce:ce:f8:c1:54:41:1b:72:b3:c6:26:9a:86: d7:48:d8:9e:25:ad:ce:28:3a:a6:27:4d:96:10:df: 25:1e:54:fd:9e:16:9c:5d:f8:1a:61:00:0e:12:d1: a5:c4:fc:ec:d2:87:cf:fe:6a:9a:f2:03:6f:20:0d: 24:48:cd:ce:35:dc:f8:83:4d:42:e6:95:78:aa:81: 70:e6:88:48:0a:87:27:99:3b:0c:f3:ce:2b:bc:07: 8c:d5:3e:aa:f2:8e:84:3c:61:88:db:e8:82:0c:82: e1:62:02:91:8f:19:e0:15:25:b6:a7:34:e5:fd:b3: d2:bb:6e:90:ac:5b:87:f5:15:1f:88:d6:da:09:05: 05:26:0f:5d:15:78:5b:31:92:d4:39:b5:9b:db:43: e1:55:35:01:a0:56:e4:f1:14:1a:a5:70:82:8b:c6: b3:66:2d:9a:00:0a:f6:dd:c5:41:19:53:ee:d6:30: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:15:81:F0:40:1F:48:FB:81:59:2B:4C:66:33:74:8C:C1:33:A8:71 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0d:04:84:14:aa:52:ca:fe:8f:d7:66:c0:1e:a4:e2:55:3d: 26:81:b0:ee:77:76:33:0c:b2:0f:98:40:d7:a9:5f:af:40:f1: d8:e9:c2:3b:ac:40:b6:e7:e5:f8:dc:1c:7e:47:da:42:a2:2a: 66:eb:fb:b4:80:d1:15:00:02:8d:f2:ad:5f:92:d5:71:7e:b9: a2:b8:ab:41:e1:29:07:9c:ad:e8:00:f0:94:b5:26:0d:f9:4b: d5:df:71:06:02:a9:66:41:76:46:7c:79:56:f8:a9:f7:4c:bf: 38:69:36:5f:af:e9:15:dc:7e:f0:86:09:26:a1:d3:a0:da:49: 29:d5:c1:d1:ad:82:f5:5b:58:76:fc:51:e0:b8:75:58:e2:9b: b8:3f:c8:a4:65:a6:08:64:eb:65:d2:2b:f5:50:fa:5e:65:f4: 10:38:c0:ee:26:00:c1:8e:3e:0a:4e:01:e2:73:a1:54:2b:1a: 97:f2:b5:55:71:c3:53:77:03:65:bf:bd:b8:85:04:2b:03:10: e7:4c:56:f5:c9:d9:c3:37:89:ac:10:bf:63:60:39:1a:9c:b9: 4c:81:33:a1:84:ea:d3:9d:93:76:2f:6c:a0:fa:86:9a:e0:ae: c3:81:05:7e:69:1b:9c:d6:8d:b7:e3:da:09:8b:3d:f8:d7:b9: 47:8e:53:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYxMDI2MTgxMDU3WhcNMjYxMTAyMTgxMDU3WjAYMRYwFAYD VQQDEw02YWRmOTdiMi0wMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9yUjFNw9spm/Ui6rxkIzOJ+JNCfjtT0qESqSMR9YyaWa9PS8JtdD8Sbwp2I IUgHsqSCQzMuMmgT81UCXO8ZXfzQ1UwcZEZRVaOSnc7O+MFUQRtys8YmmobXSNie Ja3OKDqmJ02WEN8lHlT9nhacXfgaYQAOEtGlxPzs0ofP/mqa8gNvIA0kSM3ONdz4 g01C5pV4qoFw5ohICocnmTsM884rvAeM1T6q8o6EPGGI2+iCDILhYgKRjxngFSW2 pzTl/bPSu26QrFuH9RUfiNbaCQUFJg9dFXhbMZLUObWb20PhVTUBoFbk8RQapXCC i8azZi2aAAr23cVBGVPu1jAgrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMVgfBA H0j7gVkrTGYzdIzBM6hxMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPA0EhBSqUsr+j9dmwB6k4lU9JoGw7nd2MwyyD5hA16lfr0Dx2OnCO6xAtufl +NwcfkfaQqIqZuv7tIDRFQACjfKtX5LVcX65orirQeEpB5yt6ADwlLUmDflL1d9x BgKpZkF2Rnx5Vvip90y/OGk2X6/pFdx+8IYJJqHToNpJKdXB0a2C9VtYdvxR4Lh1 WOKbuD/IpGWmCGTrZdIr9VD6XmX0EDjA7iYAwY4+Ck4B4nOhVCsal/K1VXHDU3cD Zb+9uIUEKwMQ50xW9cnZwzeJrBC/Y2A5Gpy5TIEzoYTq052Tdi9soPqGmuCuw4EF fmkbnNaNt+PaCYs9+Ne5R45ToQ== -----END CERTIFICATE-----Generated at Tue Oct 27 12:01:53 2026 by rpki-client