$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json) Hash identifier: u6YQIW6P/Ig7hKKVg5LCxpxQYCumCI/rArubFW48R+U= Subject key identifier: 1A:CE:D8:45:F0:14:05:D6:55:0F:EE:90:5F:1B:AE:13:D3:9D:38:57 Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft Manifest number: C3 Signing time: Wed 09 Sep 2026 07:21:11 +0000 Manifest this update: Wed 09 Sep 2026 07:21:11 +0000 Manifest next update: Wed 16 Sep 2026 07:21:11 +0000 Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: WUkm812nXyfjNFhdk6emuda0KjSWailDbxT/02cqfOs=) 2: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=) 3: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=) 4: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 07:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Sep 9 07:21:11 2026 GMT Not After : Sep 16 07:21:11 2026 GMT Subject: CN=6aa108e7-953d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:a1:d4:87:17:89:02:8d:c3:e2:95:7b:0e: d2:f0:8d:a1:f1:3b:05:76:ad:44:67:8d:c2:0f:97: a1:5e:e0:d2:55:fe:40:2e:e5:1c:d6:49:36:ab:f4: 6d:1f:34:ae:c7:6e:b9:f0:f7:b9:6c:7b:a1:1e:31: 48:67:b1:0c:9c:b6:61:ef:4b:9d:02:aa:0b:14:f2: 2f:83:ec:f5:37:07:f0:9e:a0:93:ed:47:f6:94:d2: 14:e6:2f:c0:02:22:8d:19:9b:52:41:4b:ae:d1:47: 27:59:53:46:7d:d6:4a:34:12:a4:cf:db:a8:ba:43: 7b:e1:63:28:4c:29:4b:7c:58:45:d1:8d:2e:7a:7c: 49:3e:ba:3f:6d:f1:ad:7d:47:76:26:9f:77:4a:3b: ad:70:7f:66:3d:bb:3d:88:43:bf:b8:05:b0:e9:6b: 21:10:f9:cb:24:a0:eb:6d:dd:3e:e8:7d:30:1d:eb: b3:60:b2:ae:0f:1b:f7:4d:3e:6a:d1:3e:06:7a:c9: d4:5b:3d:3e:ca:74:43:5f:85:93:81:d5:85:41:09: 13:17:ee:79:96:87:59:64:d3:23:bc:88:da:f7:c6: 9a:96:73:dd:0a:b8:24:05:90:9a:b8:31:c7:eb:c5: 13:5a:f8:2f:9f:db:be:ee:d8:4d:1a:b2:2d:c8:9c: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CE:D8:45:F0:14:05:D6:55:0F:EE:90:5F:1B:AE:13:D3:9D:38:57 X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3b:41:f6:99:0f:95:d2:88:13:b7:b5:98:8c:b0:22:03:89: e5:07:ff:a1:9b:16:d9:b9:69:56:c9:76:7c:c9:09:a7:2d:ba: bc:5f:de:18:35:9e:1f:fa:e9:5d:78:63:88:d9:31:52:96:18: ee:3e:49:3d:db:69:0c:bc:b0:7b:27:9c:6b:50:9d:47:65:48: 4c:5a:9c:9f:2b:00:46:39:94:16:98:ae:63:17:d8:c9:d9:77: 9c:08:63:04:4f:a3:64:63:53:7f:21:4b:b9:a4:01:62:d6:cb: b6:08:3f:de:ac:b6:79:36:25:09:c6:6e:c2:c8:1c:2d:68:1d: 76:3d:bd:c3:98:0c:72:2a:14:f0:d3:9d:8e:45:4e:32:bc:c4: 56:64:cc:3e:f9:7d:fd:be:f8:dd:05:fb:d2:74:70:31:6a:b3: de:44:7a:b6:d9:bf:7a:bb:84:b3:b9:ab:e3:d8:19:e2:f6:1f: 99:93:b1:c4:c3:18:0f:07:9d:12:bd:cf:5a:66:a0:72:ce:31: 1a:ae:cd:f0:ae:88:1e:82:0a:6e:14:ce:e7:7d:00:21:d5:1f: 8e:a6:03:23:2b:26:64:34:47:63:bb:fe:c4:5e:7a:0c:bd:f4: 1d:4c:ee:1e:f3:6d:3f:1b:f2:b0:96:9c:a9:d7:80:5d:12:19: ba:8f:24:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYwOTA5MDcyMTExWhcNMjYwOTE2MDcyMTExWjAYMRYwFAYD VQQDEw02YWExMDhlNy05NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vWh1IcXiQKNw+KVew7S8I2h8TsFdq1EZ43CD5ehXuDSVf5ALuUc1kk2q/Rt HzSux2658Pe5bHuhHjFIZ7EMnLZh70udAqoLFPIvg+z1NwfwnqCT7Uf2lNIU5i/A AiKNGZtSQUuu0UcnWVNGfdZKNBKkz9uoukN74WMoTClLfFhF0Y0uenxJPro/bfGt fUd2Jp93SjutcH9mPbs9iEO/uAWw6WshEPnLJKDrbd0+6H0wHeuzYLKuDxv3TT5q 0T4GesnUWz0+ynRDX4WTgdWFQQkTF+55lodZZNMjvIja98aalnPdCrgkBZCauDHH 68UTWvgvn9u+7thNGrItyJyoEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrO2EXw FAXWVQ/ukF8brhPTnThXMB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVm NGFaY3Z4VnpRVENvNVVHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfDtB9pkPldKIE7e1mIywIgOJ5Qf/oZsW2blpVsl2fMkJpy26vF/eGDWeH/rp XXhjiNkxUpYY7j5JPdtpDLyweyeca1CdR2VITFqcnysARjmUFpiuYxfYydl3nAhj BE+jZGNTfyFLuaQBYtbLtgg/3qy2eTYlCcZuwsgcLWgddj29w5gMcioU8NOdjkVO MrzEVmTMPvl9/b743QX70nRwMWqz3kR6ttm/eruEs7mr49gZ4vYfmZOxxMMYDwed Er3PWmagcs4xGq7N8K6IHoIKbhTO530AIdUfjqYDIysmZDRHY7v+xF56DL30HUzu HvNtPxvysJacqdeAXRIZuo8kYA== -----END CERTIFICATE-----Generated at Fri Sep 11 09:26:28 2026 by rpki-client