$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: ummoo6hebnF+Ik0eWopqgMcQ4mJVOhGNJkVkkxdBKSY= Subject key identifier: 2D:D9:1C:26:A2:E3:3E:9F:1F:8A:36:3A:F8:ED:14:DB:2C:F1:6B:3E Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 32 Signing time: Sat 05 Sep 2026 08:27:49 +0000 Manifest this update: Sat 05 Sep 2026 08:27:49 +0000 Manifest next update: Sat 12 Sep 2026 08:27:49 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: GmVEjaNYeg+D/Nf9TqTEniSM8Q0YKy8pfpKUAlzDDCY=) 2: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) 3: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 08:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Sep 5 08:27:49 2026 GMT Not After : Sep 12 08:27:49 2026 GMT Subject: CN=6a9bd285-1a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:5e:20:d4:f4:ef:26:6c:14:23:72:e0:0b: 29:2d:48:fd:47:33:a0:ca:0b:d2:66:2a:d7:19:40: 84:c8:19:8b:9b:a3:51:27:dc:8f:d2:26:fb:9e:03: 6f:91:c2:55:4b:9c:e1:92:38:a1:d6:16:4e:70:90: de:6c:56:e2:56:51:e9:0c:9c:40:c1:00:8d:43:f5: 52:b5:d9:bf:3a:fe:b9:9f:c0:27:7e:f2:1d:ce:2c: 36:ee:3e:65:09:8f:98:c4:c5:4f:82:24:83:51:2e: 20:20:e2:e5:89:e6:99:c8:b7:54:f8:64:97:7f:d8: 9a:fb:ab:05:10:dd:37:4f:e2:45:6d:08:85:8e:4c: d7:5f:68:d0:ef:69:56:39:15:e1:92:b0:8b:1a:4f: 3b:03:13:e4:2d:51:a2:99:60:ba:7b:61:44:88:04: 60:0e:5a:51:bb:17:ab:26:f7:bc:73:d6:26:4b:d2: 48:86:c1:40:ac:4c:36:4d:3c:46:64:4a:bc:98:45: c9:85:a5:7a:3e:3c:5d:6d:c2:c5:bd:e1:95:4d:dc: 63:ff:94:10:f4:30:1d:5b:15:fb:73:78:f4:49:9b: fa:a3:d3:5e:34:c6:4d:b9:62:1a:09:44:dc:6f:11: fd:f8:25:87:20:37:22:cb:22:e2:d2:9f:0f:41:26: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:1C:26:A2:E3:3E:9F:1F:8A:36:3A:F8:ED:14:DB:2C:F1:6B:3E X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:f8:fa:88:db:7d:c1:f9:21:c3:0d:4d:74:e4:71:e2:99: 6f:00:f2:eb:49:a8:7d:d1:52:ab:02:5c:8d:39:fe:db:ba:3a: 74:53:8a:b9:81:2b:b6:10:11:75:23:ff:bd:86:cb:07:9a:e8: 5c:f1:e5:56:2e:d1:2b:54:a6:b0:18:01:04:7d:e4:a1:c0:16: 22:18:6b:ca:97:fe:22:2f:fe:f1:27:1b:d7:d1:7c:a3:5c:da: 67:70:73:63:7c:17:95:34:18:40:09:0a:87:14:2c:b2:fa:24: 95:4a:d9:57:94:e5:9f:f2:5d:e0:97:73:8b:90:b8:d3:16:6d: bf:6f:62:2f:51:9c:20:a1:30:65:dd:cb:f0:a8:c7:6c:7b:5b: 43:5d:d4:3f:1c:45:8c:51:7a:dd:19:19:d8:e9:74:d8:38:50: 48:a8:8e:0d:1b:d2:2b:43:c0:45:1b:3a:c6:9f:44:66:0a:58: c9:ac:a6:6f:1c:8b:2b:7b:3f:30:79:42:1a:73:11:2e:be:1b: 25:6c:5e:a8:e0:61:14:bd:ff:50:cc:b8:1f:51:c7:24:44:3b: b1:c7:f3:07:ff:36:4c:f1:a3:8e:6d:a9:94:ed:14:cf:ca:57: 39:62:62:77:0f:15:7d:55:97:2c:20:4d:5d:90:d5:40:f6:64: f6:81:17:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA5MDUwODI3NDlaFw0yNjA5MTIwODI3NDlaMBgxFjAUBgNV BAMTDTZhOWJkMjg1LTFhMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8uV4g1PTvJmwUI3LgCyktSP1HM6DKC9JmKtcZQITIGYubo1En3I/SJvueA2+R wlVLnOGSOKHWFk5wkN5sVuJWUekMnEDBAI1D9VK12b86/rmfwCd+8h3OLDbuPmUJ j5jExU+CJINRLiAg4uWJ5pnIt1T4ZJd/2Jr7qwUQ3TdP4kVtCIWOTNdfaNDvaVY5 FeGSsIsaTzsDE+QtUaKZYLp7YUSIBGAOWlG7F6sm97xz1iZL0kiGwUCsTDZNPEZk SryYRcmFpXo+PF1twsW94ZVN3GP/lBD0MB1bFftzePRJm/qj0140xk25YhoJRNxv Ef34JYcgNyLLIuLSnw9BJkEnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULdkcJqLj Pp8fijY6+O0U2yzxaz4wHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCeMvj6iNt9wfkhww1NdORx4plvAPLrSah90VKrAlyNOf7bujp0U4q5gSu2EBF1 I/+9hssHmuhc8eVWLtErVKawGAEEfeShwBYiGGvKl/4iL/7xJxvX0XyjXNpncHNj fBeVNBhACQqHFCyy+iSVStlXlOWf8l3gl3OLkLjTFm2/b2IvUZwgoTBl3cvwqMds e1tDXdQ/HEWMUXrdGRnY6XTYOFBIqI4NG9IrQ8BFGzrGn0RmCljJrKZvHIsrez8w eUIacxEuvhslbF6o4GEUvf9QzLgfUcckRDuxx/MH/zZM8aOObamU7RTPylc5YmJ3 DxV9VZcsIE1dkNVA9mT2gRdB -----END CERTIFICATE-----Generated at Sat Sep 5 19:04:43 2026 by rpki-client