$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: vECvAJF76RR4b3FK0jRBzE0tuDDp4FrqoM2/vFR+ey8= Subject key identifier: 6C:45:18:DA:80:80:C9:CC:34:0F:DC:9F:7D:BD:A3:56:FD:B8:C8:3A Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 021E Signing time: Sat 03 Oct 2026 03:28:25 +0000 Manifest this update: Sat 03 Oct 2026 03:28:25 +0000 Manifest next update: Sat 10 Oct 2026 03:28:25 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: oUC+VqqJ1BOIMaRFE8QDaJwB7tA8K3luq1ftLIEaA3A=) 2: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=) 3: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Oct 3 03:28:25 2026 GMT Not After : Oct 10 03:28:25 2026 GMT Subject: CN=6ac07659-b7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:e0:92:45:be:ee:ac:03:b2:72:a7:0a:81: ce:6f:1d:10:a8:9d:f5:6c:2e:2f:99:ef:ca:78:9a: 18:1d:6e:36:43:bb:c3:10:e3:c5:6f:01:1c:64:c9: 9c:b5:d2:8d:1d:b4:e2:f8:c1:54:2d:a8:51:76:41: e8:b0:ca:31:ba:5c:e9:50:20:36:00:b3:74:3e:2e: b2:84:be:77:c5:9e:42:c4:4a:a6:16:61:52:c8:8b: 92:65:cb:d3:36:be:63:3f:46:19:3e:81:b8:44:43: 01:16:09:0e:9b:2d:05:c0:2e:bc:9e:db:6d:d4:05: d7:ff:af:0d:05:c6:ee:53:8d:ee:52:2a:8f:63:95: 88:f8:e7:f6:e9:b7:26:8b:04:1a:e8:77:eb:27:44: ab:4d:7b:77:c5:95:a1:5a:f8:ba:11:64:22:2f:50: 69:0e:2f:cd:8b:75:fd:55:05:54:f7:7d:8f:6a:88: 2c:7d:8a:f6:e1:6c:50:6b:0c:ef:99:08:f1:9a:cc: c6:f6:3c:a7:b2:09:b1:b8:4f:46:9c:ed:a7:e9:47: 11:6c:ab:54:16:10:f3:05:87:f8:86:20:b5:16:b3: 69:57:3a:31:34:2c:30:bc:cc:2a:78:7d:b8:aa:ce: c1:7b:53:37:03:5f:c4:bb:b2:46:4e:2d:34:bf:0f: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:45:18:DA:80:80:C9:CC:34:0F:DC:9F:7D:BD:A3:56:FD:B8:C8:3A X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c1:71:b9:e3:ef:ea:f2:1b:b1:ac:56:dd:1f:2e:22:b7:58: 6d:f9:67:13:3d:fa:6e:42:67:3f:9a:20:ca:de:77:82:86:49: 90:a8:7c:29:d2:90:93:2b:d5:77:d5:17:44:8f:8c:f5:20:71: 85:cc:02:6d:89:15:32:b7:1d:25:01:fe:58:69:a5:a8:0e:96: 6a:9f:4a:b0:95:c9:26:8f:be:e3:8a:f8:13:27:d4:9b:3e:41: e3:3b:c8:31:64:f7:78:46:08:19:91:1a:5e:af:2f:01:cb:fb: 76:7f:60:ab:d1:91:a4:11:74:ca:68:2a:08:66:15:97:8f:9c: f5:b8:ed:63:b2:43:60:f1:bc:0c:51:bc:61:96:f3:76:c6:44: 67:ae:51:0b:3a:96:80:2a:a2:87:26:5d:35:0f:bd:ce:d4:5f: 84:46:0a:ea:92:64:16:43:79:ea:9d:f7:27:a7:a9:76:3e:a4: 66:31:d0:02:25:7e:a9:51:a3:2f:1b:23:50:78:4c:3c:f0:f1: b8:73:51:f3:7b:75:4d:7d:80:38:c4:4c:a6:16:77:c3:73:4f: c7:2a:74:9e:b2:c1:a4:32:b4:d6:bd:4e:75:bf:79:77:a5:88: b6:91:f3:46:9d:5a:9f:21:3a:a8:73:91:90:d4:5b:b3:dd:ce: 60:9f:34:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYxMDAzMDMyODI1WhcNMjYxMDEwMDMyODI1WjAYMRYwFAYD VQQDEw02YWMwNzY1OS1iN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7f/gkkW+7qwDsnKnCoHObx0QqJ31bC4vme/KeJoYHW42Q7vDEOPFbwEcZMmc tdKNHbTi+MFULahRdkHosMoxulzpUCA2ALN0Pi6yhL53xZ5CxEqmFmFSyIuSZcvT Nr5jP0YZPoG4REMBFgkOmy0FwC68nttt1AXX/68NBcbuU43uUiqPY5WI+Of26bcm iwQa6HfrJ0SrTXt3xZWhWvi6EWQiL1BpDi/Ni3X9VQVU932PaogsfYr24WxQawzv mQjxmszG9jynsgmxuE9GnO2n6UcRbKtUFhDzBYf4hiC1FrNpVzoxNCwwvMwqeH24 qs7Be1M3A1/Eu7JGTi00vw+4iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxFGNqA gMnMNA/cn329o1b9uMg6MB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAysFxuePv6vIbsaxW3R8uIrdYbflnEz36bkJnP5ogyt53goZJkKh8KdKQkyvV d9UXRI+M9SBxhcwCbYkVMrcdJQH+WGmlqA6Wap9KsJXJJo++44r4EyfUmz5B4zvI MWT3eEYIGZEaXq8vAcv7dn9gq9GRpBF0ymgqCGYVl4+c9bjtY7JDYPG8DFG8YZbz dsZEZ65RCzqWgCqihyZdNQ+9ztRfhEYK6pJkFkN56p33J6epdj6kZjHQAiV+qVGj LxsjUHhMPPDxuHNR83t1TX2AOMRMphZ3w3NPxyp0nrLBpDK01r1Odb95d6WItpHz Rp1anyE6qHORkNRbs93OYJ80Lw== -----END CERTIFICATE-----Generated at Sun Oct 4 16:57:25 2026 by rpki-client