$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft File: hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft (raw, json) Hash identifier: ra1LGYhvDQQDpHJ+fsYqep0yPuic/WuqaXrS8FiU9Uo= Subject key identifier: F4:CC:7B:0F:64:69:40:1B:A8:BD:2B:1E:64:65:E7:0F:AF:A4:2B:6D Authority key identifier: 85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4 Certificate issuer: /CN=A91BF578/serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft Manifest number: 29 Signing time: Mon 21 Sep 2026 08:46:45 +0000 Manifest this update: Mon 21 Sep 2026 08:46:44 +0000 Manifest next update: Mon 28 Sep 2026 08:46:44 +0000 Files and hashes: 1: hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl (hash: GBBxxrQoBnXfyxw/j9pMmlEcRqByEPpH6vVife+MPoc=) 2: 26433904A5BB11F185CE55806D11F970.roa (hash: EqMBCVv0GHS858ZexkI81MSBkDl0Le386d19oSQOLFY=) 3: EDD96AAE7F4811F19E46568395A30FBC.roa (hash: Wmt85iJENOVXXmg3SFuE0XKh364Rsjv2WardtpRUQfE=) 4: _gn-fiJmAGqHg6QjJvux2P7Q-2U.asa (hash: mNY7jZ++ojwKU6sNjpOXs8aUr3BW55CUq2uzq8SgE60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF578, serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4 Validity Not Before: Sep 21 08:46:44 2026 GMT Not After : Sep 28 08:46:44 2026 GMT Subject: CN=6ab0eef4-af72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:13:bd:b0:b3:04:ae:c6:12:32:91:55:7d: 53:45:12:94:84:56:53:06:1d:17:37:58:07:a5:9f: de:a6:61:ae:a8:c1:32:11:33:a9:42:1f:04:96:31: 02:b1:38:98:6e:d2:89:1b:99:fb:09:b0:83:e9:ad: 52:37:7c:59:e2:18:ff:8e:12:06:d0:1e:d9:95:34: 41:7f:80:15:31:2f:71:1b:d3:e4:e4:d6:d4:6f:8c: 9f:a5:e0:5b:f8:b4:c7:30:b5:ed:26:32:fa:5f:10: 4d:64:6f:3b:a6:f6:e2:b5:d4:7b:c5:5e:87:f5:e0: 4e:af:18:ec:4a:b8:a5:31:d7:a1:50:10:15:6d:0a: 01:c3:0a:54:43:24:3c:da:cd:cc:5a:b1:0d:09:13: e3:bf:49:4a:86:f7:ed:48:6c:0c:7d:5c:cd:f7:04: 6a:22:46:a1:16:c3:89:b0:5a:d0:e6:43:76:7f:06: 1a:6a:53:a3:1a:03:92:0e:b3:2f:d8:d8:18:22:9c: 8e:bd:cd:63:1e:b3:cf:35:73:f8:b1:e5:ce:56:6f: 31:03:41:74:e4:6d:4f:1c:dd:1b:44:3d:96:16:30: ee:ab:68:54:fd:8f:9b:35:3a:ea:27:71:2b:43:b7: 6c:36:bb:35:a9:77:d0:27:da:b7:11:10:48:b1:0b: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CC:7B:0F:64:69:40:1B:A8:BD:2B:1E:64:65:E7:0F:AF:A4:2B:6D X509v3 Authority Key Identifier: keyid:85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:30:c9:d5:35:be:e1:ff:b1:8a:f6:1d:1b:22:67:55:26:fc: d5:cd:b4:01:3b:2d:e4:e5:4c:83:43:37:a4:8b:d3:e6:03:65: 4d:fe:51:85:55:75:c6:14:5f:8c:9e:4c:5b:30:e5:cf:11:2d: 13:55:bc:8c:f4:2f:cf:21:2e:09:46:64:ca:b1:13:20:18:ef: d0:51:71:6c:57:33:3a:d2:e8:a9:5c:9d:2c:2f:dc:ce:3e:21: 0d:ec:51:e9:b4:32:48:ef:4b:ae:1e:f7:00:13:e5:0e:7b:d9: c0:d9:0c:15:ef:9f:8b:59:5b:5a:1d:48:67:6d:90:01:21:5d: a9:ee:b9:6f:af:27:30:8b:1d:08:97:5b:bd:6e:4e:e3:92:be: 13:7f:c7:d9:2b:93:28:08:44:d1:79:d1:fa:bc:64:42:ee:e4: 28:a5:d1:b1:a9:91:71:16:19:cc:8a:45:d1:b9:9e:92:cd:4a: 6e:d3:c9:ff:63:3f:fc:b6:31:c4:1f:9c:df:f4:2f:73:4a:37: 35:a4:67:5d:cb:36:0f:66:86:33:f3:ef:10:61:fc:17:1e:25: 60:76:e2:87:32:ab:db:00:28:54:7c:28:b6:17:bc:63:3f:cd: 0b:05:7a:54:92:aa:1b:13:b0:a4:dc:14:83:2e:ae:40:6e:05: 93:0b:46:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjU3ODExMC8GA1UEBRMoODUzRUNCNEY3N0NDMjE0MURCQThERDE4QzEyMTM1QzlE NzcwRkVFNDAeFw0yNjA5MjEwODQ2NDRaFw0yNjA5MjgwODQ2NDRaMBgxFjAUBgNV BAMTDTZhYjBlZWY0LWFmNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuyhO9sLMErsYSMpFVfVNFEpSEVlMGHRc3WAeln96mYa6owTIRM6lCHwSWMQKx OJhu0okbmfsJsIPprVI3fFniGP+OEgbQHtmVNEF/gBUxL3Eb0+Tk1tRvjJ+l4Fv4 tMcwte0mMvpfEE1kbzum9uK11HvFXof14E6vGOxKuKUx16FQEBVtCgHDClRDJDza zcxasQ0JE+O/SUqG9+1IbAx9XM33BGoiRqEWw4mwWtDmQ3Z/BhpqU6MaA5IOsy/Y 2BginI69zWMes881c/ix5c5WbzEDQXTkbU8c3RtEPZYWMO6raFT9j5s1OuoncStD t2w2uzWpd9An2rcREEixCy1lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9Mx7D2Rp QBuovSseZGXnD6+kK20wHwYDVR0jBBgwFoAUhT7LT3fMIUHbqN0YwSE1yddw/uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNTc4L0EwM0JBMjU4N0Y0 ODExRjFBM0VBMEU4MTk1QTMwRkJDL2hUN0xUM2ZNSVVIYnFOMFl3U0UxeWRkd191 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFQ3TFQzZk1JVUhicU4wWXdTRTF5ZGR3X3VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NTc4L0EwM0JBMjU4N0Y0ODExRjFBM0VBMEU4MTk1QTMwRkJDL2hUN0xUM2ZNSVVI YnFOMFl3U0UxeWRkd191US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMMMnVNb7h/7GK9h0bImdVJvzVzbQBOy3k5UyDQzeki9PmA2VN/lGFVXXGFF+M nkxbMOXPES0TVbyM9C/PIS4JRmTKsRMgGO/QUXFsVzM60uipXJ0sL9zOPiEN7FHp tDJI70uuHvcAE+UOe9nA2QwV75+LWVtaHUhnbZABIV2p7rlvrycwix0Il1u9bk7j kr4Tf8fZK5MoCETRedH6vGRC7uQopdGxqZFxFhnMikXRuZ6SzUpu08n/Yz/8tjHE H5zf9C9zSjc1pGddyzYPZoYz8+8QYfwXHiVgduKHMqvbAChUfCi2F7xjP80LBXpU kqobE7Ck3BSDLq5AbgWTC0YK -----END CERTIFICATE-----Generated at Tue Sep 22 20:10:58 2026 by rpki-client