$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft File: tHhQxGf-y0GdelnYEaxeaiegDx0.mft (raw, json) Hash identifier: JKImA5/M8Ij4WaUQBBkHZwZ7/74MaTTXyVxinvzvC98= Subject key identifier: A1:A8:A9:29:36:3E:7C:3D:58:9F:F9:7C:19:F6:19:70:A1:1F:BA:67 Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D Certificate issuer: /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft Manifest number: 52 Signing time: Thu 08 Oct 2026 22:22:36 +0000 Manifest this update: Thu 08 Oct 2026 22:22:35 +0000 Manifest next update: Thu 15 Oct 2026 22:22:35 +0000 Files and hashes: 1: tHhQxGf-y0GdelnYEaxeaiegDx0.crl (hash: fn3ljqj12LZlwh99E3Z8pA/3dF2PR989nkwa6FgNY/I=) 2: B3598D60B58E11F1A2B2E4956C11F970.roa (hash: PTbcFT3tPgE1Nv0Y3QWVYbUfneVmNyIpN0txrIvRut4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 22:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Validity Not Before: Oct 8 22:22:35 2026 GMT Not After : Oct 15 22:22:35 2026 GMT Subject: CN=6ac817ac-bba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:ff:f8:8d:7c:bf:c9:56:ce:fa:d8:f2:9b: ca:32:d6:7d:c7:8d:34:10:b9:53:01:eb:9e:99:c2: 10:c9:16:76:36:81:07:0d:0f:3c:dc:7f:39:d2:67: 6b:b2:e5:19:6a:7c:36:22:84:56:97:eb:29:9d:aa: df:f7:56:c5:73:d6:7b:1b:18:1b:89:e3:e7:c1:da: 11:1c:50:c7:c3:80:c4:13:43:49:e9:74:7c:f1:2e: ea:4f:ae:2e:74:fa:8d:01:35:3d:6b:f3:e2:1c:cb: 58:c8:92:f0:57:61:05:82:27:fc:af:00:dc:72:8f: b5:2a:47:65:60:5e:e1:cb:d3:03:9e:61:ec:a0:33: 08:d8:b7:aa:c8:fb:15:71:92:da:86:77:e3:2f:d4: b3:17:a6:11:40:d9:35:7e:2d:9f:cf:e3:d2:20:c5: 12:11:db:f1:33:dd:74:80:92:43:22:46:31:5c:55: 80:76:47:f3:10:c9:62:67:45:54:40:a3:38:42:1d: 55:ca:65:fc:f2:cd:74:c9:98:56:39:bd:69:c8:53: 95:77:8f:61:56:7e:0c:cd:1e:00:25:c9:c1:3c:7a: f0:68:21:5c:cd:2b:10:ad:7a:e5:b7:98:7c:00:f4: 04:86:f0:14:5e:5e:2f:7b:7a:b5:24:0e:ce:28:60: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A8:A9:29:36:3E:7C:3D:58:9F:F9:7C:19:F6:19:70:A1:1F:BA:67 X509v3 Authority Key Identifier: keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f9:08:19:c2:6c:94:d1:12:52:35:18:3c:91:66:cc:53:ad: ba:0b:57:67:56:77:a1:59:67:71:46:c8:0b:17:15:d0:57:9c: 7f:17:7f:41:87:ca:c7:44:39:3b:5b:ce:67:b6:1b:4e:3e:93: 73:4a:d1:91:02:37:38:47:9f:cb:e1:0c:31:94:2a:04:39:e7: 96:c5:a0:6c:a8:45:33:6f:9e:b6:ea:8a:ed:86:f5:af:21:d6: 61:2c:2e:a3:11:27:27:d1:1a:19:02:a1:ed:cf:fd:9c:9e:96: 72:85:64:1f:67:12:56:c4:f1:7f:c8:93:7b:58:6f:41:bf:bb: 2c:fd:62:81:04:9a:fd:ee:7e:07:e9:38:3a:a9:1a:49:60:57: e9:9a:40:44:b8:59:93:47:37:3a:9e:fd:2e:b5:d2:64:f3:29: 2c:0b:9a:b7:ab:22:cc:64:4f:5f:50:71:a2:7b:d9:45:10:8f: bb:18:c4:4f:5b:37:cd:c9:da:bc:b2:d1:a7:91:84:fa:1f:36: 10:4e:98:9a:57:3a:ae:66:66:c8:d3:38:5b:2a:3c:b9:71:c7: 7b:1a:0a:36:45:08:ec:5c:ac:85:f1:58:2b:e0:70:f5:ba:7f: f8:d9:40:4f:a3:c9:fb:ee:82:9f:67:27:ad:d9:1d:da:e2:91: 9a:f8:d4:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUE0MDExMC8GA1UEBRMoQjQ3ODUwQzQ2N0ZFQ0I0MTlEN0E1OUQ4MTFBQzVFNkEy N0EwMEYxRDAeFw0yNjEwMDgyMjIyMzVaFw0yNjEwMTUyMjIyMzVaMBgxFjAUBgNV BAMTDTZhYzgxN2FjLWJiYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnbf/4jXy/yVbO+tjym8oy1n3HjTQQuVMB656ZwhDJFnY2gQcNDzzcfznSZ2uy 5RlqfDYihFaX6ymdqt/3VsVz1nsbGBuJ4+fB2hEcUMfDgMQTQ0npdHzxLupPri50 +o0BNT1r8+Icy1jIkvBXYQWCJ/yvANxyj7UqR2VgXuHL0wOeYeygMwjYt6rI+xVx ktqGd+Mv1LMXphFA2TV+LZ/P49IgxRIR2/Ez3XSAkkMiRjFcVYB2R/MQyWJnRVRA ozhCHVXKZfzyzXTJmFY5vWnIU5V3j2FWfgzNHgAlycE8evBoIVzNKxCteuW3mHwA 9ASG8BReXi97erUkDs4oYGXhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoaipKTY+ fD1Yn/l8GfYZcKEfumcwHwYDVR0jBBgwFoAUtHhQxGf+y0GdelnYEaxeaiegDx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQTQwLzRFRUVBMUE2NDkw QzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBHZGVsbllFYXhlYWllZ0R4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEhoUXhHZi15MEdkZWxuWUVheGVhaWVnRHgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QTQwLzRFRUVBMUE2NDkwQzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBH ZGVsbllFYXhlYWllZ0R4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAG+QgZwmyU0RJSNRg8kWbMU626C1dnVnehWWdxRsgLFxXQV5x/F39Bh8rHRDk7 W85nthtOPpNzStGRAjc4R5/L4QwxlCoEOeeWxaBsqEUzb5626orthvWvIdZhLC6j EScn0RoZAqHtz/2cnpZyhWQfZxJWxPF/yJN7WG9Bv7ss/WKBBJr97n4H6Tg6qRpJ YFfpmkBEuFmTRzc6nv0utdJk8yksC5q3qyLMZE9fUHGie9lFEI+7GMRPWzfNydq8 stGnkYT6HzYQTpiaVzquZmbI0zhbKjy5ccd7Ggo2RQjsXKyF8Vgr4HD1un/42UBP o8n77oKfZyet2R3a4pGa+NRN -----END CERTIFICATE-----Generated at Fri Oct 9 20:13:50 2026 by rpki-client