$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json) Hash identifier: GwPOlEUT4IGys9Gogq6qwl4mEt9QhjEB+97J9xkQ7PM= Subject key identifier: CC:D1:5F:A6:69:4A:37:F9:CE:09:BD:B6:10:03:CD:4B:67:DA:42:D7 Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft Manifest number: 0196 Signing time: Mon 05 Oct 2026 04:44:47 +0000 Manifest this update: Mon 05 Oct 2026 04:44:46 +0000 Manifest next update: Mon 12 Oct 2026 04:44:46 +0000 Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: BU1zY0WioCqYdsscuubXGqd1aa/mvLzICKeWiyZBOD8=) 2: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=) 3: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: Oct 5 04:44:46 2026 GMT Not After : Oct 12 04:44:46 2026 GMT Subject: CN=6ac32b3f-c5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:83:05:3a:6a:fe:04:8a:b0:62:ab:c9:ca: 36:b6:90:b7:41:09:e0:b5:bd:de:2f:0d:0e:61:9b: 45:e8:82:a6:74:ad:45:4c:89:9a:56:48:b0:7b:25: 10:c4:3e:81:58:e7:86:8f:f3:5b:be:a2:a2:66:23: 74:fe:09:bf:5f:d4:e9:10:f4:79:1a:b8:0f:6d:65: 4c:1a:0e:1c:46:03:c7:c2:39:21:4e:af:5a:fe:d3: 70:35:c4:95:04:55:a2:b1:0b:40:df:0b:be:e4:ac: e1:f1:df:3a:75:35:b0:09:03:d6:4f:26:6b:62:3f: 9d:15:36:4b:f3:0e:94:a6:7e:6d:fc:da:ee:5a:8c: 5d:d1:f7:25:62:7e:fa:e6:6d:bd:fb:d4:38:4d:69: 8d:d3:da:c0:a6:ae:01:d0:f9:f3:47:8a:4c:5b:33: 6a:cb:e0:29:13:83:41:5c:b9:7b:c2:01:62:d4:13: c7:0a:da:5a:14:6a:b4:48:74:68:b7:1e:c1:69:a0: 5d:0c:de:c7:78:9f:c7:45:38:a4:c3:c7:9f:aa:a4: 53:c9:fd:b1:79:7f:8a:d4:c3:2c:09:36:2f:88:35: ca:86:0b:f5:fd:0d:74:4f:d7:ae:14:9c:bd:2b:53: d3:bf:b5:01:f3:fa:8a:5a:9a:c3:b2:dd:3e:27:38: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D1:5F:A6:69:4A:37:F9:CE:09:BD:B6:10:03:CD:4B:67:DA:42:D7 X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:9d:9c:39:cb:d0:44:07:f4:b8:a6:8c:1c:e7:53:90:e2:ac: 27:4b:8c:34:47:31:de:14:29:db:89:15:4a:de:47:a9:0f:44: f1:13:88:80:55:19:f1:ed:d0:7f:25:66:d2:59:4e:10:2c:8a: 47:7a:f9:4f:56:a4:31:3b:cf:b0:f8:06:c1:5a:21:a5:f7:6b: 9e:6d:77:59:2d:98:45:0d:15:81:1c:9b:f1:89:0c:94:a1:80: 92:8a:fc:d5:26:e9:91:45:ac:f6:84:52:a2:2d:0f:c7:b0:bf: cf:18:53:94:5b:7c:5d:80:81:1b:ec:17:c9:6b:e9:0e:ec:1d: 16:d8:5d:67:5d:be:17:6f:de:e3:7c:a0:c7:9f:08:e7:49:86: 42:5e:60:e1:97:f7:54:fc:ba:a8:dd:cc:08:62:e1:38:64:9b: b6:a4:59:80:98:6e:99:e7:b9:35:d3:74:2f:a6:9c:e7:11:50: ed:0f:de:97:5f:96:82:c0:c9:82:12:05:2d:b7:ad:24:77:d2: 76:fe:a0:5b:0a:a8:e2:fb:8c:ff:fb:ea:a9:fc:9d:ed:b9:a8: 48:48:e2:69:db:e8:ed:c8:77:a9:ba:21:14:f6:96:c6:7a:66: 11:f4:a9:2b:3f:e0:23:73:c7:6b:07:b0:21:ed:23:d9:03:50: 63:26:b0:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjYxMDA1MDQ0NDQ2WhcNMjYxMDEyMDQ0NDQ2WjAYMRYwFAYD VQQDEw02YWMzMmIzZi1jNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXiDBTpq/gSKsGKryco2tpC3QQngtb3eLw0OYZtF6IKmdK1FTImaVkiweyUQ xD6BWOeGj/NbvqKiZiN0/gm/X9TpEPR5GrgPbWVMGg4cRgPHwjkhTq9a/tNwNcSV BFWisQtA3wu+5Kzh8d86dTWwCQPWTyZrYj+dFTZL8w6Upn5t/NruWoxd0fclYn76 5m29+9Q4TWmN09rApq4B0PnzR4pMWzNqy+ApE4NBXLl7wgFi1BPHCtpaFGq0SHRo tx7BaaBdDN7HeJ/HRTikw8efqqRTyf2xeX+K1MMsCTYviDXKhgv1/Q10T9euFJy9 K1PTv7UB8/qKWprDst0+JzipIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzRX6Zp Sjf5zgm9thADzUtn2kLXMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS b1JQeWVpcFU0c0M0MWEtelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxJ2cOcvQRAf0uKaMHOdTkOKsJ0uMNEcx3hQp24kVSt5HqQ9E8ROIgFUZ8e3Q fyVm0llOECyKR3r5T1akMTvPsPgGwVohpfdrnm13WS2YRQ0VgRyb8YkMlKGAkor8 1SbpkUWs9oRSoi0Px7C/zxhTlFt8XYCBG+wXyWvpDuwdFthdZ12+F2/e43ygx58I 50mGQl5g4Zf3VPy6qN3MCGLhOGSbtqRZgJhumee5NdN0L6ac5xFQ7Q/el1+WgsDJ ghIFLbetJHfSdv6gWwqo4vuM//vqqfyd7bmoSEjiadvo7ch3qbohFPaWxnpmEfSp Kz/gI3PHawewIe0j2QNQYyaw6A== -----END CERTIFICATE-----Generated at Tue Oct 6 21:14:44 2026 by rpki-client