$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: Z6fVC87chy85hLD60JNKj/6c2+8gQ7RA8VXruRlLQ6s= Subject key identifier: DE:E3:96:2F:EB:B9:32:C5:D0:C9:73:36:78:B3:6F:C3:87:AC:CF:AD Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 027E Signing time: Thu 03 Sep 2026 02:16:22 +0000 Manifest this update: Thu 03 Sep 2026 02:16:22 +0000 Manifest next update: Thu 10 Sep 2026 02:16:22 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: RDTGpOgciFnPsWjgf7s1W6BvuD3HBvZEskVB+V4NuaY=) 2: 20EEA4E85D4511F19E70A12CB2833773.roa (hash: 0NWy9uzlmlVP6XgEKzHCIkE1793aYzIulkG89nveM1w=) 3: 00FB58CE5D4611F186A46996B2833773.roa (hash: NVOHwEnXASVBqmCqfxY3gSyyM9N1jznjqr0Pc3+NqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Sep 3 02:16:22 2026 GMT Not After : Sep 10 02:16:22 2026 GMT Subject: CN=6a98d876-1911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:0b:07:4c:05:41:d5:6f:43:08:eb:63:41: 49:f9:a7:7c:73:f3:c9:19:9c:4f:98:08:e3:c9:cc: 66:1b:96:6d:0f:b8:f5:11:64:1b:15:81:fc:e9:e5: 3f:a9:1a:ee:c0:e8:5e:67:35:a3:bd:90:4f:83:a6: a2:51:59:58:e4:a7:02:b5:f6:a8:c8:47:44:2c:ec: 1f:79:23:4f:98:e9:5b:ef:b3:0b:a2:9b:f0:0d:d9: ce:41:d1:41:36:19:53:33:a3:6a:3e:21:d7:2b:f9: a1:c2:ff:3e:3f:6d:4f:dd:59:5e:b6:5c:93:fc:6e: 5e:99:c8:42:ca:b1:b4:92:a5:be:05:9e:a0:72:a2: 31:ff:e9:5a:60:49:11:d4:3f:23:b3:b5:55:21:6b: d9:6a:6d:a7:0a:5b:f2:8a:75:c2:09:dc:66:8b:8c: 5f:85:5c:0d:ee:d0:37:20:09:b5:b5:18:88:1b:08: bb:2a:c1:82:7e:00:42:64:25:33:5f:b6:4a:be:ef: 77:04:d5:d6:b7:81:67:61:eb:07:26:f9:87:ad:22: e8:98:dd:5a:82:db:bd:d9:24:98:19:d3:14:77:ff: 6c:51:dd:25:1e:8c:ce:85:0c:d7:62:1a:e0:ec:e1: 38:28:41:94:a8:03:1b:aa:0f:7e:e8:0a:cd:bb:f1: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E3:96:2F:EB:B9:32:C5:D0:C9:73:36:78:B3:6F:C3:87:AC:CF:AD X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:cf:d9:46:cf:e9:f2:f4:7f:26:bc:3c:10:3b:ee:d4:2f:84: 67:b7:86:84:96:48:40:af:a0:29:2d:ca:92:01:83:0e:90:56: ab:9d:73:f3:a3:09:41:32:9e:50:38:3d:77:47:df:64:91:ab: 49:bd:b6:a3:95:01:fd:4b:8e:4d:b1:46:cb:2c:51:ec:1e:de: 2d:68:52:78:61:fa:77:67:54:40:8e:8c:66:d5:a6:ed:0e:6f: b9:84:a0:f6:9e:08:2e:76:e4:a5:67:b0:49:07:2f:9f:65:ca: c7:2d:b2:f6:b3:86:cd:48:9c:9e:3c:19:dd:dc:e1:55:4c:df: a4:32:1e:3a:8d:09:d6:21:65:db:a7:cc:4b:f0:a3:4b:46:f7: 35:9c:e0:63:16:e1:c0:a9:e9:6d:55:e7:9e:1d:ae:fc:05:72: 67:be:cd:1c:24:0d:73:a0:b7:d7:5f:12:ba:cf:7f:85:60:87: 53:9b:0b:cd:c5:ac:3d:55:90:7d:f1:7b:9d:8a:2e:46:31:dc: 92:74:c9:92:c8:8a:81:c4:4d:5f:9a:a6:1d:c6:da:5a:fa:92: be:8d:dd:c1:94:f3:7c:47:d8:26:35:9f:4d:f9:d1:d1:62:9e: b3:9c:cb:20:1a:d4:47:67:95:c8:96:8b:bc:2f:ca:c2:eb:51: 8b:5b:e8:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjYwOTAzMDIxNjIyWhcNMjYwOTEwMDIxNjIyWjAYMRYwFAYD VQQDEw02YTk4ZDg3Ni0xOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSkLB0wFQdVvQwjrY0FJ+ad8c/PJGZxPmAjjycxmG5ZtD7j1EWQbFYH86eU/ qRruwOheZzWjvZBPg6aiUVlY5KcCtfaoyEdELOwfeSNPmOlb77MLopvwDdnOQdFB NhlTM6NqPiHXK/mhwv8+P21P3VletlyT/G5emchCyrG0kqW+BZ6gcqIx/+laYEkR 1D8js7VVIWvZam2nClvyinXCCdxmi4xfhVwN7tA3IAm1tRiIGwi7KsGCfgBCZCUz X7ZKvu93BNXWt4FnYesHJvmHrSLomN1agtu92SSYGdMUd/9sUd0lHozOhQzXYhrg 7OE4KEGUqAMbqg9+6ArNu/EM8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7jli/r uTLF0MlzNnizb8OHrM+tMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuc/ZRs/p8vR/Jrw8EDvu1C+EZ7eGhJZIQK+gKS3KkgGDDpBWq51z86MJQTKe UDg9d0ffZJGrSb22o5UB/UuOTbFGyyxR7B7eLWhSeGH6d2dUQI6MZtWm7Q5vuYSg 9p4ILnbkpWewSQcvn2XKxy2y9rOGzUicnjwZ3dzhVUzfpDIeOo0J1iFl26fMS/Cj S0b3NZzgYxbhwKnpbVXnnh2u/AVyZ77NHCQNc6C3118Sus9/hWCHU5sLzcWsPVWQ ffF7nYouRjHcknTJksiKgcRNX5qmHcbaWvqSvo3dwZTzfEfYJjWfTfnR0WKes5zL IBrUR2eVyJaLvC/KwutRi1voEg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:44:29 2026 by rpki-client