$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: MGhbO0GvNYCUdVCOZALOkE50mS1mu7HxuIxZKE3Sd8g= Subject key identifier: 5A:23:68:B1:0E:67:A5:72:6F:48:CD:D6:42:06:DC:72:1A:15:59:5B Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 023F Signing time: Wed 07 Oct 2026 03:04:25 +0000 Manifest this update: Wed 07 Oct 2026 03:04:24 +0000 Manifest next update: Wed 14 Oct 2026 03:04:24 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: CKl49gdbzs+J7iqLEMenomuI1dUpSiE0Ul8Zr9bqeQA=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: cF057REBd5D/+vcFWsOPGez1VoQjLibEv7GnA24pPRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Oct 7 03:04:24 2026 GMT Not After : Oct 14 03:04:24 2026 GMT Subject: CN=6ac5b6b9-62e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:6c:a5:bc:1e:1d:59:7e:d0:2a:73:46:1e: 0f:d8:a0:7d:06:93:6e:6b:e4:5c:e3:7d:c2:dd:96: e1:40:40:9c:aa:4e:73:06:e4:19:af:62:da:4b:97: 8d:c5:43:c5:b8:b9:50:8d:0a:de:83:f8:fe:86:21: 10:5d:74:61:6e:86:b3:b4:e8:fa:db:ec:d2:04:2a: e2:67:e1:4b:62:31:97:97:e6:38:e8:67:c3:6f:fc: 8a:80:2e:05:5e:65:79:0f:ed:35:aa:5e:71:57:1f: f0:86:a7:c7:ae:f5:a9:c3:4d:42:21:c2:39:d4:b5: ef:d6:0b:03:38:7a:2a:60:6b:89:73:cb:5d:ed:72: a0:08:2d:49:14:2d:d4:51:db:5c:dc:24:7f:91:09: 1e:92:da:c5:8a:3f:99:f3:b4:65:cf:f4:e9:a7:a7: 0b:6d:95:90:8d:df:94:9e:7d:cd:9e:48:6d:e0:4e: 46:a3:a0:e5:3e:2e:50:d5:0a:9c:db:90:e7:33:42: 63:7b:a6:f6:f8:22:4f:31:f6:cb:bc:33:85:d9:55: 0e:a1:3d:92:de:88:40:f9:f6:c9:8f:37:82:d3:d5: f6:65:66:37:94:57:fd:ee:ad:1e:d1:d1:c9:bb:06: 20:ec:d3:15:db:66:11:7e:82:f3:d6:73:42:09:c2: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:68:B1:0E:67:A5:72:6F:48:CD:D6:42:06:DC:72:1A:15:59:5B X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:56:31:55:18:6c:84:75:c3:0c:cd:0e:0d:26:0c:05:2d:ac: a5:fa:02:8f:fa:e4:86:7b:63:43:e6:0d:cd:f1:fc:df:b6:46: 39:a7:4a:1e:fb:96:9e:7b:81:ec:b6:92:7e:9e:38:91:25:26: d1:0f:5e:85:93:eb:7c:14:dd:1a:d3:86:a2:80:5c:65:a6:41: d5:41:7e:19:b7:01:5d:30:52:2f:73:01:1f:72:e2:b9:03:e2: 5c:b6:e8:d8:97:24:85:64:f2:7e:77:6e:90:cf:ef:cf:e2:29: b5:70:f2:02:69:aa:fb:9d:51:e5:b2:e1:8e:57:27:fe:8d:80: 33:f7:07:90:52:06:f6:c9:b8:21:f3:01:4d:97:6e:0a:f7:18: 0e:39:12:7a:93:17:aa:46:c9:91:85:c4:5a:46:ee:c5:88:5c: c7:c9:14:fc:85:23:97:1c:f5:7e:36:c5:c0:7c:02:e8:6f:4e: 48:a8:6b:b7:2b:fd:28:53:4e:03:a9:e6:21:92:fd:25:a1:b6: 59:37:0b:ac:42:1f:31:54:d4:55:a7:95:b9:e4:71:1c:c8:1f: 91:a5:9e:d0:e9:94:2f:08:f1:49:93:dc:e1:fd:75:71:b2:75: bb:3e:ad:83:ee:19:13:e4:e0:20:03:75:84:f0:3b:03:70:74: ca:08:a7:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjYxMDA3MDMwNDI0WhcNMjYxMDE0MDMwNDI0WjAYMRYwFAYD VQQDEw02YWM1YjZiOS02MmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3BspbweHVl+0CpzRh4P2KB9BpNua+Rc433C3ZbhQECcqk5zBuQZr2LaS5eN xUPFuLlQjQreg/j+hiEQXXRhboaztOj62+zSBCriZ+FLYjGXl+Y46GfDb/yKgC4F XmV5D+01ql5xVx/whqfHrvWpw01CIcI51LXv1gsDOHoqYGuJc8td7XKgCC1JFC3U Udtc3CR/kQkektrFij+Z87Rlz/Tpp6cLbZWQjd+Unn3Nnkht4E5Go6DlPi5Q1Qqc 25DnM0Jje6b2+CJPMfbLvDOF2VUOoT2S3ohA+fbJjzeC09X2ZWY3lFf97q0e0dHJ uwYg7NMV22YRfoLz1nNCCcJgLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFojaLEO Z6Vyb0jN1kIG3HIaFVlbMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAflYxVRhshHXDDM0ODSYMBS2spfoCj/rkhntjQ+YNzfH837ZGOadKHvuWnnuB 7LaSfp44kSUm0Q9ehZPrfBTdGtOGooBcZaZB1UF+GbcBXTBSL3MBH3LiuQPiXLbo 2JckhWTyfndukM/vz+IptXDyAmmq+51R5bLhjlcn/o2AM/cHkFIG9sm4IfMBTZdu CvcYDjkSepMXqkbJkYXEWkbuxYhcx8kU/IUjlxz1fjbFwHwC6G9OSKhrtyv9KFNO A6nmIZL9JaG2WTcLrEIfMVTUVaeVueRxHMgfkaWe0OmULwjxSZPc4f11cbJ1uz6t g+4ZE+TgIAN1hPA7A3B0ygin+Q== -----END CERTIFICATE-----Generated at Thu Oct 8 14:12:52 2026 by rpki-client