$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: O6jQ7iPzjSphl5Mgh+Rw8TBHdYVpg26qDJp5Mu4hQqY= Subject key identifier: EA:4D:98:BA:E3:28:05:27:E8:1D:B0:29:96:78:4F:F8:32:78:8D:BB Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0F2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0F0B Signing time: Sun 04 Oct 2026 17:40:50 +0000 Manifest this update: Sun 04 Oct 2026 17:40:49 +0000 Manifest next update: Sun 11 Oct 2026 17:40:49 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: Fge/r9A7q/C2Wln7qi6Qd3Vmy4DToXJysQ7+6LMY2pg=) 2: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: 9DZO4gtEwqGm1N7r2iLEutY8W3IqMNDQEag8fkVAF7Q=) 3: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: x2dbHHpd6lHu6U/D+Z5h6UrLSps4ACkU8JTV2sRYFDo=) 4: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: 8ERTDv7Mz23v2Rbdakt8Gt3XJ8tL5M1Uk1kQf/u/YMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3884 (0xf2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Oct 4 17:40:49 2026 GMT Not After : Oct 11 17:40:49 2026 GMT Subject: CN=6ac28fa1-2cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:98:85:be:78:17:0e:66:97:c9:15:26:46: 40:cb:4a:f1:c6:f2:6b:89:9e:59:26:dd:40:4a:3c: 90:d1:41:a7:0c:36:3f:ee:34:e3:ee:ad:21:30:60: 3b:46:33:4f:17:c3:b2:d7:2a:af:ae:25:72:63:2a: 5f:a5:95:4d:c0:a3:c5:fe:42:df:8e:4b:a8:ef:aa: 2b:72:81:5c:7d:43:6b:1f:74:55:7d:32:c8:8a:9c: a0:5e:24:84:97:83:6e:1f:d8:ed:cc:25:a6:07:3c: 5f:3a:0d:eb:ad:b1:b5:06:07:ef:41:1b:97:b8:95: 63:d1:8f:2a:fc:a6:bd:21:4d:f4:f5:fb:b1:22:14: 7a:8b:b2:d6:c5:34:86:af:eb:5d:e0:23:f9:a5:1b: fe:83:35:a7:29:54:7d:1b:6e:86:11:c6:bf:aa:24: f8:55:9b:9b:e4:2d:b3:f8:9f:0f:fc:f3:6f:c8:d6: 0c:8a:ea:78:a7:9e:56:9d:33:38:65:9d:f7:39:12: ca:77:89:a6:b2:65:e9:f0:06:74:69:92:aa:da:fb: 66:7a:57:5c:7a:95:af:68:02:71:2d:ba:98:e1:22: 6a:9f:3d:01:c0:14:2a:8c:80:34:1b:95:8b:27:a2: 9f:af:a1:f9:50:51:c7:64:d4:39:e1:98:ff:a7:f4: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:98:BA:E3:28:05:27:E8:1D:B0:29:96:78:4F:F8:32:78:8D:BB X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:87:bd:2f:ca:ae:34:04:8f:08:22:70:d0:34:c7:c9:17:23: 5d:25:62:f5:ea:cf:0e:4e:4a:8c:87:d7:87:da:15:3f:7e:e0: 02:1e:c6:bf:71:92:19:d7:d4:06:58:18:b4:c9:ab:fd:f6:72: e6:e9:83:1f:45:51:6c:70:b3:65:fb:46:4e:c3:4c:ee:3e:fa: 21:25:7f:69:ce:03:c3:02:a5:7d:46:56:67:1a:6a:bd:8a:bf: 02:e0:7d:a3:68:b5:f2:65:7e:e1:06:6b:08:61:fd:00:73:30: 72:38:a6:15:e3:91:76:e9:97:8b:97:4d:0f:38:3a:6d:3a:1c: bf:3d:32:2d:82:cc:c3:cb:97:dc:b4:16:99:46:1e:79:dd:af: 65:c4:5c:74:82:31:62:f5:70:eb:0d:0f:2d:fe:eb:23:24:8d: d5:c0:77:74:39:6b:88:8c:0e:9b:7e:0a:a0:25:e5:b3:98:40: f5:70:7b:65:15:a2:51:9d:a7:a7:48:85:90:23:1b:9c:27:99: 98:0a:c6:6e:f9:0e:d8:63:7f:a7:0e:c8:eb:db:16:f4:af:b5: a7:67:af:d8:41:09:46:9b:e6:5c:0b:af:1a:49:4b:36:c6:73: dd:56:76:10:ba:25:5d:d6:23:58:43:be:ee:ae:00:83:7b:8f: 5c:24:2c:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjYxMDA0MTc0MDQ5WhcNMjYxMDExMTc0MDQ5WjAYMRYwFAYD VQQDEw02YWMyOGZhMS0yY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRuYhb54Fw5ml8kVJkZAy0rxxvJriZ5ZJt1ASjyQ0UGnDDY/7jTj7q0hMGA7 RjNPF8Oy1yqvriVyYypfpZVNwKPF/kLfjkuo76orcoFcfUNrH3RVfTLIipygXiSE l4NuH9jtzCWmBzxfOg3rrbG1BgfvQRuXuJVj0Y8q/Ka9IU309fuxIhR6i7LWxTSG r+td4CP5pRv+gzWnKVR9G26GEca/qiT4VZub5C2z+J8P/PNvyNYMiup4p55WnTM4 ZZ33ORLKd4mmsmXp8AZ0aZKq2vtmeldcepWvaAJxLbqY4SJqnz0BwBQqjIA0G5WL J6Kfr6H5UFHHZNQ54Zj/p/SQZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpNmLrj KAUn6B2wKZZ4T/gyeI27MB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPoe9L8quNASPCCJw0DTHyRcjXSVi9erPDk5KjIfXh9oVP37gAh7Gv3GSGdfU BlgYtMmr/fZy5umDH0VRbHCzZftGTsNM7j76ISV/ac4DwwKlfUZWZxpqvYq/AuB9 o2i18mV+4QZrCGH9AHMwcjimFeORdumXi5dNDzg6bTocvz0yLYLMw8uX3LQWmUYe ed2vZcRcdIIxYvVw6w0PLf7rIySN1cB3dDlriIwOm34KoCXls5hA9XB7ZRWiUZ2n p0iFkCMbnCeZmArGbvkO2GN/pw7I69sW9K+1p2ev2EEJRpvmXAuvGklLNsZz3VZ2 ELolXdYjWEO+7q4Ag3uPXCQsyg== -----END CERTIFICATE-----Generated at Mon Oct 5 06:33:37 2026 by rpki-client