$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: eN08DzDKxVfwxcw4LjuPu882rbQjPu0kJHNnBzpeHz0= Subject key identifier: DF:9E:1D:38:1C:B4:46:06:86:1F:E5:26:22:D3:44:6C:ED:F2:26:0A Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 05DE Signing time: Sun 06 Sep 2026 22:45:32 +0000 Manifest this update: Sun 06 Sep 2026 22:45:31 +0000 Manifest next update: Sun 13 Sep 2026 22:45:31 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: 7Yik6p9LxDZqEROJ8V8B0s+UC7IkW+XGgBMBcxO5BK8=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 22:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Sep 6 22:45:31 2026 GMT Not After : Sep 13 22:45:31 2026 GMT Subject: CN=6a9ded0b-2ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:f5:0e:9c:ba:57:09:21:33:01:7e:b1:2b: dc:a1:c5:81:dd:0a:7f:eb:8d:65:ae:ed:f8:b3:e4: 05:a5:11:f3:62:1e:3c:15:1c:be:69:86:ec:ea:f3: 7c:df:50:dc:e7:bd:76:77:00:24:15:60:27:c1:1d: 47:a3:74:30:54:59:8d:51:c4:e5:bb:b0:e9:cd:3e: fb:30:72:62:ea:64:65:61:63:e8:9e:49:e6:6f:7f: a9:8f:31:f6:3c:8e:00:6d:72:81:f5:f9:1f:42:d3: d2:77:2d:82:f8:9c:e5:30:33:4b:e1:77:94:16:85: 2c:ec:80:42:35:4c:ac:0c:6d:94:53:2b:35:77:67: a6:da:1b:b0:ff:d0:0d:48:78:38:7a:28:9f:22:4b: 2b:52:76:4e:06:11:ae:8b:83:a6:3d:46:f7:e4:7c: a0:bf:0f:cd:4b:24:e3:28:f7:9a:d1:88:51:d6:5b: 2b:5e:3e:46:10:67:4c:9a:31:1b:8c:fb:d2:82:52: 4b:be:a1:7c:9b:15:6a:18:d2:9d:bf:fb:18:38:89: 05:46:88:14:af:59:8e:68:b5:54:37:d3:8d:44:05: c5:a8:56:8b:66:a2:dd:64:6b:f4:a0:c1:86:8b:76: 49:56:5e:bd:6d:bd:27:65:2f:64:3c:f4:ef:23:5a: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9E:1D:38:1C:B4:46:06:86:1F:E5:26:22:D3:44:6C:ED:F2:26:0A X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a4:10:5a:bf:1c:3e:a0:06:c7:5a:3e:a2:04:c7:f2:ef:22: ae:13:5b:b7:73:1b:1d:08:74:a7:60:54:f6:a1:c1:14:f0:0f: b4:27:5b:99:fe:b2:29:5b:8b:de:79:78:25:9d:17:26:11:b6: eb:36:12:d8:2c:07:e4:20:96:67:2a:60:38:13:19:96:e7:3f: 5b:90:f8:9b:59:da:d6:7c:88:82:e5:8a:9c:44:e2:ec:54:ea: 44:95:a3:28:64:43:4d:3f:9c:11:c0:be:b6:3d:81:bd:3f:af: 6f:c9:82:35:82:62:da:b6:32:2e:5d:f3:6f:2b:91:43:59:62: 26:d5:73:2d:9f:f3:5b:4f:86:35:7f:07:fd:02:ce:21:68:41: 86:0e:ee:ef:f8:45:ad:2f:48:97:30:3b:04:78:55:ce:aa:13: 4a:0f:67:fe:54:6d:13:97:06:c7:81:6f:89:30:43:95:bf:df: d7:39:a7:ca:dd:d9:c2:dd:ab:bc:49:54:bd:b4:d3:e5:34:a0: 6b:c7:c6:c5:19:09:19:1b:b1:3e:fd:af:af:6f:1b:d5:7c:ea: 0f:96:48:d3:a8:b1:7d:e8:9a:c8:27:c5:6d:83:0b:44:62:28: ef:17:e6:70:ca:2c:fa:4d:98:ba:2a:98:e3:d8:07:c3:54:31: f0:46:0f:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYwOTA2MjI0NTMxWhcNMjYwOTEzMjI0NTMxWjAYMRYwFAYD VQQDEw02YTlkZWQwYi0yYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJz1Dpy6VwkhMwF+sSvcocWB3Qp/641lru34s+QFpRHzYh48FRy+aYbs6vN8 31Dc5712dwAkFWAnwR1Ho3QwVFmNUcTlu7DpzT77MHJi6mRlYWPonknmb3+pjzH2 PI4AbXKB9fkfQtPSdy2C+JzlMDNL4XeUFoUs7IBCNUysDG2UUys1d2em2huw/9AN SHg4eiifIksrUnZOBhGui4OmPUb35Hygvw/NSyTjKPea0YhR1lsrXj5GEGdMmjEb jPvSglJLvqF8mxVqGNKdv/sYOIkFRogUr1mOaLVUN9ONRAXFqFaLZqLdZGv0oMGG i3ZJVl69bb0nZS9kPPTvI1q9SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+eHTgc tEYGhh/lJiLTRGzt8iYKMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALaQQWr8cPqAGx1o+ogTH8u8irhNbt3MbHQh0p2BU9qHBFPAPtCdbmf6yKVuL 3nl4JZ0XJhG26zYS2CwH5CCWZypgOBMZluc/W5D4m1na1nyIguWKnETi7FTqRJWj KGRDTT+cEcC+tj2BvT+vb8mCNYJi2rYyLl3zbyuRQ1liJtVzLZ/zW0+GNX8H/QLO IWhBhg7u7/hFrS9IlzA7BHhVzqoTSg9n/lRtE5cGx4FviTBDlb/f1zmnyt3Zwt2r vElUvbTT5TSga8fGxRkJGRuxPv2vr28b1XzqD5ZI06ixfeiayCfFbYMLRGIo7xfm cMos+k2YuiqY49gHw1Qx8EYP0Q== -----END CERTIFICATE-----Generated at Mon Sep 7 23:21:42 2026 by rpki-client