$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json) Hash identifier: oQsCVMw0QEEPgM/UhZ/hEtJiEM2zKgOCOWC1tZxeKOU= Subject key identifier: 64:2D:18:12:C0:FE:69:FE:B4:83:81:E7:47:F8:EB:E4:3B:B1:10:A9 Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft Manifest number: 0434 Signing time: Tue 22 Sep 2026 23:53:17 +0000 Manifest this update: Tue 22 Sep 2026 23:53:16 +0000 Manifest next update: Tue 29 Sep 2026 23:53:16 +0000 Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: TWLQTCOcWbiyYeQNkRvFgQBA2lvv4EFsYSC1FPRaMc4=) 2: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: eyLRbf8L5PNErwQTJOk07CgThPMQFGU585OgUmJtuNc=) 3: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: 61tgJT9JBQD7/LnZY8sWrhXGon+4jXIx8zzVzR+mcYo=) 4: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: xh8ZzkScwUoVrKvZnOf/z0vy2KKYFXPO6zuhnInuTK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Sep 22 23:53:16 2026 GMT Not After : Sep 29 23:53:16 2026 GMT Subject: CN=6ab314ed-b14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:9c:0a:86:e5:83:b2:dd:54:f1:85:53:8f: b5:8d:b9:23:e6:e8:d3:3f:bd:9e:e6:31:90:dc:4b: 03:eb:b2:5e:cc:91:b2:48:d9:46:88:b2:6f:35:1e: c9:38:a2:fd:96:f0:42:ab:13:47:d6:5e:91:13:d1: 4a:7d:c9:eb:7e:ef:ab:fe:68:c2:57:1d:b4:3f:f6: 3e:05:7a:2f:2d:6b:cf:a0:c5:03:f6:e8:22:a0:6c: ed:c1:8d:6b:85:80:f7:96:6d:3f:6b:c3:a3:8a:22: e5:e1:a7:84:0a:12:8e:6f:32:d2:75:f6:0e:18:ff: 89:e9:45:57:4f:56:79:ac:86:1e:58:71:2d:24:0b: fb:52:bb:c5:ca:8a:21:51:3f:04:82:4f:16:66:ca: b2:78:3f:43:7e:ce:ee:89:0b:c3:57:25:40:da:48: 12:dd:0b:d2:ec:bb:c8:94:6c:e7:6f:e9:29:59:77: 30:41:3e:b4:1b:ca:91:ba:a2:5a:94:f8:ee:53:5c: 54:16:56:2f:7f:2c:a9:c3:13:9e:5b:7c:99:30:64: 25:a1:a6:ec:4e:f2:a0:36:89:0f:75:0d:39:3b:12: 50:d8:ad:95:83:36:41:0c:49:c7:9e:05:a5:9c:56: 66:b0:37:a4:b9:24:b0:03:93:a2:00:8e:c5:cf:07: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2D:18:12:C0:FE:69:FE:B4:83:81:E7:47:F8:EB:E4:3B:B1:10:A9 X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:7f:9d:1f:30:07:95:a6:53:c8:ee:9b:8c:f1:81:c4:87:09: 60:5e:93:00:6c:85:02:fe:bb:f8:db:61:3d:46:d0:42:70:14: 37:0b:6b:d6:7f:a8:66:ce:8a:31:79:05:8e:13:97:e1:91:eb: 71:03:a2:10:1c:58:dc:ca:89:d0:8b:de:21:10:8a:47:3c:9b: 2d:0e:41:12:64:90:5f:86:29:54:8b:2a:a1:7f:67:8d:9f:13: 15:71:fb:95:6d:ab:9a:0a:5e:71:f6:03:d6:20:c3:db:16:a1: 40:35:91:31:b9:d3:92:8d:67:d4:64:11:d6:c0:df:54:1b:f5: 1f:74:37:41:eb:85:21:b6:ec:50:8d:97:2b:53:54:37:f6:e5: a2:23:85:41:c1:9e:bb:55:1f:63:08:69:bd:43:f7:1e:e9:19: 16:bc:00:f4:9d:c3:45:34:c1:8d:15:47:b1:68:f7:a3:8a:5d: f2:22:8a:13:b9:dd:82:1b:2b:4c:30:2c:44:df:b3:f2:81:34: 39:98:2a:19:fe:91:21:33:1e:87:9f:e3:f1:84:16:da:c2:49: 1b:b0:d6:6e:29:b3:a0:26:6c:ae:90:be:a3:b7:26:e4:e3:8d: cc:76:44:20:09:88:71:aa:1d:19:a3:10:db:ba:53:bf:59:13: 9b:3e:c0:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjYwOTIyMjM1MzE2WhcNMjYwOTI5MjM1MzE2WjAYMRYwFAYD VQQDEw02YWIzMTRlZC1iMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BmcCoblg7LdVPGFU4+1jbkj5ujTP72e5jGQ3EsD67JezJGySNlGiLJvNR7J OKL9lvBCqxNH1l6RE9FKfcnrfu+r/mjCVx20P/Y+BXovLWvPoMUD9ugioGztwY1r hYD3lm0/a8OjiiLl4aeEChKObzLSdfYOGP+J6UVXT1Z5rIYeWHEtJAv7UrvFyooh UT8Egk8WZsqyeD9Dfs7uiQvDVyVA2kgS3QvS7LvIlGznb+kpWXcwQT60G8qRuqJa lPjuU1xUFlYvfyypwxOeW3yZMGQloabsTvKgNokPdQ05OxJQ2K2VgzZBDEnHngWl nFZmsDekuSSwA5OiAI7FzwcwuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQtGBLA /mn+tIOB50f46+Q7sRCpMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjUyNy9ERDFBRTJGNkMyQUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVz Wk5ZR0JNekhUNVh3aXRwVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqH+dHzAHlaZTyO6bjPGBxIcJYF6TAGyFAv67+NthPUbQQnAUNwtr1n+oZs6K MXkFjhOX4ZHrcQOiEBxY3MqJ0IveIRCKRzybLQ5BEmSQX4YpVIsqoX9njZ8TFXH7 lW2rmgpecfYD1iDD2xahQDWRMbnTko1n1GQR1sDfVBv1H3Q3QeuFIbbsUI2XK1NU N/bloiOFQcGeu1UfYwhpvUP3HukZFrwA9J3DRTTBjRVHsWj3o4pd8iKKE7ndghsr TDAsRN+z8oE0OZgqGf6RITMeh5/j8YQW2sJJG7DWbimzoCZsrpC+o7cm5OONzHZE IAmIcaodGaMQ27pTv1kTmz7A4w== -----END CERTIFICATE-----Generated at Wed Sep 23 09:58:51 2026 by rpki-client