$ rpki-client -vvvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft File: He-yCnpR7hjdetBq2qxJEePi95Q.mft (raw, json) Hash identifier: Z25NYm8arWuSIFO5Hz2aOb62Uh3KC9IY8kXNJw7neeU= Subject key identifier: CF:5F:F4:BA:C9:72:01:7D:E6:FA:2A:2B:D8:C7:60:3E:AF:E6:D0:B6 Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft Manifest number: 02D0 Signing time: Wed 23 Sep 2026 01:04:51 +0000 Manifest this update: Wed 23 Sep 2026 01:04:50 +0000 Manifest next update: Wed 30 Sep 2026 01:04:50 +0000 Files and hashes: 1: He-yCnpR7hjdetBq2qxJEePi95Q.crl (hash: +attXvGMFy+aQTkJS4WlzhzCIk5MIcqsn+DpXPM1BIw=) 2: 54365208708411EDA8B14246C4F9AE02.roa (hash: XkgCUe6o/GCC4RXMS466VJWBGD4478vydtNuBFIJtZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Validity Not Before: Sep 23 01:04:50 2026 GMT Not After : Sep 30 01:04:50 2026 GMT Subject: CN=6ab325b2-bc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:d8:95:de:13:ba:db:38:22:94:df:c3:5d: f3:c4:32:c2:97:bb:37:ec:b5:26:27:5b:44:63:b1: 36:aa:2d:e7:d3:c1:d1:c2:cb:31:41:d5:98:26:3e: 77:ad:c5:46:db:c1:b7:20:74:48:5a:96:1b:25:53: c3:01:f2:f0:a4:41:40:53:08:43:cd:9b:9a:2c:8a: 27:10:d3:14:7b:e2:12:83:1b:50:7e:44:a4:bc:94: 4f:7a:49:9f:ea:ab:bd:d9:a0:36:e5:28:c5:44:31: 83:92:b0:54:49:e8:dc:54:c6:89:d0:0f:ed:30:48: 9b:e3:3a:b8:41:8d:77:02:bd:4e:94:6e:d5:1d:34: 62:6f:4f:a1:bd:fb:17:03:61:ca:0e:4b:74:da:d0: 6d:6a:ac:b5:fb:71:4a:83:c9:97:3c:b4:1a:1a:33: 26:4b:75:ac:92:88:c5:2c:88:eb:dd:55:c3:4c:10: 59:ff:07:18:3d:56:0c:1b:e0:19:d9:94:ac:f9:4c: 37:5e:5b:54:00:a1:aa:98:5c:c4:f3:be:0f:15:89: a2:aa:af:c9:3f:00:4f:bc:e0:a6:0c:7d:ac:32:ef: 94:02:12:56:4a:33:c3:b0:8b:27:95:f3:ab:77:a4: 06:60:9b:fb:b6:b1:84:97:15:10:82:0a:87:3c:2b: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:F4:BA:C9:72:01:7D:E6:FA:2A:2B:D8:C7:60:3E:AF:E6:D0:B6 X509v3 Authority Key Identifier: keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:11:02:2e:ed:e2:c4:10:42:01:ec:ed:c0:e1:ea:52:4e:25: c3:ee:cb:78:26:77:33:ab:4d:8f:a6:10:d8:4d:48:55:c3:5c: c9:d1:9c:fa:5b:78:87:3a:47:60:84:a2:db:10:67:8e:c6:a0: b1:ed:69:c3:08:1f:46:00:31:25:c8:0d:37:a6:64:f7:86:0d: 51:8c:76:b5:b1:75:92:43:b9:e9:dd:f6:14:eb:21:3b:e3:d2: 20:92:86:e4:2a:e7:c1:20:ed:7d:e4:a9:60:24:3d:e9:97:58: eb:c2:b6:b1:aa:07:a5:09:c7:c3:05:b6:51:7f:36:45:25:4e: 6c:8a:6b:7f:76:23:b0:2e:5b:21:df:45:69:aa:83:1a:6e:30: 04:8d:0c:ff:4c:ca:94:e7:7b:69:b6:cb:ca:78:2f:e9:91:3b: ce:6e:38:28:d0:a1:e2:53:f5:e6:19:da:08:7c:4c:dd:cf:da: 66:cb:06:eb:f5:34:1a:c5:d7:e2:eb:8a:0d:a3:59:18:eb:8b: d3:c9:a2:1b:4c:23:7b:61:27:d5:06:17:cb:9f:3a:e2:e0:0a: 17:37:fa:36:d3:c3:10:c8:e6:25:01:51:06:d4:58:15:ec:5a: 95:96:0a:23:92:e4:64:08:35:c2:fe:61:12:74:17:48:26:b4: d6:02:f2:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1RTMxMTAvBgNVBAUTKDFERUZCMjBBN0E1MUVFMThERDdBRDA2QURBQUM0OTEx RTNFMkY3OTQwHhcNMjYwOTIzMDEwNDUwWhcNMjYwOTMwMDEwNDUwWjAYMRYwFAYD VQQDEw02YWIzMjViMi1iYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKvYld4Tuts4IpTfw13zxDLCl7s37LUmJ1tEY7E2qi3n08HRwssxQdWYJj53 rcVG28G3IHRIWpYbJVPDAfLwpEFAUwhDzZuaLIonENMUe+ISgxtQfkSkvJRPekmf 6qu92aA25SjFRDGDkrBUSejcVMaJ0A/tMEib4zq4QY13Ar1OlG7VHTRib0+hvfsX A2HKDkt02tBtaqy1+3FKg8mXPLQaGjMmS3WskojFLIjr3VXDTBBZ/wcYPVYMG+AZ 2ZSs+Uw3XltUAKGqmFzE874PFYmiqq/JPwBPvOCmDH2sMu+UAhJWSjPDsIsnlfOr d6QGYJv7trGElxUQggqHPCuxdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9f9LrJ cgF95voqK9jHYD6v5tC2MB8GA1UdIwQYMBaAFB3vsgp6Ue4Y3XrQatqsSRHj4veU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODVFMy8xQjEyQTgyNDcw NzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdoamRldEJxMnF4SkVlUGk5 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlLXlDbnBSN2hqZGV0QnEycXhKRWVQaTk1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODVFMy8xQjEyQTgyNDcwNzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdo amRldEJxMnF4SkVlUGk5NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGBECLu3ixBBCAeztwOHqUk4lw+7LeCZ3M6tNj6YQ2E1IVcNcydGc+lt4hzpH YISi2xBnjsagse1pwwgfRgAxJcgNN6Zk94YNUYx2tbF1kkO56d32FOshO+PSIJKG 5CrnwSDtfeSpYCQ96ZdY68K2saoHpQnHwwW2UX82RSVObIprf3YjsC5bId9FaaqD Gm4wBI0M/0zKlOd7abbLyngv6ZE7zm44KNCh4lP15hnaCHxM3c/aZssG6/U0GsXX 4uuKDaNZGOuL08miG0wje2En1QYXy5864uAKFzf6NtPDEMjmJQFRBtRYFexalZYK I5LkZAg1wv5hEnQXSCa01gLy/A== -----END CERTIFICATE-----Generated at Thu Sep 24 19:15:49 2026 by rpki-client