$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft File: HQSsXQPY72rEMd4aeq57aHaBtjY.mft (raw, json) Hash identifier: C/JSzrZWvVCfd5fcxGJ66viG56hC+Xv+Gj9Q+ZGc4hk= Subject key identifier: EC:54:83:B0:1A:9B:C7:FC:18:96:6C:9A:75:0D:B4:28:83:46:8D:7F Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36 Certificate issuer: /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft Manifest number: 08C9 Signing time: Thu 24 Sep 2026 20:27:18 +0000 Manifest this update: Thu 24 Sep 2026 20:27:18 +0000 Manifest next update: Thu 01 Oct 2026 20:27:18 +0000 Files and hashes: 1: HQSsXQPY72rEMd4aeq57aHaBtjY.crl (hash: i6seZxNSB1Z3c9Bvu6Kl1O9TcQbQPaYGnOQblfkPcoQ=) 2: 66EE9D94152511ECAD055780C4F9AE02.roa (hash: tHkWBsWt7zg/nHnhpSyeoXJLDbxfBsQ1sUqpG3dRgvY=) 3: 111E53B6152811ECB2C0B70BC4F9AE02.roa (hash: y/9w6PkfJPP5x9xoypT09kJGazem+FcljWHoJZSxFMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A2D, serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636 Validity Not Before: Sep 24 20:27:18 2026 GMT Not After : Oct 1 20:27:18 2026 GMT Subject: CN=6ab587a6-2155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:ab:0d:57:d4:2b:a0:5c:14:b5:b3:ca:ae: d3:3e:d1:5b:5d:7b:cf:e7:6d:65:7e:8c:b4:f8:a6: da:1c:55:64:31:02:4d:43:0b:97:e2:27:48:7f:ef: 88:63:e5:fc:ab:e0:30:7f:7b:5d:50:53:7e:ec:dd: 4f:49:26:6b:7b:0f:bb:ac:f6:bb:c7:dc:68:8c:d9: a4:71:d5:c7:38:98:50:2e:b4:f0:22:4f:a5:59:0e: 24:f3:84:06:08:7f:9c:27:8c:55:59:81:fb:5a:4d: 64:73:7e:b3:f3:58:40:72:8f:bf:b9:bb:86:c8:bb: 23:34:6b:5a:7f:60:51:19:3b:75:ea:55:a8:7c:cc: fa:1e:50:35:29:51:15:38:e5:a8:f5:bc:aa:bc:dc: e4:04:5a:17:7c:14:62:19:fd:67:00:06:14:ee:f4: 07:cc:18:25:d0:d5:c2:a1:91:ce:21:ea:ac:ca:1d: d7:fb:cb:ca:94:a2:e9:63:c7:bc:28:39:cd:22:7c: 12:b6:bc:26:a0:5b:84:ce:72:ac:3d:fc:c1:fd:77: 6a:ee:ce:58:96:ff:ef:d1:15:5d:09:ae:b6:14:6a: 35:96:d0:2b:df:5e:2e:15:72:48:1b:59:d3:88:f4: 0e:69:6d:24:6f:d2:26:54:48:a4:0d:0e:ad:6b:ab: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:54:83:B0:1A:9B:C7:FC:18:96:6C:9A:75:0D:B4:28:83:46:8D:7F X509v3 Authority Key Identifier: keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a3:0d:ae:41:8d:29:e3:4c:4c:a1:4c:09:5c:8c:1a:96:7e: 42:c7:ea:89:94:26:55:bd:f5:70:0a:0a:d9:e8:90:11:ae:49: 1e:04:ab:f8:6d:9b:ba:c9:f7:c6:99:bc:86:32:fa:ec:9b:cd: 84:42:41:a1:e9:bb:9b:92:73:79:8b:b4:49:a2:c4:2f:83:53: 38:d1:76:bc:43:f5:91:13:65:77:16:07:35:67:21:0b:fe:5d: 96:5f:6c:f6:b9:d8:99:d0:47:2a:34:2e:c0:24:24:bc:89:97: b4:0c:40:ec:f1:d8:2e:b6:03:b0:b6:90:d1:62:ec:9c:71:33: ef:c4:62:68:7c:24:ff:0a:ff:22:16:02:60:13:05:60:a9:4c: 00:2b:b6:09:fd:3f:22:a3:9a:16:af:a1:bb:90:c9:65:e8:a5: a1:01:ad:51:3e:d6:e9:06:2e:e2:42:2e:95:44:51:97:ff:1d: a7:54:e2:ba:a9:b9:6c:15:d5:15:ef:b7:73:05:e7:f6:94:37: fe:54:0c:77:58:89:59:ff:19:49:a6:1c:c9:4c:df:6d:38:3b: 60:4f:03:4b:4f:d3:cc:2f:30:93:1b:62:e4:da:43:19:e6:89: e9:29:71:50:02:af:a2:81:e1:59:da:a4:3f:68:ea:c5:1c:30: 98:10:93:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMkQxMTAvBgNVBAUTKDFEMDRBQzVEMDNEOEVGNkFDNDMxREUxQTdBQUU3QjY4 NzY4MUI2MzYwHhcNMjYwOTI0MjAyNzE4WhcNMjYxMDAxMjAyNzE4WjAYMRYwFAYD VQQDEw02YWI1ODdhNi0yMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriGrDVfUK6BcFLWzyq7TPtFbXXvP521lfoy0+KbaHFVkMQJNQwuX4idIf++I Y+X8q+Awf3tdUFN+7N1PSSZrew+7rPa7x9xojNmkcdXHOJhQLrTwIk+lWQ4k84QG CH+cJ4xVWYH7Wk1kc36z81hAco+/ubuGyLsjNGtaf2BRGTt16lWofMz6HlA1KVEV OOWo9byqvNzkBFoXfBRiGf1nAAYU7vQHzBgl0NXCoZHOIeqsyh3X+8vKlKLpY8e8 KDnNInwStrwmoFuEznKsPfzB/Xdq7s5Ylv/v0RVdCa62FGo1ltAr314uFXJIG1nT iPQOaW0kb9ImVEikDQ6ta6vm5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxUg7Aa m8f8GJZsmnUNtCiDRo1/MB8GA1UdIwQYMBaAFB0ErF0D2O9qxDHeGnque2h2gbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEyRC9EQTQ2NjA5QUY3 QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcyckVNZDRhZXE1N2FIYUJ0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRU3NYUVBZNzJyRU1kNGFlcTU3YUhhQnRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEyRC9EQTQ2NjA5QUY3QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcy ckVNZDRhZXE1N2FIYUJ0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAKMNrkGNKeNMTKFMCVyMGpZ+QsfqiZQmVb31cAoK2eiQEa5JHgSr+G2busn3 xpm8hjL67JvNhEJBoem7m5JzeYu0SaLEL4NTONF2vEP1kRNldxYHNWchC/5dll9s 9rnYmdBHKjQuwCQkvImXtAxA7PHYLrYDsLaQ0WLsnHEz78RiaHwk/wr/IhYCYBMF YKlMACu2Cf0/IqOaFq+hu5DJZeiloQGtUT7W6QYu4kIulURRl/8dp1Tiuqm5bBXV Fe+3cwXn9pQ3/lQMd1iJWf8ZSaYcyUzfbTg7YE8DS0/TzC8wkxti5NpDGeaJ6Slx UAKvooHhWdqkP2jqxRwwmBCTTQ== -----END CERTIFICATE-----Generated at Sat Sep 26 12:14:37 2026 by rpki-client