$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: fLJSh8pFHcvEhtmCbhFaPFFEHeTrEp6GpNeVjpE7Ptg= Subject key identifier: 3A:FA:0F:FA:22:5E:02:F3:B6:70:AB:D3:27:EB:32:C8:87:9D:12:14 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0493 Signing time: Thu 24 Sep 2026 23:54:28 +0000 Manifest this update: Thu 24 Sep 2026 23:54:27 +0000 Manifest next update: Thu 01 Oct 2026 23:54:27 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: olib36bMC/l1T0mZWUJs64C8NrtMRFms2u+eNY/ikho=) 2: 06FA5A64774011F0BE2D3736C4F9AE02.roa (hash: cl/4/5b1299P9Rw9mt6jtdWymjlwHiUICZ1E9aWqHuM=) 3: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg=) 4: F570D764773F11F09FC02036C4F9AE02.roa (hash: gvPu45DyIqZBu1jQxEhjgfSh962TYPXbAHfGb3N8kR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Sep 24 23:54:27 2026 GMT Not After : Oct 1 23:54:27 2026 GMT Subject: CN=6ab5b834-f346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:64:63:ce:c6:8e:54:59:83:33:af:5a:62: 17:f4:a6:52:08:49:bc:84:6f:92:83:03:91:cd:e9: 74:b6:df:5a:5c:bd:8d:6c:58:35:fc:f7:b9:66:fc: 9d:77:aa:44:dd:81:6a:b5:39:1b:24:da:dc:e7:93: a7:a4:ca:d8:d1:eb:47:6d:87:7c:7c:5b:7d:ad:9e: 37:a6:d0:4f:73:11:88:1f:5b:9a:36:61:16:71:b9: 91:b4:a9:e7:cf:24:80:1e:25:d7:a1:94:64:c3:61: 13:b7:ed:81:f0:7e:fd:56:ed:91:18:f7:f1:e0:9b: 6f:35:be:7a:63:f0:44:ac:d4:f4:42:e4:3f:67:a4: d7:e9:dc:f2:f9:da:ce:ae:6b:8a:1d:c2:21:6b:af: 2f:1b:d6:34:da:df:a4:2f:10:70:3f:02:8f:e6:c2: 7d:80:0b:f6:3d:53:33:9a:ed:e2:c2:c8:61:c6:d6: b4:58:e8:50:e4:13:35:56:0c:58:01:91:d8:a1:28: 19:fc:86:2e:44:98:1e:1a:96:cc:ac:1f:40:2e:2c: 2b:e4:71:52:83:12:69:ed:83:5b:0e:ad:8c:c9:d4: c0:c9:75:16:c4:41:70:94:78:42:6b:4b:4e:89:4d: 8b:93:7f:32:9e:58:fb:2f:97:fd:b4:64:ee:f2:48: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FA:0F:FA:22:5E:02:F3:B6:70:AB:D3:27:EB:32:C8:87:9D:12:14 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:21:51:2c:db:7b:fb:63:6b:0e:74:b0:f7:67:e5:3a:3d:ff: 34:ce:b8:da:7f:8a:5d:a7:25:73:bb:72:a6:3a:1a:85:df:7f: c0:4b:88:dd:7f:c7:04:5c:7e:ff:1e:07:f0:9c:f3:1c:15:d3: 4a:80:a3:f0:98:2a:f0:2f:7f:ac:33:98:d9:ee:ae:2a:36:bd: db:c9:4f:16:e3:1d:0e:fc:6b:1a:55:2c:d0:6e:90:7b:1f:00: 09:bc:4a:f2:73:af:c0:42:b7:04:89:50:4d:f3:cc:ee:4b:36: fe:20:7f:67:40:d2:4d:cb:5d:37:4d:e7:ff:1c:2f:e0:c2:fc: a3:1d:d4:01:8d:db:87:b9:cf:10:e7:89:cf:23:0f:46:29:15: 67:02:46:15:d8:f0:fb:47:c7:ee:8a:40:a8:ba:4b:f0:92:8e: 00:e8:bf:64:9e:69:d9:1e:8f:30:c6:c5:3a:5e:8c:4a:cb:c2: 0b:28:41:2d:1f:fb:2e:b9:64:39:16:17:7b:16:7d:76:bb:5f: 29:b6:a3:93:b4:a8:06:dc:ab:b1:de:5d:e2:77:82:d1:0c:7b: 5c:ca:60:6d:e5:e2:6d:4b:b4:d9:1c:3e:23:a8:d0:9a:bf:26: be:5b:73:88:58:7e:e2:4f:86:30:79:77:c7:54:76:c5:e4:fb: be:21:5b:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYwOTI0MjM1NDI3WhcNMjYxMDAxMjM1NDI3WjAYMRYwFAYD VQQDEw02YWI1YjgzNC1mMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRZkY87GjlRZgzOvWmIX9KZSCEm8hG+SgwORzel0tt9aXL2NbFg1/Pe5Zvyd d6pE3YFqtTkbJNrc55OnpMrY0etHbYd8fFt9rZ43ptBPcxGIH1uaNmEWcbmRtKnn zySAHiXXoZRkw2ETt+2B8H79Vu2RGPfx4JtvNb56Y/BErNT0QuQ/Z6TX6dzy+drO rmuKHcIha68vG9Y02t+kLxBwPwKP5sJ9gAv2PVMzmu3iwshhxta0WOhQ5BM1VgxY AZHYoSgZ/IYuRJgeGpbMrB9ALiwr5HFSgxJp7YNbDq2MydTAyXUWxEFwlHhCa0tO iU2Lk38ynlj7L5f9tGTu8khCQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDr6D/oi XgLztnCr0yfrMsiHnRIUMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASiFRLNt7+2NrDnSw92flOj3/NM642n+KXaclc7typjoahd9/wEuI3X/HBFx+ /x4H8JzzHBXTSoCj8Jgq8C9/rDOY2e6uKja928lPFuMdDvxrGlUs0G6Qex8ACbxK 8nOvwEK3BIlQTfPM7ks2/iB/Z0DSTctdN03n/xwv4ML8ox3UAY3bh7nPEOeJzyMP RikVZwJGFdjw+0fH7opAqLpL8JKOAOi/ZJ5p2R6PMMbFOl6MSsvCCyhBLR/7Lrlk ORYXexZ9drtfKbajk7SoBtyrsd5d4neC0Qx7XMpgbeXibUu02Rw+I6jQmr8mvltz iFh+4k+GMHl3x1R2xeT7viFbcQ== -----END CERTIFICATE-----Generated at Fri Sep 25 03:40:33 2026 by rpki-client