$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft File: HKNtz8PAQzP4g7g18sjd0CXVQQY.mft (raw, json) Hash identifier: bL2j7LzUv5qEVUvQMREukWzxdXHTqKjJzUvvv5SRCLE= Subject key identifier: 3D:C8:6B:D9:C5:78:B2:6D:11:97:1D:86:9E:8A:8B:18:9E:6E:75:F1 Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 Certificate issuer: /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft Manifest number: F3 Signing time: Fri 09 Oct 2026 07:09:37 +0000 Manifest this update: Fri 09 Oct 2026 07:09:36 +0000 Manifest next update: Fri 16 Oct 2026 07:09:36 +0000 Files and hashes: 1: HKNtz8PAQzP4g7g18sjd0CXVQQY.crl (hash: 26nmgyPBP+YZqKSv93jF8V1tFmPQcaqtLCQmZHJUUn0=) 2: 3A63E0587B3811F1B145FA7A90A30FBC.roa (hash: D6CqpvXjHKtJoDkgVXf1XqX7i1a7t5xANjRIRt/3rMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Validity Not Before: Oct 9 07:09:36 2026 GMT Not After : Oct 16 07:09:36 2026 GMT Subject: CN=6ac89330-39aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:93:ea:0b:84:3f:97:01:9f:aa:67:a1:29:ea: 46:d7:5e:a9:e3:d3:3e:3f:dc:35:e4:ff:23:a3:af: 7b:92:5d:32:d2:7f:6f:7e:b2:60:ef:ed:44:01:8a: 07:e7:5e:a3:8f:1c:12:d8:4b:e7:dd:ff:ed:0f:6a: 68:94:24:dc:00:a9:a9:7f:ac:08:f6:a8:ac:6f:4d: 8f:34:6a:22:24:dd:fa:6b:e2:32:44:df:a0:0e:6e: ec:fb:01:b0:76:30:f9:24:86:ef:8a:f9:96:0e:9e: 78:8b:db:31:3b:d8:5d:01:e4:0c:aa:a6:a4:a8:31: 0a:01:21:d1:3c:76:cb:90:fe:1a:63:7e:1f:14:79: a5:7c:4e:83:ee:73:b6:aa:5b:42:51:6a:38:52:34: 05:de:ec:c2:6d:52:70:f3:79:f9:df:dd:b3:1c:c7: 9c:1b:8a:40:25:e0:0e:0c:84:6f:0e:ae:12:36:44: 7d:43:2e:ce:ef:43:00:89:19:04:3a:6a:2e:29:7f: 52:66:d4:37:a5:a8:a5:55:4c:dd:f3:fb:8a:8f:ba: 2d:36:72:30:96:5d:07:03:b7:f1:10:fb:34:71:7b: fe:d0:de:5c:7d:eb:30:0a:5b:07:7a:a0:ee:eb:27: 9b:ef:02:72:5c:65:d1:f7:97:ec:41:83:10:de:68: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C8:6B:D9:C5:78:B2:6D:11:97:1D:86:9E:8A:8B:18:9E:6E:75:F1 X509v3 Authority Key Identifier: keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cb:5b:e2:d3:0e:a4:80:57:af:5e:ff:e4:21:8a:8a:c9:2d: 6b:1f:1a:6e:a3:bd:b4:eb:f7:35:de:37:b7:f7:7a:59:2e:f1: a0:d7:a6:80:0f:6d:1a:32:33:25:30:f4:d7:e0:d1:40:67:40: f4:65:d5:df:25:a9:39:2c:ba:f0:c5:1e:96:f5:43:18:7b:d2: 56:e4:28:d1:9e:91:f1:70:16:41:57:15:0b:7b:98:10:31:13: ed:d3:3b:88:ea:36:97:31:12:aa:c1:51:19:cc:d0:ce:d7:bf: 48:14:b0:73:e8:16:f9:79:40:d0:ff:65:fe:03:27:5d:1d:06: cb:7a:ac:98:aa:ac:33:d5:91:94:05:b5:b0:41:c2:cd:46:2f: ee:1a:cc:be:b2:62:ed:0c:38:d4:9a:e0:2a:76:34:ea:17:32: 58:26:48:ff:6f:d7:56:4f:bb:6d:bc:c0:db:c4:5a:a3:c0:f1: 67:82:2f:fc:92:33:3e:b1:93:36:e3:dc:62:41:ac:8a:d5:94: b2:45:1f:ab:9d:b6:89:a3:9f:98:7a:b9:6c:c2:6b:04:e6:f9: 0a:9a:68:84:9b:36:19:b9:ae:89:ed:70:10:5f:40:7f:8e:f0: f5:c8:55:22:75:57:b9:56:a0:5f:0f:ec:67:8b:64:c7:f5:bf: c2:61:2f:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJGNTkxMTAvBgNVBAUTKDFDQTM2RENGQzNDMDQzMzNGODgzQjgzNUYyQzhEREQw MjVENTQxMDYwHhcNMjYxMDA5MDcwOTM2WhcNMjYxMDE2MDcwOTM2WjAYMRYwFAYD VQQDEw02YWM4OTMzMC0zOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5PqC4Q/lwGfqmehKepG116p49M+P9w15P8jo697kl0y0n9vfrJg7+1EAYoH 516jjxwS2Evn3f/tD2polCTcAKmpf6wI9qisb02PNGoiJN36a+IyRN+gDm7s+wGw djD5JIbvivmWDp54i9sxO9hdAeQMqqakqDEKASHRPHbLkP4aY34fFHmlfE6D7nO2 qltCUWo4UjQF3uzCbVJw83n5392zHMecG4pAJeAODIRvDq4SNkR9Qy7O70MAiRkE OmouKX9SZtQ3pailVUzd8/uKj7otNnIwll0HA7fxEPs0cXv+0N5cfeswClsHeqDu 6yeb7wJyXGXR95fsQYMQ3mghIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3Ia9nF eLJtEZcdhp6KixiebnXxMB8GA1UdIwQYMBaAFByjbc/DwEMz+IO4NfLI3dAl1UEG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkY1OS8wNTI2RDYyRTYy MzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9IS050ejhQQVF6UDRnN2cxOHNqZDBDWFZR UVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hLTnR6OFBBUXpQNGc3ZzE4c2pkMENYVlFRWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkY1OS8wNTI2RDYyRTYyMzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9IS050ejhQQVF6 UDRnN2cxOHNqZDBDWFZRUVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA8tb4tMOpIBXr17/5CGKisktax8abqO9tOv3Nd43t/d6WS7xoNemgA9tGjIz JTD01+DRQGdA9GXV3yWpOSy68MUelvVDGHvSVuQo0Z6R8XAWQVcVC3uYEDET7dM7 iOo2lzESqsFRGczQzte/SBSwc+gW+XlA0P9l/gMnXR0Gy3qsmKqsM9WRlAW1sEHC zUYv7hrMvrJi7Qw41JrgKnY06hcyWCZI/2/XVk+7bbzA28Rao8DxZ4Iv/JIzPrGT NuPcYkGsitWUskUfq522iaOfmHq5bMJrBOb5CppohJs2Gbmuie1wEF9Af47w9chV InVXuVagXw/sZ4tkx/W/wmEvoA== -----END CERTIFICATE-----Generated at Sun Oct 11 07:08:21 2026 by rpki-client