$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json) Hash identifier: 8plPYPP9Y/Z8W08bxFbp1kzRE6glTFDZ7nSG8ARg0ME= Subject key identifier: 87:C1:55:3D:C6:91:AB:19:EB:D5:4B:BA:BC:4D:17:DD:73:F9:5D:92 Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft Manifest number: 0179 Signing time: Fri 25 Sep 2026 04:48:28 +0000 Manifest this update: Fri 25 Sep 2026 04:48:28 +0000 Manifest next update: Fri 02 Oct 2026 04:48:28 +0000 Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: XZc0XXCpZ9oVmdrNMdLUzJF8GHmgIi+4CdKtlB1vQjY=) 2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Validity Not Before: Sep 25 04:48:28 2026 GMT Not After : Oct 2 04:48:28 2026 GMT Subject: CN=6ab5fd1c-5d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:00:93:44:14:20:0c:90:73:7c:a5:6a:e9: 3b:cb:28:b2:8c:fa:26:31:ba:3d:0b:48:28:92:48: cd:e3:4b:ec:34:20:c8:42:b0:84:c3:5b:36:eb:b0: 37:72:32:18:ef:38:b7:cb:78:16:1e:c2:57:e5:41: b6:a3:d3:dc:75:dc:86:8a:12:70:71:ce:a5:87:1d: a6:7c:5b:ba:6b:dc:a2:c5:6d:80:4f:f3:82:22:f1: ff:29:50:7a:17:3f:d8:c0:3b:04:a7:94:d2:0a:8a: 22:db:cc:a3:8c:7d:a1:8b:81:e1:d4:8d:d6:3b:21: a0:d3:1b:b8:a4:2d:37:5a:b5:28:dd:54:c6:dc:3a: 45:f2:42:30:96:5b:2d:35:38:89:b4:54:d5:c5:aa: 64:b8:ab:0e:ce:33:13:22:dd:8c:bc:0c:0d:72:05: 89:48:d2:6d:76:03:f0:c0:61:74:50:ea:68:02:07: 3d:eb:74:11:04:05:30:1a:ae:eb:6a:16:77:2a:e4: 5f:99:ba:d5:3e:ab:18:2a:ef:8e:63:0b:14:9b:63: 95:70:09:e9:76:f4:71:d9:91:e5:e0:0c:31:34:1c: f1:af:6c:58:73:e7:eb:44:44:bb:4e:13:92:1b:a2: b1:58:9c:50:34:c9:21:13:39:d1:9b:6f:49:57:1c: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:55:3D:C6:91:AB:19:EB:D5:4B:BA:BC:4D:17:DD:73:F9:5D:92 X509v3 Authority Key Identifier: keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2e:04:fb:5e:b1:2d:14:cb:41:b0:a2:ea:1b:11:2f:8e:83: 18:57:27:4a:da:5e:e5:57:11:43:62:53:25:08:c6:bf:58:2b: 10:a8:9e:66:5a:d9:ea:09:d7:5d:67:4d:94:ba:a3:9f:51:f1: c8:f3:80:69:11:36:71:0d:24:ca:15:fc:96:99:df:c3:5c:fb: af:44:3f:3a:7a:f9:ca:dd:a8:6a:b7:f7:d2:31:cd:8c:f6:d2: cb:7b:cf:28:83:a3:a4:45:46:a5:97:fe:33:85:1c:f3:47:48: e2:31:2a:0a:62:ba:bd:0f:76:eb:c4:9f:25:75:99:63:c0:dc: b3:b7:27:ff:df:38:a4:4b:79:ef:91:ed:39:5a:26:95:5e:fc: 4c:10:6a:15:fa:11:c4:fe:b7:ad:d7:50:63:6d:47:b7:f2:d9: 60:69:50:5f:39:e2:c3:6d:78:53:00:ca:15:21:ad:9f:b7:d8: ff:8c:10:96:9b:87:1c:7d:b3:c5:2c:a9:84:b8:2f:57:3c:ad: 52:cd:ac:fc:02:b6:c5:4d:81:af:47:6d:4e:32:6a:4b:fe:0b: 1f:5f:17:f4:bc:fb:6a:5c:c4:53:23:55:59:c7:47:62:40:b7: c5:7b:a5:d4:0c:77:22:70:d2:37:15:0d:07:b3:d5:c2:4a:f9: 53:30:3e:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QzMxMTAvBgNVBAUTKDFFNUMxMDdFRkQwM0NGMTNEMjE0QTM5QTZBMkNFOERE QUQzMDQ3MEUwHhcNMjYwOTI1MDQ0ODI4WhcNMjYxMDAyMDQ0ODI4WjAYMRYwFAYD VQQDEw02YWI1ZmQxYy01ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwroAk0QUIAyQc3ylauk7yyiyjPomMbo9C0gokkjN40vsNCDIQrCEw1s267A3 cjIY7zi3y3gWHsJX5UG2o9PcddyGihJwcc6lhx2mfFu6a9yixW2AT/OCIvH/KVB6 Fz/YwDsEp5TSCooi28yjjH2hi4Hh1I3WOyGg0xu4pC03WrUo3VTG3DpF8kIwllst NTiJtFTVxapkuKsOzjMTIt2MvAwNcgWJSNJtdgPwwGF0UOpoAgc963QRBAUwGq7r ahZ3KuRfmbrVPqsYKu+OYwsUm2OVcAnpdvRx2ZHl4AwxNBzxr2xYc+frRES7ThOS G6KxWJxQNMkhEznRm29JVxyJfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfBVT3G kasZ69VLurxNF91z+V2SMB8GA1UdIwQYMBaAFB5cEH79A88T0hSjmmos6N2tMEcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlDMy80NUNDODJDQzgw NjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4UFNGS09hYWl6bzNhMHdS dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsd1FmdjBEenhQU0ZLT2FhaXpvM2Ewd1J3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlDMy80NUNDODJDQzgwNjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4 UFNGS09hYWl6bzNhMHdSdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlC4E+16xLRTLQbCi6hsRL46DGFcnStpe5VcRQ2JTJQjGv1grEKieZlrZ6gnX XWdNlLqjn1HxyPOAaRE2cQ0kyhX8lpnfw1z7r0Q/Onr5yt2oarf30jHNjPbSy3vP KIOjpEVGpZf+M4Uc80dI4jEqCmK6vQ9268SfJXWZY8Dcs7cn/984pEt575HtOVom lV78TBBqFfoRxP63rddQY21Ht/LZYGlQXzniw214UwDKFSGtn7fY/4wQlpuHHH2z xSyphLgvVzytUs2s/AK2xU2Br0dtTjJqS/4LH18X9Lz7alzEUyNVWcdHYkC3xXul 1Ax3InDSNxUNB7PVwkr5UzA+pg== -----END CERTIFICATE-----Generated at Fri Sep 25 19:45:24 2026 by rpki-client