$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: Jwvr/iXYEVW83LPjXqy8zdjbmNyQxSDobCEq99S7jqs= Subject key identifier: 6B:1B:23:AC:5C:77:9E:8D:93:A7:14:85:F0:6E:03:7B:3B:23:FD:13 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0290 Signing time: Wed 23 Sep 2026 01:42:14 +0000 Manifest this update: Wed 23 Sep 2026 01:42:14 +0000 Manifest next update: Wed 30 Sep 2026 01:42:14 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: L/vZwAKUo1C1s/7CbB9qZ4Yd8CEhygbyi2DvhUyLiY4=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Sep 23 01:42:14 2026 GMT Not After : Sep 30 01:42:14 2026 GMT Subject: CN=6ab32e76-3b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:11:38:67:6b:38:23:a5:32:8e:18:e5:8e: 2f:d0:eb:31:bc:0d:10:a9:1d:2d:09:ea:e3:33:5b: 5b:77:1b:87:b4:9a:c7:4d:23:60:03:27:16:1f:26: b5:af:f7:0c:7b:3f:ac:de:fd:d5:20:81:38:e6:9b: 0c:39:fa:41:8c:52:c7:84:0b:91:2e:f6:0b:f3:28: e1:d1:8e:c3:4c:20:fa:26:19:dc:7f:3c:91:07:ec: c1:da:e3:bc:73:3d:75:64:94:e4:30:98:a1:9f:83: c8:ab:c8:b0:c9:54:90:a7:ba:91:59:8a:c4:12:ff: 52:94:f8:2d:29:13:c2:54:0b:86:bf:36:a2:f9:44: 44:7c:9f:bd:71:34:b5:a4:ff:07:e8:64:b1:21:f0: a1:5a:ed:ab:e9:85:ae:b3:4b:7a:56:f8:d6:e8:18: d1:dd:2d:ff:aa:24:f9:85:d5:63:92:7a:f0:4a:ec: 08:86:3a:05:06:c5:a2:0d:16:ef:ae:c5:5b:a1:9d: 58:4a:4b:65:81:56:03:02:92:05:9c:95:ba:2c:80: 29:5a:80:85:27:e2:f2:a7:14:df:27:24:97:fb:3c: 82:4b:fe:3a:ed:05:49:87:3c:05:dc:b9:cb:c5:51: 33:50:27:9e:57:09:d9:f8:79:03:5b:83:65:6e:fa: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:23:AC:5C:77:9E:8D:93:A7:14:85:F0:6E:03:7B:3B:23:FD:13 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:68:ee:27:9b:20:08:29:4e:b3:29:a1:7b:92:31:6a:c1:70: a5:8c:a5:c8:02:a9:fe:af:88:92:39:95:af:bd:ce:93:06:35: 55:aa:12:0c:10:34:5d:68:45:3b:73:50:0a:b0:8d:3e:a8:ec: 0b:cd:bb:03:4c:31:96:88:1d:8a:4b:73:f5:7b:18:3e:e0:b9: 08:82:75:8c:a6:0c:18:e1:6d:c9:53:b8:7e:31:e4:61:e4:bd: 84:18:76:98:22:14:ef:c7:8a:9c:b0:72:13:64:a0:1e:20:3c: 20:ab:73:6b:cf:b5:4a:6d:68:33:b2:3e:5a:60:52:7a:6b:05: a5:61:84:4d:39:71:a8:60:5c:68:cc:29:53:be:cd:51:45:4a: b4:9a:5a:0d:00:a2:13:2b:e8:62:62:66:a7:65:27:d1:ba:81: 43:7a:3e:fb:8a:08:f4:60:63:5c:81:c1:ac:29:ba:d0:9e:10: 6f:54:70:33:8f:4e:41:80:f6:73:16:57:81:d3:12:66:0f:09: 04:01:bb:90:6b:8e:da:fd:55:21:54:24:27:73:d0:92:7f:2f: 89:46:6e:f9:6b:9b:03:4a:4a:ed:56:b5:64:50:de:40:e1:48: 69:7b:35:70:2a:92:5b:a8:ac:72:7e:90:44:61:98:96:2f:aa: b9:74:bf:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwOTIzMDE0MjE0WhcNMjYwOTMwMDE0MjE0WjAYMRYwFAYD VQQDEw02YWIzMmU3Ni0zYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ecROGdrOCOlMo4Y5Y4v0OsxvA0QqR0tCerjM1tbdxuHtJrHTSNgAycWHya1 r/cMez+s3v3VIIE45psMOfpBjFLHhAuRLvYL8yjh0Y7DTCD6JhncfzyRB+zB2uO8 cz11ZJTkMJihn4PIq8iwyVSQp7qRWYrEEv9SlPgtKRPCVAuGvzai+UREfJ+9cTS1 pP8H6GSxIfChWu2r6YWus0t6VvjW6BjR3S3/qiT5hdVjknrwSuwIhjoFBsWiDRbv rsVboZ1YSktlgVYDApIFnJW6LIApWoCFJ+LypxTfJySX+zyCS/467QVJhzwF3LnL xVEzUCeeVwnZ+HkDW4NlbvpHBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsbI6xc d56Nk6cUhfBuA3s7I/0TMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJWjuJ5sgCClOsymhe5IxasFwpYylyAKp/q+IkjmVr73OkwY1VaoSDBA0XWhF O3NQCrCNPqjsC827A0wxlogdiktz9XsYPuC5CIJ1jKYMGOFtyVO4fjHkYeS9hBh2 mCIU78eKnLByE2SgHiA8IKtza8+1Sm1oM7I+WmBSemsFpWGETTlxqGBcaMwpU77N UUVKtJpaDQCiEyvoYmJmp2Un0bqBQ3o++4oI9GBjXIHBrCm60J4Qb1RwM49OQYD2 cxZXgdMSZg8JBAG7kGuO2v1VIVQkJ3PQkn8viUZu+WubA0pK7Va1ZFDeQOFIaXs1 cCqSW6iscn6QRGGYli+quXS/4g== -----END CERTIFICATE-----Generated at Thu Sep 24 02:46:48 2026 by rpki-client