$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: nq6iRbK5+M2SgwSVeMeRuiPz8ePVKrvvgYXtIoK67w4= Subject key identifier: 88:A9:80:0A:AC:2A:51:93:37:88:84:C7:66:9A:3D:5E:92:1F:7A:75 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 0158 Signing time: Wed 23 Sep 2026 05:02:43 +0000 Manifest this update: Wed 23 Sep 2026 05:02:43 +0000 Manifest next update: Wed 30 Sep 2026 05:02:43 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: VqyD57vNV/2NCAKdc2+81FGnxGc8dK9GwlYyYukIKpw=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=) 3: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=) 4: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Sep 23 05:02:43 2026 GMT Not After : Sep 30 05:02:43 2026 GMT Subject: CN=6ab35d73-79db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:d3:c7:29:e7:d6:47:b8:54:55:b5:5b:de: 68:55:20:ac:73:c9:5e:92:0d:18:6f:42:2b:76:c5: bd:ab:97:c6:30:38:e1:ed:de:f6:58:11:f0:f8:ef: 66:e4:a7:a4:97:5e:89:57:88:b0:f1:f1:1b:ee:ee: e7:55:d0:4b:4d:7d:92:dd:a9:08:7d:d5:f3:6c:c5: 71:6c:73:03:e8:4b:ea:40:d8:0a:73:46:e1:20:30: 0a:63:92:bb:6c:11:fc:38:a7:6c:5d:b3:8d:12:27: 54:e7:81:93:20:3d:bf:3c:93:c7:ae:0d:aa:ae:4a: 87:48:67:8d:a1:cf:f1:f3:24:5d:4d:36:7d:b8:6e: 81:0b:86:83:14:3a:84:68:f8:98:90:de:66:39:2c: f6:ce:ce:e8:66:be:d4:53:f4:bf:6f:67:d8:a8:75: 58:6d:1f:d7:88:3b:89:4e:4f:95:70:54:37:e9:f3: 31:6c:dc:fb:ea:e6:3f:1b:38:1f:b7:1b:07:e3:cd: 75:0a:7e:ad:c4:0f:48:df:2f:7e:fa:56:ca:f0:b6: 68:f3:2f:2c:e6:e4:0d:0b:23:f3:77:34:c2:2e:c5: 8c:ef:b9:be:65:b1:61:a0:cd:93:2a:87:dd:b8:bc: 16:c7:c4:15:28:38:d2:cd:07:2e:b3:e6:ba:ad:06: 93:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:80:0A:AC:2A:51:93:37:88:84:C7:66:9A:3D:5E:92:1F:7A:75 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:5d:a5:a8:a4:45:05:ee:22:fd:0e:4b:15:05:d6:a8:80:62: aa:e1:85:81:98:f4:67:98:3d:5f:fc:9e:18:9c:39:79:48:2d: 8d:54:2f:7c:eb:8f:7a:d1:6e:d2:10:00:e3:17:a6:d3:ad:db: 5b:fe:28:3e:19:9e:de:88:f8:f3:82:45:1b:d1:6d:09:55:d3: 0a:37:b0:b1:af:81:81:9f:57:d5:1d:8e:c3:45:33:d6:2f:9e: 56:66:ad:70:1d:88:75:97:64:1f:ff:63:dd:47:b0:36:84:27: 6f:5c:11:16:81:34:09:71:72:f1:57:ef:a2:74:78:ae:5f:8c: 20:c6:35:31:90:94:80:6c:89:ca:25:5c:83:79:2e:63:ec:f7: d4:27:1a:a8:55:8b:77:c6:22:3c:58:c4:f2:21:4d:4e:1f:9a: fa:c2:e9:ac:f9:d8:cf:c8:69:85:50:af:13:f4:39:e5:25:36: 1b:5c:2c:79:85:b7:62:cc:22:c4:5f:e1:f4:58:72:51:09:78: 63:83:ce:9b:db:e8:2f:f7:b6:66:00:9f:3c:2f:5e:7c:9d:7d: 4b:3b:f6:97:8f:b7:00:68:63:a9:40:ab:2a:a8:b0:fb:70:ff: 16:48:44:1f:e6:b0:2e:d3:5d:a0:92:83:d6:13:c7:c9:a4:8f: cf:eb:a5:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjYwOTIzMDUwMjQzWhcNMjYwOTMwMDUwMjQzWjAYMRYwFAYD VQQDEw02YWIzNWQ3My03OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSnTxynn1ke4VFW1W95oVSCsc8lekg0Yb0IrdsW9q5fGMDjh7d72WBHw+O9m 5Kekl16JV4iw8fEb7u7nVdBLTX2S3akIfdXzbMVxbHMD6EvqQNgKc0bhIDAKY5K7 bBH8OKdsXbONEidU54GTID2/PJPHrg2qrkqHSGeNoc/x8yRdTTZ9uG6BC4aDFDqE aPiYkN5mOSz2zs7oZr7UU/S/b2fYqHVYbR/XiDuJTk+VcFQ36fMxbNz76uY/Gzgf txsH4811Cn6txA9I3y9++lbK8LZo8y8s5uQNCyPzdzTCLsWM77m+ZbFhoM2TKofd uLwWx8QVKDjSzQcus+a6rQaTDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIipgAqs KlGTN4iEx2aaPV6SH3p1MB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuV2lqKRFBe4i/Q5LFQXWqIBiquGFgZj0Z5g9X/yeGJw5eUgtjVQvfOuPetFu 0hAA4xem063bW/4oPhme3oj484JFG9FtCVXTCjewsa+BgZ9X1R2Ow0Uz1i+eVmat cB2IdZdkH/9j3UewNoQnb1wRFoE0CXFy8VfvonR4rl+MIMY1MZCUgGyJyiVcg3ku Y+z31CcaqFWLd8YiPFjE8iFNTh+a+sLprPnYz8hphVCvE/Q55SU2G1wseYW3Yswi xF/h9FhyUQl4Y4POm9voL/e2ZgCfPC9efJ19Szv2l4+3AGhjqUCrKqiw+3D/FkhE H+awLtNdoJKD1hPHyaSPz+ulcQ== -----END CERTIFICATE-----Generated at Thu Sep 24 12:21:04 2026 by rpki-client