$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json) Hash identifier: JiOw6Yji0QIJMMPkI6nwtYtqjhuAQA9kpT+t3apIzFk= Subject key identifier: 1F:18:D1:53:26:06:A8:20:47:96:EC:16:C0:37:7A:3E:13:81:44:23 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft Manifest number: 0A3B Signing time: Sat 26 Sep 2026 19:49:56 +0000 Manifest this update: Sat 26 Sep 2026 19:49:56 +0000 Manifest next update: Sat 03 Oct 2026 19:49:56 +0000 Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: 2UcJg7Wak/Pxh9G+LM2H1COgz+RUpmrDxm67gTSHFKc=) 2: FA57B70A706F11F1A66ABD9E76A30FBC.roa (hash: 5UlaJz5G/bidOHbT2NbkpzH8+pUHMJEGRJQ4pdfZDCc=) 3: 4D0CE5E2707011F1821CCDE576A30FBC.roa (hash: k8rAQNqq8sWrzsdiI+Wr1tNTCkuJZjz1VkVrhy0zp1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Sep 26 19:49:56 2026 GMT Not After : Oct 3 19:49:56 2026 GMT Subject: CN=6ab821e4-a97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:38:25:aa:8f:40:1b:a2:c4:d7:2b:31:2d: 46:72:fc:80:bb:85:c0:4f:48:fb:62:7a:a8:9d:c6: 76:d7:72:14:2b:a2:93:34:31:29:d4:8d:8b:3a:63: 85:98:20:41:61:cd:91:e2:80:10:95:ad:3e:14:e1: f2:a1:4c:7d:d4:e9:ae:3b:88:8c:e3:8e:7b:1d:79: 4b:47:69:7c:cb:35:2d:20:cf:2f:77:89:96:d6:9a: 2f:2d:ff:c7:b7:85:bd:a3:ad:03:d8:88:fc:9b:1f: 67:06:be:ed:e0:e1:ff:1b:cd:d4:03:ef:1e:42:c4: c0:39:bd:6c:92:82:49:18:28:cf:07:f5:05:ef:2e: ef:fb:82:1e:93:c9:b4:4a:49:97:43:0b:2c:18:e9: e7:6c:07:e8:19:4c:0d:f6:77:1f:bf:e6:4e:1b:7a: bf:63:53:0f:66:82:a9:50:14:37:fd:44:51:ea:18: 11:9e:65:67:d8:01:c3:9d:2f:33:08:2c:4f:13:b7: 33:ce:24:17:9a:aa:37:eb:b0:91:7c:46:3c:fb:a3: 61:e8:61:7b:f6:d8:df:a3:60:03:ae:a5:57:a0:1c: 20:74:49:8a:e9:c2:e4:d3:1d:24:6e:6e:d8:4e:fc: f1:8a:f3:c9:39:a5:3f:12:38:26:aa:d6:aa:85:ed: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:D1:53:26:06:A8:20:47:96:EC:16:C0:37:7A:3E:13:81:44:23 X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d6:13:a5:fb:45:30:9e:c8:39:b3:70:c3:2e:64:62:d9:8d: ca:7b:f4:6b:1a:77:50:0e:e4:ea:c6:22:7e:49:5f:84:17:77: 1e:fe:c2:8a:80:fa:54:9f:b6:28:ed:1e:a9:06:dc:58:af:f0: b8:1a:87:bf:47:ba:6a:c8:27:ee:ac:d4:83:d5:f7:55:95:e9: e9:74:0e:97:67:77:24:1f:de:01:84:ca:b1:23:d4:9e:2f:f0: 31:11:e5:f5:55:82:94:28:13:92:d6:f8:82:cf:01:97:ee:9b: 3e:af:a5:b8:fe:48:bb:98:05:64:15:a6:80:9c:2e:08:ca:3d: ba:1d:c2:48:8c:52:f2:b5:14:a7:f1:fa:64:ac:47:ea:6d:e3: 40:34:4c:b4:3f:3e:63:6a:40:95:6b:fd:63:ac:46:1f:07:f3: 41:35:35:41:f9:03:89:83:4b:f8:21:bf:8e:c5:08:39:8b:f0: 8d:cf:5a:ae:db:db:a7:c9:03:b9:30:f0:02:4f:3d:e8:2d:5a: 45:d8:08:76:b8:8b:ff:64:e5:42:4a:6f:9a:30:1a:a1:76:f9: f4:1e:9c:ee:58:d3:71:cd:c1:05:5b:67:24:f3:7b:42:96:6e: 55:6e:d7:2c:25:75:70:1f:d4:ee:d5:4f:b0:b5:91:bc:ab:1a: 00:30:fc:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjYwOTI2MTk0OTU2WhcNMjYxMDAzMTk0OTU2WjAYMRYwFAYD VQQDEw02YWI4MjFlNC1hOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOQ4JaqPQBuixNcrMS1GcvyAu4XAT0j7YnqoncZ213IUK6KTNDEp1I2LOmOF mCBBYc2R4oAQla0+FOHyoUx91OmuO4iM4457HXlLR2l8yzUtIM8vd4mW1povLf/H t4W9o60D2Ij8mx9nBr7t4OH/G83UA+8eQsTAOb1skoJJGCjPB/UF7y7v+4Iek8m0 SkmXQwssGOnnbAfoGUwN9ncfv+ZOG3q/Y1MPZoKpUBQ3/URR6hgRnmVn2AHDnS8z CCxPE7czziQXmqo367CRfEY8+6Nh6GF79tjfo2ADrqVXoBwgdEmK6cLk0x0kbm7Y TvzxivPJOaU/Ejgmqtaqhe3mJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8Y0VMm BqggR5bsFsA3ej4TgUQjMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0NFQS80MDZFRjE3OEEwQzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJM QzZKQjBVX2F3T3hMVGtyY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAidYTpftFMJ7IObNwwy5kYtmNynv0axp3UA7k6sYifklfhBd3Hv7CioD6VJ+2 KO0eqQbcWK/wuBqHv0e6asgn7qzUg9X3VZXp6XQOl2d3JB/eAYTKsSPUni/wMRHl 9VWClCgTktb4gs8Bl+6bPq+luP5Iu5gFZBWmgJwuCMo9uh3CSIxS8rUUp/H6ZKxH 6m3jQDRMtD8+Y2pAlWv9Y6xGHwfzQTU1QfkDiYNL+CG/jsUIOYvwjc9artvbp8kD uTDwAk896C1aRdgIdriL/2TlQkpvmjAaoXb59B6c7ljTcc3BBVtnJPN7QpZuVW7X LCV1cB/U7tVPsLWRvKsaADD8ww== -----END CERTIFICATE-----Generated at Sun Sep 27 10:35:19 2026 by rpki-client