$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: 0QxFj+p/+JQAVVvj4bz7yaM+HPz/Z/m+Nqrn1rrsosQ= Subject key identifier: 59:CB:33:87:A2:87:39:D7:77:7D:6D:5E:97:25:B6:9C:73:11:5D:77 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0277 Signing time: Fri 09 Oct 2026 02:35:10 +0000 Manifest this update: Fri 09 Oct 2026 02:35:09 +0000 Manifest next update: Fri 16 Oct 2026 02:35:09 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: qBx0VDX3JwoNnmGbGpEyRQPCQiuomnZp799KPw29p/E=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) 3: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) 4: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Oct 9 02:35:09 2026 GMT Not After : Oct 16 02:35:09 2026 GMT Subject: CN=6ac852de-6f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:5a:94:23:f3:33:8f:da:52:15:82:82:8b: 85:64:d8:b8:79:0b:a3:1e:24:7e:66:b3:49:de:89: a0:41:1a:5c:b8:cc:3a:c7:7a:5d:21:0d:9e:36:31: 63:3d:23:2c:3b:2b:b0:47:3c:0c:30:d9:db:71:25: b6:92:6b:fa:be:5d:bb:56:63:6c:41:0d:6e:1b:b5: d1:38:67:96:55:93:53:5f:55:57:10:01:34:ff:d0: 9b:79:39:22:ee:b6:61:4c:6f:24:05:91:5d:56:de: 83:8b:25:82:9e:02:f7:db:cc:e7:ac:cc:48:19:81: 85:fd:f1:4d:07:6c:23:62:df:7f:b1:89:34:04:58: 4a:71:3b:b6:29:d5:76:1f:bf:66:dc:9f:93:08:9d: 1b:fa:66:3a:ce:5c:e4:5a:17:14:ce:f6:b2:6e:b1: a8:0c:4c:c2:05:25:08:18:63:ef:7d:9f:37:78:a6: f2:61:5f:ee:69:da:df:6d:b9:53:32:cc:f5:e3:6e: 6c:9e:e9:e7:2c:24:3b:fb:95:cf:be:a9:4f:03:98: 88:d3:3c:b8:db:23:69:19:39:2d:35:f9:ea:94:47: e9:b2:2e:4a:d8:de:e5:e2:23:ba:fe:ea:ee:59:61: 80:5f:f8:e8:cf:cd:ab:af:c4:95:a9:b2:4d:32:51: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:33:87:A2:87:39:D7:77:7D:6D:5E:97:25:B6:9C:73:11:5D:77 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ce:03:58:3a:1e:55:53:72:c8:19:88:f7:d1:f3:f4:18:c3: 2a:af:95:7f:f2:a8:e7:48:2d:24:49:77:0d:0e:2c:ae:cd:20: cb:dc:17:66:0e:69:0d:30:e6:57:58:7e:47:46:0d:78:62:11: 38:4c:f2:3d:8a:9e:0c:2b:17:17:33:9f:0c:e0:1c:aa:5e:9c: 23:9b:09:ac:9e:18:c1:d5:f1:e9:91:07:ee:8a:13:f2:0e:fd: b4:48:26:f6:fe:4b:ef:70:d3:4a:ec:25:0e:7f:9d:76:a2:b0: e2:0b:4e:4a:8b:ac:79:1d:30:1e:bd:0e:7d:a0:14:55:b1:00: b6:7f:d8:52:24:fa:af:d7:5e:c3:68:5b:e0:0a:08:3a:fa:16: 2f:ed:a2:49:a4:1d:cf:fb:60:b1:31:a7:bc:47:09:c2:50:65: 3c:81:d7:e3:7f:2d:74:c2:0b:33:16:f9:99:c6:fd:20:07:1d: fd:31:86:71:02:73:b6:49:0c:76:d9:01:9e:26:fb:30:3d:10: 3e:24:c7:3c:bc:73:01:ad:73:a5:cf:d2:6f:f4:ec:66:09:82: cd:f3:0a:ac:17:bd:cf:0c:f1:5a:40:78:22:2f:69:73:33:c0: c0:92:d6:23:b9:85:9d:cb:95:41:f3:b3:b5:ee:9a:c3:6f:9f: 01:52:bc:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYxMDA5MDIzNTA5WhcNMjYxMDE2MDIzNTA5WjAYMRYwFAYD VQQDEw02YWM4NTJkZS02ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUFalCPzM4/aUhWCgouFZNi4eQujHiR+ZrNJ3omgQRpcuMw6x3pdIQ2eNjFj PSMsOyuwRzwMMNnbcSW2kmv6vl27VmNsQQ1uG7XROGeWVZNTX1VXEAE0/9CbeTki 7rZhTG8kBZFdVt6DiyWCngL328znrMxIGYGF/fFNB2wjYt9/sYk0BFhKcTu2KdV2 H79m3J+TCJ0b+mY6zlzkWhcUzvaybrGoDEzCBSUIGGPvfZ83eKbyYV/uadrfbblT Msz1425snunnLCQ7+5XPvqlPA5iI0zy42yNpGTktNfnqlEfpsi5K2N7l4iO6/uru WWGAX/joz82rr8SVqbJNMlGvBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnLM4ei hznXd31tXpcltpxzEV13MB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnc4DWDoeVVNyyBmI99Hz9BjDKq+Vf/Ko50gtJEl3DQ4srs0gy9wXZg5pDTDm V1h+R0YNeGIROEzyPYqeDCsXFzOfDOAcql6cI5sJrJ4YwdXx6ZEH7ooT8g79tEgm 9v5L73DTSuwlDn+ddqKw4gtOSouseR0wHr0OfaAUVbEAtn/YUiT6r9dew2hb4AoI OvoWL+2iSaQdz/tgsTGnvEcJwlBlPIHX438tdMILMxb5mcb9IAcd/TGGcQJztkkM dtkBnib7MD0QPiTHPLxzAa1zpc/Sb/TsZgmCzfMKrBe9zwzxWkB4Ii9pczPAwJLW I7mFncuVQfOzte6aw2+fAVK8qQ== -----END CERTIFICATE-----Generated at Fri Oct 9 21:49:17 2026 by rpki-client