$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: XXWr0u0yKZgzZ5RUlbOmsW0BmXdO3rzD5Cxo9DUnjJM= Subject key identifier: C2:1F:46:89:69:21:8B:7E:9F:B1:06:3A:B8:8F:1F:75:62:82:D6:EA Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0B22 Signing time: Thu 08 Oct 2026 19:35:00 +0000 Manifest this update: Thu 08 Oct 2026 19:35:00 +0000 Manifest next update: Thu 15 Oct 2026 19:35:00 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: 24ymqJ5ZOfkDGbnJQkz8eudK0ywhAUZ+vANQVTuprxI=) 2: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=) 3: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=) 5: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=) 7: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=) 8: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=) 9: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Oct 8 19:35:00 2026 GMT Not After : Oct 15 19:35:00 2026 GMT Subject: CN=6ac7f064-8c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:16:16:31:df:3c:0e:b1:00:39:2f:37:ec: b7:ce:3f:ae:76:c9:ae:c4:cc:33:f5:dc:1e:af:57: 84:2d:b3:81:c4:29:b4:75:71:c8:9d:f8:c2:db:df: f9:55:af:7a:b6:e5:04:6f:ec:77:2b:dc:87:56:b5: fb:9f:fa:a4:24:86:ad:b6:42:a4:e6:9c:73:25:77: 3d:91:61:a2:e6:41:a3:07:ff:68:bd:19:40:78:99: c5:51:02:24:bd:7c:62:0f:1b:fb:85:1a:36:d0:99: e9:3e:98:d6:5d:8f:be:52:63:0c:c8:5d:b7:17:da: dc:81:0c:f3:13:c6:2f:b6:a5:a7:67:2e:57:4e:96: 94:6a:d3:ea:49:f7:81:9e:81:bc:21:42:f7:79:92: 1b:b6:64:49:c0:95:38:ea:aa:91:c8:79:0e:6f:aa: b7:c0:db:67:a6:9b:4b:bf:fb:28:bd:52:8f:b5:d0: bf:3e:d0:19:d5:89:85:12:8a:aa:ff:8b:9d:fd:a5: cb:76:b1:b4:37:2c:92:6c:66:df:f1:20:9c:d3:a4: 98:7e:ea:28:24:78:f0:b0:f0:ae:41:8c:2b:1c:b7: df:9f:88:dd:d9:99:ee:55:32:3e:56:ae:5a:dd:fe: 61:ef:4b:02:31:db:16:0d:3a:3b:f7:82:95:1c:09: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1F:46:89:69:21:8B:7E:9F:B1:06:3A:B8:8F:1F:75:62:82:D6:EA X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:89:df:04:00:fd:32:38:04:43:2a:6c:17:3a:92:10:39:81: ae:57:f8:26:27:53:ca:9c:70:62:18:39:a9:fd:02:81:7b:da: ec:b6:6e:07:11:6e:e1:4c:95:28:a6:25:45:31:71:56:07:7c: eb:73:63:1b:1e:9e:96:de:56:54:d0:ac:4d:62:9d:94:99:7e: 98:45:05:27:bb:14:b2:4d:d2:80:83:67:c8:d1:ad:de:9d:38: bb:bb:d2:88:4b:82:72:8f:56:41:cf:19:b9:52:0a:eb:2b:ae: 58:b7:de:68:ec:68:96:b1:79:52:07:75:19:cb:20:b7:fe:30: b6:b5:41:32:be:82:c6:8a:b2:80:ef:f9:f2:58:93:ac:48:ef: b5:95:82:a8:d5:bc:28:b0:40:41:8d:5d:29:49:14:ee:8e:41: 7f:85:0f:e5:fc:7a:76:cb:97:b0:d1:96:f2:db:34:d6:7b:09: 02:88:2d:b8:52:68:5f:58:8d:82:a2:12:6f:72:d7:97:18:9e: 9d:9b:6b:5b:78:d5:94:88:b4:1c:79:2a:d5:bc:eb:6c:56:e3: 66:01:54:fa:61:fe:20:6f:6f:a9:1d:69:59:8f:fc:ab:0e:2c: 99:5a:ce:e8:6f:fe:2d:96:3b:02:bf:bf:48:55:42:b6:31:54: 7a:fb:d3:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjYxMDA4MTkzNTAwWhcNMjYxMDE1MTkzNTAwWjAYMRYwFAYD VQQDEw02YWM3ZjA2NC04YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmz8WFjHfPA6xADkvN+y3zj+udsmuxMwz9dwer1eELbOBxCm0dXHInfjC29/5 Va96tuUEb+x3K9yHVrX7n/qkJIattkKk5pxzJXc9kWGi5kGjB/9ovRlAeJnFUQIk vXxiDxv7hRo20JnpPpjWXY++UmMMyF23F9rcgQzzE8YvtqWnZy5XTpaUatPqSfeB noG8IUL3eZIbtmRJwJU46qqRyHkOb6q3wNtnpptLv/sovVKPtdC/PtAZ1YmFEoqq /4ud/aXLdrG0NyySbGbf8SCc06SYfuooJHjwsPCuQYwrHLffn4jd2ZnuVTI+Vq5a 3f5h70sCMdsWDTo794KVHAmAdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIfRolp IYt+n7EGOriPH3VigtbqMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEYnfBAD9MjgEQypsFzqSEDmBrlf4JidTypxwYhg5qf0CgXva7LZuBxFu4UyV KKYlRTFxVgd863NjGx6elt5WVNCsTWKdlJl+mEUFJ7sUsk3SgINnyNGt3p04u7vS iEuCco9WQc8ZuVIK6yuuWLfeaOxolrF5Ugd1Gcsgt/4wtrVBMr6CxoqygO/58liT rEjvtZWCqNW8KLBAQY1dKUkU7o5Bf4UP5fx6dsuXsNGW8ts01nsJAogtuFJoX1iN gqISb3LXlxienZtrW3jVlIi0HHkq1bzrbFbjZgFU+mH+IG9vqR1pWY/8qw4smVrO 6G/+LZY7Ar+/SFVCtjFUevvTvQ== -----END CERTIFICATE-----Generated at Sat Oct 10 12:57:53 2026 by rpki-client