$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: vGuxjbNRThMaQtPgEWZ0yP2mcrTzP2fELbVPhosK4sI= Subject key identifier: 82:2C:E9:74:10:4C:AC:CB:50:B8:D0:15:44:EC:D1:2B:78:A9:5F:68 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0FB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0F89 Signing time: Tue 22 Sep 2026 17:25:56 +0000 Manifest this update: Tue 22 Sep 2026 17:25:55 +0000 Manifest next update: Tue 29 Sep 2026 17:25:55 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: l0lhmTLUnEvjQ97MD19gruxvcqgCnQ9xuAHh3Iyskg0=) 2: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=) 3: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=) 4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4020 (0xfb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Sep 22 17:25:55 2026 GMT Not After : Sep 29 17:25:55 2026 GMT Subject: CN=6ab2ba24-318a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:6c:e0:35:2b:5d:86:fc:76:e6:fc:f5:62: 87:04:6b:ab:09:5b:70:c1:92:1a:2b:06:cb:b3:64: 76:56:3e:57:56:8c:4d:8b:a3:8a:72:59:14:cf:cb: 6c:5b:4f:aa:ec:3d:1a:d2:a9:8c:b4:7d:1d:6c:ab: f1:42:47:56:90:cf:17:2e:6a:c4:ec:54:ea:4f:48: bf:60:eb:64:68:9f:c9:30:e6:9c:f2:51:ba:fe:fd: ff:0d:3a:f4:a9:a9:94:45:30:8d:98:6c:94:b6:5f: 5e:cf:ac:c6:ee:26:9a:22:f0:11:fb:ee:e1:cb:bc: 96:eb:4d:8e:38:5e:9c:22:2f:74:0d:98:55:fa:07: db:22:59:77:db:00:e1:e0:a4:68:05:57:b8:5c:92: c5:70:0b:06:dd:1a:e3:0b:46:98:01:09:0d:b7:4f: 8d:75:9c:0a:7e:ef:c1:c4:17:34:46:ad:83:2f:39: 0e:12:a8:4b:02:dd:4a:59:da:73:98:58:e9:4a:52: 9b:2b:f1:9e:1d:ef:f2:04:b7:a6:fe:32:ed:0a:0d: bf:06:25:ad:bc:e8:ae:df:4e:e5:bc:93:2e:a2:fc: 00:99:b2:d0:5e:18:9e:0f:bc:5b:8e:f8:e1:4c:a0: 64:a1:4f:b3:87:5f:01:39:63:ec:9d:7b:e0:1f:20: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:E9:74:10:4C:AC:CB:50:B8:D0:15:44:EC:D1:2B:78:A9:5F:68 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:82:d5:3a:8d:a9:0d:5a:f5:e3:f1:de:ee:94:b7:fd:d1: 35:3f:81:a5:99:d1:9b:0c:fb:9f:af:7b:99:d8:4f:6f:44:2e: 11:03:b7:da:23:40:a9:e5:d6:dc:a3:3f:97:1b:c4:d7:d4:d3: 5e:96:45:01:c8:ed:3d:3a:46:3d:5d:be:ed:bd:55:39:54:6e: e6:b4:53:31:40:fa:ff:fe:c6:02:fe:01:e9:10:a4:49:07:36: d9:db:9f:36:da:bf:ca:df:30:17:7a:fc:86:fe:45:7d:4b:78: f6:53:a0:e6:04:66:6d:71:55:ef:5a:a8:34:a0:57:86:f8:f0: 5b:27:0a:2f:05:4f:ec:f7:a2:28:34:9b:a0:c7:db:62:25:f4: 1c:66:e8:7a:d2:f2:3b:5a:b8:df:c0:f8:87:4f:26:02:b1:40: 9c:c0:18:b2:af:56:0a:b1:6e:2b:1a:ee:1a:ad:36:22:d0:f4: 8d:06:dd:7f:f3:fe:7a:ca:1e:00:d8:13:27:6e:18:39:86:46: f7:78:7c:4d:af:cd:42:33:63:0c:d4:2c:d8:36:e6:d5:8c:55: f0:82:e2:cf:39:b0:c7:be:7a:4d:b9:01:ce:38:79:0c:2b:d6: dc:c3:e5:70:50:7b:ff:00:df:2d:4e:7e:43:ca:f0:e2:f9:67: 88:93:8e:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjYwOTIyMTcyNTU1WhcNMjYwOTI5MTcyNTU1WjAYMRYwFAYD VQQDEw02YWIyYmEyNC0zMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9ds4DUrXYb8dub89WKHBGurCVtwwZIaKwbLs2R2Vj5XVoxNi6OKclkUz8ts W0+q7D0a0qmMtH0dbKvxQkdWkM8XLmrE7FTqT0i/YOtkaJ/JMOac8lG6/v3/DTr0 qamURTCNmGyUtl9ez6zG7iaaIvAR++7hy7yW602OOF6cIi90DZhV+gfbIll32wDh 4KRoBVe4XJLFcAsG3RrjC0aYAQkNt0+NdZwKfu/BxBc0Rq2DLzkOEqhLAt1KWdpz mFjpSlKbK/GeHe/yBLem/jLtCg2/BiWtvOiu307lvJMuovwAmbLQXhieD7xbjvjh TKBkoU+zh18BOWPsnXvgHyCdRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIs6XQQ TKzLULjQFUTs0St4qV9oMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAasyC1TqNqQ1a9ePx3u6Ut/3RNT+BpZnRmwz7n697mdhPb0QuEQO32iNAqeXW 3KM/lxvE19TTXpZFAcjtPTpGPV2+7b1VOVRu5rRTMUD6//7GAv4B6RCkSQc22duf Ntq/yt8wF3r8hv5FfUt49lOg5gRmbXFV71qoNKBXhvjwWycKLwVP7PeiKDSboMfb YiX0HGboetLyO1q438D4h08mArFAnMAYsq9WCrFuKxruGq02ItD0jQbdf/P+esoe ANgTJ24YOYZG93h8Ta/NQjNjDNQs2Dbm1YxV8ILizzmwx756TbkBzjh5DCvW3MPl cFB7/wDfLU5+Q8rw4vlniJOO5w== -----END CERTIFICATE-----Generated at Wed Sep 23 04:39:34 2026 by rpki-client