$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json) Hash identifier: qTQJzJWK42+3ZoaFeGHCUpBsyvWtrafdn497C+mK/hs= Subject key identifier: 97:BB:D3:A0:D7:DA:4F:B1:35:15:F7:35:D0:4D:25:F2:56:CB:E1:AC Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft Manifest number: 0AE9 Signing time: Sat 26 Sep 2026 19:28:37 +0000 Manifest this update: Sat 26 Sep 2026 19:28:37 +0000 Manifest next update: Sat 03 Oct 2026 19:28:37 +0000 Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: hmi0VaDWv2fXYE/oR4uozH9qUxux/z8rqpD/LAbrdSc=) 2: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (hash: K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=) 3: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: AAIxMzs/gvYk9K/xu4n64rt4zSe4EjThnQNO0Ai3Jj8=) 4: 92A9A67EB40211F09714C855C4F9AE02.roa (hash: MN08xTHQWyAMmrT/Pkdf4mSOvLZ+rB9gXlkcOfJJ9xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Validity Not Before: Sep 26 19:28:37 2026 GMT Not After : Oct 3 19:28:37 2026 GMT Subject: CN=6ab81ce5-b296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:6c:a0:6f:cb:13:13:c9:50:be:f0:69:80: 33:14:19:d5:f1:db:4c:62:6b:0d:89:2b:dd:be:6c: e1:95:49:97:70:78:9a:55:7a:33:fa:e2:f3:b8:7b: 49:12:13:b7:8c:0f:1a:eb:0b:5e:c5:17:65:ec:3c: 25:df:05:19:df:ce:9c:bd:1d:00:8e:84:06:07:97: bb:62:36:af:8f:23:a3:cc:2e:0d:62:43:5e:c5:b3: 54:c2:95:9f:cc:2c:5a:09:b3:af:be:7c:af:9f:0b: ca:db:95:8a:c9:85:8f:0f:0b:53:d4:32:58:0f:3a: d0:75:ec:df:9b:97:ed:e8:3f:15:5d:77:45:85:44: d7:eb:b6:e9:aa:f8:a6:82:a7:e7:2b:b2:fa:1e:a4: 38:8c:35:a6:67:43:7c:a3:69:3e:36:ef:c1:d9:18: e0:7f:f1:74:84:66:14:95:b6:ca:49:b7:83:ac:cf: 2f:03:85:64:f5:41:b2:6c:33:28:0b:11:2c:a5:ab: eb:20:ff:28:95:90:e9:44:c1:f1:41:29:5c:bd:9e: 2d:45:8d:ca:f3:e4:95:a6:27:4e:27:9a:1f:61:7e: 49:51:2a:7a:be:f4:9b:f2:f9:51:7f:c2:70:db:61: f6:27:70:01:ae:0e:16:b7:37:f4:44:7e:af:7d:54: d9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BB:D3:A0:D7:DA:4F:B1:35:15:F7:35:D0:4D:25:F2:56:CB:E1:AC X509v3 Authority Key Identifier: keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:30:71:06:79:4f:59:af:b7:46:b9:55:a1:39:35:08:3f: 62:95:12:0f:1e:e3:15:69:ef:f9:f5:69:ae:52:a5:66:66:91: ca:6f:e3:69:17:e2:4d:08:68:bf:9a:ee:64:5d:66:f1:2d:3b: f2:e9:68:9b:67:3d:ae:76:b4:a5:3b:7a:cf:c0:d7:49:ab:4a: 79:10:38:48:b2:4f:c8:8f:10:5b:2e:d7:6d:05:f5:b0:95:f5: dc:9b:6a:f6:95:87:27:ea:b4:b6:69:a5:08:e6:21:a8:60:43: 3e:86:23:28:ab:79:96:60:e4:0a:a8:f0:6a:0f:0b:a9:19:4b: 76:99:fc:16:79:0d:eb:83:8a:8a:11:d3:d6:56:80:2f:66:82: b8:84:02:5b:c1:61:fb:6d:86:95:88:5d:10:ea:55:cb:8b:8c: e9:a6:d3:c4:30:a6:7d:fa:44:84:16:35:42:55:83:c3:ee:e1: 8d:ea:84:ad:dc:3e:5b:f1:6b:08:17:26:c3:40:97:d5:fb:60: 98:b6:77:86:c8:89:b8:16:85:29:fe:f4:59:c5:0a:48:df:9a: 74:83:aa:82:12:5e:be:50:6c:19:6d:10:4a:f6:ef:4c:20:a2: cd:98:93:fa:cc:68:73:6b:b4:14:f9:ea:b0:82:19:ff:2a:74: 4c:3a:2c:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG NTE2NzlBRjEwHhcNMjYwOTI2MTkyODM3WhcNMjYxMDAzMTkyODM3WjAYMRYwFAYD VQQDEw02YWI4MWNlNS1iMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztZsoG/LExPJUL7waYAzFBnV8dtMYmsNiSvdvmzhlUmXcHiaVXoz+uLzuHtJ EhO3jA8a6wtexRdl7Dwl3wUZ386cvR0AjoQGB5e7YjavjyOjzC4NYkNexbNUwpWf zCxaCbOvvnyvnwvK25WKyYWPDwtT1DJYDzrQdezfm5ft6D8VXXdFhUTX67bpqvim gqfnK7L6HqQ4jDWmZ0N8o2k+Nu/B2Rjgf/F0hGYUlbbKSbeDrM8vA4Vk9UGybDMo CxEspavrIP8olZDpRMHxQSlcvZ4tRY3K8+SVpidOJ5ofYX5JUSp6vvSb8vlRf8Jw 22H2J3ABrg4Wtzf0RH6vfVTZSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJe706DX 2k+xNRX3NdBNJfJWy+GsMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUJDRC82MUQwQzQ4NjdBM0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNK aTNLWXlaRUhYTXoxRm5tdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI20wcQZ5T1mvt0a5VaE5NQg/YpUSDx7jFWnv+fVprlKlZmaRym/jaRfiTQho v5ruZF1m8S078ulom2c9rna0pTt6z8DXSatKeRA4SLJPyI8QWy7XbQX1sJX13Jtq 9pWHJ+q0tmmlCOYhqGBDPoYjKKt5lmDkCqjwag8LqRlLdpn8FnkN64OKihHT1laA L2aCuIQCW8Fh+22GlYhdEOpVy4uM6abTxDCmffpEhBY1QlWDw+7hjeqErdw+W/Fr CBcmw0CX1ftgmLZ3hsiJuBaFKf70WcUKSN+adIOqghJevlBsGW0QSvbvTCCizZiT +sxoc2u0FPnqsIIZ/yp0TDosJQ== -----END CERTIFICATE-----Generated at Mon Sep 28 10:50:03 2026 by rpki-client