$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json) Hash identifier: 4K95VHoR1FgnInsCblW1I0ekw6RF6h2/j52HL1fEGVU= Subject key identifier: 25:31:AB:60:53:FB:11:6E:B1:B2:0F:72:63:5F:43:7C:AA:B7:55:68 Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft Manifest number: 4B Signing time: Wed 23 Sep 2026 08:06:15 +0000 Manifest this update: Wed 23 Sep 2026 08:06:15 +0000 Manifest next update: Wed 30 Sep 2026 08:06:15 +0000 Files and hashes: 1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: g5ARwsB6pjrQjM4Os4dnuk7rSATR6aLKgzS2yz2Nazc=) 2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Validity Not Before: Sep 23 08:06:15 2026 GMT Not After : Sep 30 08:06:15 2026 GMT Subject: CN=6ab38877-f0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:6a:02:fb:34:35:eb:49:39:2e:cd:4c:c8: 6a:b2:c2:8b:59:9b:b0:3a:5b:cf:43:c3:8b:09:52: 05:be:11:4b:3d:63:cb:dd:33:42:99:4b:6e:62:9e: 98:a1:b0:58:e0:2b:91:a2:23:ec:c1:1a:11:44:e9: 5f:48:01:49:90:5c:b0:4d:0c:59:28:64:ce:43:bf: e9:29:26:6c:80:de:2c:b4:0f:5b:13:4b:f1:73:2d: 38:81:9a:bc:e0:d0:43:33:5f:a2:bb:d1:3d:2c:7e: 8c:b2:f1:17:0a:d2:78:d3:66:51:d6:f9:ba:2d:d4: 31:da:4d:ad:2a:c3:f7:16:f2:26:12:8d:8b:6b:ca: cd:ec:3b:4d:3f:2b:ea:a0:40:79:cf:9b:d8:3d:ea: 02:b9:10:90:88:86:0e:f8:ba:45:c2:f2:65:15:e3: 61:41:e9:64:03:75:52:45:22:3c:8b:ca:8d:ea:8b: 73:90:57:6c:93:9f:dc:25:a9:0a:55:d1:df:d6:40: 1c:72:fd:d4:67:90:82:c5:38:0c:a8:6f:ce:cb:cf: 3e:54:1d:72:3e:19:88:87:f4:8a:e1:a6:4e:a9:aa: f5:6d:98:9a:16:d1:94:57:31:f3:ba:e8:0c:c1:fa: b8:ba:7f:ae:96:16:ac:56:32:66:5f:7f:a3:4a:f3: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:AB:60:53:FB:11:6E:B1:B2:0F:72:63:5F:43:7C:AA:B7:55:68 X509v3 Authority Key Identifier: keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:92:c7:71:e7:5c:c7:55:47:e8:c8:84:dd:61:af:72:79:5e: 62:95:51:69:f1:c6:a5:d2:ee:14:ca:c7:6e:d9:73:0f:8d:af: e4:a3:54:9f:38:e7:4c:94:d1:76:e1:14:3e:e5:78:e6:34:f6: 36:20:64:b0:67:53:c7:50:ff:4a:96:8a:bf:f0:c1:08:18:c2: 18:1c:38:50:e4:fa:84:4b:61:a0:82:a9:0d:0f:a6:0d:c6:bc: ad:80:4d:f2:c2:b9:9c:19:c5:88:66:57:70:c1:3d:e6:d7:70: 40:62:68:83:b8:d9:d9:9f:9b:53:6c:15:85:82:9b:d7:c5:23: d5:75:d8:5c:0f:b3:4f:37:e9:f5:72:2b:fb:3f:06:db:a3:97: 5a:d3:65:dc:7a:89:21:49:02:04:44:9e:ac:37:5e:33:3f:46: 39:02:9e:d2:b7:78:dc:7c:63:cf:82:b9:68:db:58:6e:e4:17: 0a:1d:b5:30:25:a3:c9:ea:61:6c:c3:61:4c:2a:22:58:3f:c6: 20:a7:0f:d5:e3:5b:b1:dc:db:f2:05:b2:9e:8a:5b:c1:f7:b1: e2:1e:7d:8a:cc:88:be:6b:b7:0f:22:fa:56:76:d2:08:fd:01: 7b:09:7a:86:9d:5a:31:ca:04:3b:d2:e9:9f:a7:af:96:61:52: 65:9f:82:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB MDExRjZBNjAeFw0yNjA5MjMwODA2MTVaFw0yNjA5MzAwODA2MTVaMBgxFjAUBgNV BAMTDTZhYjM4ODc3LWYwYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV9WoC+zQ160k5Ls1MyGqywotZm7A6W89Dw4sJUgW+EUs9Y8vdM0KZS25inpih sFjgK5GiI+zBGhFE6V9IAUmQXLBNDFkoZM5Dv+kpJmyA3iy0D1sTS/FzLTiBmrzg 0EMzX6K70T0sfoyy8RcK0njTZlHW+bot1DHaTa0qw/cW8iYSjYtrys3sO00/K+qg QHnPm9g96gK5EJCIhg74ukXC8mUV42FB6WQDdVJFIjyLyo3qi3OQV2yTn9wlqQpV 0d/WQBxy/dRnkILFOAyob87Lzz5UHXI+GYiH9Irhpk6pqvVtmJoW0ZRXMfO66AzB +ri6f66WFqxWMmZff6NK87WTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJTGrYFP7 EW6xsg9yY19DfKq3VWgwHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5ksdx51zHVUfoyITdYa9yeV5ilVFp8cal0u4Uysdu2XMPja/ko1SfOOdMlNF2 4RQ+5XjmNPY2IGSwZ1PHUP9Kloq/8MEIGMIYHDhQ5PqES2GggqkND6YNxrytgE3y wrmcGcWIZldwwT3m13BAYmiDuNnZn5tTbBWFgpvXxSPVddhcD7NPN+n1civ7Pwbb o5da02XceokhSQIERJ6sN14zP0Y5Ap7St3jcfGPPgrlo21hu5BcKHbUwJaPJ6mFs w2FMKiJYP8Ygpw/V41ux3NvyBbKeilvB97HiHn2KzIi+a7cPIvpWdtII/QF7CXqG nVoxygQ70umfp6+WYVJln4JS -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:05 2026 by rpki-client