$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json) Hash identifier: KQ0nFefG4hMBUe8MFq2BkL4A5/R6T7C48gALR2gaYMk= Subject key identifier: 41:78:83:46:11:FF:D6:E8:AB:F9:52:9E:43:7D:D7:DA:1C:78:EC:14 Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft Manifest number: 014F Signing time: Wed 23 Sep 2026 05:05:49 +0000 Manifest this update: Wed 23 Sep 2026 05:05:48 +0000 Manifest next update: Wed 30 Sep 2026 05:05:48 +0000 Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: kWCi3nw6Cydm8lvckW6+WVWF54MZCpL96ZowZ9zyMDU=) 2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Validity Not Before: Sep 23 05:05:48 2026 GMT Not After : Sep 30 05:05:48 2026 GMT Subject: CN=6ab35e2d-ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:e3:be:57:8f:6b:1b:8b:7a:f4:e6:04:14: 9c:f7:38:54:3b:e4:e0:ec:03:be:6e:3c:41:26:07: 65:2f:2b:10:dd:6d:af:6b:07:ba:cc:31:ff:1f:4e: 31:0e:8c:62:38:82:b2:31:53:10:2a:51:71:6b:25: 98:37:62:f7:0c:b7:49:e0:30:d1:3a:78:50:de:0b: 1b:89:79:14:aa:af:b8:c4:da:20:35:1c:d1:a4:07: 9d:a5:6d:8c:ea:5a:ef:7b:aa:e1:48:fe:f0:6b:44: 80:73:3b:15:4c:56:15:6d:90:54:b6:74:91:2d:bf: a0:0c:65:45:68:17:ce:67:96:60:15:e0:ac:1d:8c: 10:b7:d9:d3:23:56:e2:7c:73:e3:00:29:85:e9:60: a1:c6:b0:b7:b3:03:9b:34:63:76:1c:10:f0:ce:28: 6d:d7:fb:10:29:bd:d7:99:0b:f3:79:74:4f:0b:18: 47:a1:67:91:d6:0c:0d:96:8e:bc:1a:d1:8a:be:59: ad:03:76:f6:2f:5c:85:01:20:76:db:69:de:29:88: cb:8f:5f:84:0e:c3:14:9c:ed:24:ae:08:3d:ad:86: b8:17:b4:3d:38:d6:a9:52:f6:9f:db:5c:52:2e:45: ff:95:b2:c0:13:4e:7e:d7:1a:2d:7e:bd:f3:22:f9: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:83:46:11:FF:D6:E8:AB:F9:52:9E:43:7D:D7:DA:1C:78:EC:14 X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:1e:fc:d0:a4:1d:4b:c4:fb:e9:06:be:3b:c2:c1:11:e2: d2:ad:3d:c9:17:6d:d7:29:f7:11:66:d5:6e:7c:53:e8:3a:22: 84:df:41:be:ce:7f:16:02:b0:a6:7b:c8:a8:f0:30:a3:ac:6b: fc:7d:b9:73:72:46:fd:d5:ca:82:6e:f3:e8:d7:40:c7:39:e2: f3:16:50:9f:ae:26:0f:79:ea:12:c5:a2:1e:fd:f1:b0:d3:09: 28:a2:fe:46:99:11:73:94:0e:7b:e4:e5:d7:8c:0d:ff:34:be: 20:45:ff:c3:da:6f:c9:78:2a:be:99:fb:a7:13:00:c2:3c:98: ac:6a:3f:48:00:da:71:1f:f1:23:1a:ad:89:d6:ad:16:9f:8d: 89:f3:43:3f:73:6f:00:21:9e:ce:73:e7:1a:80:54:77:62:a0: 70:a4:c4:60:9f:57:1f:e2:b8:f6:14:d9:ef:c0:ca:e1:6b:36: 68:d5:f3:93:0a:94:58:20:84:a2:34:f3:d8:02:a2:7b:20:9a: 3c:43:8a:b6:39:ca:01:7c:4d:1a:70:00:e9:36:ca:35:bd:6b: 89:45:5a:28:9c:5b:30:df:f5:73:7e:de:3a:d9:99:66:74:81: f6:28:78:a9:85:1b:ee:21:80:84:c4:d6:8b:8c:a7:62:25:14: fa:91:77:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMzIxMTAvBgNVBAUTKDg1RTk5OUMyMkJFRTAxQzMyNjREM0QyMjY3NTgyMTA5 MkZGRkQwMkMwHhcNMjYwOTIzMDUwNTQ4WhcNMjYwOTMwMDUwNTQ4WjAYMRYwFAYD VQQDEw02YWIzNWUyZC1lYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZHjvlePaxuLevTmBBSc9zhUO+Tg7AO+bjxBJgdlLysQ3W2vawe6zDH/H04x DoxiOIKyMVMQKlFxayWYN2L3DLdJ4DDROnhQ3gsbiXkUqq+4xNogNRzRpAedpW2M 6lrve6rhSP7wa0SAczsVTFYVbZBUtnSRLb+gDGVFaBfOZ5ZgFeCsHYwQt9nTI1bi fHPjACmF6WChxrC3swObNGN2HBDwziht1/sQKb3XmQvzeXRPCxhHoWeR1gwNlo68 GtGKvlmtA3b2L1yFASB222neKYjLj1+EDsMUnO0krgg9rYa4F7Q9ONapUvaf21xS LkX/lbLAE05+1xotfr3zIvnu4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEF4g0YR /9boq/lSnkN919oceOwUMB8GA1UdIwQYMBaAFIXpmcIr7gHDJk09ImdYIQkv/9As MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEzMi9DNEZBMTRGOEI4 MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFjTW1UVDBpWjFnaENTX18w Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFj TW1UVDBpWjFnaENTX18wQ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoQe/NCkHUvE++kGvjvCwRHi0q09yRdt1yn3EWbVbnxT6DoihN9Bvs5/FgKw pnvIqPAwo6xr/H25c3JG/dXKgm7z6NdAxzni8xZQn64mD3nqEsWiHv3xsNMJKKL+ RpkRc5QOe+Tl14wN/zS+IEX/w9pvyXgqvpn7pxMAwjyYrGo/SADacR/xIxqtidat Fp+NifNDP3NvACGeznPnGoBUd2KgcKTEYJ9XH+K49hTZ78DK4Ws2aNXzkwqUWCCE ojTz2AKieyCaPEOKtjnKAXxNGnAA6TbKNb1riUVaKJxbMN/1c37eOtmZZnSB9ih4 qYUb7iGAhMTWi4ynYiUU+pF3IQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:50:36 2026 by rpki-client