$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json) Hash identifier: Km/j5M0Rq5liVrIfs/OAB1LvCxFL/8/OWrVD+470s1U= Subject key identifier: 12:2A:90:BD:BE:A4:C0:EE:36:7B:99:F2:1F:A5:86:1C:C9:50:14:C4 Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft Manifest number: C9 Signing time: Wed 23 Sep 2026 06:34:32 +0000 Manifest this update: Wed 23 Sep 2026 06:34:32 +0000 Manifest next update: Wed 30 Sep 2026 06:34:32 +0000 Files and hashes: 1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: skEUqWlTP4smQBBC3UagOSd81juu2gbfiZ6Fu64J+m4=) 2: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: F/yniYuZFpGynCu35Clniv/S+sipN7kzwj3zVvT9o2o=) 3: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: icWxf2EeuNRrL9AzCEZgALKnzPw6palewZWFR0NzHmQ=) 4: xE2x6X0r-f0Ei-EBkjA2Z2uXt1E.asa (hash: MdJ+Q7hB2LuJG814dk2z+BNFASRnz+g1GPJDnC1GpdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Validity Not Before: Sep 23 06:34:32 2026 GMT Not After : Sep 30 06:34:32 2026 GMT Subject: CN=6ab372f8-8a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:22:1f:b8:c7:52:50:7d:d2:e3:95:32:db: 01:02:1a:7c:d8:e7:a3:2b:0d:8c:a9:db:68:90:10: 66:37:9c:9e:72:8b:ab:6f:5a:dc:b3:62:7f:c4:68: 60:73:b5:b6:49:e9:50:95:f1:bc:d4:6b:e6:98:8f: c0:b5:2c:cb:9b:0c:a0:51:c9:a1:55:cc:52:d8:47: 88:07:f0:68:93:6e:23:c5:63:cd:51:31:51:ac:94: 40:0e:b5:1a:fa:55:b6:b2:9c:f2:24:3a:b9:38:c8: fd:7f:7c:32:7f:cb:c2:fb:6c:59:b8:7a:0d:3c:b1: a9:cc:65:e9:6c:9b:2d:4a:73:e0:be:6f:d9:ba:dd: 2e:3f:0a:5f:2a:4f:66:9a:16:1e:61:3d:5b:0e:67: cf:6c:c1:ba:24:02:c8:29:52:02:88:5a:09:4c:9c: e4:ca:03:92:33:8a:98:8d:68:18:9d:a5:b1:cf:e3: e7:d7:c1:e9:ec:e2:71:b9:5c:cd:52:de:e3:ea:73: 77:b4:b2:97:a6:da:db:7d:02:1e:c0:3a:55:25:b9: 6e:1b:28:db:f9:12:be:8c:3f:f7:aa:69:1c:98:62: 64:f0:56:47:a0:e7:6e:f1:2e:47:82:4e:99:98:fd: 61:17:b1:ac:52:69:bf:7c:73:f5:08:39:01:27:26: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:90:BD:BE:A4:C0:EE:36:7B:99:F2:1F:A5:86:1C:C9:50:14:C4 X509v3 Authority Key Identifier: keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:cf:f4:b3:56:e9:5a:48:1d:41:bb:a8:5b:64:38:02:b6: 65:3f:32:5d:d0:3d:5a:97:71:d1:3e:79:02:ad:c2:be:eb:97: eb:5a:44:8c:9b:a9:bd:ba:37:f5:fa:11:0d:3b:da:fe:0f:25: bb:e3:88:fc:06:2f:73:5c:4e:ef:16:45:e3:1b:e4:d4:7c:0f: 5c:4a:9d:8b:8f:f2:98:ee:79:59:95:ca:ad:46:1d:13:33:91: 0a:17:5f:41:1d:15:cb:0f:e2:3c:26:59:a7:49:08:cf:b4:62: a1:1f:5e:dc:3d:e8:89:62:3d:b9:f7:0c:4d:6d:e7:45:09:1a: 45:c5:cc:f3:0a:66:2f:78:be:4a:52:05:19:f1:51:20:db:1d: 24:56:f4:d4:8e:d1:47:73:e9:cb:0c:60:17:ce:36:d8:b1:29: 44:e8:99:f7:ff:ab:04:1a:5c:e4:1a:2c:72:02:7e:1b:4c:a6: e9:ff:6d:2d:b1:b5:7f:54:7b:a8:8b:21:d0:d5:49:92:ff:d8: 21:5f:c3:26:fb:a0:6d:dd:83:f5:11:11:e2:20:59:f3:71:ae: fe:75:c2:39:c5:c6:88:12:a0:b2:30:3e:bf:ae:f2:2e:a2:20: 1c:31:93:47:ff:30:35:a1:65:bb:3d:7e:d2:e7:9d:08:f7:b3: bc:ac:5b:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1NjcxMTAvBgNVBAUTKDg1NkJDMTlGRUVCRUIwQjU1OTVGMDNCQjEyMTQ4M0U1 M0E4MTAzQ0MwHhcNMjYwOTIzMDYzNDMyWhcNMjYwOTMwMDYzNDMyWjAYMRYwFAYD VQQDEw02YWIzNzJmOC04YTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CYiH7jHUlB90uOVMtsBAhp82OejKw2MqdtokBBmN5yecourb1rcs2J/xGhg c7W2SelQlfG81GvmmI/AtSzLmwygUcmhVcxS2EeIB/Bok24jxWPNUTFRrJRADrUa +lW2spzyJDq5OMj9f3wyf8vC+2xZuHoNPLGpzGXpbJstSnPgvm/Zut0uPwpfKk9m mhYeYT1bDmfPbMG6JALIKVICiFoJTJzkygOSM4qYjWgYnaWxz+Pn18Hp7OJxuVzN Ut7j6nN3tLKXptrbfQIewDpVJbluGyjb+RK+jD/3qmkcmGJk8FZHoOdu8S5Hgk6Z mP1hF7GsUmm/fHP1CDkBJyYIpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIqkL2+ pMDuNnuZ8h+lhhzJUBTEMB8GA1UdIwQYMBaAFIVrwZ/uvrC1WV8DuxIUg+U6gQPM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzU2Ny80MEVGMkZEMDg2 Q0YxMUYwQjg3MDdBNTRDNEY5QUUwMi9oV3ZCbi02LXNMVlpYd083RWhTRDVUcUJB OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hXdkJuLTYtc0xWWlh3TzdFaFNENVRxQkE4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzU2Ny80MEVGMkZEMDg2Q0YxMUYwQjg3MDdBNTRDNEY5QUUwMi9oV3ZCbi02LXNM VlpYd083RWhTRDVUcUJBOHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWArP9LNW6VpIHUG7qFtkOAK2ZT8yXdA9Wpdx0T55Aq3CvuuX61pEjJupvbo3 9foRDTva/g8lu+OI/AYvc1xO7xZF4xvk1HwPXEqdi4/ymO55WZXKrUYdEzORChdf QR0Vyw/iPCZZp0kIz7RioR9e3D3oiWI9ufcMTW3nRQkaRcXM8wpmL3i+SlIFGfFR INsdJFb01I7RR3PpywxgF8422LEpROiZ9/+rBBpc5BoscgJ+G0ym6f9tLbG1f1R7 qIsh0NVJkv/YIV/DJvugbd2D9RER4iBZ83Gu/nXCOcXGiBKgsjA+v67yLqIgHDGT R/8wNaFluz1+0uedCPezvKxbwQ== -----END CERTIFICATE-----Generated at Thu Sep 24 09:46:32 2026 by rpki-client