$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft File: HRRM4mAZXoyzX48ohzHi6giABmE.mft (raw, json) Hash identifier: RfYyrOm1eTBayIwMXOGUprNdTBr5tayE8syHj6SQOdU= Subject key identifier: E8:80:C4:61:37:C8:AE:1D:7E:92:9A:C7:A1:AF:FC:E1:12:F1:BA:FA Authority key identifier: 1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61 Certificate issuer: /CN=A91AC70D/serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft Manifest number: 14 Signing time: Thu 15 Oct 2026 10:24:26 +0000 Manifest this update: Thu 15 Oct 2026 10:24:25 +0000 Manifest next update: Thu 22 Oct 2026 10:24:25 +0000 Files and hashes: 1: HRRM4mAZXoyzX48ohzHi6giABmE.crl (hash: IWTfe05tXT2ohBPrylEPTPnlutwMVCS2lcNyNSps7D0=) 2: 78040D1CC38511F1B940358A4211F970.roa (hash: q7lMHkfc3Kg57FunRBoqrPu8lvqmyZy6KVAf8O0fstk=) 3: 2F256C94C0A111F189C9A85A5B11F970.roa (hash: 5YRzW+vLgM/xc2z7SD7W5mTt/UJ5Hw3geE90HxC34uU=) 4: B3369F02C38611F1A8F1A02F4311F970.roa (hash: b70tVbQvzgIIPh7UWoa/aEhjUrZQ4s+6T4zyTKRTfKY=) 5: 027BB6D4C38611F19E9080EB4211F970.roa (hash: 6K0Lsc1VKFK9ljEbC/GmhWaksxlBu3GJroLndVYDTE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 10:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC70D, serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661 Validity Not Before: Oct 15 10:24:25 2026 GMT Not After : Oct 22 10:24:25 2026 GMT Subject: CN=6ad0a9da-b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:1b:0e:0d:79:09:95:e6:a0:63:47:85:b0: db:17:fc:82:de:03:d6:33:d1:7f:18:31:ab:45:b6: ff:78:d7:4f:bd:8c:6c:8b:8b:a9:9d:c2:7d:dc:2e: 80:ae:4b:1b:f2:c2:39:e5:8c:fc:05:e4:3a:63:3a: 49:f9:65:d4:7f:21:51:d8:d9:42:b6:5b:db:a6:e3: f9:51:1f:b5:7b:21:dc:5c:97:bc:49:5f:2b:27:be: 18:4e:a5:7e:c3:f1:59:90:a0:c2:11:a4:a3:a6:02: c6:7e:ca:dc:49:4e:38:44:b8:9e:69:30:f5:3b:dd: 3d:a0:e4:d7:6a:3d:7d:6d:84:79:20:f7:49:9b:e6: 60:37:3f:ed:20:83:1b:5c:d3:4e:f4:b6:ba:2b:48: 8e:d7:00:f6:41:bb:77:ea:95:97:58:cd:91:de:fe: 43:80:77:5b:c3:b4:e7:da:2f:43:e0:07:a5:80:81: 78:be:c1:0c:39:0e:4f:fb:89:c9:4d:23:50:e3:43: cc:43:58:ff:bc:41:fd:83:30:04:99:89:89:e3:cf: 5a:b5:25:4e:fd:73:25:2d:5a:06:c7:64:4f:cd:c9: c9:37:4c:39:de:29:da:9c:94:9d:1e:52:d8:43:41: 52:d5:8d:b4:b6:a4:b0:bf:4b:52:6d:b4:19:4b:56: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:C4:61:37:C8:AE:1D:7E:92:9A:C7:A1:AF:FC:E1:12:F1:BA:FA X509v3 Authority Key Identifier: keyid:1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ad:a3:ac:e1:03:4d:b5:fd:64:29:49:35:ee:4e:ba:e5:5d: 34:86:e3:e9:7d:4d:96:13:ac:b9:66:28:66:75:8a:e3:8e:ce: 23:d6:8f:7c:0e:3e:9b:02:c4:13:aa:18:e7:0f:47:48:1a:55: 9e:fc:c7:4f:eb:e0:72:e7:41:65:21:6f:8e:8c:bd:44:0b:f9: c1:8f:4d:be:5a:e5:ef:bb:3f:9c:2f:26:fc:b3:a2:89:a8:2e: f2:48:ea:ed:73:c7:81:cf:b5:04:e9:73:d3:84:94:9b:ff:e1: 45:95:51:4c:2f:31:d6:25:7e:87:cf:65:ad:79:1c:8a:2f:2b: 40:17:8b:9c:b5:6d:48:3e:69:b4:a4:ea:dd:9c:dc:1f:96:d3: f4:ee:28:6b:0a:8e:b5:cd:a8:00:17:0d:ac:49:f8:6e:5e:43: 84:85:fd:c7:84:39:64:af:ea:e4:5b:6e:4d:21:4c:85:26:37: 77:66:62:89:ee:48:8f:aa:55:e4:2a:e2:42:74:71:49:3e:cd: 23:a8:1e:38:7e:34:b1:fe:32:c4:ea:5f:5b:64:3b:3d:0c:b1: fd:88:7b:82:ab:b1:72:5d:ad:05:9f:72:b9:b9:36:02:f7:cc: f5:20:77:99:5c:86:8e:bc:6e:09:f0:95:42:a4:03:5f:53:c4: e0:79:ae:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzcwRDExMC8GA1UEBRMoMUQxNDRDRTI2MDE5NUU4Q0IzNUY4RjI4ODczMUUyRUEw ODgwMDY2MTAeFw0yNjEwMTUxMDI0MjVaFw0yNjEwMjIxMDI0MjVaMBgxFjAUBgNV BAMTDTZhZDBhOWRhLWI4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIVRsODXkJleagY0eFsNsX/ILeA9Yz0X8YMatFtv9410+9jGyLi6mdwn3cLoCu SxvywjnljPwF5DpjOkn5ZdR/IVHY2UK2W9um4/lRH7V7Idxcl7xJXysnvhhOpX7D 8VmQoMIRpKOmAsZ+ytxJTjhEuJ5pMPU73T2g5NdqPX1thHkg90mb5mA3P+0ggxtc 0070trorSI7XAPZBu3fqlZdYzZHe/kOAd1vDtOfaL0PgB6WAgXi+wQw5Dk/7iclN I1DjQ8xDWP+8Qf2DMASZiYnjz1q1JU79cyUtWgbHZE/Nyck3TDneKdqclJ0eUthD QVLVjbS2pLC/S1JttBlLVjHfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6IDEYTfI rh1+kprHoa/84RLxuvowHwYDVR0jBBgwFoAUHRRM4mAZXoyzX48ohzHi6giABmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNzBELzkyREYzOTc0QzA4 QjExRjFCMTQwOEMwMDU0MTFGOTcwL0hSUk00bUFaWG95elg0OG9oekhpNmdpQUJt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFJSTTRtQVpYb3l6WDQ4b2h6SGk2Z2lBQm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NzBELzkyREYzOTc0QzA4QjExRjFCMTQwOEMwMDU0MTFGOTcwL0hSUk00bUFaWG95 elg0OG9oekhpNmdpQUJtRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYraOs4QNNtf1kKUk17k665V00huPpfU2WE6y5ZihmdYrjjs4j1o98Dj6bAsQT qhjnD0dIGlWe/MdP6+By50FlIW+OjL1EC/nBj02+WuXvuz+cLyb8s6KJqC7ySOrt c8eBz7UE6XPThJSb/+FFlVFMLzHWJX6Hz2WteRyKLytAF4uctW1IPmm0pOrdnNwf ltP07ihrCo61zagAFw2sSfhuXkOEhf3HhDlkr+rkW25NIUyFJjd3ZmKJ7kiPqlXk KuJCdHFJPs0jqB44fjSx/jLE6l9bZDs9DLH9iHuCq7FyXa0Fn3K5uTYC98z1IHeZ XIaOvG4J8JVCpANfU8Tgea5g -----END CERTIFICATE-----Generated at Thu Oct 15 23:08:33 2026 by rpki-client