$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: V1OyWbkhkR9kT2xEeTIwaFy1Bx7H+qrYBpCJx0sACRw= Subject key identifier: 7E:51:31:FC:8C:E5:D5:E0:21:AE:B1:63:C5:13:99:FD:95:AF:E0:E5 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 362E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 35D9 Signing time: Mon 28 Sep 2026 14:40:11 +0000 Manifest this update: Mon 28 Sep 2026 14:40:11 +0000 Manifest next update: Mon 05 Oct 2026 14:40:11 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: FmsoZZERsoJeG2TLZDpRJQaHcJEp7MIjEfV9af2pydg=) 2: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=) 3: 7BC92742ADA611F18F55423F6E11F970.roa (hash: ai7pgQHXoz7YgQfjtoOzeruV6ucLwGuomU9kU9c7KlM=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=) 7: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13870 (0x362e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Sep 28 14:40:11 2026 GMT Not After : Oct 5 14:40:11 2026 GMT Subject: CN=6aba7c4b-e313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:12:0f:e9:07:ef:2a:d6:0b:bd:0d:23:3f: 87:72:65:40:1d:34:9e:d6:2b:a8:55:04:a9:42:6d: 5c:35:f5:95:20:75:e0:5d:c8:50:e0:d3:e5:c8:17: c6:32:6f:52:bd:8f:c8:21:f3:d3:81:34:9a:40:7c: 66:ff:cf:88:69:56:62:f7:3d:40:81:45:c6:b4:54: 55:cd:b5:61:42:7f:23:80:84:68:7a:89:8d:a6:3f: 8e:ae:80:b7:f1:75:4c:79:7d:51:c3:a5:4c:0b:ae: 07:23:34:65:85:82:2b:43:e3:e0:fe:a7:30:d8:f9: 20:4b:fa:a4:da:21:7e:1f:32:d2:98:b3:60:ff:43: a8:01:5b:e9:6f:b7:6c:dc:a0:e0:6d:9f:de:2e:f4: a0:b7:f8:29:74:e8:f9:a0:74:f4:cb:31:93:fe:27: 8f:c8:be:cd:f6:bd:29:f3:7f:90:86:4a:5f:8c:8b: b2:0a:24:aa:79:d5:a1:74:50:38:0b:b9:ca:f7:65: cd:f5:a9:1b:9e:85:dd:6d:08:07:a2:0d:b6:12:a3: 6e:4b:f9:b5:8d:37:f6:df:d9:48:91:ea:ab:bf:cc: 71:b3:c7:89:0f:c0:50:22:eb:ed:db:ed:f9:70:38: a0:eb:ef:a1:10:87:b2:6f:c4:90:a0:83:c8:15:56: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:31:FC:8C:E5:D5:E0:21:AE:B1:63:C5:13:99:FD:95:AF:E0:E5 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:a3:ae:8a:8e:7f:10:3b:ae:d8:f1:d8:91:54:28:79:7c: f3:c8:c0:02:04:f0:e4:01:0d:fd:f5:03:73:e9:1f:81:9b:5c: c5:97:b2:69:b4:18:8c:3d:05:ef:23:f3:e8:c5:c4:79:69:a6: 0f:35:e4:44:5e:71:f3:da:a2:52:25:cd:2a:dc:02:82:af:ce: d7:b7:6f:35:f3:fc:6c:08:13:0c:a6:29:4a:37:55:ed:31:7b: fe:42:9b:3a:07:71:e7:5f:7e:06:40:49:a2:98:0f:c8:ec:59: 76:0b:83:36:0e:94:b1:d3:58:7e:fb:b0:28:c7:dd:6b:02:77: 85:60:80:4c:dd:b2:b0:3d:44:96:99:1e:71:7c:b2:f6:0c:4e: 42:e5:65:e4:e6:e1:71:ec:20:e6:c5:49:bf:42:5f:cd:74:69: 13:c3:f9:ff:d5:8b:ba:b1:7d:48:6d:92:62:63:15:1b:a9:3c: 50:18:19:2d:a4:09:6a:bc:7f:eb:f7:7d:90:c1:3e:06:25:22: 90:e7:41:df:03:45:5f:0c:22:fa:84:ba:a8:7d:cc:1d:f6:6d: fe:49:02:b9:98:94:0e:3d:25:4e:a8:c9:d2:6b:cb:06:09:ec: e0:a4:4c:34:e4:49:c3:fe:4d:5e:2c:de:5b:42:c9:d6:0a:4d: c0:64:59:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwOTI4MTQ0MDExWhcNMjYxMDA1MTQ0MDExWjAYMRYwFAYD VQQDEw02YWJhN2M0Yi1lMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgISD+kH7yrWC70NIz+HcmVAHTSe1iuoVQSpQm1cNfWVIHXgXchQ4NPlyBfG Mm9SvY/IIfPTgTSaQHxm/8+IaVZi9z1AgUXGtFRVzbVhQn8jgIRoeomNpj+OroC3 8XVMeX1Rw6VMC64HIzRlhYIrQ+Pg/qcw2PkgS/qk2iF+HzLSmLNg/0OoAVvpb7ds 3KDgbZ/eLvSgt/gpdOj5oHT0yzGT/iePyL7N9r0p83+QhkpfjIuyCiSqedWhdFA4 C7nK92XN9akbnoXdbQgHog22EqNuS/m1jTf239lIkeqrv8xxs8eJD8BQIuvt2+35 cDig6++hEIeyb8SQoIPIFVaqZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5RMfyM 5dXgIa6xY8UTmf2Vr+DlMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGWOjroqOfxA7rtjx2JFUKHl888jAAgTw5AEN/fUDc+kfgZtcxZeyabQYjD0F 7yPz6MXEeWmmDzXkRF5x89qiUiXNKtwCgq/O17dvNfP8bAgTDKYpSjdV7TF7/kKb Ogdx519+BkBJopgPyOxZdguDNg6UsdNYfvuwKMfdawJ3hWCATN2ysD1ElpkecXyy 9gxOQuVl5Obhcewg5sVJv0JfzXRpE8P5/9WLurF9SG2SYmMVG6k8UBgZLaQJarx/ 6/d9kME+BiUikOdB3wNFXwwi+oS6qH3MHfZt/kkCuZiUDj0lTqjJ0mvLBgns4KRM NORJw/5NXizeW0LJ1gpNwGRZQA== -----END CERTIFICATE-----Generated at Wed Sep 30 15:17:58 2026 by rpki-client