$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: SrxPGn8NODg/OlwHpl6WW0PUfIO+ndsHotEFMQTdhJg= Subject key identifier: 7B:93:4A:DC:49:38:96:04:FB:47:D7:EE:66:8D:2E:C6:16:BF:09:EF Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 3C Signing time: Fri 25 Sep 2026 08:46:24 +0000 Manifest this update: Fri 25 Sep 2026 08:46:23 +0000 Manifest next update: Fri 02 Oct 2026 08:46:23 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: AHFibGTbkk3qBgClpIYnBvfU8y4wnq6IPRjGfZTV5Dw=) 2: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) 3: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Sep 25 08:46:23 2026 GMT Not After : Oct 2 08:46:23 2026 GMT Subject: CN=6ab634df-eaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:1b:b8:75:b4:80:16:76:b0:4d:5f:bf:b2: 93:5a:0e:bf:9b:44:04:a9:8a:0e:88:9d:1c:91:6d: d6:7a:98:4b:af:06:04:ce:a0:ec:52:01:18:65:01: a8:76:94:f4:ee:0e:f9:6a:f0:72:d5:89:66:09:1a: 0b:bf:55:5c:68:d8:91:03:c6:ca:d1:49:c7:20:3f: 43:b6:07:13:9c:9f:55:6b:0b:aa:72:0c:48:5a:57: af:c7:57:c8:64:8b:cd:b8:11:61:0c:f6:1c:3e:8f: d7:84:d4:f0:5b:12:63:7b:30:d1:06:41:c6:c4:94: d5:52:08:9e:8c:0c:46:d0:68:87:a1:4c:a5:65:9f: a7:ca:fc:74:8f:a4:60:0a:01:c4:1e:4c:34:f2:80: 6c:56:0b:0c:76:3f:a3:6a:32:47:7c:81:f7:14:47: 01:63:b0:06:ab:7e:6d:86:6b:97:a6:0e:67:89:6b: 57:57:9f:08:c1:9c:c0:7c:e9:31:be:97:2a:b3:b6: a5:0f:74:a7:f0:a7:00:75:d0:28:50:9f:f6:81:8a: f8:a3:29:3c:66:b7:b9:f3:d7:40:6e:af:05:dc:83: 42:c5:83:f5:fb:ef:91:4a:1a:5c:e1:cd:48:3d:70: b4:e1:3c:a7:97:0d:f2:40:1f:c4:77:4b:20:5a:67: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:93:4A:DC:49:38:96:04:FB:47:D7:EE:66:8D:2E:C6:16:BF:09:EF X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:3b:da:4c:ff:31:4e:0a:da:ab:b1:a4:9d:89:2b:e5:e0: 48:79:1b:34:09:00:ae:aa:85:5f:40:a9:f2:01:79:51:24:80: 3d:00:60:a4:4c:15:9f:00:f4:bb:08:d2:67:62:45:fe:9c:60: b4:94:e2:5e:b6:d1:a6:51:d9:fc:73:ad:8b:18:c7:ee:60:e9: 99:f0:00:c1:63:d3:84:69:c0:aa:70:26:ca:7a:6f:02:d2:6f: 91:24:f9:1a:8b:b0:99:70:e9:a5:00:20:1a:45:68:bc:cd:71: 5c:49:fb:88:34:96:b5:d6:39:0a:93:10:35:b4:28:fe:3c:d2: ac:7b:ad:1b:9c:f9:b2:34:39:c1:23:73:1a:04:a9:04:3d:61: 81:e2:15:9a:6e:58:7a:82:f6:fb:b1:00:4b:c9:60:7a:50:2f: b6:6d:e3:69:5f:e0:18:56:8f:0f:2f:2b:97:52:b0:d9:2c:06: 97:81:5b:85:f2:f6:2a:47:65:01:eb:d2:d8:4a:00:02:57:02: 83:2c:ba:41:d4:9c:f7:04:2d:0a:42:ce:c4:e4:cb:87:84:58: cc:b1:67:c0:bd:ac:6b:99:58:37:af:d6:03:6c:9a:da:a0:b7: ab:c0:6c:f3:37:17:d1:40:78:da:99:f7:cf:2f:03:09:74:0d: cc:b6:9a:23 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA5MjUwODQ2MjNaFw0yNjEwMDIwODQ2MjNaMBgxFjAUBgNV BAMTDTZhYjYzNGRmLWVhZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvYRu4dbSAFnawTV+/spNaDr+bRASpig6InRyRbdZ6mEuvBgTOoOxSARhlAah2 lPTuDvlq8HLViWYJGgu/VVxo2JEDxsrRSccgP0O2BxOcn1VrC6pyDEhaV6/HV8hk i824EWEM9hw+j9eE1PBbEmN7MNEGQcbElNVSCJ6MDEbQaIehTKVln6fK/HSPpGAK AcQeTDTygGxWCwx2P6NqMkd8gfcURwFjsAarfm2Ga5emDmeJa1dXnwjBnMB86TG+ lyqztqUPdKfwpwB10ChQn/aBivijKTxmt7nz10BurwXcg0LFg/X775FKGlzhzUg9 cLThPKeXDfJAH8R3SyBaZ+bVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe5NK3Ek4 lgT7R9fuZo0uxha/Ce8wHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+dDvaTP8xTgraq7GknYkr5eBIeRs0CQCuqoVfQKnyAXlRJIA9AGCkTBWfAPS7 CNJnYkX+nGC0lOJettGmUdn8c62LGMfuYOmZ8ADBY9OEacCqcCbKem8C0m+RJPka i7CZcOmlACAaRWi8zXFcSfuINJa11jkKkxA1tCj+PNKse60bnPmyNDnBI3MaBKkE PWGB4hWablh6gvb7sQBLyWB6UC+2beNpX+AYVo8PLyuXUrDZLAaXgVuF8vYqR2UB 69LYSgACVwKDLLpB1Jz3BC0KQs7E5MuHhFjMsWfAvaxrmVg3r9YDbJraoLerwGzz NxfRQHjamffPLwMJdA3Mtpoj -----END CERTIFICATE-----Generated at Sun Sep 27 03:43:15 2026 by rpki-client