$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: SxfJcNnrY5IipM4bq+p9DXvXoOt2hdOzKvWuRc7ERd0= Subject key identifier: E1:CF:8C:65:77:71:91:D6:31:9C:CB:2E:6E:31:34:B1:AC:12:70:DF Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 9C Signing time: Wed 23 Sep 2026 07:03:43 +0000 Manifest this update: Wed 23 Sep 2026 07:03:42 +0000 Manifest next update: Wed 30 Sep 2026 07:03:42 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: l4tKn69iSuyhE35acJb3/am8Ig/briyB2OuNdEL6//c=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Sep 23 07:03:42 2026 GMT Not After : Sep 30 07:03:42 2026 GMT Subject: CN=6ab379cf-0bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:39:78:6d:82:c7:bd:0b:00:f0:fc:b4:78: 02:33:84:19:6a:78:7d:14:a6:57:9c:a8:90:71:ae: 95:e6:e7:bd:5f:14:66:0a:1e:a3:1a:f5:68:94:ca: d4:12:a9:1c:ae:3d:95:ba:b7:b7:77:3f:b9:4d:ec: 42:73:e9:bf:39:22:33:e3:0c:11:a4:6d:67:96:db: 90:0a:23:1f:c9:3b:1c:e9:85:40:c3:57:c0:ae:18: fd:a2:de:58:b5:23:ee:26:87:dd:64:c1:02:6f:23: 18:03:f6:44:39:5f:8a:bd:3d:fc:06:c1:7e:44:c8: 43:b1:0e:82:8a:00:47:a3:f2:29:fe:5b:19:87:44: 0c:f5:cf:bc:00:4e:62:1d:0c:2e:0e:9d:af:3a:f6: f5:4f:e3:39:66:69:83:64:d6:9a:d2:eb:2f:74:fc: 9d:24:78:ca:24:c1:76:5e:7c:1c:59:da:73:2e:18: 35:e1:39:ee:f3:be:3b:0e:69:7d:51:c8:d7:e7:db: 72:f5:5c:5c:e2:da:c5:d2:13:57:7f:ed:f4:50:80: a4:c1:de:f5:8e:4f:69:41:b3:b7:cf:51:42:4f:dc: 35:b8:6a:4c:f1:90:60:db:83:34:c9:be:88:bd:b1: 54:d9:52:10:b8:be:ee:8f:01:71:2b:96:42:e2:95: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:8C:65:77:71:91:D6:31:9C:CB:2E:6E:31:34:B1:AC:12:70:DF X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4f:06:51:16:d8:6b:29:7c:3b:c0:1a:39:08:8c:45:8d:e4: 0c:d5:2d:3e:12:b5:fc:45:49:3d:88:53:21:44:a4:24:ba:18: bf:58:17:7f:37:d3:00:8f:53:fd:e4:f2:0a:48:c3:df:ea:2f: f7:99:5a:1f:d0:02:6d:dd:73:ac:fb:a9:e1:35:c8:99:70:47: 42:42:fd:fa:66:7b:ec:20:8d:b5:59:34:a3:9e:5f:53:d7:89: 16:9e:86:97:29:b8:f6:76:02:48:b4:88:9c:39:2f:4d:08:56: f4:37:c7:65:8c:ff:93:d0:4d:13:f0:17:b3:0e:30:86:56:d8: 74:3b:75:2c:7f:69:b1:b7:a1:d9:7f:d4:56:88:fd:be:0e:15: ad:34:8c:9e:e1:e6:51:22:86:c5:5f:73:4a:9f:4d:79:05:6c: 16:c5:9d:9b:4e:c9:2e:19:38:08:5f:80:95:fe:d8:8a:31:73: b3:39:81:80:cd:1f:85:62:5e:f1:9f:68:f8:c4:78:d7:2e:53: eb:f6:11:a9:5e:8c:a0:07:e3:84:a1:83:75:87:52:70:9f:a2: 2a:28:30:fd:63:f3:c8:a5:72:8d:db:70:bd:81:1f:13:a3:b4: 63:e0:15:fe:ab:24:5f:41:5a:3f:06:97:71:a9:ae:4e:e3:70: 2a:08:97:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyRTExMTAvBgNVBAUTKDg1QjdFREI1QTY4NEJFM0Q5QTYyOTc1OTkwQTcxRDk5 OERFRjUxOEIwHhcNMjYwOTIzMDcwMzQyWhcNMjYwOTMwMDcwMzQyWjAYMRYwFAYD VQQDEw02YWIzNzljZi0wYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYY5eG2Cx70LAPD8tHgCM4QZanh9FKZXnKiQca6V5ue9XxRmCh6jGvVolMrU Eqkcrj2Vure3dz+5TexCc+m/OSIz4wwRpG1nltuQCiMfyTsc6YVAw1fArhj9ot5Y tSPuJofdZMECbyMYA/ZEOV+KvT38BsF+RMhDsQ6CigBHo/Ip/lsZh0QM9c+8AE5i HQwuDp2vOvb1T+M5ZmmDZNaa0usvdPydJHjKJMF2XnwcWdpzLhg14Tnu8747Dml9 UcjX59ty9Vxc4trF0hNXf+30UICkwd71jk9pQbO3z1FCT9w1uGpM8ZBg24M0yb6I vbFU2VIQuL7ujwFxK5ZC4pWUuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHPjGV3 cZHWMZzLLm4xNLGsEnDfMB8GA1UdIwQYMBaAFIW37bWmhL49mmKXWZCnHZmN71GL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJFMS8wQUJCMzU2OEM4 RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFhRXZqMmFZcGRaa0tjZG1ZM3ZV WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJFMS8wQUJCMzU2OEM4RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFhRXZq MmFZcGRaa0tjZG1ZM3ZVWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ08GURbYayl8O8AaOQiMRY3kDNUtPhK1/EVJPYhTIUSkJLoYv1gXfzfTAI9T /eTyCkjD3+ov95laH9ACbd1zrPup4TXImXBHQkL9+mZ77CCNtVk0o55fU9eJFp6G lym49nYCSLSInDkvTQhW9DfHZYz/k9BNE/AXsw4whlbYdDt1LH9psbeh2X/UVoj9 vg4VrTSMnuHmUSKGxV9zSp9NeQVsFsWdm07JLhk4CF+Alf7YijFzszmBgM0fhWJe 8Z9o+MR41y5T6/YRqV6MoAfjhKGDdYdScJ+iKigw/WPzyKVyjdtwvYEfE6O0Y+AV /qskX0FaPwaXcamuTuNwKgiXgA== -----END CERTIFICATE-----Generated at Thu Sep 24 12:08:48 2026 by rpki-client