$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft File: HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft (raw, json) Hash identifier: exnbYHDfMH16pi4Ei3jYcz6SGi+bGfbz4UovNF5NrfU= Subject key identifier: 34:2B:61:67:67:84:BA:A7:A3:63:E1:7E:6C:98:E8:FA:9D:D4:8F:7F Authority key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D Certificate issuer: /CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft Manifest number: 0165 Signing time: Wed 23 Sep 2026 04:47:40 +0000 Manifest this update: Wed 23 Sep 2026 04:47:39 +0000 Manifest next update: Wed 30 Sep 2026 04:47:39 +0000 Files and hashes: 1: HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl (hash: Af3tr5fVOvy16MNS5yecWsuVcthVgVQjIix+jt8Ewy0=) 2: 4E7F3B4C955B11EFACD8F26CC4F9AE02.roa (hash: kw9fZbNGZZ3kdKJfF8SYCLZeUjioT1ZZ2tfUfZYgkvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Validity Not Before: Sep 23 04:47:39 2026 GMT Not After : Sep 30 04:47:39 2026 GMT Subject: CN=6ab359eb-5d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:ad:32:b7:c7:ca:fe:99:86:b6:34:b5:e9: 35:21:e5:bf:5f:98:ea:35:fd:95:e0:83:70:31:bd: c4:e3:40:a9:05:6f:4c:2e:59:49:b6:cd:f1:c4:4b: 4b:bf:ac:4a:ab:fa:13:00:5c:3b:92:77:cb:2b:4a: ee:ef:59:69:0b:12:3b:8d:29:8d:56:dc:92:79:1f: 7d:6c:34:2b:95:40:18:b0:95:4c:49:da:ac:90:35: 73:bd:52:eb:28:63:df:e6:f8:3b:56:b6:b1:4e:8e: c7:13:5a:fa:79:4b:e5:dd:3f:35:fe:d7:31:d0:fb: e3:0e:6b:61:7a:b0:bd:cd:df:37:22:63:86:c8:dc: 4e:10:31:3a:bf:55:53:3e:4b:78:63:a1:55:ca:af: de:e2:68:79:ab:f0:dc:27:d1:7b:6a:1c:f4:0f:a4: 30:16:41:71:92:c8:cd:12:87:a4:81:67:e7:95:68: 7a:6f:10:13:aa:1f:2a:ee:70:0d:d9:e8:d7:c7:53: 52:57:bf:f6:f2:38:42:6c:c7:5e:29:f3:3a:d6:d2: df:55:57:b6:27:5d:6e:82:89:b1:f5:74:7f:00:f0: dc:44:21:a6:da:22:a5:88:2b:ac:0b:1c:2e:52:e0: 15:db:83:0a:f7:ff:7a:2a:82:15:1a:11:6b:ac:90: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:61:67:67:84:BA:A7:A3:63:E1:7E:6C:98:E8:FA:9D:D4:8F:7F X509v3 Authority Key Identifier: keyid:1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:87:a5:fa:57:22:0d:5c:db:d7:17:2b:91:1e:e4:05:80:fc: 6d:7b:78:43:6f:29:f8:ac:3d:b5:13:66:7c:7a:00:4f:87:b1: 57:1e:58:a6:fd:f6:36:ad:1f:66:e1:a4:83:6e:c0:2c:42:aa: 51:0b:a4:50:74:37:83:a0:9d:fe:c6:19:8a:0a:bd:93:09:17: 41:1e:79:c0:ae:08:97:84:9e:58:31:be:3a:10:71:7f:c9:54: f7:b9:8b:20:fb:18:b8:a2:4a:1f:18:47:8d:e4:28:6e:c7:c1: 3d:d9:9b:d2:eb:b0:b7:3f:66:81:23:0e:ea:0c:09:5a:85:af: 7e:77:98:30:1e:22:f5:86:1d:f1:9c:c0:c8:63:69:85:4b:94: fa:c2:06:92:dc:7f:a3:3b:68:e8:85:c8:91:38:4f:d5:cf:b6: b2:3d:dc:e1:13:1e:6a:69:3d:10:44:1e:c6:81:64:44:4e:ae: 4f:83:86:2e:2c:12:7d:ba:d4:78:ee:29:64:8b:77:ba:ff:38: ed:a2:f1:5a:5c:ed:68:9b:0c:c7:41:ef:fd:67:76:e7:f5:8b: b1:68:fe:2d:87:76:c3:97:81:59:f7:6c:5d:eb:df:de:95:d5: b1:a8:86:a7:2a:ef:17:e3:9d:3e:7d:89:57:9b:7e:5a:ab:9a: 2b:6d:7d:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDFFNjU2RERFQzdFOThEMjRBMTg2RkZEQjZGNTk3NzEw QUFGRjJBOEQwHhcNMjYwOTIzMDQ0NzM5WhcNMjYwOTMwMDQ0NzM5WjAYMRYwFAYD VQQDEw02YWIzNTllYi01ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H6tMrfHyv6ZhrY0tek1IeW/X5jqNf2V4INwMb3E40CpBW9MLllJts3xxEtL v6xKq/oTAFw7knfLK0ru71lpCxI7jSmNVtySeR99bDQrlUAYsJVMSdqskDVzvVLr KGPf5vg7VraxTo7HE1r6eUvl3T81/tcx0PvjDmtherC9zd83ImOGyNxOEDE6v1VT Pkt4Y6FVyq/e4mh5q/DcJ9F7ahz0D6QwFkFxksjNEoekgWfnlWh6bxATqh8q7nAN 2ejXx1NSV7/28jhCbMdeKfM61tLfVVe2J11ugomx9XR/APDcRCGm2iKliCusCxwu UuAV24MK9/96KoIVGhFrrJCpRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQrYWdn hLqno2PhfmyY6Pqd1I9/MB8GA1UdIwQYMBaAFB5lbd7H6Y0koYb/229ZdxCq/yqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8zNUM3NkM3RTk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpTU2hodl9iYjFsM0VLcl9L bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htVnQzc2ZwalNTaGh2X2JiMWwzRUtyX0tvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8zNUM3NkM3RTk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpT U2hodl9iYjFsM0VLcl9LbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeYel+lciDVzb1xcrkR7kBYD8bXt4Q28p+Kw9tRNmfHoAT4exVx5Ypv32Nq0f ZuGkg27ALEKqUQukUHQ3g6Cd/sYZigq9kwkXQR55wK4Il4SeWDG+OhBxf8lU97mL IPsYuKJKHxhHjeQobsfBPdmb0uuwtz9mgSMO6gwJWoWvfneYMB4i9YYd8ZzAyGNp hUuU+sIGktx/ozto6IXIkThP1c+2sj3c4RMeamk9EEQexoFkRE6uT4OGLiwSfbrU eO4pZIt3uv847aLxWlztaJsMx0Hv/Wd25/WLsWj+LYd2w5eBWfdsXevf3pXVsaiG pyrvF+OdPn2JV5t+WquaK219Iw== -----END CERTIFICATE-----Generated at Thu Sep 24 15:25:44 2026 by rpki-client