$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json) Hash identifier: 3PJxcFKp1u+lgG0vkyxI+cESPKTm1+kQjh1vSl7Tjc0= Subject key identifier: 7D:EA:C0:CC:71:B1:99:50:91:27:39:CF:AA:FC:F0:01:8B:1E:F3:28 Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft Manifest number: A3 Signing time: Wed 23 Sep 2026 06:57:58 +0000 Manifest this update: Wed 23 Sep 2026 06:57:57 +0000 Manifest next update: Wed 30 Sep 2026 06:57:57 +0000 Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: WpWQ4qyr4pOUkwB3+ImDdEYA9JOQWRJBDcdEzOdMXn8=) 2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Validity Not Before: Sep 23 06:57:57 2026 GMT Not After : Sep 30 06:57:57 2026 GMT Subject: CN=6ab37875-c277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:76:05:19:77:63:87:65:5a:18:44:0a:9c: 93:31:17:6a:b4:5c:f2:5c:87:7d:72:c2:d2:e4:41: ec:91:59:96:5c:99:e2:5d:e4:a1:99:e6:4b:02:27: 3b:d1:14:8d:75:88:1c:e7:d7:8d:84:2f:f8:c8:3f: d4:ff:4d:3e:fa:cd:8b:de:60:5a:46:cc:d9:1a:7a: 54:90:13:e9:67:f2:ab:be:06:d4:03:cc:ee:08:71: 52:c8:ea:56:36:86:17:92:1c:84:10:ba:87:46:ff: 09:50:f4:cf:48:bc:90:a6:f5:23:15:12:6b:dc:7c: 5e:f0:1a:d1:be:e8:8d:58:87:7e:fd:8b:f6:ba:21: 65:6b:64:f6:d6:26:7e:40:a2:23:fc:80:ba:fb:86: 2c:e9:d7:04:a4:f4:da:2d:e8:4c:8f:42:dc:f4:8b: fc:3b:d3:db:dd:be:45:8d:52:af:97:df:24:6e:be: 25:63:8d:cf:0c:ab:e1:59:e6:4c:44:48:4b:9f:d6: 5e:ac:cb:60:95:84:b3:88:34:3c:b3:42:21:50:36: 66:b0:00:cb:e1:9c:79:5e:c3:99:b8:98:0b:f9:4d: 45:4a:aa:5e:18:16:b4:8a:b7:50:63:f0:ec:01:f4: c4:c7:b9:05:c7:68:30:03:6d:f9:1b:dd:9f:b8:a0: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:C0:CC:71:B1:99:50:91:27:39:CF:AA:FC:F0:01:8B:1E:F3:28 X509v3 Authority Key Identifier: keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:07:cd:1d:24:29:c0:ee:6b:9b:a3:9d:51:53:d5:70:a5:62: a4:13:1d:9e:f5:27:dc:2f:34:b4:11:e9:ee:a0:6f:0c:04:fe: a2:6a:13:4d:78:97:f8:2a:e2:f7:b3:e0:4a:18:10:e8:e6:6d: e5:87:a7:86:c8:80:fa:57:2f:ae:66:af:26:0f:0c:dd:29:54: 51:b1:9e:48:f4:19:f9:f4:ed:bb:62:af:7b:a7:ec:16:73:34: 4d:eb:69:7a:97:3e:e0:17:eb:5c:11:53:3f:7d:ca:62:51:b4: 96:f6:ff:8d:e7:80:6b:d8:60:9e:e2:19:91:bc:04:24:8f:1b: 67:61:49:dc:32:4d:d8:29:68:46:ea:06:99:fe:d2:df:03:5e: 19:3c:05:8c:f7:d8:03:84:b5:36:34:11:04:28:a4:2a:d7:0c: 19:19:18:e0:3b:3e:e4:e3:c0:31:88:be:be:b2:16:1a:d5:c5: c6:83:aa:1e:68:5e:76:65:58:cf:1c:1a:b6:ee:9b:9d:f4:78: e1:cd:e2:69:b7:ec:df:59:3c:59:1e:1d:6f:f3:37:e4:2a:cb: 9d:23:92:75:66:a7:57:71:87:ad:63:9b:22:49:cb:ee:b1:68: 3b:f5:f5:06:88:8e:97:ab:19:bc:dc:4d:2f:dc:c6:af:ec:0d: 64:40:cd:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ5QkExMTAvBgNVBAUTKEU4NzkwMzAxN0FCMUYwNkE5Q0I0NkFCMDIxQkQwQjky MUM5QUZBODgwHhcNMjYwOTIzMDY1NzU3WhcNMjYwOTMwMDY1NzU3WjAYMRYwFAYD VQQDEw02YWIzNzg3NS1jMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmah2BRl3Y4dlWhhECpyTMRdqtFzyXId9csLS5EHskVmWXJniXeShmeZLAic7 0RSNdYgc59eNhC/4yD/U/00++s2L3mBaRszZGnpUkBPpZ/KrvgbUA8zuCHFSyOpW NoYXkhyEELqHRv8JUPTPSLyQpvUjFRJr3Hxe8BrRvuiNWId+/Yv2uiFla2T21iZ+ QKIj/IC6+4Ys6dcEpPTaLehMj0Lc9Iv8O9Pb3b5FjVKvl98kbr4lY43PDKvhWeZM REhLn9ZerMtglYSziDQ8s0IhUDZmsADL4Zx5XsOZuJgL+U1FSqpeGBa0irdQY/Ds AfTEx7kFx2gwA235G92fuKBECwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3qwMxx sZlQkSc5z6r88AGLHvMoMB8GA1UdIwQYMBaAFOh5AwF6sfBqnLRqsCG9C5IcmvqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDlCQS9FMzY3RjZDNkJF RjUxMUYwOUI3RTcyMDlDNEY5QUUwMi82SGtEQVhxeDhHcWN0R3F3SWIwTGtoeWEt b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDlCQS9FMzY3RjZDNkJFRjUxMUYwOUI3RTcyMDlDNEY5QUUwMi82SGtEQVhxeDhH cWN0R3F3SWIwTGtoeWEtb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0AfNHSQpwO5rm6OdUVPVcKVipBMdnvUn3C80tBHp7qBvDAT+omoTTXiX+Cri 97PgShgQ6OZt5YenhsiA+lcvrmavJg8M3SlUUbGeSPQZ+fTtu2Kve6fsFnM0Tetp epc+4BfrXBFTP33KYlG0lvb/jeeAa9hgnuIZkbwEJI8bZ2FJ3DJN2CloRuoGmf7S 3wNeGTwFjPfYA4S1NjQRBCikKtcMGRkY4Ds+5OPAMYi+vrIWGtXFxoOqHmhedmVY zxwatu6bnfR44c3iabfs31k8WR4db/M35CrLnSOSdWanV3GHrWObIknL7rFoO/X1 BoiOl6sZvNxNL9zGr+wNZEDN8w== -----END CERTIFICATE-----Generated at Thu Sep 24 03:10:50 2026 by rpki-client