$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: FoM8IZlgbagIG9VwQ26jDTmdURAv2A/1KdReCbRgx8w= Subject key identifier: E7:15:55:C8:7A:C2:B1:93:3D:97:C8:F5:23:04:72:9F:D9:F0:75:61 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 071F Signing time: Thu 24 Sep 2026 21:56:20 +0000 Manifest this update: Thu 24 Sep 2026 21:56:19 +0000 Manifest next update: Thu 01 Oct 2026 21:56:19 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: bKhhVTqy7Dtk92OaMqeVJKs3QGET2xuv1ynG2VLeM2Y=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: 5YAjbk8gVmeDfdIGGQU28GyyYyx56OcJBfHArp8itRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Sep 24 21:56:19 2026 GMT Not After : Oct 1 21:56:19 2026 GMT Subject: CN=6ab59c83-e1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:d6:a0:cf:aa:5e:a4:ee:ea:0d:00:40:30: 7f:20:ed:b3:98:a7:7a:e0:f1:75:de:10:62:19:a6: 60:74:10:57:90:52:a2:72:d1:42:2c:7a:26:c5:2b: 86:ff:69:9d:8f:4e:0a:e9:ad:ac:c1:f0:e1:eb:42: dc:66:fc:25:1a:36:ae:47:bb:63:2e:ee:f4:54:d8: f3:9c:29:9d:0c:1e:a3:94:02:b9:ab:81:3a:1d:93: 83:2f:77:d5:ad:48:87:41:3a:ab:9c:14:06:6d:f4: 0c:be:b2:e5:8a:b5:94:59:b4:c8:7a:82:35:a2:b3: 5a:cf:6d:cc:25:3a:62:d2:c6:32:61:a6:a8:07:a4: e7:65:0c:7b:2b:81:cc:e7:13:3e:04:51:c3:83:15: b0:2e:e1:99:50:76:61:65:30:10:22:46:c5:20:c5: 5a:4e:88:82:c1:61:cc:d0:f6:93:58:ad:d5:d8:8c: f6:26:80:51:1e:96:b3:2d:83:69:d2:0f:2e:7c:78: b0:ca:e1:f8:db:70:c0:ad:47:68:36:6c:59:17:fc: 1a:92:a5:6a:46:54:12:91:8d:3f:2b:a1:6b:08:86: 76:5c:7b:11:11:37:8c:db:cf:e5:e0:7d:00:d7:f4: bb:eb:c4:04:e0:43:15:44:fa:50:7e:eb:c2:ca:de: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:15:55:C8:7A:C2:B1:93:3D:97:C8:F5:23:04:72:9F:D9:F0:75:61 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:32:dc:50:42:81:8b:33:cd:4d:3b:42:db:7b:df:14:63:f5: 42:22:c3:a5:95:14:6a:b5:d3:35:9e:8d:51:fc:2d:f5:44:36: c2:cb:01:c8:98:e0:73:d7:55:0d:c1:e4:66:94:24:a2:fa:b6: 16:34:04:d7:e7:76:c3:5a:a1:68:20:b5:82:e0:18:3c:17:f5: 3a:7e:02:6d:81:cc:a7:85:8f:6b:0e:ed:d5:e0:d8:e7:df:b0: 22:a0:53:e9:4e:be:ca:8f:70:3e:50:fd:0a:1a:71:ac:e4:73: cd:93:c5:3f:8d:9f:aa:c0:4d:f0:12:ba:b5:00:70:9a:41:3a: a3:6d:91:22:1c:24:d1:3e:b3:a1:0e:9b:50:ef:a5:65:63:e3: 52:22:0e:53:45:88:06:e5:98:20:47:b8:39:b3:90:57:75:f4: 3e:5b:0f:0c:f1:1d:56:a1:9c:73:04:0d:14:a9:48:27:ce:9b: 39:17:f5:67:af:83:94:7e:12:5d:2e:0f:3b:5b:aa:44:55:36: c6:80:b8:ef:fb:27:65:35:74:77:c4:af:13:16:3f:a1:6b:a9: c9:0f:97:bd:39:3b:40:31:2d:41:1c:a6:30:73:59:98:17:99: 91:33:a9:ac:26:cf:a0:db:72:5e:a2:e2:58:4d:4d:91:55:a6: f4:8d:ef:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjYwOTI0MjE1NjE5WhcNMjYxMDAxMjE1NjE5WjAYMRYwFAYD VQQDEw02YWI1OWM4My1lMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi3WoM+qXqTu6g0AQDB/IO2zmKd64PF13hBiGaZgdBBXkFKictFCLHomxSuG /2mdj04K6a2swfDh60LcZvwlGjauR7tjLu70VNjznCmdDB6jlAK5q4E6HZODL3fV rUiHQTqrnBQGbfQMvrLlirWUWbTIeoI1orNaz23MJTpi0sYyYaaoB6TnZQx7K4HM 5xM+BFHDgxWwLuGZUHZhZTAQIkbFIMVaToiCwWHM0PaTWK3V2Iz2JoBRHpazLYNp 0g8ufHiwyuH423DArUdoNmxZF/wakqVqRlQSkY0/K6FrCIZ2XHsRETeM28/l4H0A 1/S768QE4EMVRPpQfuvCyt6ZCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcVVch6 wrGTPZfI9SMEcp/Z8HVhMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUzLcUEKBizPNTTtC23vfFGP1QiLDpZUUarXTNZ6NUfwt9UQ2wssByJjgc9dV DcHkZpQkovq2FjQE1+d2w1qhaCC1guAYPBf1On4CbYHMp4WPaw7t1eDY59+wIqBT 6U6+yo9wPlD9ChpxrORzzZPFP42fqsBN8BK6tQBwmkE6o22RIhwk0T6zoQ6bUO+l ZWPjUiIOU0WIBuWYIEe4ObOQV3X0PlsPDPEdVqGccwQNFKlIJ86bORf1Z6+DlH4S XS4PO1uqRFU2xoC47/snZTV0d8SvExY/oWupyQ+XvTk7QDEtQRymMHNZmBeZkTOp rCbPoNtyXqLiWE1NkVWm9I3vog== -----END CERTIFICATE-----Generated at Fri Sep 25 00:13:52 2026 by rpki-client