$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: Mn1VLIE9/6ZmyQJZF9uvrlN0/Gk/eTASsLJA5Psw9YI= Subject key identifier: BD:36:FF:10:CF:2B:E5:75:CC:13:F9:B9:A5:B8:75:18:8C:8C:11:E0 Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: B0 Signing time: Wed 23 Sep 2026 06:54:00 +0000 Manifest this update: Wed 23 Sep 2026 06:53:59 +0000 Manifest next update: Wed 30 Sep 2026 06:53:59 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: w5hoc3/X1uezUZeVFHLKrwoezbPukcymPikfOJNnJQE=) 2: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=) 3: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Sep 23 06:53:59 2026 GMT Not After : Sep 30 06:53:59 2026 GMT Subject: CN=6ab37788-89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:8e:63:c7:9e:ee:a5:16:18:db:af:1d:4f: 52:9b:4c:2d:17:8d:88:ba:9f:f2:be:72:88:d7:92: b1:e0:da:0d:9b:7e:f1:bc:8d:5d:fd:d8:eb:cd:9e: 08:d7:b9:d0:b3:cd:a8:4a:c2:e8:40:a5:0e:2f:e1: 77:0b:06:0d:ad:0e:ba:3d:19:4d:14:20:7e:5d:77: 95:20:7a:ac:7e:c2:3f:1a:b8:fe:4b:50:3f:f6:15: e6:81:0d:c7:2f:fa:20:dd:13:83:0b:79:4f:3e:33: 9c:85:a6:70:d7:79:09:70:de:33:8f:5c:c8:c0:7d: 8c:bc:62:64:e7:99:d4:df:11:be:9f:32:a1:db:b1: e8:1f:f3:96:bb:e8:9f:91:cf:d9:a1:d1:e3:e8:b3: 87:f9:0b:a2:0f:09:45:ca:f4:e7:3e:79:1e:30:01: 2f:f0:c7:2c:7d:47:a5:b6:93:77:21:d6:73:71:7b: ca:73:1f:04:12:03:67:ea:13:89:41:04:7f:0c:63: 39:53:8d:de:a8:b7:3d:b8:ae:6e:29:e6:a0:ba:be: fd:cb:bf:d5:d6:d8:6d:7b:13:2f:7a:36:7f:67:28: c7:dc:3b:12:bb:b1:74:c2:b3:d8:bc:99:d5:79:3c: 37:86:04:08:d2:eb:30:0f:a7:44:a9:9f:26:2c:59: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:FF:10:CF:2B:E5:75:CC:13:F9:B9:A5:B8:75:18:8C:8C:11:E0 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ab:53:b8:17:05:9c:b2:99:e7:22:ed:f2:f0:31:eb:6d:ad: 6e:66:86:4d:ca:fa:fe:4f:1a:f2:9c:9d:0c:42:c7:ff:18:24: a6:be:ac:97:4d:c1:af:4c:b1:2d:f5:e2:f6:05:4d:84:90:4a: df:d6:be:d7:10:5b:61:31:b9:a8:d6:6e:7e:f1:69:fc:9f:d3: 60:01:ec:18:b6:d1:67:af:32:6c:24:25:d0:84:d3:c9:9c:69: 50:01:61:4d:f5:e3:4b:ad:27:ee:57:b0:a3:9e:95:4b:23:74: cb:f1:66:91:95:1d:0d:a1:3f:8a:bd:f5:f0:ea:25:c3:f6:c9: a1:3f:da:2a:9a:41:96:83:f0:28:6b:34:0f:86:bf:0a:95:b7: 1d:a7:93:32:c4:02:c4:9d:ef:15:a8:13:97:21:6b:7c:fe:80: 96:04:0f:80:81:43:a5:c5:33:82:bc:1f:20:c7:51:1b:c8:c3: a6:63:75:98:28:08:ef:91:40:3b:07:c7:2e:53:71:0b:e9:07: 19:8a:40:96:21:0c:40:c4:bc:32:3c:05:16:88:3f:d6:84:f6: 55:34:e7:62:d4:55:c0:bf:ce:b8:a4:fc:6b:fb:d1:77:b3:4e: 51:77:d6:93:ea:71:8c:da:aa:12:dd:8f:be:72:f6:22:b2:c6: cb:94:84:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc4QTcxMTAvBgNVBAUTKDFDNTk2ODU4NkNCNEM3RTI4M0YxNDE5RjU4NTA0NjhF REE1NTk2ODIwHhcNMjYwOTIzMDY1MzU5WhcNMjYwOTMwMDY1MzU5WjAYMRYwFAYD VQQDEw02YWIzNzc4OC04OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFmOY8ee7qUWGNuvHU9Sm0wtF42Iup/yvnKI15Kx4NoNm37xvI1d/djrzZ4I 17nQs82oSsLoQKUOL+F3CwYNrQ66PRlNFCB+XXeVIHqsfsI/Grj+S1A/9hXmgQ3H L/og3RODC3lPPjOchaZw13kJcN4zj1zIwH2MvGJk55nU3xG+nzKh27HoH/OWu+if kc/ZodHj6LOH+QuiDwlFyvTnPnkeMAEv8McsfUeltpN3IdZzcXvKcx8EEgNn6hOJ QQR/DGM5U43eqLc9uK5uKeagur79y7/V1thtexMvejZ/ZyjH3DsSu7F0wrPYvJnV eTw3hgQI0uswD6dEqZ8mLFlnOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL02/xDP K+V1zBP5uaW4dRiMjBHgMB8GA1UdIwQYMBaAFBxZaFhstMfig/FBn1hQRo7aVZaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzhBNy9GQUU5NkM0QUI2 MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgtS0Q4VUdmV0ZCR2p0cFZs b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy9GQUU5NkM0QUI2MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgt S0Q4VUdmV0ZCR2p0cFZsb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6tTuBcFnLKZ5yLt8vAx622tbmaGTcr6/k8a8pydDELH/xgkpr6sl03Br0yx LfXi9gVNhJBK39a+1xBbYTG5qNZufvFp/J/TYAHsGLbRZ68ybCQl0ITTyZxpUAFh TfXjS60n7lewo56VSyN0y/FmkZUdDaE/ir318Oolw/bJoT/aKppBloPwKGs0D4a/ CpW3HaeTMsQCxJ3vFagTlyFrfP6AlgQPgIFDpcUzgrwfIMdRG8jDpmN1mCgI75FA OwfHLlNxC+kHGYpAliEMQMS8MjwFFog/1oT2VTTnYtRVwL/OuKT8a/vRd7NOUXfW k+pxjNqqEt2PvnL2IrLGy5SEdQ== -----END CERTIFICATE-----Generated at Thu Sep 24 12:17:38 2026 by rpki-client