$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json) Hash identifier: ZXILTPrJjJECalrTl5E+RoWvv4ta7hNjtyKB1A5Fvxc= Subject key identifier: A8:42:A4:62:02:12:C0:E8:5E:B4:33:C0:91:3C:7C:7E:52:24:00:58 Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft Manifest number: 07CA Signing time: Thu 24 Sep 2026 21:18:03 +0000 Manifest this update: Thu 24 Sep 2026 21:18:02 +0000 Manifest next update: Thu 01 Oct 2026 21:18:02 +0000 Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: wkkq8AglRHj0DRL7YWulDrwjX7OQlASBrW8XDmBO+HA=) 2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Validity Not Before: Sep 24 21:18:02 2026 GMT Not After : Oct 1 21:18:02 2026 GMT Subject: CN=6ab5938b-a499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:11:d8:68:13:e9:85:73:bb:9f:55:47:69: 86:b5:41:14:67:9a:4d:63:d1:c9:c7:d1:53:45:0d: 20:b4:23:32:18:84:10:38:7c:f8:d0:89:03:23:80: 70:34:44:39:ad:08:21:4a:8c:e5:83:f1:ad:e5:a0: 8f:36:7a:6c:d9:49:51:16:df:c0:cc:73:6f:a3:f3: 3e:57:36:ac:cf:e6:d2:eb:9b:cb:84:72:d2:ee:58: e0:2c:22:9d:93:d2:3b:8a:c6:b9:51:d1:c7:7d:ea: 01:53:a4:c7:46:8a:eb:b8:f8:bf:3c:91:4c:ef:d7: 95:2c:bb:7c:c5:93:7f:77:77:3c:45:e9:cb:16:84: 0e:aa:4b:7d:4f:41:c9:58:36:86:a3:04:dc:9a:60: c7:c6:a4:44:2c:e8:75:e9:4e:6e:08:c4:24:4d:92: 00:b2:c1:bb:56:e5:2f:34:a8:60:04:ef:09:07:b7: b2:32:b6:2a:06:7c:28:1e:1b:68:dd:d8:83:fc:9d: d7:34:d2:f8:5a:dc:31:42:cf:14:c6:5b:c9:34:09: 1d:f0:00:a0:4c:58:00:fc:59:77:3e:a4:5a:a5:12: cc:51:55:07:3d:de:39:d0:9b:5b:b5:af:fd:99:6f: cd:c2:55:ca:a4:28:f5:fe:b2:e1:40:57:04:48:09: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:42:A4:62:02:12:C0:E8:5E:B4:33:C0:91:3C:7C:7E:52:24:00:58 X509v3 Authority Key Identifier: keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:0e:31:bb:85:2e:ea:71:fd:c4:82:03:ef:e4:e7:d0:ae:c7: c0:08:ae:82:a3:c5:e3:93:f0:be:ec:40:ab:9f:49:cd:5f:6c: 22:61:30:0e:f5:f7:47:70:65:a2:dc:de:36:86:b2:ba:ff:8e: ce:21:d2:6b:86:be:8f:49:90:ff:53:bd:b7:f7:56:25:e4:c0: 34:8c:c6:b6:c1:67:13:86:fe:77:d6:14:db:43:3d:bc:a8:52: 85:f2:88:fc:ac:f7:85:23:93:70:cd:3d:33:30:81:a8:cd:75: 0e:c3:4b:a6:a1:4e:0c:ad:53:08:28:6d:ec:9c:89:6e:a7:4e: de:8f:f3:c6:b2:56:f6:15:34:ef:60:58:70:98:b7:0a:17:d8: e0:10:f2:13:e5:98:a8:aa:75:85:57:16:e8:1d:73:a8:72:20: d7:83:a2:ce:c2:48:09:e8:3e:30:ee:3b:1d:bf:79:80:72:22: ce:58:60:e6:0f:9e:35:73:b0:28:41:26:f0:d8:4b:da:63:e2: 80:b9:c3:3e:8c:08:2f:b8:b6:bc:37:fe:a9:0c:2a:35:ab:19: a4:38:05:d1:a6:87:af:a2:49:b9:e6:8f:2e:c9:55:d3:67:0d: f3:b0:e9:87:57:66:0a:19:d8:39:75:7b:bf:c3:65:d3:d4:09: cd:a9:1c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5 Q0YzODhENUQwHhcNMjYwOTI0MjExODAyWhcNMjYxMDAxMjExODAyWjAYMRYwFAYD VQQDEw02YWI1OTM4Yi1hNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs0R2GgT6YVzu59VR2mGtUEUZ5pNY9HJx9FTRQ0gtCMyGIQQOHz40IkDI4Bw NEQ5rQghSozlg/Gt5aCPNnps2UlRFt/AzHNvo/M+Vzasz+bS65vLhHLS7ljgLCKd k9I7isa5UdHHfeoBU6THRorruPi/PJFM79eVLLt8xZN/d3c8RenLFoQOqkt9T0HJ WDaGowTcmmDHxqRELOh16U5uCMQkTZIAssG7VuUvNKhgBO8JB7eyMrYqBnwoHhto 3diD/J3XNNL4WtwxQs8UxlvJNAkd8ACgTFgA/Fl3PqRapRLMUVUHPd450Jtbta/9 mW/NwlXKpCj1/rLhQFcESAl0VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhCpGIC EsDoXrQzwJE8fH5SJABYMB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2 NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3 bnpxUWJyQjlXUnljODRqVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1Q4xu4Uu6nH9xIID7+Tn0K7HwAiugqPF45PwvuxAq59JzV9sImEwDvX3R3Bl otzeNoayuv+OziHSa4a+j0mQ/1O9t/dWJeTANIzGtsFnE4b+d9YU20M9vKhShfKI /Kz3hSOTcM09MzCBqM11DsNLpqFODK1TCCht7JyJbqdO3o/zxrJW9hU072BYcJi3 ChfY4BDyE+WYqKp1hVcW6B1zqHIg14OizsJICeg+MO47Hb95gHIizlhg5g+eNXOw KEEm8NhL2mPigLnDPowIL7i2vDf+qQwqNasZpDgF0aaHr6JJueaPLslV02cN87Dp h1dmChnYOXV7v8Nl09QJzakcIg== -----END CERTIFICATE-----Generated at Fri Sep 25 01:34:52 2026 by rpki-client