$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json) Hash identifier: pWbmsS57lidmq1+xaKGUkV29iLs2K2oz5CzQMjZn1Nw= Subject key identifier: 0C:8E:52:A8:0F:E9:FF:B0:93:75:9F:0A:9A:2F:AB:4A:0F:75:C0:05 Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft Manifest number: 0125 Signing time: Wed 23 Sep 2026 05:37:43 +0000 Manifest this update: Wed 23 Sep 2026 05:37:42 +0000 Manifest next update: Wed 30 Sep 2026 05:37:42 +0000 Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: P687WYMS0DNTP3FRut8Z77xMPXfQ2VznQJXcnPTglj8=) 2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: kSc2xHms3sPfHeZuP4LV3Eoyr2OjFjDeReRTh5WRY7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Validity Not Before: Sep 23 05:37:42 2026 GMT Not After : Sep 30 05:37:42 2026 GMT Subject: CN=6ab365a7-d6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:71:d5:9e:70:be:30:3e:46:e4:14:9d:14: 24:2d:17:03:55:ae:97:25:35:b9:a0:46:48:88:41: 76:5f:a3:fe:f1:9d:ca:82:ce:43:d5:6a:cf:95:bd: 93:b1:4b:c5:40:c8:2b:13:1f:03:bb:3d:e6:27:25: 04:d4:25:e5:fa:1b:40:11:5c:37:09:8e:2b:9d:8c: 57:37:6c:73:86:98:3f:5b:f7:71:b0:1f:c9:18:5f: 08:a3:92:7c:11:b5:df:5d:9a:df:a0:f3:65:80:c4: 8b:4c:22:04:c8:95:cb:46:97:c1:84:f0:07:41:83: f2:81:24:46:86:96:2d:91:c9:72:e9:c9:85:04:a5: ad:79:04:37:61:3d:c1:80:60:72:07:83:91:43:9e: bd:8e:9d:e1:fd:53:81:1c:3a:60:dd:b9:8f:d3:ad: 06:09:d6:03:9f:3c:2e:ff:d1:50:8c:36:21:19:cc: 51:05:e5:8c:6e:14:1d:4d:34:25:f1:c5:e4:98:97: 6b:66:45:4f:54:c5:ea:8b:63:ba:a0:f9:40:06:40: e1:3f:68:4c:96:d4:28:10:ea:3d:47:d1:83:0e:2f: 4d:f3:f6:0e:4a:0d:73:9c:ee:ce:35:45:a3:fd:92: 50:47:aa:c2:3d:5b:2d:c1:ed:25:2f:62:8f:a5:92: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8E:52:A8:0F:E9:FF:B0:93:75:9F:0A:9A:2F:AB:4A:0F:75:C0:05 X509v3 Authority Key Identifier: keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f1:74:01:9d:f7:be:1e:c8:2b:aa:ae:29:e7:4f:1a:fc:78: c2:08:c7:15:f0:79:f0:4b:33:4f:94:57:25:16:ba:e0:e8:6a: 58:e2:9d:11:cb:a0:25:20:f9:c7:6b:ae:7f:b5:e0:b4:dd:15: ed:3f:47:8c:2e:50:69:a1:45:5f:e1:6a:e9:d2:24:3b:6a:04: 47:79:bb:09:5f:42:88:d5:85:56:e2:f4:2e:7e:ab:86:42:39: b0:98:8c:aa:14:8e:5b:a0:c8:38:e5:f1:9b:d5:e7:e2:8e:67: af:15:79:a3:40:ec:df:5c:e8:53:7f:97:a1:55:fc:c1:60:73: 2e:26:7d:f9:8f:53:a3:fd:15:a1:05:1d:08:21:ce:fc:e0:8d: ab:4b:b9:b7:3a:74:f3:db:e8:03:c4:f5:bc:fd:51:76:6a:b5: 1b:6d:78:57:fb:d5:0f:50:55:f5:a5:c0:18:a1:33:f9:eb:dd: 3d:71:09:3f:80:5e:a7:cc:fa:7a:e6:f4:f7:cc:82:61:67:7e: 41:64:f9:d0:fa:e8:9b:b4:24:04:97:cf:89:50:1b:50:11:fa: 24:05:99:99:a7:48:e7:77:d9:30:d8:30:a3:58:76:73:06:12: 1c:bf:c9:d1:d8:c3:8c:8a:db:6f:7f:17:12:63:d3:aa:1e:96: 64:62:63:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNkIxMTAvBgNVBAUTKDg1NzlCRTJEODM0NTY4MkYyN0FFRTcwNjJCQkQ0RUY3 NjY0RTU3MUIwHhcNMjYwOTIzMDUzNzQyWhcNMjYwOTMwMDUzNzQyWjAYMRYwFAYD VQQDEw02YWIzNjVhNy1kNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAostx1Z5wvjA+RuQUnRQkLRcDVa6XJTW5oEZIiEF2X6P+8Z3Kgs5D1WrPlb2T sUvFQMgrEx8Duz3mJyUE1CXl+htAEVw3CY4rnYxXN2xzhpg/W/dxsB/JGF8Io5J8 EbXfXZrfoPNlgMSLTCIEyJXLRpfBhPAHQYPygSRGhpYtkcly6cmFBKWteQQ3YT3B gGByB4ORQ569jp3h/VOBHDpg3bmP060GCdYDnzwu/9FQjDYhGcxRBeWMbhQdTTQl 8cXkmJdrZkVPVMXqi2O6oPlABkDhP2hMltQoEOo9R9GDDi9N8/YOSg1znO7ONUWj /ZJQR6rCPVstwe0lL2KPpZLSawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyOUqgP 6f+wk3WfCpovq0oPdcAFMB8GA1UdIwQYMBaAFIV5vi2DRWgvJ67nBiu9TvdmTlcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI2Qi83RUMwMDc2Q0ZF M0YxMUVGOEZBMjc3NTJDNEY5QUUwMi9oWG0tTFlORmFDOG5ydWNHSzcxTzkyWk9W eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYbS1MWU5GYUM4bnJ1Y0dLNzFPOTJaT1Z4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI2Qi83RUMwMDc2Q0ZFM0YxMUVGOEZBMjc3NTJDNEY5QUUwMi9oWG0tTFlORmFD OG5ydWNHSzcxTzkyWk9WeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmfF0AZ33vh7IK6quKedPGvx4wgjHFfB58EszT5RXJRa64OhqWOKdEcugJSD5 x2uuf7XgtN0V7T9HjC5QaaFFX+Fq6dIkO2oER3m7CV9CiNWFVuL0Ln6rhkI5sJiM qhSOW6DIOOXxm9Xn4o5nrxV5o0Ds31zoU3+XoVX8wWBzLiZ9+Y9To/0VoQUdCCHO /OCNq0u5tzp089voA8T1vP1Rdmq1G214V/vVD1BV9aXAGKEz+evdPXEJP4Bep8z6 eub098yCYWd+QWT50Prom7QkBJfPiVAbUBH6JAWZmadI53fZMNgwo1h2cwYSHL/J 0djDjIrbb38XEmPTqh6WZGJjUg== -----END CERTIFICATE-----Generated at Wed Sep 23 19:57:31 2026 by rpki-client