$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: 2rlyuA52krRstfIAe7Ybd8VdSivO5N3n94iMm/gjmpQ= Subject key identifier: 4A:EF:1A:C2:0B:12:85:AD:40:3F:0F:07:02:54:5E:BA:C8:9F:84:80 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 01CB Signing time: Wed 23 Sep 2026 03:38:58 +0000 Manifest this update: Wed 23 Sep 2026 03:38:57 +0000 Manifest next update: Wed 30 Sep 2026 03:38:57 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: eA1g+Te5j7fBwJ2qH4b0499U9S+JouUzBHtifr3gM4Q=) 2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: BYKkFXMozWzhv1SFqTrB4VKA3O1SFw8hm1zrdVgqCeI=) 3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: xILVq3Pl1ryIoRueMpMu286AyVmWUfGzcv0mFdI+Wv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Sep 23 03:38:57 2026 GMT Not After : Sep 30 03:38:57 2026 GMT Subject: CN=6ab349d1-1e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:3c:99:60:55:2b:d6:05:a5:27:ab:8a:71: a2:55:7c:f3:d8:07:7a:f4:9c:c2:89:91:37:d0:3e: 4d:e5:be:df:ae:1d:1e:d5:bd:3a:d1:ab:7f:a0:8e: 64:c9:a3:c4:b0:4e:f5:61:bd:0a:b4:df:e2:ca:2c: ae:b9:c5:41:e8:3e:69:90:d6:69:b1:65:16:c4:ac: e2:51:73:f3:fa:79:73:ef:9e:f0:db:5c:43:ad:24: ca:41:98:b2:7c:43:8b:a8:65:67:c0:69:12:f2:cd: 83:1a:77:89:4c:75:ea:d0:ad:49:54:f4:f8:d1:a1: e7:1a:4a:0b:bd:e4:6f:52:73:ce:d0:da:e9:23:41: 49:d4:9e:30:26:00:5f:75:82:dc:9c:2d:69:21:c9: 6e:27:15:f6:f4:c9:f8:99:03:8d:87:3b:3d:1e:13: c5:2a:fb:a6:ab:12:c0:a5:ab:a8:b6:19:86:f9:12: e4:c2:6b:aa:9e:13:ca:7a:bd:45:7a:55:5e:cd:74: 90:7d:53:27:b1:3b:a5:e5:b5:70:87:2a:50:96:78: 7f:ae:28:b2:e1:58:b7:a0:17:c7:be:5a:3b:41:5d: 2e:0e:5b:97:46:f1:c9:92:3b:be:7b:88:cf:df:0e: 9e:c8:8a:b2:ce:87:33:c0:79:57:0a:d6:94:e9:03: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EF:1A:C2:0B:12:85:AD:40:3F:0F:07:02:54:5E:BA:C8:9F:84:80 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a3:03:44:fc:71:f9:bf:5b:f7:97:71:6c:cc:77:04:3a:29: a9:b1:16:ff:fc:46:9a:5e:02:bc:76:0f:a1:46:63:70:2a:19: dd:74:2b:e3:3c:36:33:80:70:03:84:c0:08:9c:ff:2d:c4:6a: 4c:82:91:39:e8:a5:c6:94:35:d7:32:f2:85:e6:ab:8d:4b:9e: 5a:9d:5a:dd:23:34:da:2b:77:6b:9d:a4:14:e9:5c:d2:89:7c: b7:48:63:26:e4:bc:29:6b:95:59:8d:f9:b1:ac:45:de:55:c4: 28:6a:90:91:15:c3:1e:a6:4f:c0:5d:0e:4e:ca:a4:74:7c:92: ed:fe:af:7f:78:92:02:52:78:39:7e:26:ac:12:f9:f5:76:69: 26:5b:b7:7c:ef:5a:56:ac:01:2f:a4:31:c4:2c:a0:6a:f6:72: fe:24:d0:60:09:0c:ba:19:2f:4b:33:ff:00:61:63:d5:b7:c6: f2:23:3d:8a:de:4c:6c:c4:fe:7d:3c:92:cb:03:ce:81:1c:a0: e2:5e:61:60:fb:67:48:73:86:88:e4:77:26:7a:f6:7a:32:e0: 2a:28:08:80:dd:dd:f3:ca:a6:69:d4:72:ed:d8:cc:f5:7a:d5: f2:32:c7:ea:18:e3:5f:e3:38:cf:35:06:ae:01:ee:e9:ca:84: 2e:86:4e:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYwOTIzMDMzODU3WhcNMjYwOTMwMDMzODU3WjAYMRYwFAYD VQQDEw02YWIzNDlkMS0xZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkIk8mWBVK9YFpSerinGiVXzz2Ad69JzCiZE30D5N5b7frh0e1b060at/oI5k yaPEsE71Yb0KtN/iyiyuucVB6D5pkNZpsWUWxKziUXPz+nlz757w21xDrSTKQZiy fEOLqGVnwGkS8s2DGneJTHXq0K1JVPT40aHnGkoLveRvUnPO0NrpI0FJ1J4wJgBf dYLcnC1pIcluJxX29Mn4mQONhzs9HhPFKvumqxLApauothmG+RLkwmuqnhPKer1F elVezXSQfVMnsTul5bVwhypQlnh/riiy4Vi3oBfHvlo7QV0uDluXRvHJkju+e4jP 3w6eyIqyzoczwHlXCtaU6QNuDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErvGsIL EoWtQD8PBwJUXrrIn4SAMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVqMDRPxx+b9b95dxbMx3BDopqbEW//xGml4CvHYPoUZjcCoZ3XQr4zw2M4Bw A4TACJz/LcRqTIKROeilxpQ11zLyhearjUueWp1a3SM02it3a52kFOlc0ol8t0hj JuS8KWuVWY35saxF3lXEKGqQkRXDHqZPwF0OTsqkdHyS7f6vf3iSAlJ4OX4mrBL5 9XZpJlu3fO9aVqwBL6QxxCygavZy/iTQYAkMuhkvSzP/AGFj1bfG8iM9it5MbMT+ fTySywPOgRyg4l5hYPtnSHOGiOR3Jnr2ejLgKigIgN3d88qmadRy7djM9XrV8jLH 6hjjX+M4zzUGrgHu6cqELoZOFg== -----END CERTIFICATE-----Generated at Thu Sep 24 01:01:54 2026 by rpki-client