$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json) Hash identifier: ebcXC3a9j+QP/t7oUQUS78ZBIT91uhhYiUpSb+J+dJg= Subject key identifier: 2D:B5:78:2B:69:EE:FC:47:7F:4E:E3:FA:78:57:19:21:EE:5A:97:CB Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft Manifest number: 0946 Signing time: Tue 22 Sep 2026 19:57:34 +0000 Manifest this update: Tue 22 Sep 2026 19:57:33 +0000 Manifest next update: Tue 29 Sep 2026 19:57:33 +0000 Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: pMpPmvvNRrqAUNj5i3rWevAM5QYNgnMNoU/CSAwZ8T4=) 2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: DnarnMUtuY2dzqecITNkqpdGiG9N5Q5Cf2m+lbFecbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: Sep 22 19:57:33 2026 GMT Not After : Sep 29 19:57:33 2026 GMT Subject: CN=6ab2ddae-4ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:7f:cc:35:26:8c:e4:34:64:66:d1:3d:7b: a2:69:a5:d6:52:2a:ed:74:e9:28:d3:cb:59:5e:ec: b6:1c:65:c8:56:4d:d5:76:f1:7d:49:c9:02:d9:e9: 98:82:d0:df:22:a7:9e:e2:93:3f:d0:5a:3d:44:ba: 80:0c:ae:a4:51:a4:5c:14:ff:f6:23:8c:a9:44:7b: 5b:05:1b:5b:49:8d:ba:7a:0f:39:4b:e3:8e:1d:57: 86:41:d0:60:ef:86:09:6d:ca:4f:ee:c6:35:95:f6: d5:55:f0:75:54:c1:1e:52:3f:e7:52:63:46:fa:49: 37:2f:56:89:46:88:72:9b:e0:24:6a:6c:d5:a2:8c: 09:00:13:e7:5b:72:ec:1d:7a:de:15:9f:d5:90:6a: f3:f3:b5:ad:7e:54:e5:8e:92:6e:22:58:52:d6:89: 4c:85:5e:a1:9b:8e:e4:7f:8a:2d:44:7c:47:c2:a8: fc:89:76:68:81:4c:5d:e9:9c:78:30:a5:6d:76:4d: ae:7a:18:0d:3a:14:0c:cd:e4:b7:e3:fb:d0:25:30: 13:8f:c2:9c:c9:fa:92:61:3b:15:81:21:69:3c:9d: d8:0e:43:dd:26:61:1b:5b:d9:b1:52:85:33:1a:bb: 04:89:1a:d6:89:1f:86:f4:7a:42:2b:2f:b6:6b:f0: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B5:78:2B:69:EE:FC:47:7F:4E:E3:FA:78:57:19:21:EE:5A:97:CB X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fa:6d:53:48:6c:0e:1a:09:fa:11:bd:11:66:72:bd:ef:72: b0:09:90:c2:9d:5c:4a:08:2e:df:8d:6f:ca:60:90:9b:05:8a: d0:f8:c0:fe:93:b4:85:b0:8d:46:8a:a9:d8:ea:5e:88:13:f7: 5f:31:d4:34:41:19:ee:28:74:f0:20:f9:dd:e1:26:97:e4:b5: f3:9a:49:95:b8:0f:17:0a:05:df:25:e2:8d:8c:d2:1f:1e:f8: 42:29:3f:88:a3:3b:88:34:f3:f4:41:eb:d5:6e:0e:a9:b4:0c: 30:36:67:b6:9b:4e:6f:f8:d9:8b:76:bf:f6:1a:04:6e:59:74: ba:8f:ee:d1:5b:9f:1a:24:f5:80:60:30:a2:e8:a8:d2:2b:19: 37:b5:85:dc:76:b3:4f:3f:0d:ba:19:f2:dc:cd:a0:9c:e2:89: 13:34:3f:d9:8d:be:e3:dc:fc:0a:12:30:e3:06:5e:08:a5:17: b4:f2:e4:d7:90:26:ce:79:67:fe:5b:44:e5:b4:65:43:21:26: 76:48:76:5f:60:fa:51:99:61:1a:b9:41:1c:56:e2:b4:31:21: 8a:c3:1f:af:dc:ec:5f:18:31:c3:d5:1b:cf:6d:97:18:38:c1: 62:e2:7b:90:de:81:d7:ac:1d:dc:d3:c9:4e:23:fc:5b:8b:5d: 46:bb:6f:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjYwOTIyMTk1NzMzWhcNMjYwOTI5MTk1NzMzWjAYMRYwFAYD VQQDEw02YWIyZGRhZS00Y2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfZ/zDUmjOQ0ZGbRPXuiaaXWUirtdOko08tZXuy2HGXIVk3VdvF9SckC2emY gtDfIqee4pM/0Fo9RLqADK6kUaRcFP/2I4ypRHtbBRtbSY26eg85S+OOHVeGQdBg 74YJbcpP7sY1lfbVVfB1VMEeUj/nUmNG+kk3L1aJRohym+AkamzVoowJABPnW3Ls HXreFZ/VkGrz87WtflTljpJuIlhS1olMhV6hm47kf4otRHxHwqj8iXZogUxd6Zx4 MKVtdk2uehgNOhQMzeS34/vQJTATj8KcyfqSYTsVgSFpPJ3YDkPdJmEbW9mxUoUz GrsEiRrWiR+G9HpCKy+2a/BqHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC21eCtp 7vxHf07j+nhXGSHuWpfLMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO QjFTd1BwaHlyVGlBeFU1TDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcPptU0hsDhoJ+hG9EWZyve9ysAmQwp1cSggu341vymCQmwWK0PjA/pO0hbCN Roqp2OpeiBP3XzHUNEEZ7ih08CD53eEml+S185pJlbgPFwoF3yXijYzSHx74Qik/ iKM7iDTz9EHr1W4OqbQMMDZntptOb/jZi3a/9hoEbll0uo/u0VufGiT1gGAwouio 0isZN7WF3HazTz8Nuhny3M2gnOKJEzQ/2Y2+49z8ChIw4wZeCKUXtPLk15Amznln /ltE5bRlQyEmdkh2X2D6UZlhGrlBHFbitDEhisMfr9zsXxgxw9Ubz22XGDjBYuJ7 kN6B16wd3NPJTiP8W4tdRrtvHg== -----END CERTIFICATE-----Generated at Wed Sep 23 22:27:16 2026 by rpki-client