$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft File: He4XpqM4DuSI7ztuISW4eOZAckg.mft (raw, json) Hash identifier: Z1wiBM9GkLsiXoPRMncrsoynqZIZPRpL3ldIp9IfQAA= Subject key identifier: 5D:28:A2:70:E3:10:1D:66:68:79:EF:D4:3D:30:BD:89:4A:89:EF:1B Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft Manifest number: 027C Signing time: Fri 25 Sep 2026 02:04:24 +0000 Manifest this update: Fri 25 Sep 2026 02:04:24 +0000 Manifest next update: Fri 02 Oct 2026 02:04:24 +0000 Files and hashes: 1: He4XpqM4DuSI7ztuISW4eOZAckg.crl (hash: lST3lSlvjy1V56nI1lQvmqXDcdj6Ta7QjPgIGLdY7yA=) 2: 91A463F68EF211F1955665D66611F970.roa (hash: 3Zu4wSnQBBq3lkzK9F3PC+ZEn2jGSzlYHJFjGae8M2g=) 3: 3C248A948D4111F1AD3AABFD6211F970.roa (hash: bBEKBjnwEkzANt3BU+uWRZGtxiwc6NAtMeokJphAkAc=) 4: 805A2E74660311EF90397033C4F9AE02.roa (hash: 5vtGlk0S0hYad6mDuGYTky+IHAV1KVmi2xi5vEoQKNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Validity Not Before: Sep 25 02:04:24 2026 GMT Not After : Oct 2 02:04:24 2026 GMT Subject: CN=6ab5d6a8-3a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:0c:24:b3:2b:ae:36:a7:5d:4c:28:43:6c: a7:43:25:f1:16:b4:02:d6:c9:3d:5c:90:06:83:37: 89:39:d3:89:6e:00:8d:59:1d:95:3e:06:49:d7:4c: 6d:3d:8f:f1:4a:1f:e3:93:4a:a4:e3:86:2a:9a:34: bd:d9:81:68:30:26:52:d4:af:6b:07:2f:34:1f:de: 6a:08:37:72:43:f5:84:dd:b5:2f:e7:2a:78:a6:06: 2e:cb:4d:a1:24:7b:ec:b2:df:f0:c7:98:c0:f7:31: de:6d:fa:61:33:12:e8:a4:3a:85:c3:9a:e2:79:6b: 0c:b8:d1:45:94:ff:90:a6:5f:00:e9:e9:7f:88:fc: f5:06:8c:74:a7:c4:05:7f:aa:a4:6c:2a:be:fd:b5: 32:e4:9a:bf:4e:11:d3:bd:93:ec:79:a8:71:4f:7c: 64:14:0e:b5:1a:dc:3c:7c:ca:7d:25:2c:cd:ec:06: 53:85:c3:c5:0c:40:9e:18:67:77:ac:4b:db:3f:4f: 9f:6e:f1:35:15:e8:aa:63:b5:ff:f0:7e:eb:21:b3: 6e:94:1b:3a:e7:dd:f2:c4:bf:9b:88:3e:aa:90:25: 60:1c:6d:6c:ce:94:aa:21:16:25:b1:63:8c:ff:d5: 86:7e:d6:ab:5c:ca:8c:68:2d:60:aa:8a:93:2b:ba: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:28:A2:70:E3:10:1D:66:68:79:EF:D4:3D:30:BD:89:4A:89:EF:1B X509v3 Authority Key Identifier: keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d1:c4:50:46:c1:8e:5e:c9:62:bf:70:f1:8f:47:da:2c:43: c6:65:d3:a6:91:91:23:e4:fd:56:83:ab:45:53:49:a2:2f:c3: 0c:be:56:72:f8:b8:55:de:dc:05:08:33:59:ab:f3:d1:29:c0: a0:10:31:8a:a5:15:63:9f:a4:30:c1:e9:24:a7:c8:82:5d:f0: 5a:c0:2c:94:cc:64:54:ca:cf:41:ba:ca:b7:84:d0:c8:d7:68: 6d:01:f6:be:91:f4:c3:e9:35:04:96:3c:e0:df:d3:2e:81:ca: f8:45:8a:f1:4d:26:60:73:4b:da:90:43:ec:18:e2:52:9f:6a: 64:79:f1:61:f6:74:0b:e0:94:07:5f:d4:6f:10:89:9f:a5:58: 54:69:d8:5f:08:9b:dc:84:4d:db:bb:2e:b4:29:93:d6:5e:32: 00:9a:4e:74:fb:f3:c6:72:2c:71:6b:59:4b:b1:96:8d:9a:40: 41:18:3a:eb:24:28:7e:fa:a5:4e:07:25:22:2e:4c:12:f1:58: b8:2f:25:40:e4:30:17:27:bd:a5:b7:d3:5d:c4:a7:19:d4:5f: 32:f3:18:ee:0b:ea:9d:36:37:d8:83:07:98:83:ea:a6:38:25: cc:47:ff:1b:19:65:5d:ac:ca:64:32:67:b9:ab:1a:6e:eb:1a: 53:2e:4e:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4 RTY0MDcyNDgwHhcNMjYwOTI1MDIwNDI0WhcNMjYxMDAyMDIwNDI0WjAYMRYwFAYD VQQDEw02YWI1ZDZhOC0zYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdAMJLMrrjanXUwoQ2ynQyXxFrQC1sk9XJAGgzeJOdOJbgCNWR2VPgZJ10xt PY/xSh/jk0qk44YqmjS92YFoMCZS1K9rBy80H95qCDdyQ/WE3bUv5yp4pgYuy02h JHvsst/wx5jA9zHebfphMxLopDqFw5rieWsMuNFFlP+Qpl8A6el/iPz1Box0p8QF f6qkbCq+/bUy5Jq/ThHTvZPseahxT3xkFA61Gtw8fMp9JSzN7AZThcPFDECeGGd3 rEvbP0+fbvE1FeiqY7X/8H7rIbNulBs6593yxL+biD6qkCVgHG1szpSqIRYlsWOM /9WGftarXMqMaC1gqoqTK7ppLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0oonDj EB1maHnv1D0wvYlKie8bMB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyMi8zRjdENjhBOEZERTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1 U0k3enR1SVNXNGVPWkFja2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtHEUEbBjl7JYr9w8Y9H2ixDxmXTppGRI+T9VoOrRVNJoi/DDL5Wcvi4Vd7c BQgzWavz0SnAoBAxiqUVY5+kMMHpJKfIgl3wWsAslMxkVMrPQbrKt4TQyNdobQH2 vpH0w+k1BJY84N/TLoHK+EWK8U0mYHNL2pBD7BjiUp9qZHnxYfZ0C+CUB1/UbxCJ n6VYVGnYXwib3IRN27sutCmT1l4yAJpOdPvzxnIscWtZS7GWjZpAQRg66yQofvql TgclIi5MEvFYuC8lQOQwFye9pbfTXcSnGdRfMvMY7gvqnTY32IMHmIPqpjglzEf/ GxllXazKZDJnuasabusaUy5Omw== -----END CERTIFICATE-----Generated at Sat Sep 26 03:07:50 2026 by rpki-client