$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json) Hash identifier: TwFD6k0hhlbIfAf0rhj8U9PLaHRRF2/vBuGQSffCyhE= Subject key identifier: EB:69:58:21:89:81:6E:DE:10:54:02:84:29:9B:86:25:C3:7C:5D:B1 Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft Manifest number: 08D4 Signing time: Sat 10 Oct 2026 20:40:53 +0000 Manifest this update: Sat 10 Oct 2026 20:40:53 +0000 Manifest next update: Sat 17 Oct 2026 20:40:53 +0000 Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: FrXmBv0u1M08kP9nVMKNqIpj2FKbmUawucHmbf7jUxg=) 2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: cGYw9RXkN6jl5Saa1Bh0uceE3pbuIShbY5CrfH5p5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Validity Not Before: Oct 10 20:40:53 2026 GMT Not After : Oct 17 20:40:53 2026 GMT Subject: CN=6acaa2d5-a498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:41:c0:61:31:50:3a:02:f0:d8:0b:0c:b4: e6:34:e4:a0:68:6e:4d:50:e7:b0:f1:9f:f2:44:46: 10:de:b0:b8:25:ad:6c:71:bb:8d:01:d4:55:8c:b9: db:c7:9b:d5:6f:8d:e2:57:f3:59:89:40:dc:f8:57: 11:57:40:7a:92:cb:7b:02:a4:47:7c:66:6c:f7:8e: 02:21:82:c5:14:fd:aa:f2:35:2e:63:c7:ec:88:e9: e3:0a:75:23:6e:d8:65:bf:31:f3:11:4e:ea:7e:45: f1:7f:f5:07:ea:a7:2b:b4:bd:42:74:c9:fb:a5:dd: d6:7c:86:03:03:30:e2:50:a4:21:89:e4:88:89:12: 71:24:ba:8e:77:94:a8:ed:09:21:19:c7:eb:e8:14: d3:09:de:61:d6:21:e1:18:0d:94:ec:13:1e:f8:b6: fb:61:bc:ee:89:df:3f:90:fc:61:a7:b7:1b:f5:b0: 9d:64:66:55:3a:55:8e:e8:35:2c:ff:49:f5:40:22: 2e:85:ed:f7:61:24:8c:6f:7b:77:64:bf:c5:f7:5c: 2e:8f:9c:ac:4f:d5:28:82:3e:2e:b2:29:cf:3b:89: 21:44:4d:ed:4f:58:2b:13:7b:e0:84:f4:be:5a:8f: c8:49:57:e7:c9:a1:4e:bc:a4:22:d7:06:fd:f8:74: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:69:58:21:89:81:6E:DE:10:54:02:84:29:9B:86:25:C3:7C:5D:B1 X509v3 Authority Key Identifier: keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:06:b7:b8:00:d8:0c:4b:f9:d4:46:02:68:6f:30:80:9e:0a: b4:b6:7c:eb:89:39:36:32:29:ae:2a:b2:a1:c8:43:a0:59:f9: 7f:67:a0:9c:58:0a:40:20:83:ca:bc:97:b5:f4:54:75:28:49: de:33:f7:dc:62:09:34:c8:22:fe:9d:b2:ca:33:2c:a5:16:33: 1f:41:13:1c:3d:95:82:34:a4:2c:81:e3:22:a2:2f:84:54:52: 5b:59:b1:0d:45:01:95:26:a1:0f:bf:97:b0:9e:66:cb:e3:6f: 6a:87:eb:be:fb:a5:f8:20:f6:b9:99:28:15:1f:ad:f8:b3:a4: 26:2c:a3:33:f3:cc:8c:05:3b:96:5c:f0:7c:87:cb:3d:b5:63: 0c:d4:07:12:b2:dd:d2:f2:b8:99:b6:fb:cc:74:fd:dc:e6:f2: b0:4c:e5:80:54:0a:3e:dc:7d:b0:39:0c:f4:c3:33:52:9c:b9: 3a:ee:b7:01:24:1a:57:53:ae:08:51:5e:35:f7:d4:59:57:90: 6a:7a:0a:64:f8:bf:d9:4e:e2:41:5f:ef:ef:5a:16:a6:d2:be: 0d:65:ab:be:3e:8e:9c:4a:da:ab:7b:0b:61:fd:47:73:9d:b6: d4:0d:24:a8:20:52:14:a4:c7:0e:cc:64:6a:f2:6b:5d:27:fb: 9a:83:d4:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx NkRGMjZFQzIwHhcNMjYxMDEwMjA0MDUzWhcNMjYxMDE3MjA0MDUzWjAYMRYwFAYD VQQDEw02YWNhYTJkNS1hNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIhBwGExUDoC8NgLDLTmNOSgaG5NUOew8Z/yREYQ3rC4Ja1scbuNAdRVjLnb x5vVb43iV/NZiUDc+FcRV0B6kst7AqRHfGZs944CIYLFFP2q8jUuY8fsiOnjCnUj bthlvzHzEU7qfkXxf/UH6qcrtL1CdMn7pd3WfIYDAzDiUKQhieSIiRJxJLqOd5So 7QkhGcfr6BTTCd5h1iHhGA2U7BMe+Lb7Ybzuid8/kPxhp7cb9bCdZGZVOlWO6DUs /0n1QCIuhe33YSSMb3t3ZL/F91wuj5ysT9Uogj4usinPO4khRE3tT1grE3vghPS+ Wo/ISVfnyaFOvKQi1wb9+HRhqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtpWCGJ gW7eEFQChCmbhiXDfF2xMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1 cEtZdmVFemwtN0VXM3lic0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuga3uADYDEv51EYCaG8wgJ4KtLZ864k5NjIpriqyochDoFn5f2egnFgKQCCD yryXtfRUdShJ3jP33GIJNMgi/p2yyjMspRYzH0ETHD2VgjSkLIHjIqIvhFRSW1mx DUUBlSahD7+XsJ5my+Nvaofrvvul+CD2uZkoFR+t+LOkJiyjM/PMjAU7llzwfIfL PbVjDNQHErLd0vK4mbb7zHT93ObysEzlgFQKPtx9sDkM9MMzUpy5Ou63ASQaV1Ou CFFeNffUWVeQanoKZPi/2U7iQV/v71oWptK+DWWrvj6OnEraq3sLYf1Hc5221A0k qCBSFKTHDsxkavJrXSf7moPUDw== -----END CERTIFICATE-----Generated at Sun Oct 11 00:59:50 2026 by rpki-client