$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: 9AawomR2YCLiSSzVb1njO3DRd3CW7OIbGHRzekiGSA0= Subject key identifier: F7:0F:AF:37:F0:2A:A1:AB:EF:2A:F2:C7:4B:25:A7:FD:B4:65:35:BE Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 0149 Signing time: Wed 23 Sep 2026 05:14:53 +0000 Manifest this update: Wed 23 Sep 2026 05:14:52 +0000 Manifest next update: Wed 30 Sep 2026 05:14:52 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: +D/Ozp02FO54OsRHNcVjn6GanQPKcbUXu8EyCSznhmg=) 2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=) 3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Sep 23 05:14:52 2026 GMT Not After : Sep 30 05:14:52 2026 GMT Subject: CN=6ab3604d-ead9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:47:83:dc:4c:34:eb:cf:25:62:4b:6f:f1:f8: 28:e9:36:a7:e3:8a:55:1e:f3:c4:2c:8d:6e:d3:9e: 6c:6f:d4:9a:94:bb:5e:31:e5:da:2e:33:45:2a:68: f8:38:1d:88:06:6a:65:df:19:7e:51:1b:27:91:47: 46:47:a6:ec:11:40:96:a2:ca:dc:f7:35:10:57:8a: bc:ea:c6:13:ff:23:e4:47:e0:e1:ba:1a:7b:54:ba: 0c:55:a4:3b:fe:24:39:2a:80:95:15:f3:b7:8a:ed: e3:87:52:90:18:7f:a5:a1:84:e7:15:87:5e:f3:aa: ea:eb:94:f7:1f:38:49:67:56:43:3b:a8:e8:15:37: b6:e8:2d:0d:52:1f:fe:14:fb:6f:16:3c:ef:4c:93: 64:0a:ec:5b:7c:34:d3:5b:85:60:52:eb:45:34:82: 69:04:c6:d1:ed:5a:9f:c1:1b:86:eb:f6:ac:b9:8d: a4:ff:18:d9:27:38:60:2f:e4:c9:d0:b2:12:2a:68: 7a:29:c4:fd:17:d3:05:d4:3f:9f:83:39:c1:57:77: d4:0f:9f:30:2b:68:aa:02:f8:ba:70:94:8e:40:3f: 52:4c:e8:62:29:7b:d1:45:65:46:2d:82:22:db:86: b1:eb:d7:c1:03:88:d2:30:4b:6e:76:c1:b3:be:fc: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0F:AF:37:F0:2A:A1:AB:EF:2A:F2:C7:4B:25:A7:FD:B4:65:35:BE X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bc:b8:6c:82:de:1b:ea:ec:1d:44:d3:76:6d:47:0a:68:54: 80:84:40:57:ce:23:45:76:37:5d:42:e3:40:c7:62:ba:96:3c: 1d:f5:c2:43:57:6c:95:d9:72:93:be:2b:61:c8:ae:7b:b2:3b: 1a:cb:64:3e:b0:b5:57:da:b3:d5:0b:4a:ad:b0:41:5e:16:11: e1:90:c4:a7:7a:04:77:4d:8a:4b:f2:4c:6c:62:9d:ad:a2:28: e2:97:03:7d:d1:e1:35:65:fd:92:5a:3c:e9:62:7f:6f:28:58: db:17:2f:d8:4b:a3:2a:46:eb:ab:13:b5:7e:b1:0a:88:35:77: 17:f5:66:be:8c:1a:81:2d:14:6c:77:37:37:ef:14:e2:cb:c0: 4e:61:8c:c7:dc:df:cc:d3:3c:50:58:fd:15:b4:bb:b4:94:00: 6e:c6:18:a9:e5:5c:95:11:5c:6d:0b:c2:66:68:a2:fc:69:f8: 1b:98:58:0f:2e:32:19:8a:1a:f6:65:b0:75:19:23:70:99:6a: 74:d9:99:ac:ef:e8:b5:07:f7:7d:9c:f6:8f:34:51:35:b1:be: 05:05:ec:75:5e:96:32:75:54:f1:30:b8:4c:aa:cc:30:43:19: 5c:28:1e:e7:db:49:26:4e:6e:a0:04:b9:8b:2f:32:0e:b3:d0: 68:bd:f2:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1 NkM1N0FERUQwHhcNMjYwOTIzMDUxNDUyWhcNMjYwOTMwMDUxNDUyWjAYMRYwFAYD VQQDEw02YWIzNjA0ZC1lYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9EeD3Ew0688lYktv8fgo6Tan44pVHvPELI1u055sb9SalLteMeXaLjNFKmj4 OB2IBmpl3xl+URsnkUdGR6bsEUCWosrc9zUQV4q86sYT/yPkR+Dhuhp7VLoMVaQ7 /iQ5KoCVFfO3iu3jh1KQGH+loYTnFYde86rq65T3HzhJZ1ZDO6joFTe26C0NUh/+ FPtvFjzvTJNkCuxbfDTTW4VgUutFNIJpBMbR7VqfwRuG6/asuY2k/xjZJzhgL+TJ 0LISKmh6KcT9F9MF1D+fgznBV3fUD58wK2iqAvi6cJSOQD9STOhiKXvRRWVGLYIi 24ax69fBA4jSMEtudsGzvvwBpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcPrzfw KqGr7yryx0slp/20ZTW+MB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz UHQzOHNhMWNUQ05XeFhyZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr7y4bILeG+rsHUTTdm1HCmhUgIRAV84jRXY3XULjQMdiupY8HfXCQ1dsldly k74rYciue7I7GstkPrC1V9qz1QtKrbBBXhYR4ZDEp3oEd02KS/JMbGKdraIo4pcD fdHhNWX9klo86WJ/byhY2xcv2EujKkbrqxO1frEKiDV3F/VmvowagS0UbHc3N+8U 4svATmGMx9zfzNM8UFj9FbS7tJQAbsYYqeVclRFcbQvCZmii/Gn4G5hYDy4yGYoa 9mWwdRkjcJlqdNmZrO/otQf3fZz2jzRRNbG+BQXsdV6WMnVU8TC4TKrMMEMZXCge 59tJJk5uoAS5iy8yDrPQaL3ySg== -----END CERTIFICATE-----Generated at Thu Sep 24 09:39:47 2026 by rpki-client