$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: PDlkeSVQrvaQalj0N4Uhbs1JwyiVeq1Hvz+XWjOiwX8= Subject key identifier: 81:9D:39:8F:53:26:BF:75:31:45:66:11:FB:18:74:A8:B7:17:C1:93 Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: 0147 Signing time: Sat 03 Oct 2026 06:02:40 +0000 Manifest this update: Sat 03 Oct 2026 06:02:39 +0000 Manifest next update: Sat 10 Oct 2026 06:02:39 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: RvLKv/HDXwRElPY/z8AztF7HHIfylRtSAnbAqgWbv84=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: Oct 3 06:02:39 2026 GMT Not After : Oct 10 06:02:39 2026 GMT Subject: CN=6ac09a80-34b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:d5:a5:db:f6:2f:64:fe:6a:5f:30:00:c1: 35:c4:91:57:45:36:ea:80:9d:3d:2b:2d:1a:86:14: e0:0c:ba:50:d9:12:a1:b8:51:eb:a9:fe:fe:13:aa: 35:4c:73:4d:59:0a:87:ba:6a:14:7f:a3:96:eb:dc: d1:a7:d9:53:dd:24:10:ce:c1:f6:33:ba:46:42:86: 45:08:9a:54:a9:1d:f9:e1:81:41:84:b7:22:b9:1d: 18:9f:09:b7:7e:e7:76:ec:6b:61:21:c2:01:a1:a1: 3d:e6:d9:a4:a6:e1:4c:30:46:b1:14:69:1e:71:1f: 06:cf:ea:4b:02:b8:3e:91:e4:7e:3e:fe:49:23:30: 61:ef:1d:b3:df:6b:5a:05:15:7b:69:5b:d5:2c:b4: 85:53:1c:4a:96:5b:53:9c:25:7e:b0:9f:b5:9c:c8: 9b:6e:73:7b:68:85:fb:d4:26:0a:f3:eb:0c:3c:07: fd:25:26:9b:2b:02:87:16:e4:d7:25:10:2a:42:fc: f7:4c:39:03:18:a8:85:53:56:4d:b2:96:da:f0:2f: 97:5c:39:0d:a9:59:77:62:38:07:4d:ab:12:35:e2: e1:47:b3:e4:bc:f0:73:87:0b:82:bf:80:dd:4e:18: 86:55:9c:a1:51:d2:9c:98:d6:96:c3:b0:c8:2f:2d: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9D:39:8F:53:26:BF:75:31:45:66:11:FB:18:74:A8:B7:17:C1:93 X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a3:30:f2:fa:15:cb:ea:7f:df:f2:13:23:80:50:e5:89:79: 31:b4:f9:3d:7f:ec:03:8e:b3:e3:34:b6:28:a9:8f:a5:30:ba: a9:aa:c3:7b:12:09:e2:35:6d:b7:fc:73:57:e2:8f:8b:f9:f4: 78:23:90:63:a5:e7:ba:ee:1e:28:42:67:42:39:1b:87:bc:c5: c4:6c:01:e6:8d:8f:2c:7f:e1:8b:42:25:ee:45:77:d9:d8:e6: c7:ae:75:0c:31:bc:94:fd:8f:75:9a:3a:d5:6f:31:36:a4:29: 2e:e8:6c:ac:66:8f:7f:89:b8:6b:27:65:67:74:ba:18:71:4e: 9a:32:e8:c0:9d:f6:5c:0f:11:d3:42:a3:a5:d9:6b:89:2c:8e: 5d:e4:a5:87:42:33:68:15:e2:30:24:fc:d4:48:aa:ac:5b:bb: 84:15:c9:53:e5:77:98:f9:a1:2b:d6:8b:e1:91:f8:06:30:64: b8:95:9d:74:b4:5d:99:76:62:3b:53:3d:15:7d:9a:c9:0b:7b: aa:96:d4:24:22:c5:8e:8b:c1:be:b8:27:b5:86:54:59:36:c2: 81:bc:43:7c:c4:15:aa:96:e0:9a:d4:6a:9d:11:6a:75:01:5e: d6:19:ee:9b:38:04:00:36:cf:3c:53:27:b7:52:ed:0b:92:a3: fa:26:4a:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVCQ0MxMTAvBgNVBAUTKDFFNDhFRkU1M0U2MkVEMjA0QkE3QTY5NDM4NENCQUM5 MjQ2Nzk0QTcwHhcNMjYxMDAzMDYwMjM5WhcNMjYxMDEwMDYwMjM5WjAYMRYwFAYD VQQDEw02YWMwOWE4MC0zNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqfVpdv2L2T+al8wAME1xJFXRTbqgJ09Ky0ahhTgDLpQ2RKhuFHrqf7+E6o1 THNNWQqHumoUf6OW69zRp9lT3SQQzsH2M7pGQoZFCJpUqR354YFBhLciuR0Ynwm3 fud27GthIcIBoaE95tmkpuFMMEaxFGkecR8Gz+pLArg+keR+Pv5JIzBh7x2z32ta BRV7aVvVLLSFUxxKlltTnCV+sJ+1nMibbnN7aIX71CYK8+sMPAf9JSabKwKHFuTX JRAqQvz3TDkDGKiFU1ZNspba8C+XXDkNqVl3YjgHTasSNeLhR7PkvPBzhwuCv4Dd ThiGVZyhUdKcmNaWw7DILy3vWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGdOY9T Jr91MUVmEfsYdKi3F8GTMB8GA1UdIwQYMBaAFB5I7+U+Yu0gS6emlDhMuskkZ5Sn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUJDQy9COTU4OEJBQ0NF NzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdTQkxwNmFVT0V5NnlTUm5s S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUJDQy9COTU4OEJBQ0NFNzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdT QkxwNmFVT0V5NnlTUm5sS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKMw8voVy+p/3/ITI4BQ5Yl5MbT5PX/sA46z4zS2KKmPpTC6qarDexIJ4jVt t/xzV+KPi/n0eCOQY6Xnuu4eKEJnQjkbh7zFxGwB5o2PLH/hi0Il7kV32djmx651 DDG8lP2PdZo61W8xNqQpLuhsrGaPf4m4aydlZ3S6GHFOmjLowJ32XA8R00Kjpdlr iSyOXeSlh0IzaBXiMCT81EiqrFu7hBXJU+V3mPmhK9aL4ZH4BjBkuJWddLRdmXZi O1M9FX2ayQt7qpbUJCLFjovBvrgntYZUWTbCgbxDfMQVqpbgmtRqnRFqdQFe1hnu mzgEADbPPFMnt1LtC5Kj+iZK8g== -----END CERTIFICATE-----Generated at Sat Oct 3 17:44:40 2026 by rpki-client