$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft File: HWndGf85hYAXzNTWJChu2UUIdl4.mft (raw, json) Hash identifier: hdLD+jptYE2PpUhxbwvy0qN1frssd/ena7Smi/9ECZw= Subject key identifier: 51:74:9E:D5:2E:BB:68:F8:59:A6:4A:5C:E2:7D:D9:84:6B:5D:FA:19 Authority key identifier: 1D:69:DD:19:FF:39:85:80:17:CC:D4:D6:24:28:6E:D9:45:08:76:5E Certificate issuer: /CN=A91FDCA0/serialNumber=1D69DD19FF39858017CCD4D624286ED94508765E Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft Manifest number: 09 Signing time: Wed 23 Sep 2026 08:58:57 +0000 Manifest this update: Wed 23 Sep 2026 08:58:57 +0000 Manifest next update: Wed 30 Sep 2026 08:58:57 +0000 Files and hashes: 1: HWndGf85hYAXzNTWJChu2UUIdl4.crl (hash: ZoDkrmOI6sBOA3GxwVCCiSBnP9rL+ybQnM+7eiOo8k0=) 2: DD4CA7C6B02D11F194FC8FE23A11F970.roa (hash: vbdU2q1m5He7gWpqkceFYruOg0Qt8/kbSUYbNIuqG94=) 3: WmMM-KD6RiDvI2A1D04hHOOwlDc.asa (hash: esSsw+qecb87rsRu4HEkTi2pPjm8WTnGLsqaIKbWMck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.crl rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCA0, serialNumber=1D69DD19FF39858017CCD4D624286ED94508765E Validity Not Before: Sep 23 08:58:57 2026 GMT Not After : Sep 30 08:58:57 2026 GMT Subject: CN=6ab394d1-33ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:e1:6e:78:b7:e6:4b:61:07:24:49:8b:db: 4f:44:01:f2:4a:bc:ce:6a:fa:9d:86:b8:f5:32:83: e2:32:e8:09:33:23:17:2a:42:3f:7f:da:ff:44:b6: f9:ce:61:e9:08:90:11:4c:1f:39:88:61:50:3b:04: c8:f3:1a:87:0d:12:c7:e7:94:80:c5:d4:df:7f:e5: 96:c1:b3:2b:15:c5:b6:66:b1:ed:0a:62:f4:7f:5f: 01:b7:00:ad:3b:2d:14:c6:5c:33:d6:a6:cb:ef:52: 98:cf:de:65:0a:a9:54:a1:e7:48:3f:01:11:5d:c0: d7:5c:79:40:ec:1e:26:cd:4f:98:9b:1d:96:ad:33: e9:00:0d:db:83:28:1d:95:61:a8:63:95:eb:4b:26: 21:ed:84:42:c1:2a:6d:03:ed:14:97:e2:c0:9a:91: fa:33:50:37:f1:e7:50:74:04:59:bb:d2:68:f5:7b: e0:c9:bb:bd:01:37:e9:82:8d:51:0e:17:04:3d:2f: a2:78:89:12:ba:be:68:58:f2:15:04:ed:a0:85:b7: 17:d7:40:d0:68:95:a2:b8:6e:3d:f4:2d:20:75:36: 6c:fd:b7:55:75:57:7b:43:2c:90:63:50:3e:bc:a3: 34:ee:8c:2a:31:59:0b:88:4a:4b:a2:1b:b1:91:e7: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:74:9E:D5:2E:BB:68:F8:59:A6:4A:5C:E2:7D:D9:84:6B:5D:FA:19 X509v3 Authority Key Identifier: keyid:1D:69:DD:19:FF:39:85:80:17:CC:D4:D6:24:28:6E:D9:45:08:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ab:fb:ac:aa:f8:be:6f:38:58:18:84:68:55:15:98:6f:9f: 26:7a:92:2c:97:7e:f0:bf:83:42:b6:36:70:49:43:cc:8f:3e: 01:09:2a:4f:bd:f4:e2:19:51:2f:f8:01:4c:cc:0c:cb:13:04: c5:db:16:48:bb:b3:ac:bd:36:6c:e1:96:46:50:05:73:73:82: 0b:9e:6e:6f:51:ae:ec:48:b4:dc:94:be:88:da:c6:c1:ee:2d: 8e:e1:bb:0a:bb:f4:3b:4e:5c:69:ff:54:a1:c1:93:d6:c3:0c: fa:02:3f:ea:d2:3e:19:60:09:49:f8:77:30:20:01:e1:de:0d: 3c:0a:0c:53:0b:5b:92:d9:ce:03:48:65:f2:2c:e2:de:b4:5f: 78:7f:2c:eb:a2:d5:89:2c:7c:61:b4:50:49:ab:ae:7d:db:fa: b9:57:01:34:d3:f7:79:e2:c1:6d:0e:90:84:02:4c:35:43:21: bf:07:9b:67:e8:27:f6:9c:64:86:4f:38:c1:23:7d:63:f0:ac: 09:27:bc:34:d8:6b:7b:7d:7a:30:a6:f0:d1:f6:b6:65:51:fd: ff:8c:49:f6:1a:3c:39:81:62:87:0c:91:54:16:30:e4:87:b2: 4f:06:b2:45:13:85:5e:a2:2a:f6:76:a2:05:45:e5:80:50:20: a5:27:5d:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RENBMDExMC8GA1UEBRMoMUQ2OUREMTlGRjM5ODU4MDE3Q0NENEQ2MjQyODZFRDk0 NTA4NzY1RTAeFw0yNjA5MjMwODU4NTdaFw0yNjA5MzAwODU4NTdaMBgxFjAUBgNV BAMTDTZhYjM5NGQxLTMzZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBBOFueLfmS2EHJEmL209EAfJKvM5q+p2GuPUyg+Iy6AkzIxcqQj9/2v9EtvnO YekIkBFMHzmIYVA7BMjzGocNEsfnlIDF1N9/5ZbBsysVxbZmse0KYvR/XwG3AK07 LRTGXDPWpsvvUpjP3mUKqVSh50g/ARFdwNdceUDsHibNT5ibHZatM+kADduDKB2V YahjletLJiHthELBKm0D7RSX4sCakfozUDfx51B0BFm70mj1e+DJu70BN+mCjVEO FwQ9L6J4iRK6vmhY8hUE7aCFtxfXQNBolaK4bj30LSB1Nmz9t1V1V3tDLJBjUD68 ozTujCoxWQuISkuiG7GR57ynAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUXSe1S67 aPhZpkpc4n3ZhGtd+hkwHwYDVR0jBBgwFoAUHWndGf85hYAXzNTWJChu2UUIdl4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQ0EwLzM1NUU5RkVBQjAx QjExRjFCRjE1RDQwNTM0MTFGOTcwL0hXbmRHZjg1aFlBWHpOVFdKQ2h1MlVVSWRs NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFduZEdmODVoWUFYek5UV0pDaHUyVVVJZGw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Q0EwLzM1NUU5RkVBQjAxQjExRjFCRjE1RDQwNTM0MTFGOTcwL0hXbmRHZjg1aFlB WHpOVFdKQ2h1MlVVSWRsNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLq/usqvi+bzhYGIRoVRWYb58mepIsl37wv4NCtjZwSUPMjz4BCSpPvfTiGVEv +AFMzAzLEwTF2xZIu7OsvTZs4ZZGUAVzc4ILnm5vUa7sSLTclL6I2sbB7i2O4bsK u/Q7Tlxp/1ShwZPWwwz6Aj/q0j4ZYAlJ+HcwIAHh3g08CgxTC1uS2c4DSGXyLOLe tF94fyzrotWJLHxhtFBJq6592/q5VwE00/d54sFtDpCEAkw1QyG/B5tn6Cf2nGSG TzjBI31j8KwJJ7w02Gt7fXowpvDR9rZlUf3/jEn2Gjw5gWKHDJFUFjDkh7JPBrJF E4Veoir2dqIFReWAUCClJ11p -----END CERTIFICATE-----Generated at Wed Sep 23 15:38:23 2026 by rpki-client