$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: sELVeLE18kWJka61iDYTDUgOlS4g+zJaUnFVT5bbsUk= Subject key identifier: AC:6A:16:FD:61:72:66:79:3D:E0:F0:85:C5:9C:A3:18:CC:70:04:A9 Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 0670 Signing time: Sun 20 Sep 2026 22:29:08 +0000 Manifest this update: Sun 20 Sep 2026 22:29:08 +0000 Manifest next update: Sun 27 Sep 2026 22:29:08 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: Lowd0eoJP1WuLiOqmelkdVK1bTXsIJciWyJK8q4UbAI=) 2: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=) 3: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=) 4: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=) 5: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Sep 20 22:29:08 2026 GMT Not After : Sep 27 22:29:08 2026 GMT Subject: CN=6ab05e34-b14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:98:ac:f8:07:03:05:d9:9d:5f:f9:08:70: 10:26:63:b9:c1:c5:c4:33:25:77:82:d7:84:ae:ce: f0:b5:73:71:b1:1f:77:ac:6f:a4:cc:49:35:83:5f: 23:17:5a:d9:0c:da:22:4a:53:ec:67:c9:40:04:d4: 47:53:6f:39:bd:8b:99:6d:7d:de:dc:de:83:0e:83: d1:28:82:e6:7b:c4:e3:e8:6c:20:48:aa:fa:b1:91: eb:db:6f:a7:2b:3e:9c:b5:a9:c1:a7:d8:d3:92:85: 42:1e:f6:ff:94:71:96:a9:c5:0e:72:34:a9:fb:c0: 3e:96:f4:cc:dd:59:d7:52:5c:a1:d2:ee:57:ed:94: d1:7b:85:53:16:03:45:1d:6a:9f:9d:f2:b3:5e:79: 4b:fb:c6:0b:32:5e:66:97:58:6f:72:9a:13:1f:33: 2b:66:e4:1e:68:04:d2:d0:a9:b5:88:86:59:c1:66: b1:cf:d2:a0:3e:40:fd:37:05:e7:fc:71:88:cf:10: 00:6e:52:d3:6d:6c:16:6e:24:80:62:04:df:fd:e7: 75:68:46:b0:91:a4:18:80:59:57:b7:15:a8:86:de: 23:a3:ad:dc:08:15:16:f1:1b:67:c7:49:d0:b0:f1: 24:43:02:4f:22:1b:46:11:6b:53:2c:9f:f5:98:5e: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6A:16:FD:61:72:66:79:3D:E0:F0:85:C5:9C:A3:18:CC:70:04:A9 X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2b:e7:c2:0f:88:11:c8:4d:a9:95:9d:63:5f:eb:4a:21:2d: 97:07:af:7e:4e:54:4a:53:17:7f:a4:10:21:ae:92:03:3b:8f: 2d:2c:b7:35:1f:a6:e3:0b:11:a4:a7:74:34:88:6e:ca:2c:f5: 99:50:c9:cd:e0:2a:ee:7c:be:f5:97:68:8f:70:b9:c6:c5:f1: 85:b0:24:ad:8a:5d:a9:fb:7b:76:e6:a8:33:27:04:e7:9d:e6: 9d:63:2c:a9:ef:e7:32:e0:95:6c:78:8e:97:44:7d:14:06:0c: e4:7f:93:35:d9:03:22:3e:d3:65:df:ad:8d:9c:06:ca:11:17: e7:0b:8c:dc:6b:d4:02:91:56:f5:5f:33:ed:79:04:16:90:c0: 23:89:9f:09:32:a8:aa:15:55:82:ac:ae:f8:c1:4a:cc:28:c2: b0:8a:bd:c9:95:bf:1a:7f:5f:45:8d:af:b7:9b:c1:50:4d:c7: 46:20:98:a0:f0:04:e4:75:eb:62:2d:70:65:91:7d:e1:58:43: 30:7e:7c:21:83:86:4f:bd:cb:aa:ce:3c:22:9b:5c:3f:38:44: 73:de:99:82:4b:c0:e7:02:f3:eb:b9:f8:45:2f:37:39:f8:86: b2:80:5c:c8:e6:1f:bc:29:12:8e:90:23:db:e6:fc:cf:af:91: c0:2a:d3:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjYwOTIwMjIyOTA4WhcNMjYwOTI3MjIyOTA4WjAYMRYwFAYD VQQDEw02YWIwNWUzNC1iMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3aYrPgHAwXZnV/5CHAQJmO5wcXEMyV3gteErs7wtXNxsR93rG+kzEk1g18j F1rZDNoiSlPsZ8lABNRHU285vYuZbX3e3N6DDoPRKILme8Tj6GwgSKr6sZHr22+n Kz6ctanBp9jTkoVCHvb/lHGWqcUOcjSp+8A+lvTM3VnXUlyh0u5X7ZTRe4VTFgNF HWqfnfKzXnlL+8YLMl5ml1hvcpoTHzMrZuQeaATS0Km1iIZZwWaxz9KgPkD9NwXn /HGIzxAAblLTbWwWbiSAYgTf/ed1aEawkaQYgFlXtxWoht4jo63cCBUW8Rtnx0nQ sPEkQwJPIhtGEWtTLJ/1mF6m2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxqFv1h cmZ5PeDwhcWcoxjMcASpMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXSvnwg+IEchNqZWdY1/rSiEtlwevfk5USlMXf6QQIa6SAzuPLSy3NR+m4wsR pKd0NIhuyiz1mVDJzeAq7ny+9Zdoj3C5xsXxhbAkrYpdqft7duaoMycE553mnWMs qe/nMuCVbHiOl0R9FAYM5H+TNdkDIj7TZd+tjZwGyhEX5wuM3GvUApFW9V8z7XkE FpDAI4mfCTKoqhVVgqyu+MFKzCjCsIq9yZW/Gn9fRY2vt5vBUE3HRiCYoPAE5HXr Yi1wZZF94VhDMH58IYOGT73Lqs48IptcPzhEc96ZgkvA5wLz67n4RS83OfiGsoBc yOYfvCkSjpAj2+b8z6+RwCrT0g== -----END CERTIFICATE-----Generated at Tue Sep 22 22:20:44 2026 by rpki-client