$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: jFIfHntoCRxZfkM5+q4TCf/0+yIXjPMDdhD3wuXg/Js= Subject key identifier: 3D:BB:87:00:90:5E:3A:F3:BA:80:EC:FB:5E:0C:6A:3A:EA:03:AC:50 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0CBB Signing time: Thu 24 Sep 2026 18:29:38 +0000 Manifest this update: Thu 24 Sep 2026 18:29:37 +0000 Manifest next update: Thu 01 Oct 2026 18:29:37 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: 1k/Y5f8UpDmzoLuprwlkFoF2bJl/KXiX3ZBuJH1kbps=) 2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) 3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Sep 24 18:29:37 2026 GMT Not After : Oct 1 18:29:37 2026 GMT Subject: CN=6ab56c11-9325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:5f:5d:0a:3b:cd:a9:6c:ae:81:61:09:5e: 48:be:2f:fa:d9:93:ac:d2:59:9b:5f:91:a6:eb:43: 2f:e0:32:0d:dd:f0:d4:8f:8f:23:08:49:8c:8a:27: 27:bb:2e:f7:80:20:c1:56:72:e2:2d:00:fa:07:af: 00:11:c5:c5:37:1b:3d:ae:e4:4c:26:2b:2d:05:c7: bb:98:31:6e:97:c2:7e:37:3d:7d:09:99:e3:8b:15: 79:fc:37:57:ae:a3:1d:93:be:e2:50:2a:cc:da:2d: d4:64:3e:6f:93:79:38:fe:a5:45:0e:20:33:e8:95: 44:e0:39:85:51:65:e0:84:87:c5:04:ad:84:c0:21: f7:77:1a:51:f4:29:52:ac:a3:6c:7f:97:e6:4d:cd: b5:b1:e7:7f:40:bc:48:23:dd:a8:1f:e9:10:ba:b8: 77:c3:e2:9e:f2:26:75:7a:d6:90:c3:33:a1:13:3d: c0:15:f2:33:7e:e9:cc:65:e3:42:12:35:6c:0d:f7: 77:81:59:b8:1e:84:aa:48:68:ef:b0:78:61:22:ee: 32:ce:72:13:c8:4f:61:7c:ca:18:10:35:15:cc:7d: 93:13:8a:fe:82:a7:55:b5:fc:b2:25:ae:ce:50:18: c0:b3:f2:7a:15:26:c6:30:ab:27:b3:63:1e:f6:63: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:87:00:90:5E:3A:F3:BA:80:EC:FB:5E:0C:6A:3A:EA:03:AC:50 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:21:86:2a:d9:e7:c2:72:8a:64:c9:6a:21:b8:b7:4c:bb:1f: 26:dc:48:10:72:14:56:59:10:4f:b2:d8:c8:dc:7d:fb:a6:95: 8f:7c:c0:f5:78:73:70:df:04:17:9b:ba:e4:e1:93:b0:96:f8: bc:90:40:b4:5e:46:d3:bb:fc:be:bd:09:7e:ae:09:3f:a8:c4: d6:60:26:5b:b0:84:bf:c0:85:6c:90:1d:2b:59:c9:42:9d:7a: 75:b5:27:e2:2a:c1:2e:75:c4:aa:ab:96:67:ec:19:b3:c0:43: 68:13:f7:2f:8e:d3:bf:32:47:7a:13:12:3d:e8:94:a0:13:f1: 58:0d:d5:e6:bd:f1:91:03:4c:c6:a1:a6:6a:26:11:38:a8:e9: 8c:6b:67:9d:42:a4:d7:14:b8:f3:53:9f:14:eb:16:3d:5c:76: 20:79:3d:c5:7f:7d:31:49:09:6f:e2:7e:d8:bc:d6:f6:2d:ad: db:54:9f:96:db:ac:d4:05:1e:cc:09:c8:fc:cd:3a:5d:b8:0a: e7:d1:ca:35:ac:95:37:a6:a6:df:1b:ff:ff:40:4b:bf:8f:27: 2a:fe:76:79:09:63:fc:8e:9c:54:9d:f7:35:44:ad:a1:e5:46: aa:60:6f:b8:42:03:79:7b:0f:25:14:b2:13:b7:6c:84:f0:ad: 5a:50:b2:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwOTI0MTgyOTM3WhcNMjYxMDAxMTgyOTM3WjAYMRYwFAYD VQQDEw02YWI1NmMxMS05MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovVfXQo7zalsroFhCV5Ivi/62ZOs0lmbX5Gm60Mv4DIN3fDUj48jCEmMiicn uy73gCDBVnLiLQD6B68AEcXFNxs9ruRMJistBce7mDFul8J+Nz19CZnjixV5/DdX rqMdk77iUCrM2i3UZD5vk3k4/qVFDiAz6JVE4DmFUWXghIfFBK2EwCH3dxpR9ClS rKNsf5fmTc21sed/QLxII92oH+kQurh3w+Ke8iZ1etaQwzOhEz3AFfIzfunMZeNC EjVsDfd3gVm4HoSqSGjvsHhhIu4yznITyE9hfMoYEDUVzH2TE4r+gqdVtfyyJa7O UBjAs/J6FSbGMKsns2Me9mMEfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD27hwCQ XjrzuoDs+14MajrqA6xQMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSGGKtnnwnKKZMlqIbi3TLsfJtxIEHIUVlkQT7LYyNx9+6aVj3zA9XhzcN8E F5u65OGTsJb4vJBAtF5G07v8vr0Jfq4JP6jE1mAmW7CEv8CFbJAdK1nJQp16dbUn 4irBLnXEqquWZ+wZs8BDaBP3L47TvzJHehMSPeiUoBPxWA3V5r3xkQNMxqGmaiYR OKjpjGtnnUKk1xS481OfFOsWPVx2IHk9xX99MUkJb+J+2LzW9i2t21Sfltus1AUe zAnI/M06XbgK59HKNayVN6am3xv//0BLv48nKv52eQlj/I6cVJ33NUStoeVGqmBv uEIDeXsPJRSyE7dshPCtWlCyxw== -----END CERTIFICATE-----Generated at Thu Sep 24 21:03:57 2026 by rpki-client