$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft File: hNLiPvClu7C9V4ERjF7OZYdw0PM.mft (raw, json) Hash identifier: 9oFj5/RXNnJMsFhVDbvmn+c5dXzTy23MGGI0PufxPR4= Subject key identifier: 3D:93:9E:D7:A9:0F:0E:9A:72:F2:18:BA:0A:29:37:60:25:C3:D2:31 Authority key identifier: 84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3 Certificate issuer: /CN=A9118572/serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft Manifest number: 49 Signing time: Fri 09 Oct 2026 09:10:03 +0000 Manifest this update: Fri 09 Oct 2026 09:10:02 +0000 Manifest next update: Fri 16 Oct 2026 09:10:02 +0000 Files and hashes: 1: hNLiPvClu7C9V4ERjF7OZYdw0PM.crl (hash: BoJHx1K84KAmHUpanTgohDRbDxCU5swtAxkvyb+CWhU=) 2: 434B951C541911F1A205AA4996833773.roa (hash: M7rzen4ve19DhDEBu/8OkXFTRebAryZoqY9bg5GuIQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118572, serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3 Validity Not Before: Oct 9 09:10:02 2026 GMT Not After : Oct 16 09:10:02 2026 GMT Subject: CN=6ac8af6b-36b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:3e:f0:92:e6:d2:c2:8e:33:dd:5c:cc:51: 7e:bf:f0:dc:b9:00:8b:24:43:97:81:a9:df:3a:6e: 80:ba:0b:78:09:ed:cf:ba:e1:e7:3e:8a:6b:1f:9b: 3e:6f:8b:7e:9b:e4:c6:cc:68:b1:20:70:0e:e0:4d: ea:7c:85:c1:c9:cd:a7:aa:17:7a:a2:7d:4a:69:9d: 21:ee:ee:7d:1c:e1:45:c0:85:81:4a:b7:ae:53:92: 83:bb:69:0e:bc:2f:ff:85:5a:79:85:5e:00:5c:e6: bf:c8:18:24:51:ca:23:37:c9:5c:87:1a:f9:6e:96: 21:5e:7e:fe:fe:2f:98:72:09:d6:44:8f:a2:91:3e: bc:31:18:ae:e6:3e:30:1e:cc:5c:3e:5c:40:e4:3c: 9a:76:64:90:08:39:56:76:ea:9e:04:ba:0e:2c:38: c1:59:52:ea:22:de:03:01:2f:6a:36:8d:33:fc:c7: a6:56:82:c5:b3:c2:27:3a:e6:23:c0:8f:1c:06:ba: d5:df:e0:94:67:8f:73:9b:ec:b2:2c:9a:b4:aa:4c: 2d:a1:ee:b7:d3:16:24:80:b7:4f:7e:e6:e2:5e:a0: 03:63:9e:76:43:97:82:58:49:9e:ea:36:19:da:76: 7e:6a:99:24:4c:df:f0:84:d4:8e:03:7a:87:d2:19: c6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:93:9E:D7:A9:0F:0E:9A:72:F2:18:BA:0A:29:37:60:25:C3:D2:31 X509v3 Authority Key Identifier: keyid:84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:88:fc:3f:da:e9:28:de:98:25:2b:b3:f7:ef:9e:ca:f6:da: 6f:6f:c5:4a:5d:df:28:16:a0:f0:fe:ad:4d:e7:6d:06:4a:02: 8b:d3:68:8a:b7:b1:bb:be:37:d7:69:65:56:08:75:b8:bf:ca: 22:7e:23:ae:17:b7:fe:da:b7:01:b4:d5:87:14:e2:63:02:83: 30:80:50:6d:70:44:ef:4b:f2:60:7d:f2:33:07:02:01:e5:66: a0:d9:c2:d3:ca:56:5a:2a:ed:4b:97:d7:eb:f8:2d:35:8a:31: 07:5b:fa:9b:f1:77:45:20:af:d3:00:fa:06:3e:f1:b0:4e:e5: d1:b4:c1:c8:ce:df:82:a2:48:9b:94:1a:78:b1:7d:b0:53:49: f0:5a:81:89:98:c3:d4:a6:04:88:ad:23:77:8e:24:6e:3c:3d: 3e:db:ce:eb:1f:76:86:0e:5f:41:38:27:25:a5:73:a5:4f:53: 6e:2f:a2:ce:b8:b9:1d:a0:c3:d7:5e:2d:ff:83:48:0b:86:51: 05:a7:af:66:e8:cb:a8:42:22:7e:06:dd:00:50:9f:4c:06:07: 22:c1:4e:36:e3:4b:c7:6a:3b:3a:e9:5b:5a:5e:5d:d3:43:38: b4:81:de:95:5f:ed:bf:08:31:e4:c2:ec:55:9f:f8:41:70:02: 47:cd:b1:de -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODU3MjExMC8GA1UEBRMoODREMkUyM0VGMEE1QkJCMEJENTc4MTExOEM1RUNFNjU4 NzcwRDBGMzAeFw0yNjEwMDkwOTEwMDJaFw0yNjEwMTYwOTEwMDJaMBgxFjAUBgNV BAMTDTZhYzhhZjZiLTM2YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC55D7wkubSwo4z3VzMUX6/8Ny5AIskQ5eBqd86boC6C3gJ7c+64ec+imsfmz5v i36b5MbMaLEgcA7gTep8hcHJzaeqF3qifUppnSHu7n0c4UXAhYFKt65TkoO7aQ68 L/+FWnmFXgBc5r/IGCRRyiM3yVyHGvluliFefv7+L5hyCdZEj6KRPrwxGK7mPjAe zFw+XEDkPJp2ZJAIOVZ26p4Eug4sOMFZUuoi3gMBL2o2jTP8x6ZWgsWzwic65iPA jxwGutXf4JRnj3Ob7LIsmrSqTC2h7rfTFiSAt09+5uJeoANjnnZDl4JYSZ7qNhna dn5qmSRM3/CE1I4DeofSGcYdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPZOe16kP Dppy8hi6Cik3YCXD0jEwHwYDVR0jBBgwFoAUhNLiPvClu7C9V4ERjF7OZYdw0PMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NTcyLzU4QUE2QTdFNTQx MzExRjE5NDQ1RjE3Nzk0ODMzNzczL2hOTGlQdkNsdTdDOVY0RVJqRjdPWllkdzBQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaE5MaVB2Q2x1N0M5VjRFUmpGN09aWWR3MFBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NTcyLzU4QUE2QTdFNTQxMzExRjE5NDQ1RjE3Nzk0ODMzNzczL2hOTGlQdkNsdTdD OVY0RVJqRjdPWllkdzBQTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAviPw/2uko3pglK7P3757K9tpvb8VKXd8oFqDw/q1N520GSgKL02iKt7G7vjfX aWVWCHW4v8oifiOuF7f+2rcBtNWHFOJjAoMwgFBtcETvS/JgffIzBwIB5Wag2cLT ylZaKu1Ll9fr+C01ijEHW/qb8XdFIK/TAPoGPvGwTuXRtMHIzt+CokiblBp4sX2w U0nwWoGJmMPUpgSIrSN3jiRuPD0+287rH3aGDl9BOCclpXOlT1NuL6LOuLkdoMPX Xi3/g0gLhlEFp69m6MuoQiJ+Bt0AUJ9MBgciwU4240vHajs66VtaXl3TQzi0gd6V X+2/CDHkwuxVn/hBcAJHzbHe -----END CERTIFICATE-----Generated at Sun Oct 11 09:00:06 2026 by rpki-client