$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: UDChZqzhhMoOfDA+XJL6yBwZ8cA5jdUPvxYr4cWRtjA= Subject key identifier: B3:9B:81:19:8A:84:38:12:9E:E5:D9:0F:C9:4F:E4:DA:DF:BF:B5:48 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 06F2 Signing time: Sun 20 Sep 2026 22:04:40 +0000 Manifest this update: Sun 20 Sep 2026 22:04:40 +0000 Manifest next update: Sun 27 Sep 2026 22:04:40 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: oRf9p8/q3C5EI2C/NuiemAJDAZf539h7G4IVYv5xK/U=) 2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=) 3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=) 4: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=) 5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=) 6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Sep 20 22:04:40 2026 GMT Not After : Sep 27 22:04:40 2026 GMT Subject: CN=6ab05878-fec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:0a:8c:e0:c3:2e:2e:de:ad:f4:a7:41:70: b3:92:a4:36:5d:91:42:5f:5c:19:d1:94:cf:ae:ce: 5e:b8:5c:21:95:53:f5:e7:09:e6:53:f8:9a:20:c8: db:30:3a:a9:17:f4:10:fc:15:91:c3:3a:e3:26:06: 2b:36:e6:c0:7c:77:2b:5d:20:a1:8c:9d:1b:ca:37: 13:59:98:da:06:15:fd:00:20:de:84:48:94:9a:22: d1:09:8f:99:da:f2:2e:15:0a:9d:13:dd:ba:3d:1d: 68:8f:43:9a:30:2f:4f:67:fe:5a:f3:ef:0c:8f:ff: e9:d7:4c:3a:6b:3e:33:b6:bb:37:2c:84:6a:e4:05: 14:bb:a2:83:4f:33:58:27:09:17:15:30:2d:44:49: 7b:f7:25:a0:3c:e8:2a:95:4e:94:2c:56:6e:fa:38: eb:da:2f:ae:b5:40:d3:8a:9f:8b:05:7c:78:a0:f0: d7:8a:37:7b:db:c1:9a:ef:12:37:f0:83:e6:93:b4: c6:e6:bc:6d:12:52:de:28:40:e1:5b:eb:52:ea:b6: 8e:c2:9c:ca:e8:16:34:94:10:32:5f:5f:88:94:83: 12:2c:ff:8c:c0:79:bb:82:72:f2:e4:22:03:10:66: 6e:0f:62:17:15:5a:af:46:fc:e8:bc:fe:23:26:6d: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:81:19:8A:84:38:12:9E:E5:D9:0F:C9:4F:E4:DA:DF:BF:B5:48 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:97:cf:55:25:b0:77:df:d8:f4:92:0e:9c:7e:64:1b:db:8e: 93:b0:3a:bf:8a:58:cf:7f:84:63:30:4a:e0:89:3a:21:d9:9d: ea:15:eb:35:c1:89:34:b3:23:d8:84:c0:4e:49:bb:74:50:25: c8:8e:a9:63:ba:06:64:9f:3f:7a:2f:18:da:90:9a:d2:94:98: 5e:84:91:49:e0:e5:74:d8:b3:a5:c4:b7:ad:80:5d:08:7f:73: 73:9d:8c:b3:9a:e0:df:d9:25:d2:07:82:88:16:d2:08:b6:ee: f9:3f:5b:91:3f:2f:c5:f3:cf:63:71:62:d8:5d:d5:71:5e:1e: ab:34:7d:f2:a2:64:12:7d:f3:8d:91:aa:f5:64:67:4d:e7:2a: f1:c1:95:d6:fe:04:c3:43:de:a9:de:63:61:bc:71:19:bc:29: f5:f2:25:61:54:0e:7f:e7:17:bc:0a:dd:41:95:58:00:88:ee: 51:bf:0d:9e:34:e6:23:23:15:f3:7a:9c:75:34:66:cc:f8:25: a1:70:eb:56:0f:cb:fa:3f:63:6e:49:95:43:8f:44:0d:c1:e3: a5:e7:93:49:f4:36:3b:8f:00:3a:00:e9:68:f3:94:b8:bd:3c: ba:20:5d:a3:c7:a5:7c:c4:61:b9:39:33:95:65:71:6f:ae:c7: d8:01:1c:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwOTIwMjIwNDQwWhcNMjYwOTI3MjIwNDQwWjAYMRYwFAYD VQQDEw02YWIwNTg3OC1mZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF0KjODDLi7erfSnQXCzkqQ2XZFCX1wZ0ZTPrs5euFwhlVP15wnmU/iaIMjb MDqpF/QQ/BWRwzrjJgYrNubAfHcrXSChjJ0byjcTWZjaBhX9ACDehEiUmiLRCY+Z 2vIuFQqdE926PR1oj0OaMC9PZ/5a8+8Mj//p10w6az4ztrs3LIRq5AUUu6KDTzNY JwkXFTAtREl79yWgPOgqlU6ULFZu+jjr2i+utUDTip+LBXx4oPDXijd728Ga7xI3 8IPmk7TG5rxtElLeKEDhW+tS6raOwpzK6BY0lBAyX1+IlIMSLP+MwHm7gnLy5CID EGZuD2IXFVqvRvzovP4jJm2DcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLObgRmK hDgSnuXZD8lP5Nrfv7VIMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHJfPVSWwd9/Y9JIOnH5kG9uOk7A6v4pYz3+EYzBK4Ik6Idmd6hXrNcGJNLMj 2ITATkm7dFAlyI6pY7oGZJ8/ei8Y2pCa0pSYXoSRSeDldNizpcS3rYBdCH9zc52M s5rg39kl0geCiBbSCLbu+T9bkT8vxfPPY3Fi2F3VcV4eqzR98qJkEn3zjZGq9WRn Tecq8cGV1v4Ew0Peqd5jYbxxGbwp9fIlYVQOf+cXvArdQZVYAIjuUb8NnjTmIyMV 83qcdTRmzPgloXDrVg/L+j9jbkmVQ49EDcHjpeeTSfQ2O48AOgDpaPOUuL08uiBd o8elfMRhuTkzlWVxb67H2AEc4g== -----END CERTIFICATE-----Generated at Mon Sep 21 17:01:23 2026 by rpki-client