$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft File: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json) Hash identifier: EP5Vvs6esrDqaa6O37cNCPTsFQXGVqwMt0P3ycQbWS4= Subject key identifier: 64:7E:68:A2:49:AC:0E:A2:CF:C1:E9:2B:7F:9B:9D:2A:AD:02:19:AF Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D Certificate issuer: /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Certificate serial: 0F4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft Manifest number: 0F39 Signing time: Sun 20 Sep 2026 17:32:57 +0000 Manifest this update: Sun 20 Sep 2026 17:32:57 +0000 Manifest next update: Sun 27 Sep 2026 17:32:57 +0000 Files and hashes: 1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: CwJRl99F1hUxRn8ToRYdiJ/2UZFqAlGhgDMUI2shNac=) 2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: +FtX4u1ywl3Za0uOAjmlzNV6TvaK9vCSzZiXDAXrbHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3918 (0xf4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Validity Not Before: Sep 20 17:32:57 2026 GMT Not After : Sep 27 17:32:57 2026 GMT Subject: CN=6ab018c9-d085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:e1:42:0e:5f:17:19:0c:1c:c4:ab:67:f5: 3d:01:cc:e3:4e:c8:12:b0:30:6a:2a:b7:ae:47:91: 9e:da:a0:c6:11:3c:65:af:d5:bf:6d:ed:0f:57:4f: 35:2b:a3:01:8e:9f:8f:83:22:c5:7c:fc:e8:1d:9a: ac:b6:51:d3:1c:fd:86:fe:d9:88:91:35:84:6d:50: 60:dd:82:53:ea:0c:3e:03:de:f1:ce:ab:16:ab:8b: 34:cd:f3:15:86:79:d8:15:f5:3c:64:45:ab:1d:af: 88:9d:ae:3b:17:87:83:67:a9:f9:14:44:1b:cc:a3: 68:d8:95:64:0e:3c:f2:33:a1:46:7a:16:5f:c7:d5: 59:c5:18:67:f0:db:cb:04:bc:74:dc:a9:95:9e:e8: 5e:e6:44:16:40:dd:be:f5:00:3e:17:32:46:e7:6f: 67:ae:a9:c1:98:34:0f:af:1f:19:1d:0b:61:42:5b: f9:ae:53:10:6f:59:5e:14:bc:c2:15:0c:77:ca:0b: 67:65:87:71:49:b4:d4:db:88:0c:6a:60:5e:cb:21: 93:e5:89:06:e5:4f:36:56:18:6a:10:95:b5:cc:8d: 35:f7:7e:56:40:0f:f4:0c:3a:f3:a4:c1:ed:0d:d4: d2:52:53:de:dd:7c:84:73:46:05:37:d3:a9:07:73: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7E:68:A2:49:AC:0E:A2:CF:C1:E9:2B:7F:9B:9D:2A:AD:02:19:AF X509v3 Authority Key Identifier: keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ad:8c:5d:3c:09:d2:62:5d:83:8c:f9:3d:40:da:47:77:85: b2:5c:2a:0f:9c:20:08:01:1e:fb:47:a1:5a:1b:da:46:b9:74: 80:29:1d:32:3d:1f:17:84:37:09:d4:58:0c:f1:63:9b:f8:c9: 5f:be:0e:05:f6:7e:ca:b4:55:af:68:b2:6b:0c:ad:0a:1c:ce: e0:f0:40:47:76:e0:a4:c3:e8:9a:2f:26:c0:c8:39:8d:b9:c2: fd:08:04:17:bb:f6:4e:e9:9f:3d:d4:09:7b:7e:a9:3a:c7:ae: b4:ee:2a:5e:8d:66:b9:08:c8:f2:21:20:25:d1:58:a6:8f:57: 72:fa:df:c7:85:f8:c9:ad:31:81:d7:5a:d5:4e:54:13:0c:e0: b9:e6:f8:1c:8f:74:2b:0b:0b:88:d1:58:16:f9:b2:36:99:00: d6:35:75:6c:f3:c8:f8:58:66:1e:65:47:d4:78:8b:2c:ce:2a: 73:b3:fe:50:9b:29:70:43:bc:bd:44:c7:1b:fc:bc:01:c8:e9: b6:66:c4:a0:51:36:54:8d:42:16:dc:25:5c:2e:53:5f:c5:9c: 8d:de:eb:b2:d8:10:16:40:f4:81:f4:63:53:04:fe:6a:53:5a: 8a:d1:79:00:90:77:93:4a:2f:90:f1:ce:97:b7:1d:ea:af:34: cf:84:fd:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE QjM3N0IxMUQwHhcNMjYwOTIwMTczMjU3WhcNMjYwOTI3MTczMjU3WjAYMRYwFAYD VQQDEw02YWIwMThjOS1kMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6XhQg5fFxkMHMSrZ/U9AczjTsgSsDBqKreuR5Ge2qDGETxlr9W/be0PV081 K6MBjp+PgyLFfPzoHZqstlHTHP2G/tmIkTWEbVBg3YJT6gw+A97xzqsWq4s0zfMV hnnYFfU8ZEWrHa+Ina47F4eDZ6n5FEQbzKNo2JVkDjzyM6FGehZfx9VZxRhn8NvL BLx03KmVnuhe5kQWQN2+9QA+FzJG529nrqnBmDQPrx8ZHQthQlv5rlMQb1leFLzC FQx3ygtnZYdxSbTU24gMamBeyyGT5YkG5U82VhhqEJW1zI01935WQA/0DDrzpMHt DdTSUlPe3XyEc0YFN9OpB3NNJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGR+aKJJ rA6iz8HpK3+bnSqtAhmvMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qzc0My9GOEFFMjg4MEEyMUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2Rf WEQ4S0pTYUM5eDNiTjNzUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkq2MXTwJ0mJdg4z5PUDaR3eFslwqD5wgCAEe+0ehWhvaRrl0gCkdMj0fF4Q3 CdRYDPFjm/jJX74OBfZ+yrRVr2iyawytChzO4PBAR3bgpMPomi8mwMg5jbnC/QgE F7v2TumfPdQJe36pOseutO4qXo1muQjI8iEgJdFYpo9Xcvrfx4X4ya0xgdda1U5U Ewzgueb4HI90KwsLiNFYFvmyNpkA1jV1bPPI+FhmHmVH1HiLLM4qc7P+UJspcEO8 vUTHG/y8AcjptmbEoFE2VI1CFtwlXC5TX8Wcjd7rstgQFkD0gfRjUwT+alNaitF5 AJB3k0ovkPHOl7cd6q80z4T9MA== -----END CERTIFICATE-----Generated at Sun Sep 20 23:32:08 2026 by rpki-client