$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json) Hash identifier: Zu0N4+ub8TB7VPsFJsIDrmAR5NtFwREfyOqzi3N3AjE= Subject key identifier: 4B:C6:2A:6B:58:ED:8C:55:D0:D3:17:55:A4:E7:97:F7:24:EA:06:BE Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft Manifest number: 71 Signing time: Wed 23 Sep 2026 07:41:04 +0000 Manifest this update: Wed 23 Sep 2026 07:41:04 +0000 Manifest next update: Wed 30 Sep 2026 07:41:04 +0000 Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: xsxPl9Nf/7KJMwxNPXdrI0nkCZy6F1AZcUP9FadKhFg=) 2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Validity Not Before: Sep 23 07:41:04 2026 GMT Not After : Sep 30 07:41:04 2026 GMT Subject: CN=6ab38290-dafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:02:2e:b0:a2:0d:b5:b6:cb:c6:5d:29:10: 1d:0a:33:ff:79:a3:12:79:29:1c:2c:ba:f5:23:0f: 7d:c0:25:04:45:34:04:37:1b:5a:f6:af:8e:71:0b: 27:da:6f:2d:e4:a2:62:10:6d:ef:f9:65:d1:c2:9c: af:bc:f1:74:bb:82:23:d7:96:4d:cd:a5:16:68:4a: 5d:a4:c0:00:4c:d2:c1:1b:89:0b:d0:43:9a:d0:e7: 1e:26:d8:e8:0e:52:eb:46:53:12:df:30:fb:ff:63: e1:67:23:99:49:4c:9b:3a:ed:8d:48:11:00:73:ee: 73:8e:8f:7e:3c:82:87:6c:07:17:72:93:77:3e:eb: 28:61:92:c3:0e:5b:61:5e:f0:66:55:dd:14:3e:2a: c8:ec:26:d0:32:c5:ec:08:e8:ff:6c:bd:b1:3b:01: 1f:0c:50:b5:c7:14:51:91:7b:5f:2f:4c:03:b6:a0: ae:32:d4:ea:2f:4b:9d:9a:83:36:e8:99:53:ce:30: 70:27:c9:e3:32:b7:07:79:15:2f:55:42:98:10:a4: 18:67:9e:52:f9:9e:4c:fc:b1:c0:51:1b:fa:8c:db: 1a:0b:94:2c:80:df:a7:1e:64:89:1a:91:90:28:88: 1e:76:de:aa:9f:5e:5b:03:4e:24:9e:eb:f7:4e:69: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:2A:6B:58:ED:8C:55:D0:D3:17:55:A4:E7:97:F7:24:EA:06:BE X509v3 Authority Key Identifier: keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:20:08:7e:2e:28:a9:c6:af:27:22:0d:63:6f:98:18:b6:2a: fa:5c:1e:30:f9:8d:64:3f:48:dd:8d:a3:33:88:1d:1f:f5:55: 87:6e:cb:1d:9a:bc:08:26:1e:39:f2:cc:86:30:10:24:c5:73: 8a:ba:c5:19:c1:65:11:bc:da:e4:18:10:8e:b4:87:f5:53:14: a7:98:b0:92:16:29:f4:6e:4e:9d:45:a6:3b:08:ac:2e:77:6b: 63:14:21:32:bd:e0:db:11:69:8e:34:74:8f:bf:28:d7:8c:39: cc:72:86:b5:10:cd:e8:a6:3c:64:c2:0f:c2:06:e2:3e:75:b1: 95:9d:a4:39:b5:59:4a:da:5e:4c:c5:03:b2:06:01:dc:9f:52: 4c:12:5b:75:b2:8a:ae:36:a3:04:49:b6:a8:a7:c4:60:30:0c: 6e:c4:c0:f6:a8:9c:e4:33:4e:54:7e:13:42:5b:97:f2:c0:98: e3:65:02:ec:56:59:f0:7c:ad:89:e0:10:02:44:6b:32:64:b9: 8b:84:e9:3f:09:4a:6c:0c:2c:a8:bb:f9:13:78:d1:74:9d:5a: 35:7c:02:f7:96:a9:98:cc:18:9d:19:6e:94:50:8c:c1:81:82: 45:74:33:c3:c4:a7:ed:79:27:d0:a1:12:47:5e:3e:39:81:dd: 2b:b3:bd:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF MjEzQzI5NjAeFw0yNjA5MjMwNzQxMDRaFw0yNjA5MzAwNzQxMDRaMBgxFjAUBgNV BAMTDTZhYjM4MjkwLWRhZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlLwIusKINtbbLxl0pEB0KM/95oxJ5KRwsuvUjD33AJQRFNAQ3G1r2r45xCyfa by3komIQbe/5ZdHCnK+88XS7giPXlk3NpRZoSl2kwABM0sEbiQvQQ5rQ5x4m2OgO UutGUxLfMPv/Y+FnI5lJTJs67Y1IEQBz7nOOj348godsBxdyk3c+6yhhksMOW2Fe 8GZV3RQ+KsjsJtAyxewI6P9svbE7AR8MULXHFFGRe18vTAO2oK4y1OovS52agzbo mVPOMHAnyeMytwd5FS9VQpgQpBhnnlL5nkz8scBRG/qM2xoLlCyA36ceZIkakZAo iB523qqfXlsDTiSe6/dOaRO1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS8Yqa1jt jFXQ0xdVpOeX9yTqBr4wHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmIAh+Liipxq8nIg1jb5gYtir6XB4w+Y1kP0jdjaMziB0f9VWHbssdmrwIJh45 8syGMBAkxXOKusUZwWURvNrkGBCOtIf1UxSnmLCSFin0bk6dRaY7CKwud2tjFCEy veDbEWmONHSPvyjXjDnMcoa1EM3opjxkwg/CBuI+dbGVnaQ5tVlK2l5MxQOyBgHc n1JMElt1soquNqMESbaop8RgMAxuxMD2qJzkM05UfhNCW5fywJjjZQLsVlnwfK2J 4BACRGsyZLmLhOk/CUpsDCyou/kTeNF0nVo1fAL3lqmYzBidGW6UUIzBgYJFdDPD xKfteSfQoRJHXj45gd0rs71l -----END CERTIFICATE-----Generated at Wed Sep 23 20:17:53 2026 by rpki-client