$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: LpdVrQV5MIYtIr8/1vS7gu66B4VAqFYF5uxPiZaaN4U= Subject key identifier: EA:2E:25:9B:63:1C:B8:07:9C:76:B9:4B:95:36:4C:9B:A0:78:AC:08 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 0767 Signing time: Fri 02 Oct 2026 22:00:54 +0000 Manifest this update: Fri 02 Oct 2026 22:00:54 +0000 Manifest next update: Fri 09 Oct 2026 22:00:54 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: hARa+6NojuB4xbqBxuKl86exOJdaBSDaEQg9eCQkGSY=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Oct 2 22:00:54 2026 GMT Not After : Oct 9 22:00:54 2026 GMT Subject: CN=6ac02996-cb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:66:0e:f8:94:fc:77:4f:17:2e:15:7f:c5: 5b:68:1f:10:c6:73:13:8a:d9:9b:6b:0e:31:4e:9d: 9f:5c:5c:a0:e6:8c:90:b9:ae:93:3c:9b:7e:c7:94: 9d:6f:40:4f:1a:30:b2:17:86:d4:b0:bc:46:20:c2: c5:c3:24:9b:18:a1:06:a6:e4:65:dd:f3:f0:ed:94: 24:c3:7d:9c:8a:c0:f8:67:ec:a2:c7:2f:3a:02:52: 45:76:28:32:8c:42:36:a1:7b:c0:03:e1:ee:fe:9e: 91:72:99:ea:47:89:e2:12:5a:5a:99:18:10:53:5d: 00:fd:6f:0c:71:48:fa:74:87:09:30:9f:1b:39:62: 08:14:1a:b0:4a:dd:7e:00:6c:a6:37:cb:0f:5d:b1: d7:e2:61:99:f1:f8:d5:17:11:2e:8d:15:01:2c:3b: 8a:69:1c:50:20:14:21:37:00:2d:b0:1f:78:26:35: 30:96:7d:21:41:b1:18:e4:06:e8:f5:da:06:e8:8d: 1a:51:32:e1:98:d6:e0:41:0d:9f:63:08:58:18:f3: 9c:a1:be:1f:39:87:20:ea:d2:fe:0c:96:da:e6:3a: d9:20:bc:10:bd:43:70:7b:28:8e:93:54:fc:d1:47: 7e:82:c1:56:08:ab:14:be:47:b5:22:44:1d:be:59: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2E:25:9B:63:1C:B8:07:9C:76:B9:4B:95:36:4C:9B:A0:78:AC:08 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:0c:4b:a1:c3:47:34:79:c4:a1:28:02:2f:4f:eb:41:10:f8: 9b:fa:eb:86:20:82:5a:c8:16:e5:dd:f9:7c:51:4a:aa:c2:0f: 4e:74:aa:39:04:09:76:c0:d8:39:ec:20:bf:7b:d7:a3:9a:50: 8f:88:da:47:ee:45:1b:7b:18:d0:7b:b0:2e:ff:5f:68:e1:be: a3:ea:61:a3:9c:b7:63:a3:48:cf:e1:2a:66:f2:d7:10:bd:fa: 27:f1:b9:21:6e:3f:65:ea:d9:98:12:15:9d:7e:fb:2a:91:a2: 28:14:7d:72:d3:cc:b1:44:ce:d1:51:8c:c0:e9:6c:2d:dd:ea: c4:38:28:cf:92:c6:15:40:6a:88:91:22:91:1f:f1:0f:6b:3b: 6d:76:8a:72:c8:7a:79:88:22:0b:31:bf:df:08:d7:84:f4:f0: 24:ca:76:d5:66:3d:3b:7a:96:56:ea:8b:25:b6:40:a9:87:4c: 6d:b8:16:b3:dc:34:48:24:0c:96:ec:d3:ad:81:fe:f2:9f:59: 53:69:a0:81:66:37:8f:e4:ca:ef:3d:51:90:26:41:92:d8:16: 48:e4:e6:c8:69:49:72:60:c4:f5:7a:6d:7f:c0:ad:82:42:0c: ff:3c:c6:a9:b3:bf:94:69:f9:e7:2d:7e:45:87:27:3e:9e:93: b2:48:eb:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjYxMDAyMjIwMDU0WhcNMjYxMDA5MjIwMDU0WjAYMRYwFAYD VQQDEw02YWMwMjk5Ni1jYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLdmDviU/HdPFy4Vf8VbaB8QxnMTitmbaw4xTp2fXFyg5oyQua6TPJt+x5Sd b0BPGjCyF4bUsLxGIMLFwySbGKEGpuRl3fPw7ZQkw32cisD4Z+yixy86AlJFdigy jEI2oXvAA+Hu/p6RcpnqR4niElpamRgQU10A/W8McUj6dIcJMJ8bOWIIFBqwSt1+ AGymN8sPXbHX4mGZ8fjVFxEujRUBLDuKaRxQIBQhNwAtsB94JjUwln0hQbEY5Abo 9doG6I0aUTLhmNbgQQ2fYwhYGPOcob4fOYcg6tL+DJba5jrZILwQvUNweyiOk1T8 0Ud+gsFWCKsUvke1IkQdvlmeiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOouJZtj HLgHnHa5S5U2TJugeKwIMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoQxLocNHNHnEoSgCL0/rQRD4m/rrhiCCWsgW5d35fFFKqsIPTnSqOQQJdsDY Oewgv3vXo5pQj4jaR+5FG3sY0HuwLv9faOG+o+pho5y3Y6NIz+EqZvLXEL36J/G5 IW4/ZerZmBIVnX77KpGiKBR9ctPMsUTO0VGMwOlsLd3qxDgoz5LGFUBqiJEikR/x D2s7bXaKcsh6eYgiCzG/3wjXhPTwJMp21WY9O3qWVuqLJbZAqYdMbbgWs9w0SCQM luzTrYH+8p9ZU2mggWY3j+TK7z1RkCZBktgWSOTmyGlJcmDE9Xptf8CtgkIM/zzG qbO/lGn55y1+RYcnPp6TskjrDg== -----END CERTIFICATE-----Generated at Sun Oct 4 00:11:30 2026 by rpki-client