$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft File: HQSsXQPY72rEMd4aeq57aHaBtjY.mft (raw, json) Hash identifier: F+KTPOuzgBhfqSN2e63swtYKAMa6rXnw31bIqkg6azA= Subject key identifier: 8D:B8:F7:68:58:5D:F6:1E:5C:68:AD:34:9E:C5:B5:36:84:5C:16:42 Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36 Certificate issuer: /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636 Certificate serial: 08E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft Manifest number: 08C8 Signing time: Tue 22 Sep 2026 20:18:59 +0000 Manifest this update: Tue 22 Sep 2026 20:18:59 +0000 Manifest next update: Tue 29 Sep 2026 20:18:59 +0000 Files and hashes: 1: HQSsXQPY72rEMd4aeq57aHaBtjY.crl (hash: AmFzJ4Yp/jpTfIdkCUQ9Zd7B4cA9lBJReE4B6ikkyPE=) 2: 66EE9D94152511ECAD055780C4F9AE02.roa (hash: tHkWBsWt7zg/nHnhpSyeoXJLDbxfBsQ1sUqpG3dRgvY=) 3: 111E53B6152811ECB2C0B70BC4F9AE02.roa (hash: y/9w6PkfJPP5x9xoypT09kJGazem+FcljWHoJZSxFMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2275 (0x8e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A2D, serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636 Validity Not Before: Sep 22 20:18:59 2026 GMT Not After : Sep 29 20:18:59 2026 GMT Subject: CN=6ab2e2b3-68bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:b5:47:14:95:4b:e7:80:60:c0:a8:5b:54: 26:b5:03:70:76:fa:77:ec:8c:14:05:f7:b8:e8:c7: f5:a0:3f:a2:86:8c:9a:b6:3e:61:54:70:5c:2c:28: 23:34:f7:9b:e2:cd:af:04:21:01:ce:49:0b:57:20: 7c:bc:f2:ae:fd:24:21:f8:c6:d6:5a:c4:68:e6:ba: 38:db:ae:ee:d8:b0:ab:dc:0d:df:9b:b8:23:f9:7b: 2f:6a:2b:5f:34:b1:da:4c:ae:71:f6:8d:ee:d9:f1: 20:f8:2d:ed:3e:18:6f:0c:c5:3d:b0:7c:20:d0:65: 74:fa:1a:44:b7:d8:07:3e:47:ca:e7:43:ce:27:1f: 01:fe:20:a0:0b:01:7f:ce:14:05:48:b2:63:fd:16: ee:77:34:94:ca:a4:3e:c6:64:62:f0:a5:54:58:be: c4:c8:3a:ca:82:67:93:ea:31:5e:b0:f3:10:6b:b0: 17:df:d4:9b:45:6e:ab:3f:d2:bf:1a:11:45:57:45: 95:40:9c:06:b2:67:c9:38:90:5b:f5:ae:2f:cb:77: d6:9a:3c:56:55:da:4c:3e:1f:8c:1b:0b:9f:ac:dd: fc:84:87:72:8e:1f:5e:62:6e:e4:c1:73:83:15:ce: 43:b7:5f:06:d9:bd:8c:92:b0:2d:dd:66:bc:58:0e: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B8:F7:68:58:5D:F6:1E:5C:68:AD:34:9E:C5:B5:36:84:5C:16:42 X509v3 Authority Key Identifier: keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4d:45:f0:42:02:72:40:8d:51:51:70:3d:5e:93:d4:1a:22: 13:bc:d9:24:2d:50:3f:f9:e6:63:48:b7:5f:96:60:c1:fa:de: 07:9b:e5:7e:1b:f1:9e:5f:3c:82:29:7a:fa:b0:d9:99:0c:47: da:51:0e:05:d2:21:90:34:dc:3c:3e:09:3f:2d:6f:67:7c:80: 70:71:a3:a7:27:d5:40:a1:b5:c4:e6:c6:24:94:bd:be:42:c1: ec:13:39:a4:bf:4f:33:19:67:d3:28:76:46:5f:0c:0b:27:27: 2e:a8:72:89:95:3c:2d:03:7d:70:93:4e:7f:ec:82:0f:ae:98: 40:7c:30:95:16:ea:db:ad:41:18:8a:58:de:d0:b9:20:af:db: 70:cd:38:58:6e:db:1b:c2:b7:2d:77:20:7a:85:b6:46:bf:5e: 2b:98:48:b5:b9:29:03:f6:50:fb:8e:b1:b4:fd:d4:14:c1:ac: 93:50:ff:62:c1:13:a8:3f:de:7b:f7:55:00:3e:bd:74:c4:69: 20:89:ee:5b:20:6b:69:ae:76:23:5e:25:9c:66:c0:ec:65:ed: 08:58:b0:a1:22:cd:f2:51:ca:9f:95:fe:bc:31:8d:f7:03:73: 8f:81:5f:ae:b4:b7:77:93:9e:9a:dd:e2:fc:44:42:7e:45:94: a0:2b:07:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMkQxMTAvBgNVBAUTKDFEMDRBQzVEMDNEOEVGNkFDNDMxREUxQTdBQUU3QjY4 NzY4MUI2MzYwHhcNMjYwOTIyMjAxODU5WhcNMjYwOTI5MjAxODU5WjAYMRYwFAYD VQQDEw02YWIyZTJiMy02OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFC1RxSVS+eAYMCoW1QmtQNwdvp37IwUBfe46Mf1oD+ihoyatj5hVHBcLCgj NPeb4s2vBCEBzkkLVyB8vPKu/SQh+MbWWsRo5ro4267u2LCr3A3fm7gj+Xsvaitf NLHaTK5x9o3u2fEg+C3tPhhvDMU9sHwg0GV0+hpEt9gHPkfK50POJx8B/iCgCwF/ zhQFSLJj/RbudzSUyqQ+xmRi8KVUWL7EyDrKgmeT6jFesPMQa7AX39SbRW6rP9K/ GhFFV0WVQJwGsmfJOJBb9a4vy3fWmjxWVdpMPh+MGwufrN38hIdyjh9eYm7kwXOD Fc5Dt18G2b2MkrAt3Wa8WA4ScQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2492hY XfYeXGitNJ7FtTaEXBZCMB8GA1UdIwQYMBaAFB0ErF0D2O9qxDHeGnque2h2gbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEyRC9EQTQ2NjA5QUY3 QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcyckVNZDRhZXE1N2FIYUJ0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRU3NYUVBZNzJyRU1kNGFlcTU3YUhhQnRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEyRC9EQTQ2NjA5QUY3QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcy ckVNZDRhZXE1N2FIYUJ0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWk1F8EICckCNUVFwPV6T1BoiE7zZJC1QP/nmY0i3X5ZgwfreB5vlfhvxnl88 gil6+rDZmQxH2lEOBdIhkDTcPD4JPy1vZ3yAcHGjpyfVQKG1xObGJJS9vkLB7BM5 pL9PMxln0yh2Rl8MCycnLqhyiZU8LQN9cJNOf+yCD66YQHwwlRbq261BGIpY3tC5 IK/bcM04WG7bG8K3LXcgeoW2Rr9eK5hItbkpA/ZQ+46xtP3UFMGsk1D/YsETqD/e e/dVAD69dMRpIInuWyBraa52I14lnGbA7GXtCFiwoSLN8lHKn5X+vDGN9wNzj4Ff rrS3d5Oemt3i/ERCfkWUoCsHRg== -----END CERTIFICATE-----Generated at Wed Sep 23 10:21:20 2026 by rpki-client