$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: Q7C6xv+XCTtdWO//vfKqRNSIFxx4Iq1U/LBQPvzJ9ZU= Subject key identifier: 6B:0F:D1:4D:DF:15:0D:49:73:F9:BE:B8:D3:99:6E:8C:81:52:BF:11 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0491 Signing time: Sun 20 Sep 2026 23:53:22 +0000 Manifest this update: Sun 20 Sep 2026 23:53:21 +0000 Manifest next update: Sun 27 Sep 2026 23:53:21 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: eE14ipT31frUNMWFUmPkHj/QT/FlrXH0lWzOFNvv2/g=) 2: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg=) 3: F570D764773F11F09FC02036C4F9AE02.roa (hash: gvPu45DyIqZBu1jQxEhjgfSh962TYPXbAHfGb3N8kR4=) 4: 06FA5A64774011F0BE2D3736C4F9AE02.roa (hash: cl/4/5b1299P9Rw9mt6jtdWymjlwHiUICZ1E9aWqHuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Sep 20 23:53:21 2026 GMT Not After : Sep 27 23:53:21 2026 GMT Subject: CN=6ab071f2-19d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:60:82:9d:bd:9c:13:81:d1:48:44:08:5e: a3:ef:9f:09:f7:e9:ba:e0:6e:fa:77:ea:dc:6e:9b: 89:f6:ec:62:be:d6:12:ff:5b:53:c4:ff:34:53:26: a5:d8:40:52:62:85:5a:58:4e:07:6b:94:18:39:1f: e4:cf:72:5d:69:b9:97:7f:33:71:9c:1d:2d:54:18: 1a:9b:13:eb:b4:f6:df:86:de:ee:db:80:b8:68:cd: 32:6b:e7:40:9a:52:7b:e4:57:b9:8c:77:9c:88:43: 59:44:36:2d:98:6e:d1:fb:ba:17:60:74:0f:1b:39: 5b:4d:6f:40:e2:30:bd:e4:66:a8:9e:1e:ab:6f:7c: 99:2e:6c:dd:c5:5b:e5:1f:5b:08:0d:fb:4d:df:65: f3:4e:03:e9:cc:f8:64:c7:63:45:b6:8c:75:ea:42: 59:51:6b:bc:fa:06:09:c5:ca:09:66:ef:6d:e2:64: 88:54:92:50:e9:bf:3d:bf:2c:98:e2:5b:b3:8f:a3: 8c:4e:f5:50:9a:8f:e1:9d:ee:ff:98:d7:f7:56:a4: 63:5a:47:5f:bf:89:7f:c3:0f:ef:6c:d4:ba:59:45: 4a:5a:1a:fd:c8:5a:a4:aa:32:54:28:69:c7:ce:61: 2b:70:9a:4c:dd:42:07:76:96:f4:9c:5e:a9:84:02: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:D1:4D:DF:15:0D:49:73:F9:BE:B8:D3:99:6E:8C:81:52:BF:11 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0e:a4:6a:6f:ef:ff:e2:6b:d2:e5:05:37:5b:1b:24:d0:c2: f9:2c:80:53:42:ef:29:70:cb:3e:10:de:72:33:ed:dc:e7:64: b3:74:11:89:a8:89:54:02:77:38:bd:f1:02:df:8b:ae:62:03: 21:3e:75:00:c5:f3:63:1e:ba:2c:b9:21:6d:eb:73:b3:b1:c9: ea:3f:14:5b:2a:33:c2:56:02:18:13:99:61:9f:83:0a:ef:2d: 3a:ee:ee:41:28:22:f3:82:01:19:26:ad:2a:e5:15:26:92:2d: 95:74:d8:23:76:35:65:aa:6b:6c:a7:2b:96:d5:92:d8:fa:cd: 0f:5a:b3:20:1c:f9:78:27:c1:32:82:63:9c:63:8c:21:b9:cf: 26:d7:a4:51:07:f8:55:a8:63:1e:a9:9f:5f:c2:75:c8:22:45: 02:99:40:d8:16:8d:f8:32:b6:ef:a4:34:04:7b:59:75:15:e4: 65:44:20:8b:ed:0f:68:7e:d3:c1:a1:6a:42:95:40:42:d7:96: b6:79:dd:74:a1:c3:ed:d1:78:95:2d:1d:77:ce:3e:8f:4c:56: ef:82:a3:50:ed:3a:d8:3b:60:93:e0:ca:67:3c:70:6a:db:1b: ae:b5:61:72:1e:cf:36:39:89:48:80:c2:d7:9c:be:a4:7c:d8: 27:65:9d:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYwOTIwMjM1MzIxWhcNMjYwOTI3MjM1MzIxWjAYMRYwFAYD VQQDEw02YWIwNzFmMi0xOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqNggp29nBOB0UhECF6j758J9+m64G76d+rcbpuJ9uxivtYS/1tTxP80Uyal 2EBSYoVaWE4Ha5QYOR/kz3JdabmXfzNxnB0tVBgamxPrtPbfht7u24C4aM0ya+dA mlJ75Fe5jHeciENZRDYtmG7R+7oXYHQPGzlbTW9A4jC95Gaonh6rb3yZLmzdxVvl H1sIDftN32XzTgPpzPhkx2NFtox16kJZUWu8+gYJxcoJZu9t4mSIVJJQ6b89vyyY 4luzj6OMTvVQmo/hne7/mNf3VqRjWkdfv4l/ww/vbNS6WUVKWhr9yFqkqjJUKGnH zmErcJpM3UIHdpb0nF6phAJwLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsP0U3f FQ1Jc/m+uNOZboyBUr8RMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATQ6kam/v/+Jr0uUFN1sbJNDC+SyAU0LvKXDLPhDecjPt3Odks3QRiaiJVAJ3 OL3xAt+LrmIDIT51AMXzYx66LLkhbetzs7HJ6j8UWyozwlYCGBOZYZ+DCu8tOu7u QSgi84IBGSatKuUVJpItlXTYI3Y1ZaprbKcrltWS2PrND1qzIBz5eCfBMoJjnGOM IbnPJtekUQf4VahjHqmfX8J1yCJFAplA2BaN+DK276Q0BHtZdRXkZUQgi+0PaH7T waFqQpVAQteWtnnddKHD7dF4lS0dd84+j0xW74KjUO062Dtgk+DKZzxwatsbrrVh ch7PNjmJSIDC15y+pHzYJ2WdzQ== -----END CERTIFICATE-----Generated at Tue Sep 22 07:00:56 2026 by rpki-client