$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json) Hash identifier: 9qtRTUY4b7GhRjAkGekcB62+CfaaCYpdY8VH9o476Ns= Subject key identifier: 7B:F5:C6:4E:8D:5C:67:89:56:73:1E:34:3D:B8:54:61:06:CC:40:2C Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Certificate serial: 09D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft Manifest number: 09CE Signing time: Sat 10 Oct 2026 19:57:08 +0000 Manifest this update: Sat 10 Oct 2026 19:57:08 +0000 Manifest next update: Sat 17 Oct 2026 19:57:08 +0000 Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: y/hnTCiJtFYkXizfTM2R3xda+YkVh/RS0KZJVki5aLs=) 2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: V81dD3x6Xu9JhvlyqWC7cihyerGfmzPLwxY1DFEcyJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2518 (0x9d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Validity Not Before: Oct 10 19:57:08 2026 GMT Not After : Oct 17 19:57:08 2026 GMT Subject: CN=6aca9894-3384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:f8:78:1e:6c:5d:47:f1:60:45:31:19:a5: 7b:82:01:50:25:50:94:e8:d0:7f:90:3a:69:f5:ef: 3b:44:ea:43:53:a4:5c:12:f7:22:c7:fb:20:d4:81: f2:48:62:f6:ec:0d:d0:2f:16:ec:27:ef:90:a1:b2: ec:e1:16:c2:bc:87:b1:ee:a7:67:b6:57:1b:a1:32: 11:52:78:22:3b:48:b3:28:a9:f0:b9:05:22:b9:94: 9a:3f:14:a1:bf:cf:da:c7:1b:4c:98:8f:cf:0e:85: ca:90:d2:c8:3d:bc:29:73:36:a0:52:f0:fd:4d:3d: 57:a6:cd:cb:10:e8:b6:4d:40:7a:cc:63:3b:d1:fc: 51:e6:55:51:a1:76:0b:80:c7:76:ce:d0:8a:7e:0b: eb:bf:c0:7b:b9:33:34:aa:70:ee:a8:25:35:7a:80: 8a:17:0f:f3:0a:62:a0:0b:99:9a:c6:67:0d:30:23: 73:11:95:77:93:66:ab:7e:18:8e:b1:b5:9b:4a:58: 03:ba:10:73:be:b5:76:0b:81:30:7e:f0:b3:2e:42: 9e:23:11:32:92:5f:e4:e3:6a:d3:e9:a1:fb:bf:50: 68:d2:54:81:df:18:f9:c1:a9:39:bb:b5:58:91:4a: 81:4d:01:d8:40:26:7d:67:3f:3b:a8:b7:9a:3e:a8: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F5:C6:4E:8D:5C:67:89:56:73:1E:34:3D:B8:54:61:06:CC:40:2C X509v3 Authority Key Identifier: keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3d:df:db:c5:b9:a9:af:8a:77:23:b4:47:ba:4c:22:0d:5e: 8a:db:b4:40:ca:f5:8b:69:27:6f:c4:41:13:56:82:94:98:37: 25:03:45:56:fb:b1:c7:7f:ea:02:c6:c9:e0:90:ca:cd:30:6d: 94:54:0b:c7:8b:fa:56:cf:83:2c:b1:c4:0b:79:32:c5:36:1f: e3:b6:85:0f:02:80:b0:c3:f3:dc:bb:d0:d2:92:56:6d:02:d2: 59:2e:4e:6e:af:e5:42:58:7a:b6:de:a2:a8:af:4e:00:79:3a: 01:35:93:34:f6:42:4c:ee:a8:bf:b8:3a:43:0b:27:bd:16:8a: d9:39:23:60:b5:ee:f7:10:2b:59:ce:93:b8:a4:28:16:86:1e: b8:e9:ea:18:1f:3c:9d:c5:1b:c9:31:5f:25:a7:62:a2:e8:24: 38:26:0d:b4:d5:0a:49:0c:c0:b8:01:dd:5a:6f:e4:6f:b8:6f: 43:77:5b:c5:33:98:86:1b:79:9a:24:4e:13:a6:d6:9a:2b:d8: 86:98:d4:08:fd:a4:d0:60:3b:f7:d2:e1:14:a4:3b:91:75:49: da:64:1e:49:3b:c3:f2:89:0a:56:78:a8:cf:cf:9d:0c:2d:4c: 4c:a8:ef:6c:c3:2f:59:c3:f1:1a:f3:b5:25:6b:ff:2a:2d:d5: 73:e3:91:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyQzYxMTAvBgNVBAUTKDFEQTAxQUZDMDg4OENBQTYxNzFFMEEwRTc0MUNGQzkw NEVEMkRGNkYwHhcNMjYxMDEwMTk1NzA4WhcNMjYxMDE3MTk1NzA4WjAYMRYwFAYD VQQDEw02YWNhOTg5NC0zMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2H4eB5sXUfxYEUxGaV7ggFQJVCU6NB/kDpp9e87ROpDU6RcEvcix/sg1IHy SGL27A3QLxbsJ++QobLs4RbCvIex7qdntlcboTIRUngiO0izKKnwuQUiuZSaPxSh v8/axxtMmI/PDoXKkNLIPbwpczagUvD9TT1Xps3LEOi2TUB6zGM70fxR5lVRoXYL gMd2ztCKfgvrv8B7uTM0qnDuqCU1eoCKFw/zCmKgC5maxmcNMCNzEZV3k2arfhiO sbWbSlgDuhBzvrV2C4EwfvCzLkKeIxEykl/k42rT6aH7v1Bo0lSB3xj5wak5u7VY kUqBTQHYQCZ9Zz87qLeaPqhKUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHv1xk6N XGeJVnMeND24VGEGzEAsMB8GA1UdIwQYMBaAFB2gGvwIiMqmFx4KDnQc/JBO0t9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJDNi8xRURGRTQ5NkIx RDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlxWVhIZ29PZEJ6OGtFN1Mz MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhQWFfQWlJeXFZWEhnb09kQno4a0U3UzMyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJDNi8xRURGRTQ5NkIxRDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlx WVhIZ29PZEJ6OGtFN1MzMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASj3f28W5qa+KdyO0R7pMIg1eitu0QMr1i2knb8RBE1aClJg3JQNFVvuxx3/q AsbJ4JDKzTBtlFQLx4v6Vs+DLLHEC3kyxTYf47aFDwKAsMPz3LvQ0pJWbQLSWS5O bq/lQlh6tt6iqK9OAHk6ATWTNPZCTO6ov7g6QwsnvRaK2TkjYLXu9xArWc6TuKQo FoYeuOnqGB88ncUbyTFfJadiougkOCYNtNUKSQzAuAHdWm/kb7hvQ3dbxTOYhht5 miROE6bWmivYhpjUCP2k0GA799LhFKQ7kXVJ2mQeSTvD8okKVnioz8+dDC1MTKjv bMMvWcPxGvO1JWv/Ki3Vc+ORGA== -----END CERTIFICATE-----Generated at Sun Oct 11 16:41:04 2026 by rpki-client