$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: 5BrUKAR8Zt5a7BxDQ12EfOXv9NI0c7gDtnfQ1j9lfTw= Subject key identifier: 38:BD:49:BC:97:4C:3A:92:E4:2D:CE:3F:F4:E2:85:AD:9E:80:07:EA Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: E1 Signing time: Sat 19 Sep 2026 06:41:49 +0000 Manifest this update: Sat 19 Sep 2026 06:41:48 +0000 Manifest next update: Sat 26 Sep 2026 06:41:48 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: LEvXKfX//ueAf8TzsNuzzADt4m9oBm5jjsRvj8/5RjE=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Sep 19 06:41:48 2026 GMT Not After : Sep 26 06:41:48 2026 GMT Subject: CN=6aae2eac-3084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:c1:b1:8a:16:c2:f8:14:31:d5:d4:f6:51: d5:e6:91:97:72:bc:50:e5:9e:95:fd:d5:a1:c5:71: 96:5d:b5:95:29:a0:50:a8:28:a3:b7:29:f7:31:44: e1:9e:d7:13:04:92:86:c0:91:1a:6f:db:bf:1d:ce: 70:4c:9d:95:7f:49:7a:19:69:88:49:a2:2e:29:bd: 59:bc:55:d0:73:9d:74:53:6f:00:ef:6b:7e:ea:60: da:c3:7b:95:8a:0f:91:2c:01:2c:e0:64:8d:43:75: d8:c2:5f:b9:03:99:84:30:41:be:2f:21:7c:ac:04: f7:b4:c5:61:47:e6:80:d7:0c:8a:a4:df:ac:1b:15: f5:e6:b6:d5:7e:77:7f:df:20:95:50:33:e8:99:ff: 7a:47:05:5c:42:c2:d2:57:1a:3d:08:12:bd:7e:d7: c7:85:71:0c:42:94:cf:d2:5b:a2:a6:9e:b6:3c:d1: a5:4d:8d:1b:53:7f:54:43:da:3c:91:54:f8:4d:d8: 93:0a:5b:19:5c:16:03:92:91:1f:1c:15:48:1a:50: 33:ed:11:c1:af:0b:bb:a1:3f:c0:dc:55:82:c3:eb: a4:54:07:cc:1b:ac:ec:00:c8:90:c6:ad:b5:92:a5: 01:96:e8:4d:39:a9:5d:4c:fe:bc:2e:b4:5f:92:dc: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BD:49:BC:97:4C:3A:92:E4:2D:CE:3F:F4:E2:85:AD:9E:80:07:EA X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2d:37:37:af:7f:7a:9f:bf:3e:7c:18:13:b6:91:45:95:da: 63:3a:2d:20:0f:a7:9e:e9:4c:bd:b7:b5:56:4c:88:66:95:10: 98:10:82:ac:67:53:5b:3c:a9:fb:c3:54:27:fe:de:25:1b:13: f2:0d:c4:c9:70:0c:af:84:9a:8e:48:e4:8f:9e:a5:19:d0:72: 49:4d:87:59:cd:d3:7f:d7:ff:24:d6:14:83:05:7b:5e:71:41: b0:fc:4c:c3:09:71:c2:c5:70:de:5a:c8:b7:45:10:f5:24:18: d5:1e:83:16:cf:42:63:bc:d1:aa:d0:b0:e3:7f:c5:95:bc:2e: 2a:af:4d:5a:76:98:be:8e:34:bd:c0:21:60:3e:52:88:dc:9f: be:0f:f5:a4:27:1e:03:61:18:95:e6:7e:23:e4:fe:ff:e2:89: ae:59:f5:03:35:d4:93:78:b9:cc:59:f9:d5:d1:d8:56:7f:4a: f8:68:aa:03:fd:99:86:d8:83:b3:24:e1:43:98:81:65:0e:ec: 00:64:56:b4:82:db:57:c1:1e:f9:db:94:bf:18:0e:e3:f7:37: 7c:0a:b9:ca:7e:c5:8c:6d:4f:ae:fb:ba:16:c4:20:17:a1:1d: dd:44:81:3a:74:aa:00:b7:4c:b3:95:2d:c6:9a:bc:ac:79:5d: a5:79:e3:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFQTQxMTAvBgNVBAUTKDFEMjQyRTM3QjdBNzQ2QzM3RTQ1NDE0NTZBQjAwOThC M0I1NzNDRkMwHhcNMjYwOTE5MDY0MTQ4WhcNMjYwOTI2MDY0MTQ4WjAYMRYwFAYD VQQDEw02YWFlMmVhYy0zMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnLBsYoWwvgUMdXU9lHV5pGXcrxQ5Z6V/dWhxXGWXbWVKaBQqCijtyn3MUTh ntcTBJKGwJEab9u/Hc5wTJ2Vf0l6GWmISaIuKb1ZvFXQc510U28A72t+6mDaw3uV ig+RLAEs4GSNQ3XYwl+5A5mEMEG+LyF8rAT3tMVhR+aA1wyKpN+sGxX15rbVfnd/ 3yCVUDPomf96RwVcQsLSVxo9CBK9ftfHhXEMQpTP0luipp62PNGlTY0bU39UQ9o8 kVT4TdiTClsZXBYDkpEfHBVIGlAz7RHBrwu7oT/A3FWCw+ukVAfMG6zsAMiQxq21 kqUBluhNOaldTP68LrRfktx8OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDi9SbyX TDqS5C3OP/Tiha2egAfqMB8GA1UdIwQYMBaAFB0kLje3p0bDfkVBRWqwCYs7Vzz8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkVBNC8yNjREQ0YxQzYz QUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJzTi1SVUZGYXJBSml6dFhQ UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkVBNC8yNjREQ0YxQzYzQUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJz Ti1SVUZGYXJBSml6dFhQUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAei03N69/ep+/PnwYE7aRRZXaYzotIA+nnulMvbe1VkyIZpUQmBCCrGdTWzyp +8NUJ/7eJRsT8g3EyXAMr4Sajkjkj56lGdBySU2HWc3Tf9f/JNYUgwV7XnFBsPxM wwlxwsVw3lrIt0UQ9SQY1R6DFs9CY7zRqtCw43/FlbwuKq9NWnaYvo40vcAhYD5S iNyfvg/1pCceA2EYleZ+I+T+/+KJrln1AzXUk3i5zFn51dHYVn9K+GiqA/2ZhtiD syThQ5iBZQ7sAGRWtILbV8Ee+duUvxgO4/c3fAq5yn7FjG1Prvu6FsQgF6Ed3USB OnSqALdMs5Utxpq8rHldpXnj4Q== -----END CERTIFICATE-----Generated at Mon Sep 21 09:28:16 2026 by rpki-client