$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json) Hash identifier: ymzf6Xo/5caJ81hPqXlcf8goxnvS5xlarO6rsQuy4Ts= Subject key identifier: FA:F5:15:8D:17:0D:31:B5:D0:4F:CA:A3:09:CF:09:F6:07:34:69:4A Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft Manifest number: 0178 Signing time: Wed 23 Sep 2026 04:35:32 +0000 Manifest this update: Wed 23 Sep 2026 04:35:31 +0000 Manifest next update: Wed 30 Sep 2026 04:35:31 +0000 Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: QZcfHQ/wh9xksbKApeiRkQnJrzkH4e5DUpWdMF9n9uE=) 2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Validity Not Before: Sep 23 04:35:31 2026 GMT Not After : Sep 30 04:35:31 2026 GMT Subject: CN=6ab35714-f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:70:1f:6f:09:46:b6:96:aa:a0:7b:a8:0b: 76:92:e9:aa:a0:2e:a0:ff:0b:bb:e2:3b:0c:bd:dc: 3a:b9:6f:e4:a5:09:01:a6:6b:b8:0e:72:e5:83:dc: 21:9f:c9:ce:a9:f8:7a:17:41:40:2d:a4:b8:e2:ec: 5e:59:3b:d0:97:e5:dc:72:bb:da:b4:16:30:3c:a1: ab:46:59:18:ba:e7:0a:8b:0f:b0:5b:a5:ac:0f:0a: 37:c6:8c:8d:d7:ed:ae:d1:9a:cc:82:cf:f1:48:53: 2b:45:26:0e:83:56:97:36:bb:6f:b6:02:a3:f9:61: d4:62:d1:0d:a3:0e:47:64:ef:d1:2b:1c:ac:21:02: dd:b0:cd:1d:60:d2:ca:ea:cc:0a:5f:2d:74:df:41: 6f:19:7b:29:f0:54:c3:56:b0:d7:72:7c:fd:a8:f9: 5c:cd:b0:68:e4:1c:b8:18:77:60:6d:e5:4a:ed:b7: e0:0a:2f:cf:1f:cf:f1:d6:10:39:4f:1c:6d:52:ce: 71:03:bf:23:65:32:43:00:ce:7e:b7:55:67:a3:55: b1:1c:56:65:fe:89:c7:3c:8d:bf:c6:b0:57:76:25: d3:7d:5f:70:92:eb:f0:5e:ce:73:43:73:6e:ad:4d: 83:6c:28:f9:6c:92:18:f2:46:65:20:e8:64:70:bc: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:15:8D:17:0D:31:B5:D0:4F:CA:A3:09:CF:09:F6:07:34:69:4A X509v3 Authority Key Identifier: keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:38:93:65:ca:9b:47:34:ae:6c:16:55:8e:c5:d6:ce:24:d5: 47:f0:95:06:28:50:d2:d7:47:aa:03:7a:43:80:85:01:8e:06: 25:a5:a0:22:eb:a3:da:a4:1c:b8:c9:cb:80:7b:2f:c1:10:f1: 5e:e4:9a:dd:be:9c:10:cc:4d:ac:e1:90:ee:37:c9:c0:63:ff: c2:69:7a:38:e6:6a:7e:09:7c:f7:1b:09:9e:db:29:9b:8f:95: 44:57:30:e2:4d:0b:6b:73:16:55:27:91:91:fd:e0:29:96:98: 36:eb:8f:a5:40:5f:fc:73:08:aa:38:ba:c5:1d:2b:4c:b6:9a: aa:e3:6a:3c:4d:d1:68:fb:dc:a9:43:a0:d5:79:f7:f4:dc:d3: 52:b8:70:60:2a:40:d6:54:23:7b:99:94:7a:6f:63:74:fe:6d: c6:a0:c6:d4:2f:50:72:d9:e8:ff:8e:26:63:f0:b7:cc:77:44: 7e:0c:25:d5:87:8f:22:4d:ba:75:23:79:01:5a:82:f8:76:f0: e9:8b:e1:38:fa:14:1f:f3:6a:07:99:81:9d:f8:ba:84:d8:cd: d0:66:1c:fe:c5:0b:c0:2f:af:54:e5:77:ad:e4:e8:5d:42:38: 07:17:d7:95:8b:07:27:2d:0d:5d:1a:9e:4e:86:3d:9d:2a:a9: 8f:14:d0:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QzMxMTAvBgNVBAUTKDFFNUMxMDdFRkQwM0NGMTNEMjE0QTM5QTZBMkNFOERE QUQzMDQ3MEUwHhcNMjYwOTIzMDQzNTMxWhcNMjYwOTMwMDQzNTMxWjAYMRYwFAYD VQQDEw02YWIzNTcxNC1mOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVpwH28JRraWqqB7qAt2kumqoC6g/wu74jsMvdw6uW/kpQkBpmu4DnLlg9wh n8nOqfh6F0FALaS44uxeWTvQl+XccrvatBYwPKGrRlkYuucKiw+wW6WsDwo3xoyN 1+2u0ZrMgs/xSFMrRSYOg1aXNrtvtgKj+WHUYtENow5HZO/RKxysIQLdsM0dYNLK 6swKXy1030FvGXsp8FTDVrDXcnz9qPlczbBo5By4GHdgbeVK7bfgCi/PH8/x1hA5 TxxtUs5xA78jZTJDAM5+t1Vno1WxHFZl/onHPI2/xrBXdiXTfV9wkuvwXs5zQ3Nu rU2DbCj5bJIY8kZlIOhkcLw5eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPr1FY0X DTG10E/KownPCfYHNGlKMB8GA1UdIwQYMBaAFB5cEH79A88T0hSjmmos6N2tMEcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlDMy80NUNDODJDQzgw NjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4UFNGS09hYWl6bzNhMHdS dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsd1FmdjBEenhQU0ZLT2FhaXpvM2Ewd1J3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlDMy80NUNDODJDQzgwNjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4 UFNGS09hYWl6bzNhMHdSdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXjiTZcqbRzSubBZVjsXWziTVR/CVBihQ0tdHqgN6Q4CFAY4GJaWgIuuj2qQc uMnLgHsvwRDxXuSa3b6cEMxNrOGQ7jfJwGP/wml6OOZqfgl89xsJntspm4+VRFcw 4k0La3MWVSeRkf3gKZaYNuuPpUBf/HMIqji6xR0rTLaaquNqPE3RaPvcqUOg1Xn3 9NzTUrhwYCpA1lQje5mUem9jdP5txqDG1C9Qctno/44mY/C3zHdEfgwl1YePIk26 dSN5AVqC+Hbw6YvhOPoUH/NqB5mBnfi6hNjN0GYc/sULwC+vVOV3reToXUI4BxfX lYsHJy0NXRqeToY9nSqpjxTQ0g== -----END CERTIFICATE-----Generated at Thu Sep 24 22:57:02 2026 by rpki-client