$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: V8HzSkV5eRcUzQjqbfrr1vffnoFBji0KoX60kdWlP/w= Subject key identifier: 14:0F:A0:87:82:E2:41:EC:27:CC:C5:8B:35:0F:7B:DB:5B:78:FD:56 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0291 Signing time: Fri 25 Sep 2026 01:52:53 +0000 Manifest this update: Fri 25 Sep 2026 01:52:53 +0000 Manifest next update: Fri 02 Oct 2026 01:52:53 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: noVo/MIYOBpdtnSdqvbbVX16wMuslNTTc4LjOMoU1rA=) 2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=) 3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Sep 25 01:52:53 2026 GMT Not After : Oct 2 01:52:53 2026 GMT Subject: CN=6ab5d3f5-80ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:00:2e:cf:19:f8:3a:17:96:dd:5c:6d:16: e7:51:07:45:d5:3b:5c:bb:a0:d3:95:09:6c:f5:da: 34:50:f0:ff:51:52:6b:47:0b:08:b7:c8:87:f4:f6: 57:90:bb:8f:de:7f:f1:24:a6:e0:10:d1:57:8e:83: 6a:52:7b:a0:d6:27:8e:ec:07:41:40:35:77:71:19: 9d:f4:77:aa:46:72:27:9f:ef:30:06:75:c4:ec:b0: 40:57:dd:37:04:8b:ed:4e:47:0a:62:98:82:24:cd: 2f:ca:26:30:96:87:02:5f:1a:bc:e6:27:9f:50:e8: 41:0a:01:76:9d:b4:91:68:70:05:c5:ed:4a:3e:27: 15:3a:c5:9b:7d:46:d4:53:2e:13:28:03:ad:a4:91: 00:49:9c:9c:59:ab:6a:b2:45:37:11:f7:f1:ef:1a: ae:11:a0:a6:2e:33:a1:7b:7b:9e:a0:27:3d:c3:73: 6e:10:f9:1e:7d:34:40:18:79:f4:16:a7:6b:2d:aa: 98:dc:cd:0f:c0:22:15:56:75:2f:5e:9b:6a:07:ef: 37:5a:85:3c:5c:e3:3b:1b:59:e2:11:95:50:3f:c0: f9:18:a7:15:90:73:74:4f:ff:1c:5e:80:80:02:7d: 53:67:b2:f8:50:0c:b7:e2:6c:d4:03:bc:dc:41:ef: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:A0:87:82:E2:41:EC:27:CC:C5:8B:35:0F:7B:DB:5B:78:FD:56 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4d:31:b2:13:12:f0:a4:04:ef:c3:95:d1:e5:89:fb:6b:aa: 81:cc:9e:b9:e2:0c:7f:97:4c:a7:b9:3b:b9:f2:e1:2f:fa:4c: 7d:77:19:9c:5b:4d:db:9b:df:e9:57:b3:08:f8:62:e3:ec:95: de:33:a0:7d:e5:e6:11:e1:a8:90:c1:4c:c2:ef:1f:0b:bd:f6: 52:36:7d:62:73:f0:70:fa:74:1a:f6:2d:ad:5d:13:75:ac:af: cd:20:54:0b:77:6f:df:9e:b5:54:aa:4a:d0:4f:81:90:07:08: fb:dd:3f:62:38:f4:8f:e3:f6:ce:18:f6:f7:f5:da:c0:3c:e9: 88:0d:70:70:2b:09:4b:1d:f8:29:ee:cd:ff:1f:5a:f9:d3:61: 6c:0d:7d:6f:f4:3e:e2:c8:76:b0:26:69:68:ec:32:14:3e:91: 3a:15:e9:95:82:c7:b6:a6:cc:1c:62:83:e6:57:2e:9e:34:bc: 8e:31:8b:86:f9:4d:52:e2:8f:cb:b4:fd:3b:7d:a2:27:20:a2: 50:20:f1:83:20:e2:e8:91:ea:b1:99:20:22:f4:45:66:d4:b1: a9:49:ef:81:6f:b5:f1:d0:22:bf:9e:3c:e3:ca:4a:ae:da:74: 37:48:dc:8e:ee:a6:cb:a5:84:4c:85:6a:84:c1:ee:5a:be:d4: d9:58:bd:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwOTI1MDE1MjUzWhcNMjYxMDAyMDE1MjUzWjAYMRYwFAYD VQQDEw02YWI1ZDNmNS04MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppoALs8Z+DoXlt1cbRbnUQdF1Ttcu6DTlQls9do0UPD/UVJrRwsIt8iH9PZX kLuP3n/xJKbgENFXjoNqUnug1ieO7AdBQDV3cRmd9HeqRnInn+8wBnXE7LBAV903 BIvtTkcKYpiCJM0vyiYwlocCXxq85iefUOhBCgF2nbSRaHAFxe1KPicVOsWbfUbU Uy4TKAOtpJEASZycWatqskU3Effx7xquEaCmLjOhe3ueoCc9w3NuEPkefTRAGHn0 FqdrLaqY3M0PwCIVVnUvXptqB+83WoU8XOM7G1niEZVQP8D5GKcVkHN0T/8cXoCA An1TZ7L4UAy34mzUA7zcQe8k3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQPoIeC 4kHsJ8zFizUPe9tbeP1WMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANE0xshMS8KQE78OV0eWJ+2uqgcyeueIMf5dMp7k7ufLhL/pMfXcZnFtN25vf 6VezCPhi4+yV3jOgfeXmEeGokMFMwu8fC732UjZ9YnPwcPp0GvYtrV0TdayvzSBU C3dv3561VKpK0E+BkAcI+90/Yjj0j+P2zhj29/XawDzpiA1wcCsJSx34Ke7N/x9a +dNhbA19b/Q+4sh2sCZpaOwyFD6ROhXplYLHtqbMHGKD5lcunjS8jjGLhvlNUuKP y7T9O32iJyCiUCDxgyDi6JHqsZkgIvRFZtSxqUnvgW+18dAiv54848pKrtp0N0jc ju6my6WETIVqhMHuWr7U2Vi9og== -----END CERTIFICATE-----Generated at Fri Sep 25 09:03:48 2026 by rpki-client