$ rpki-client -vvvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: E9pXkkpbKMM4RzHTqp1ssAfiLpJEx60ueYVLcCqgQPw= Subject key identifier: 48:A8:4A:17:FE:C4:0E:A3:A8:87:28:B8:6C:B8:47:E8:08:87:55:0D Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0EB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0E6F Signing time: Sun 20 Sep 2026 17:43:48 +0000 Manifest this update: Sun 20 Sep 2026 17:43:47 +0000 Manifest next update: Sun 27 Sep 2026 17:43:47 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: H49mhDJd3dlny+mH7VJJIVc9FZjHMYbtDr4ILS/u4MU=) 2: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: I6uNdzqOJkpVqoIsCJtM/LW7p85XLPeVISRh21FNOaE=) 3: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 8EN8240RkeXll20v+ZKEM2l0H0r1O4pLdIwi1aSMet0=) 4: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 2cFCTlNDIlFSidle/7a/SIVrcL9hkecXR8zTHPDN7pw=) 5: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: NM4ahWOPO+ilsHy5HGWnTut3f/HXCR5WoP1fo7WCekM=) 6: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: SKc7rTK6TrshCb8g4KIsNcbpMMrJrhQX8+vln7hiYKM=) 7: F2826A504FCF11EB88444467C4F9AE02.roa (hash: mfbNnHkGQfEzmbx5mnkWRdxSzdOXfwYbg2Dz8Uggeow=) 8: D0551B50046411F09760073DC4F9AE02.roa (hash: JF98zUiYfD63waJbzjs77cTdpfkwhQ0ndKwrtYlw7VI=) 9: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: zgSxrM3JDm57m2vX62mOv6kyES6AEYoM+0Yal9gdLNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Sep 20 17:43:47 2026 GMT Not After : Sep 27 17:43:47 2026 GMT Subject: CN=6ab01b54-a0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:26:6d:a4:c7:ad:f3:7e:56:a3:01:46:c8:3f: 2b:33:21:77:42:84:92:d2:28:9a:2b:48:76:3b:be: 3b:c6:3c:d5:f5:37:66:a6:0b:b3:f3:77:0e:f0:4b: d2:20:8a:c0:76:03:d7:71:99:7f:1a:ed:04:fb:f9: d7:8e:a9:6c:b4:d4:60:06:f3:6e:23:68:56:6a:a0: 29:c1:eb:ce:6a:5c:0e:e5:87:6f:91:92:ae:b1:56: a8:97:71:94:5d:cb:3e:5c:0e:d2:f2:6a:bd:86:4f: 4a:a4:92:dd:b6:76:01:86:ee:39:69:6a:2a:cb:4d: a0:cf:a6:c0:c2:88:d0:28:e9:b5:50:58:c6:88:c1: 0d:85:44:41:1f:c3:b9:83:4b:7a:5e:51:d4:5f:5f: 86:ce:98:e8:d5:27:1a:ac:12:f5:16:5d:81:54:eb: 7c:f4:18:d0:6b:55:44:a2:95:de:04:8d:68:cb:09: b2:cf:c5:4e:e1:b6:a4:0d:65:ae:8e:82:b3:b3:f6: cb:73:51:e5:85:fb:7d:59:5c:28:03:da:2f:c5:3a: ef:97:ec:2f:5a:92:ac:de:a0:5e:c7:36:33:82:14: 00:f7:1b:0d:45:10:20:0c:db:14:fe:fb:d3:22:c1: 46:d3:ec:09:c6:f0:2c:7b:7e:bd:b1:ba:ed:15:b5: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A8:4A:17:FE:C4:0E:A3:A8:87:28:B8:6C:B8:47:E8:08:87:55:0D X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0c:62:02:16:cd:ea:ab:d6:85:c5:53:28:b0:7e:b0:14:48: 7e:17:69:e9:a4:57:ec:b3:be:00:5c:19:90:02:ef:18:0e:4c: 2c:ab:65:99:25:f7:af:21:36:aa:ed:3b:b9:e0:b3:6b:75:42: 17:1e:fb:a3:be:e0:a1:68:74:b1:0d:a0:75:0c:3e:5b:a4:29: 94:37:c4:3f:50:3c:4c:28:6f:18:3c:d2:2e:45:70:f3:21:70: 96:a2:cc:42:bf:07:d6:cb:e7:21:75:45:f3:f7:e5:ad:18:20: a8:1b:0c:26:28:66:37:9a:28:99:09:a1:a1:e9:b3:f3:d0:34: ad:b3:7b:cc:5c:d8:81:e4:1f:c5:81:28:88:d0:bd:2b:70:d5: e2:fa:c0:65:92:15:97:44:48:2e:c8:05:c4:a6:5e:ad:2d:a1: 73:8a:75:ea:50:9a:f4:d4:89:cd:08:87:dd:17:42:dc:83:e5: 96:bc:1e:4e:22:fc:71:62:c4:52:4f:c1:db:4a:99:1a:10:0f: 55:e7:f6:a3:af:4b:a7:e8:63:65:89:fc:31:25:f7:df:11:55: 80:72:63:08:9f:40:22:91:4f:f0:d9:92:2c:38:02:77:cf:ce: 51:5e:e4:0b:e5:67:17:70:12:cd:1f:5f:ef:ae:d6:e7:b3:99: 81:31:cf:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjYwOTIwMTc0MzQ3WhcNMjYwOTI3MTc0MzQ3WjAYMRYwFAYD VQQDEw02YWIwMWI1NC1hMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yZtpMet835WowFGyD8rMyF3QoSS0iiaK0h2O747xjzV9Tdmpguz83cO8EvS IIrAdgPXcZl/Gu0E+/nXjqlstNRgBvNuI2hWaqApwevOalwO5YdvkZKusVaol3GU Xcs+XA7S8mq9hk9KpJLdtnYBhu45aWoqy02gz6bAwojQKOm1UFjGiMENhURBH8O5 g0t6XlHUX1+Gzpjo1ScarBL1Fl2BVOt89BjQa1VEopXeBI1oywmyz8VO4bakDWWu joKzs/bLc1Hlhft9WVwoA9ovxTrvl+wvWpKs3qBexzYzghQA9xsNRRAgDNsU/vvT IsFG0+wJxvAse369sbrtFbVD9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEioShf+ xA6jqIcouGy4R+gIh1UNMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANAxiAhbN6qvWhcVTKLB+sBRIfhdp6aRX7LO+AFwZkALvGA5MLKtlmSX3ryE2 qu07ueCza3VCFx77o77goWh0sQ2gdQw+W6QplDfEP1A8TChvGDzSLkVw8yFwlqLM Qr8H1svnIXVF8/flrRggqBsMJihmN5oomQmhoemz89A0rbN7zFzYgeQfxYEoiNC9 K3DV4vrAZZIVl0RILsgFxKZerS2hc4p16lCa9NSJzQiH3RdC3IPllrweTiL8cWLE Uk/B20qZGhAPVef2o69Lp+hjZYn8MSX33xFVgHJjCJ9AIpFP8NmSLDgCd8/OUV7k C+VnF3ASzR9f767W57OZgTHP/w== -----END CERTIFICATE-----Generated at Mon Sep 21 13:40:26 2026 by rpki-client