$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: xvoHBFyF0YJGGY4xkGX0vAmZbpyh0XvdoFGSgDhiJd0= Subject key identifier: 1E:5F:D5:64:79:BC:30:E7:4B:55:46:BD:B0:B8:CF:77:B5:59:4B:2C Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0279 Signing time: Tue 13 Oct 2026 02:34:21 +0000 Manifest this update: Tue 13 Oct 2026 02:34:21 +0000 Manifest next update: Tue 20 Oct 2026 02:34:21 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: YH9sSgeZWPGvtKH8GxPkDJ+NHgkP38Cbusm8L++ZwrA=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 02:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Oct 13 02:34:21 2026 GMT Not After : Oct 20 02:34:21 2026 GMT Subject: CN=6acd98ad-aedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:a0:bc:f6:75:f8:0c:3d:6b:43:46:c3:18: cd:18:fb:63:80:a3:db:32:00:3d:d4:81:1d:04:41: 56:b8:b2:b8:8c:44:6d:23:5e:de:85:74:85:16:ac: 52:3f:39:33:34:0a:fc:79:c7:d3:6a:62:99:1a:71: c9:9b:e2:8e:e1:c0:60:b3:cf:99:e1:2b:df:f0:aa: af:68:6c:c2:24:ce:f4:82:4e:48:c0:7e:4d:55:c7: 46:06:20:ea:42:9f:fa:46:f3:01:e6:fe:e7:98:d7: 62:fe:90:06:f0:7e:06:21:f6:10:1a:50:21:d1:29: ab:69:36:99:55:50:de:ce:96:92:0c:f3:95:cf:2f: be:78:96:ce:4f:06:8e:2b:e3:14:2d:81:f1:69:e9: cb:8b:3b:a4:92:60:94:80:5a:8f:80:e0:32:df:5a: 95:46:85:8f:cf:7a:fa:4c:5b:e1:23:0b:a6:ef:43: 9f:70:b4:d2:a1:df:cb:d6:fd:ee:f2:c9:f9:28:e3: f3:81:8a:ba:27:24:fa:4d:dd:a9:42:ca:78:9c:1b: 16:3c:ce:ab:ac:0f:69:ab:e4:55:a2:57:09:1a:3b: 41:17:92:9d:d3:1d:e1:17:e9:c4:2e:75:b8:b9:c0: a4:5e:4f:26:43:16:dd:24:f7:65:20:a4:f2:3e:0a: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:D5:64:79:BC:30:E7:4B:55:46:BD:B0:B8:CF:77:B5:59:4B:2C X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:f6:7b:46:ee:d1:14:25:46:6e:26:3a:ad:b3:e5:44:6f: c3:7d:c7:41:fd:51:0f:57:87:bf:4b:ad:1e:9e:86:05:de:5a: b6:96:9c:d8:6e:d5:47:04:e0:37:53:4c:d8:aa:c5:b7:c6:05: 08:6c:a3:09:ff:cf:e1:0d:e4:ac:5e:6f:8c:fc:89:ba:ba:a5: 9c:f0:a4:af:32:61:6a:d8:dd:7b:1f:5b:1b:57:0b:94:24:0e: 4c:d5:72:ab:5a:ae:a1:6d:cc:6d:cb:32:38:3d:a5:82:09:01: ca:32:92:c6:93:30:04:3f:46:a4:f5:7c:62:0a:e5:a8:69:2f: af:31:4d:d1:88:77:39:11:77:f0:88:c9:5e:1d:19:db:a9:f0: 4e:f2:44:ef:d9:76:10:95:24:fb:48:95:4d:8d:e2:43:5f:04: 72:af:87:0c:0a:06:fe:82:1e:4b:97:79:11:bc:01:26:7f:74: 36:69:35:5b:04:de:60:f6:2f:9d:74:87:0c:7e:44:e8:80:a2: d7:6c:7a:be:ca:f4:b3:58:54:86:93:bf:ee:7a:a9:7d:be:30: be:14:44:34:4c:3f:d6:8f:82:9e:fb:c4:c2:96:3f:03:89:67: fe:aa:5b:29:b3:93:6c:95:19:21:a8:c2:35:5b:86:9d:15:17: 8f:dd:05:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYxMDEzMDIzNDIxWhcNMjYxMDIwMDIzNDIxWjAYMRYwFAYD VQQDEw02YWNkOThhZC1hZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkWgvPZ1+Aw9a0NGwxjNGPtjgKPbMgA91IEdBEFWuLK4jERtI17ehXSFFqxS PzkzNAr8ecfTamKZGnHJm+KO4cBgs8+Z4Svf8KqvaGzCJM70gk5IwH5NVcdGBiDq Qp/6RvMB5v7nmNdi/pAG8H4GIfYQGlAh0SmraTaZVVDezpaSDPOVzy++eJbOTwaO K+MULYHxaenLizukkmCUgFqPgOAy31qVRoWPz3r6TFvhIwum70OfcLTSod/L1v3u 8sn5KOPzgYq6JyT6Td2pQsp4nBsWPM6rrA9pq+RVolcJGjtBF5Kd0x3hF+nELnW4 ucCkXk8mQxbdJPdlIKTyPgp2cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5f1WR5 vDDnS1VGvbC4z3e1WUssMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU3H2e0bu0RQlRm4mOq2z5URvw33HQf1RD1eHv0utHp6GBd5atpac2G7VRwTg N1NM2KrFt8YFCGyjCf/P4Q3krF5vjPyJurqlnPCkrzJhatjdex9bG1cLlCQOTNVy q1quoW3MbcsyOD2lggkByjKSxpMwBD9GpPV8YgrlqGkvrzFN0Yh3ORF38IjJXh0Z 26nwTvJE79l2EJUk+0iVTY3iQ18Ecq+HDAoG/oIeS5d5EbwBJn90Nmk1WwTeYPYv nXSHDH5E6ICi12x6vsr0s1hUhpO/7nqpfb4wvhRENEw/1o+CnvvEwpY/A4ln/qpb KbOTbJUZIajCNVuGnRUXj90Fcg== -----END CERTIFICATE-----Generated at Thu Oct 15 01:53:21 2026 by rpki-client