$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json) Hash identifier: s8P4/uyxLhKPVHvVr5rSp5WVY0Xraaml1tk5IdelI6c= Subject key identifier: F4:BF:23:53:86:BC:6C:BC:A5:F1:DC:1C:46:7A:B3:0D:E5:AC:73:AA Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft Manifest number: 0350 Signing time: Mon 21 Sep 2026 00:45:35 +0000 Manifest this update: Mon 21 Sep 2026 00:45:35 +0000 Manifest next update: Mon 28 Sep 2026 00:45:35 +0000 Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: J7DW5j7M/huZJ+9MBsxDoFUpD2ASHwnanTO1vOlvhvw=) 2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A Validity Not Before: Sep 21 00:45:35 2026 GMT Not After : Sep 28 00:45:35 2026 GMT Subject: CN=6ab07e2f-9a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:b0:60:57:49:0e:b5:ec:97:82:4e:3b:42: cb:4a:2a:41:1c:8b:ae:9d:47:45:1f:ff:d3:73:44: 78:d1:55:09:86:c0:2f:7a:a0:bf:46:67:3b:ca:54: eb:94:9d:d9:ca:f6:6f:2b:18:07:cb:e8:86:70:42: 33:12:44:23:93:71:56:9e:56:fc:e9:6c:63:73:75: ce:a5:3f:9b:99:90:53:52:23:c7:c6:1f:5b:68:5f: 78:87:9c:16:db:63:82:44:ac:a7:b6:ee:83:b8:06: b3:fd:54:7d:16:20:61:29:49:64:2b:c3:01:41:85: e9:1a:6e:a2:a6:47:e9:40:7d:c7:c5:cd:ec:fb:0a: 88:18:db:65:57:87:5b:c3:3b:79:aa:0b:ef:00:bb: 6a:fa:0b:6e:5a:08:1f:69:38:51:8f:f4:6d:df:bc: bd:8a:a4:07:34:6d:57:3e:34:9e:23:7b:bc:fc:7f: 2e:57:44:dc:17:24:8c:b9:c9:78:7f:75:7f:a8:ad: 53:8e:6e:28:0c:4f:e6:73:da:33:28:ec:94:db:1d: 6f:6b:fc:6b:4a:b9:49:a4:62:96:16:c4:bc:91:9f: fa:60:13:0c:6e:fd:59:e3:db:d0:e1:c5:1c:3b:aa: db:2b:13:23:d7:0d:0b:84:9a:24:fe:f2:f1:50:8a: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BF:23:53:86:BC:6C:BC:A5:F1:DC:1C:46:7A:B3:0D:E5:AC:73:AA X509v3 Authority Key Identifier: keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:36:c1:c9:9f:a7:b9:26:0e:b1:e4:99:d4:4b:61:79:82:d0: a1:e6:c4:6c:21:38:8b:b9:64:9b:e6:a7:72:8c:b4:67:55:3b: 4c:0a:52:6f:57:fd:d7:32:ce:ff:6f:dd:8a:f9:03:c1:1b:cd: 16:e5:09:74:0c:75:15:d1:fa:bc:88:67:9e:2b:af:f7:00:b4: 47:11:cb:03:5a:7a:ef:d1:c9:df:d0:58:f7:4f:43:0a:30:b5: 48:80:dd:8a:fb:44:93:0f:4b:c8:d4:98:5d:65:ca:f0:35:8c: f2:07:8a:b4:6d:e3:f1:b4:75:9d:c9:c3:9a:57:ca:6e:55:c2: c3:d5:cc:34:35:7f:80:bf:ad:20:3e:ba:4e:96:f1:e0:08:75: 73:67:21:52:04:c7:ee:ae:5c:39:8f:ca:d7:fd:21:0b:84:34: 64:88:53:c8:23:c2:d5:f7:ec:4c:ca:24:a3:b2:6f:86:13:96: 8b:bb:88:36:7f:0a:94:98:10:d3:db:9f:6b:e6:cb:50:62:d8: 70:37:7c:e2:18:c7:d7:f2:7e:08:e9:73:cc:5a:aa:71:0b:59: 1c:c7:f7:e4:77:ca:9d:af:46:db:15:11:ab:51:77:a9:4a:f7: 1e:c8:ba:d3:3a:ad:93:22:8e:68:69:fe:df:77:9e:fa:6c:d3: 53:a1:dc:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMzAxMTAvBgNVBAUTKDFEMkE1NTE1QThBOTlCMzBCMjFEMTg3MUJDRkFGRDI3 RUIxQTEzMkEwHhcNMjYwOTIxMDA0NTM1WhcNMjYwOTI4MDA0NTM1WjAYMRYwFAYD VQQDEw02YWIwN2UyZi05YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JSwYFdJDrXsl4JOO0LLSipBHIuunUdFH//Tc0R40VUJhsAveqC/Rmc7ylTr lJ3ZyvZvKxgHy+iGcEIzEkQjk3FWnlb86Wxjc3XOpT+bmZBTUiPHxh9baF94h5wW 22OCRKyntu6DuAaz/VR9FiBhKUlkK8MBQYXpGm6ipkfpQH3Hxc3s+wqIGNtlV4db wzt5qgvvALtq+gtuWggfaThRj/Rt37y9iqQHNG1XPjSeI3u8/H8uV0TcFySMucl4 f3V/qK1Tjm4oDE/mc9ozKOyU2x1va/xrSrlJpGKWFsS8kZ/6YBMMbv1Z49vQ4cUc O6rbKxMj1w0LhJok/vLxUIo+GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPS/I1OG vGy8pfHcHEZ6sw3lrHOqMB8GA1UdIwQYMBaAFB0qVRWoqZswsh0Ycbz6/SfrGhMq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIzMC84OTc3QzY3NDE5 MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16Q3lIUmh4dlByOUotc2FF eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hTcFZGYWlwbXpDeUhSaHh2UHI5Si1zYUV5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIzMC84OTc3QzY3NDE5MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16 Q3lIUmh4dlByOUotc2FFeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuTbByZ+nuSYOseSZ1EtheYLQoebEbCE4i7lkm+ancoy0Z1U7TApSb1f91zLO /2/divkDwRvNFuUJdAx1FdH6vIhnniuv9wC0RxHLA1p679HJ39BY909DCjC1SIDd ivtEkw9LyNSYXWXK8DWM8geKtG3j8bR1ncnDmlfKblXCw9XMNDV/gL+tID66Tpbx 4Ah1c2chUgTH7q5cOY/K1/0hC4Q0ZIhTyCPC1ffsTMoko7JvhhOWi7uINn8KlJgQ 09ufa+bLUGLYcDd84hjH1/J+COlzzFqqcQtZHMf35HfKna9G2xURq1F3qUr3Hsi6 0zqtkyKOaGn+33ee+mzTU6Hc4A== -----END CERTIFICATE-----Generated at Wed Sep 23 01:02:38 2026 by rpki-client