$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: hIMatEpcxqz/QcVeEI7z2wm2IM2NAXXtWXrP4e4wOLE= Subject key identifier: 5E:4D:0F:A0:82:7B:9F:D5:78:D2:F7:50:BB:94:23:75:84:E0:C2:40 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0FB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0F88 Signing time: Sun 20 Sep 2026 17:29:31 +0000 Manifest this update: Sun 20 Sep 2026 17:29:31 +0000 Manifest next update: Sun 27 Sep 2026 17:29:31 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: lytaoTcfKwo2NmoZk6xFzPvrcpS945/5v2HQVvsmWoM=) 2: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=) 3: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Sep 20 17:29:31 2026 GMT Not After : Sep 27 17:29:31 2026 GMT Subject: CN=6ab017fb-a2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:38:aa:bd:73:05:26:c3:54:ba:c6:46:e4: 00:e3:4e:4a:26:e4:be:ab:08:35:eb:50:23:c9:0e: b9:16:b9:e6:cc:7e:ff:0b:95:75:b6:10:b5:26:18: c4:c5:46:f0:16:34:a4:6c:33:dd:07:77:d5:a6:06: ca:92:2d:ca:d8:de:f4:5c:e8:48:c4:1c:b0:4c:95: 9f:13:2b:10:dd:19:21:a9:08:35:65:91:b7:0c:71: 5e:44:8c:6c:83:0d:7a:c9:44:07:58:26:40:46:a7: 5d:14:a4:f8:1a:f4:8c:60:ab:78:99:00:02:0c:1f: a9:43:68:fd:7e:8b:c6:01:79:b9:b9:a2:57:d0:69: 8c:7f:e5:c3:d2:be:2e:be:1a:bf:54:75:93:65:a2: eb:0c:5a:8a:89:ca:6e:3a:a4:ad:ef:f0:5c:66:89: d5:e3:f3:e0:df:bf:72:f8:8a:75:85:20:02:ea:f5: 51:f9:4d:9a:e3:1b:92:7d:95:7a:d9:6e:c2:5b:57: ad:88:59:8b:26:a9:bd:40:0d:3e:52:10:da:fd:67: 05:73:20:2a:7c:55:f6:67:8b:b3:59:e1:cc:b4:12: e9:a4:56:cc:bf:c8:e9:ac:f1:fd:c9:a1:77:1d:aa: 4d:4c:64:03:e0:28:f0:bd:7f:26:0b:c7:86:7f:a1: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4D:0F:A0:82:7B:9F:D5:78:D2:F7:50:BB:94:23:75:84:E0:C2:40 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b3:97:f9:53:9d:c3:00:74:54:e2:1d:97:f0:d6:ba:d3:1d: 8f:fd:02:2a:21:72:bc:5c:29:9d:59:ee:40:7f:14:1e:f2:1c: a2:e5:47:83:8e:27:a0:93:68:76:4d:9d:d8:ee:45:a7:fd:ee: 3c:35:a5:82:8a:13:9f:30:c2:cd:dc:02:e4:ce:04:33:d6:76: 71:0b:a4:96:cd:b8:be:fe:18:dc:a0:dc:a3:45:ee:c1:30:7a: 94:60:0d:be:7c:08:9a:5c:95:b2:47:ec:18:90:d5:23:d5:f4: 0b:53:bd:6d:1b:c0:69:0b:d5:99:3e:dd:75:7c:c6:a0:d8:25: 89:5a:26:36:f4:97:c0:d6:78:06:21:5b:51:a7:a4:05:75:64: 14:d7:12:90:05:42:9e:e9:a7:00:1c:01:bf:8e:78:5c:bb:47: 2d:94:c8:a3:e7:eb:0b:b0:23:39:ce:d2:49:f2:11:e3:d3:78: 3d:10:ec:cd:b6:81:0d:b9:fb:53:ff:14:56:0a:2f:57:a9:77: 6d:df:16:2e:2f:f0:96:7b:3b:11:da:84:d0:ef:96:fd:09:ff: 14:11:a4:27:e8:43:90:62:59:4a:27:69:b0:0c:07:13:d1:80: d0:7d:4d:57:a7:7b:eb:99:4c:34:32:a0:c5:6a:3b:d3:b5:b4: eb:99:c7:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjYwOTIwMTcyOTMxWhcNMjYwOTI3MTcyOTMxWjAYMRYwFAYD VQQDEw02YWIwMTdmYi1hMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3c4qr1zBSbDVLrGRuQA405KJuS+qwg161AjyQ65FrnmzH7/C5V1thC1JhjE xUbwFjSkbDPdB3fVpgbKki3K2N70XOhIxBywTJWfEysQ3RkhqQg1ZZG3DHFeRIxs gw16yUQHWCZARqddFKT4GvSMYKt4mQACDB+pQ2j9fovGAXm5uaJX0GmMf+XD0r4u vhq/VHWTZaLrDFqKicpuOqSt7/BcZonV4/Pg379y+Ip1hSAC6vVR+U2a4xuSfZV6 2W7CW1etiFmLJqm9QA0+UhDa/WcFcyAqfFX2Z4uzWeHMtBLppFbMv8jprPH9yaF3 HapNTGQD4CjwvX8mC8eGf6GRawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5ND6CC e5/VeNL3ULuUI3WE4MJAMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuLOX+VOdwwB0VOIdl/DWutMdj/0CKiFyvFwpnVnuQH8UHvIcouVHg44noJNo dk2d2O5Fp/3uPDWlgooTnzDCzdwC5M4EM9Z2cQukls24vv4Y3KDco0XuwTB6lGAN vnwImlyVskfsGJDVI9X0C1O9bRvAaQvVmT7ddXzGoNgliVomNvSXwNZ4BiFbUaek BXVkFNcSkAVCnumnABwBv454XLtHLZTIo+frC7AjOc7SSfIR49N4PRDszbaBDbn7 U/8UVgovV6l3bd8WLi/wlns7EdqE0O+W/Qn/FBGkJ+hDkGJZSidpsAwHE9GA0H1N V6d765lMNDKgxWo707W065nHFw== -----END CERTIFICATE-----Generated at Tue Sep 22 14:00:47 2026 by rpki-client