$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json) Hash identifier: jKVkQoRbAjtJDRhMxtauZhX/DRAM9xvdktm4r/Kt2Jg= Subject key identifier: EC:FA:A8:30:78:61:BD:BF:15:DC:71:F4:0D:15:02:62:89:FA:03:CA Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4 Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4 Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft Manifest number: 03C8 Signing time: Fri 25 Sep 2026 00:22:26 +0000 Manifest this update: Fri 25 Sep 2026 00:22:25 +0000 Manifest next update: Fri 02 Oct 2026 00:22:25 +0000 Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: FIViFnypkYBJQl/xVO3xDUWTS7IzrVUHnhBwuNvMIrU=) 2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: ZS73m8PHc2jdDEHGSUbWmMvRHOgafdSVcGYG1WG2/zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4 Validity Not Before: Sep 25 00:22:25 2026 GMT Not After : Oct 2 00:22:25 2026 GMT Subject: CN=6ab5bec2-a210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:ab:80:a7:d4:47:db:29:6f:ef:61:ab:ac: 7f:8a:9d:c0:5b:cc:12:e1:03:46:47:2a:6e:ea:10: d5:3b:22:39:44:32:0a:3a:94:fa:49:b1:64:8e:7a: 02:89:f4:0a:fa:8d:fe:9b:92:84:a8:68:7f:aa:07: c3:de:ef:df:fc:5b:d3:18:91:dc:d6:ce:6b:b7:80: 85:fb:a1:3a:62:06:0e:f9:57:92:74:44:5a:4d:12: 6f:8c:b5:89:f4:dd:b9:ee:ee:aa:4e:a7:ee:9a:2b: 03:df:c6:fc:0d:2b:c6:f5:03:dc:e4:33:42:80:76: 94:6a:2b:cb:05:a2:84:32:6c:2f:21:a9:6e:c4:28: 35:db:1e:0a:e8:6b:18:73:db:ad:c2:08:4e:db:cb: 9a:1d:74:80:2e:64:5a:b3:36:28:71:8e:8c:4f:07: 01:33:73:48:08:b7:fe:70:87:3f:fc:f3:cc:0d:28: 16:d0:5d:97:bb:fd:ad:6f:12:b5:5f:71:4d:80:c4: 58:ab:b9:96:e2:55:be:bd:05:2b:ba:d6:1b:e0:df: 19:8b:cc:35:8f:63:b7:b3:c7:39:b9:44:90:45:d2: ca:9e:97:2b:82:41:40:af:c3:df:ef:7f:52:6f:7a: 53:30:d1:20:9d:76:c1:dc:b2:b6:b0:75:9b:97:26: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FA:A8:30:78:61:BD:BF:15:DC:71:F4:0D:15:02:62:89:FA:03:CA X509v3 Authority Key Identifier: keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:03:f5:70:43:98:c0:29:6d:ea:57:48:8f:6d:24:5b:08:2f: 1c:34:0b:73:34:c4:be:8d:c4:31:1c:90:0b:c5:f0:28:53:4f: 86:a5:b5:e2:0d:27:50:70:da:ad:63:15:65:29:a1:ba:76:e7: 61:50:fd:24:cd:87:91:88:2e:98:ac:c0:2d:0c:fd:e0:b1:11: 2d:b8:c0:aa:29:80:6b:84:9b:a4:af:7f:ec:87:74:c6:8a:70: 54:8f:0c:ac:1d:9b:a6:79:6e:a4:8d:e1:9a:7a:b2:e5:a5:db: 0c:7c:bf:95:26:3f:44:fe:f3:fe:4e:46:f9:a6:e5:b0:19:65: e2:4d:d2:3c:1c:8c:01:be:2c:7b:7a:57:c6:b8:c1:a4:8e:00: 7b:55:33:6c:6a:7e:0a:1c:fc:36:3a:17:c5:9d:28:29:8b:e3: 37:ec:5d:36:97:1e:b6:9d:91:a6:08:09:14:bc:5e:ab:11:c8: 7e:e6:91:68:57:d7:fc:56:04:2a:0d:36:8e:fc:82:24:16:60: a3:aa:24:a5:ba:3d:78:39:12:cb:51:f9:91:94:00:a0:e1:8c: ff:7c:83:dd:df:9b:65:54:a6:ef:c3:eb:6f:57:67:bc:98:8d: 0a:b3:de:5e:8c:ef:76:27:50:07:9c:06:dd:ac:6d:1e:18:c3: 70:6f:67:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGMkIxMTAvBgNVBAUTKDFDQkE4RDNEQUE4MDQ4ODkzMEE5OTI4QjE5NkVERUUw NzVGNDA5QTQwHhcNMjYwOTI1MDAyMjI1WhcNMjYxMDAyMDAyMjI1WjAYMRYwFAYD VQQDEw02YWI1YmVjMi1hMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8urgKfUR9spb+9hq6x/ip3AW8wS4QNGRypu6hDVOyI5RDIKOpT6SbFkjnoC ifQK+o3+m5KEqGh/qgfD3u/f/FvTGJHc1s5rt4CF+6E6YgYO+VeSdERaTRJvjLWJ 9N257u6qTqfumisD38b8DSvG9QPc5DNCgHaUaivLBaKEMmwvIaluxCg12x4K6GsY c9utwghO28uaHXSALmRaszYocY6MTwcBM3NICLf+cIc//PPMDSgW0F2Xu/2tbxK1 X3FNgMRYq7mW4lW+vQUrutYb4N8Zi8w1j2O3s8c5uUSQRdLKnpcrgkFAr8Pf739S b3pTMNEgnXbB3LK2sHWblyYajwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOz6qDB4 Yb2/Fdxx9A0VAmKJ+gPKMB8GA1UdIwQYMBaAFBy6jT2qgEiJMKmSixlu3uB19Amk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUYyQi81MzczMjJGQUVC QzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJa3dxWktMR1c3ZTRIWDBD YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMcU5QYXFBU0lrd3FaS0xHVzdlNEhYMENhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUYyQi81MzczMjJGQUVCQzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJ a3dxWktMR1c3ZTRIWDBDYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWgP1cEOYwClt6ldIj20kWwgvHDQLczTEvo3EMRyQC8XwKFNPhqW14g0nUHDa rWMVZSmhunbnYVD9JM2HkYgumKzALQz94LERLbjAqimAa4SbpK9/7Id0xopwVI8M rB2bpnlupI3hmnqy5aXbDHy/lSY/RP7z/k5G+ablsBll4k3SPByMAb4se3pXxrjB pI4Ae1UzbGp+Chz8NjoXxZ0oKYvjN+xdNpcetp2RpggJFLxeqxHIfuaRaFfX/FYE Kg02jvyCJBZgo6okpbo9eDkSy1H5kZQAoOGM/3yD3d+bZVSm78Prb1dnvJiNCrPe XozvdidQB5wG3axtHhjDcG9nww== -----END CERTIFICATE-----Generated at Sat Sep 26 04:27:45 2026 by rpki-client