$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: 8SKNLlflh9+Htzc1+LIPlRX8QaKgoXRRtg73BkSmoOw= Subject key identifier: 74:0D:70:52:CA:FC:28:C8:16:EF:7A:0E:B5:DC:EF:51:A1:0B:D3:94 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 35F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 35C2 Signing time: Sat 10 Oct 2026 14:34:19 +0000 Manifest this update: Sat 10 Oct 2026 14:34:18 +0000 Manifest next update: Sat 17 Oct 2026 14:34:18 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: wXBD4ccr912414tELaeDXsMlKzirj6Lwj1hC99w1N+A=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: k2cGF+v3+dS0w+vBEGqoC2FQbaTMDsNcGpU+nhXd4iM=) 3: 550BDEE486FD11F194514C90ABEE528E.roa (hash: cROEO2KeJD8VNn1ja3b2H4yPhR2dVDekjJOaLUHdtRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13817 (0x35f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Oct 10 14:34:18 2026 GMT Not After : Oct 17 14:34:18 2026 GMT Subject: CN=6aca4ceb-ecc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:e4:31:10:0e:cb:27:44:fb:e3:ff:8a:0b: cf:bb:dd:dc:f8:e6:8e:aa:57:3f:da:5a:57:b3:c1: 16:15:b5:de:d1:9f:40:40:7a:0c:14:bc:6f:d4:48: ef:88:be:de:15:3a:f0:1d:69:9f:3d:1b:f4:f7:9b: 05:d7:7b:58:e4:2a:89:de:0b:e4:6d:bf:44:c1:4d: e4:7b:6a:08:2d:ae:8f:5e:da:be:da:01:62:35:cb: 07:3b:f9:b1:44:d7:43:af:cd:ac:4b:92:aa:18:a1: d9:e0:02:77:9a:7e:e2:a8:5c:01:fa:53:95:3c:c1: bf:f5:1f:c5:d0:cc:14:2b:74:2a:76:aa:dc:fb:0a: ad:ad:cb:31:9a:7b:59:9a:7b:9e:b2:ae:91:0c:77: ad:8f:25:12:f2:55:b2:1d:a5:74:d4:2b:d4:5a:8d: 53:4c:25:41:8a:a2:a8:59:45:a6:d9:97:d5:3a:0b: ea:c0:6b:4e:35:29:80:5a:55:fb:6f:f4:be:0e:8b: 78:10:bc:b7:df:cf:3e:6c:71:a7:07:5e:a5:6a:40: 5b:be:71:f5:08:75:4e:49:18:00:37:e4:20:ab:db: d7:66:ea:88:0d:5e:ec:f2:f2:9b:b9:85:7c:6c:93: 3f:8c:1f:f9:42:37:10:95:70:e2:40:70:5c:ae:b3: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0D:70:52:CA:FC:28:C8:16:EF:7A:0E:B5:DC:EF:51:A1:0B:D3:94 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:88:dc:28:cd:a5:b7:32:ce:34:0f:e2:50:7d:b6:f5:f2:7e: 6c:1a:c0:c7:9b:07:06:6c:42:5c:cf:79:fe:9e:b2:d8:d6:f2: ce:25:2c:fb:11:7c:51:99:1d:fa:fe:2a:0e:11:7c:88:62:56: b2:51:0d:60:18:7b:c0:e4:da:de:09:c0:c4:06:67:67:d0:76: 13:3c:ce:4f:05:b4:19:91:2e:70:a7:a8:9f:7f:2a:e6:f4:0d: 05:64:7b:0f:2b:d7:74:d1:b6:89:33:d6:05:b5:fd:83:f4:0b: 66:a5:24:20:15:8e:9f:aa:e9:82:35:0e:18:cd:97:88:fa:cd: b9:fc:7f:18:74:82:ed:06:df:6a:21:91:00:00:49:cc:ee:52: 61:87:4a:5d:96:73:c6:c9:3b:fe:cc:bc:d9:3f:63:87:f8:85: b1:3d:e2:83:90:af:f2:27:5e:30:df:29:cd:92:f8:24:fc:84: 55:25:0b:0f:81:b5:c2:0a:17:d3:c7:50:25:c4:15:5e:1e:63: 84:01:1a:71:cc:5e:7b:8d:22:cb:da:a6:a7:14:41:29:3f:8e: 3d:cf:a6:fe:53:97:58:67:bf:3c:f6:8c:12:95:fb:bb:d2:88: ce:8c:bc:56:9d:9e:2d:34:dd:68:78:1b:cd:f2:40:28:5f:16: 11:55:06:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjYxMDEwMTQzNDE4WhcNMjYxMDE3MTQzNDE4WjAYMRYwFAYD VQQDEw02YWNhNGNlYi1lY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmITkMRAOyydE++P/igvPu93c+OaOqlc/2lpXs8EWFbXe0Z9AQHoMFLxv1Ejv iL7eFTrwHWmfPRv095sF13tY5CqJ3gvkbb9EwU3ke2oILa6PXtq+2gFiNcsHO/mx RNdDr82sS5KqGKHZ4AJ3mn7iqFwB+lOVPMG/9R/F0MwUK3Qqdqrc+wqtrcsxmntZ mnuesq6RDHetjyUS8lWyHaV01CvUWo1TTCVBiqKoWUWm2ZfVOgvqwGtONSmAWlX7 b/S+Dot4ELy3388+bHGnB16lakBbvnH1CHVOSRgAN+Qgq9vXZuqIDV7s8vKbuYV8 bJM/jB/5QjcQlXDiQHBcrrMZCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQNcFLK /CjIFu96DrXc71GhC9OUMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACYjcKM2ltzLONA/iUH229fJ+bBrAx5sHBmxCXM95/p6y2NbyziUs+xF8UZkd +v4qDhF8iGJWslENYBh7wOTa3gnAxAZnZ9B2EzzOTwW0GZEucKeon38q5vQNBWR7 DyvXdNG2iTPWBbX9g/QLZqUkIBWOn6rpgjUOGM2XiPrNufx/GHSC7QbfaiGRAABJ zO5SYYdKXZZzxsk7/sy82T9jh/iFsT3ig5Cv8ideMN8pzZL4JPyEVSULD4G1wgoX 08dQJcQVXh5jhAEaccxee40iy9qmpxRBKT+OPc+m/lOXWGe/PPaMEpX7u9KIzoy8 Vp2eLTTdaHgbzfJAKF8WEVUG+Q== -----END CERTIFICATE-----Generated at Sun Oct 11 11:07:51 2026 by rpki-client