$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json) Hash identifier: Q1WEaAjQY/yGTFEDSpGy5z2g7oREFaNxBPQ0ADDls6g= Subject key identifier: 79:9A:54:00:02:B8:89:DC:8D:23:32:77:0D:CD:D5:C1:72:21:5F:C8 Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Certificate serial: 0B06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft Manifest number: 0AF1 Signing time: Mon 12 Oct 2026 19:30:14 +0000 Manifest this update: Mon 12 Oct 2026 19:30:13 +0000 Manifest next update: Mon 19 Oct 2026 19:30:13 +0000 Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: QXT6yV8R2EOtbk3Gp0h2FMsVi/vA6rYHnbKPIh+1A0Q=) 2: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: AAIxMzs/gvYk9K/xu4n64rt4zSe4EjThnQNO0Ai3Jj8=) 3: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (hash: K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=) 4: 92A9A67EB40211F09714C855C4F9AE02.roa (hash: MN08xTHQWyAMmrT/Pkdf4mSOvLZ+rB9gXlkcOfJJ9xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Validity Not Before: Oct 12 19:30:13 2026 GMT Not After : Oct 19 19:30:13 2026 GMT Subject: CN=6acd3546-e913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:c2:12:29:a5:11:64:73:d7:32:1f:1e:fe: f8:33:21:d9:b1:64:fb:5b:f0:c1:d4:5b:cf:4d:a9: 73:6c:a6:0b:38:56:6a:23:6e:2b:51:08:86:0a:1d: 50:3f:01:a3:b5:cc:42:7a:d5:8f:9a:d7:6e:21:fa: 40:20:00:08:58:e3:31:43:7b:76:7c:4f:99:06:fb: 41:4b:f8:ac:cd:29:dc:c9:bc:11:23:ad:fc:32:e9: 47:e4:d1:39:8b:98:75:36:3b:f6:68:cf:99:ee:74: 26:c8:1e:16:46:44:45:ba:d3:88:df:ab:27:b0:73: 91:27:d2:19:0d:a9:c4:e0:ea:1e:9e:89:96:45:db: a3:a5:9f:be:cf:99:e7:41:88:b9:cb:42:ed:53:32: 90:8a:17:5c:01:46:0b:90:7a:d1:49:75:bf:2d:0a: f8:d8:e4:32:02:fd:66:fd:fb:da:7b:1c:64:de:e0: f0:c2:c1:51:e2:b2:d8:a7:b8:05:14:02:22:76:ab: 21:65:96:6d:2b:07:47:00:e6:44:32:78:6c:f5:55: 02:34:a5:35:c7:d5:d3:92:54:60:a2:68:72:66:0f: 7a:c1:32:85:c7:db:40:5c:5b:bd:c8:52:25:b5:53: 17:8b:80:b7:50:e5:56:0c:42:07:50:84:f3:ad:a7: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:54:00:02:B8:89:DC:8D:23:32:77:0D:CD:D5:C1:72:21:5F:C8 X509v3 Authority Key Identifier: keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3a:a7:c4:24:6a:b5:71:99:85:d3:63:6f:97:b9:28:e6:22: c7:33:2c:cb:b2:99:ac:de:d4:a4:60:f0:04:e2:f8:76:54:a2: d4:7f:95:17:a1:d2:5e:4f:e7:8c:86:19:64:93:e2:2f:28:f2: c6:d0:36:f8:fd:d4:58:42:40:c1:1a:b5:8d:28:d0:bf:90:2c: f2:dd:c1:ac:23:47:c9:e7:3b:f1:ee:3c:4d:85:e1:2c:55:40: 8e:63:74:34:d7:01:b5:70:01:42:76:90:e6:48:c8:33:df:fa: d9:db:9f:66:9b:fc:04:fe:eb:fa:cf:13:de:60:90:fd:09:33: 7f:de:1a:bb:15:8f:2f:1c:0d:f6:02:6a:bc:19:82:35:4d:66: 39:be:07:a9:7c:e4:c4:7f:b9:33:11:e1:4c:6a:96:e7:c4:24: 15:34:3d:6a:75:58:08:67:d9:99:72:c7:e3:bd:28:73:23:fe: 3e:b7:ba:01:b9:d9:4d:7b:bb:84:5b:bc:41:6d:81:49:bf:b0: a8:8b:36:cc:7f:fc:10:80:be:0d:7d:bb:3a:98:1d:a3:70:3a: 0c:22:d5:01:72:50:29:b5:01:b8:3c:66:de:92:fc:f9:5e:e9: bd:5c:71:28:27:c9:93:d0:04:e4:db:c9:74:48:4f:54:01:a8: f6:d5:e6:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG NTE2NzlBRjEwHhcNMjYxMDEyMTkzMDEzWhcNMjYxMDE5MTkzMDEzWjAYMRYwFAYD VQQDEw02YWNkMzU0Ni1lOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHDCEimlEWRz1zIfHv74MyHZsWT7W/DB1FvPTalzbKYLOFZqI24rUQiGCh1Q PwGjtcxCetWPmtduIfpAIAAIWOMxQ3t2fE+ZBvtBS/iszSncybwRI638MulH5NE5 i5h1Njv2aM+Z7nQmyB4WRkRFutOI36snsHORJ9IZDanE4OoenomWRdujpZ++z5nn QYi5y0LtUzKQihdcAUYLkHrRSXW/LQr42OQyAv1m/fvaexxk3uDwwsFR4rLYp7gF FAIidqshZZZtKwdHAOZEMnhs9VUCNKU1x9XTklRgomhyZg96wTKFx9tAXFu9yFIl tVMXi4C3UOVWDEIHUITzradL+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmaVAAC uIncjSMydw3N1cFyIV/IMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUJDRC82MUQwQzQ4NjdBM0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNK aTNLWXlaRUhYTXoxRm5tdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKDqnxCRqtXGZhdNjb5e5KOYixzMsy7KZrN7UpGDwBOL4dlSi1H+VF6HSXk/n jIYZZJPiLyjyxtA2+P3UWEJAwRq1jSjQv5As8t3BrCNHyec78e48TYXhLFVAjmN0 NNcBtXABQnaQ5kjIM9/62dufZpv8BP7r+s8T3mCQ/Qkzf94auxWPLxwN9gJqvBmC NU1mOb4HqXzkxH+5MxHhTGqW58QkFTQ9anVYCGfZmXLH470ocyP+Pre6AbnZTXu7 hFu8QW2BSb+wqIs2zH/8EIC+DX27Opgdo3A6DCLVAXJQKbUBuDxm3pL8+V7pvVxx KCfJk9AE5NvJdEhPVAGo9tXmRg== -----END CERTIFICATE-----Generated at Wed Oct 14 13:41:43 2026 by rpki-client