$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json) Hash identifier: BXM25NgkriYIihMsaPaD1uxQHXDj2jnRqmMBbQ5JcPs= Subject key identifier: F0:3E:38:87:77:C8:08:7B:70:D2:2B:F4:36:2E:42:B3:3C:33:05:F5 Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft Manifest number: 0147 Signing time: Wed 07 Oct 2026 05:50:20 +0000 Manifest this update: Wed 07 Oct 2026 05:50:19 +0000 Manifest next update: Wed 14 Oct 2026 05:50:19 +0000 Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: 6CWBE64gcnj/HEuvmbMKBsrQe6WQIorRnCx/zZ/jJE8=) 2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: BF86bk5wE6Zr1m3LZ6kF7qlbs43Gmk6OeQj3ok60wVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 05:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Oct 7 05:50:19 2026 GMT Not After : Oct 14 05:50:19 2026 GMT Subject: CN=6ac5dd9c-1890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:48:29:77:75:40:e7:50:2e:cc:46:41:a2: 13:ee:76:8a:59:9c:82:68:87:aa:c6:99:e7:79:53: 3a:72:fd:5d:e7:2e:f6:20:1c:db:d7:82:18:1d:bc: 48:dc:7d:fe:f3:72:65:12:1d:a3:1a:29:18:e6:f9: b7:90:38:3e:a4:48:49:e9:98:4d:7a:20:c1:aa:f9: 27:bc:1d:be:35:ff:f1:1a:b4:5b:29:64:23:6e:85: 66:1c:6f:46:f4:71:51:ba:f4:4e:57:f8:67:5c:90: 13:22:3b:36:7d:06:8f:62:44:13:2f:19:5b:93:be: 84:34:3c:b8:b4:8f:0a:bc:d1:1c:6b:37:3f:c9:80: 9c:2a:1f:16:dc:12:7c:d4:83:04:ae:35:8e:7d:80: 3f:39:ef:43:1d:1f:d9:d9:89:82:83:88:77:73:df: be:d5:04:a5:e7:ec:f5:a6:6f:aa:7e:b0:dc:bd:e2: cd:6d:da:68:fd:03:f1:06:28:30:6f:f7:bc:11:f0: 05:a5:f0:9d:40:74:67:2b:dc:ec:d8:5d:e9:c4:43: 7e:7d:18:f7:69:13:03:ee:ba:6f:7c:94:f1:c9:05: d9:86:d2:84:d9:96:9d:c0:36:3d:da:ad:6b:a7:c9: 74:f3:8f:19:f9:30:c9:48:16:7c:c2:e3:d9:82:f1: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:38:87:77:C8:08:7B:70:D2:2B:F4:36:2E:42:B3:3C:33:05:F5 X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:9a:d5:0d:57:3c:d2:3b:04:d7:d2:e9:eb:fb:ce:c6:1d: 93:c0:0d:9e:92:3c:42:2d:ad:23:83:22:f2:51:59:ff:d8:c2: 4b:b1:6d:d4:74:d3:0a:d6:81:6d:0e:ea:fa:8e:3f:de:a0:85: 73:51:d1:44:21:55:eb:2a:18:9a:40:f5:c9:46:b4:80:37:aa: e6:d2:e9:36:38:40:f2:84:af:8c:19:13:e2:ed:c1:56:5d:09: 59:0b:bd:32:81:a1:86:f6:5d:1e:af:da:b8:ff:8a:a8:41:2d: 13:62:2b:91:92:ba:90:e2:d4:8a:ee:f7:f7:ab:74:de:aa:a0: 31:ad:0c:1e:ff:e0:cb:df:f9:62:a0:c3:60:98:6a:ec:e0:39: 56:76:99:b0:be:fd:b5:74:3a:a7:d5:7a:39:ef:9b:29:76:a1: c4:23:e9:82:de:d5:0c:a4:e9:7f:81:7f:d8:3e:4d:ff:24:a9: d7:1a:7c:09:c5:53:45:44:f9:ac:7b:44:15:41:ef:69:f7:30: 65:73:1a:f7:91:29:b9:a0:6e:39:4c:0f:1b:b4:9b:d3:99:96: c8:ce:99:de:88:ed:db:58:8b:d6:4d:fc:15:d4:ab:ac:3d:64: 56:f3:af:9b:3c:a3:1a:3e:d5:de:f4:55:89:26:ab:a9:9e:ba: 4f:a3:ed:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjYxMDA3MDU1MDE5WhcNMjYxMDE0MDU1MDE5WjAYMRYwFAYD VQQDEw02YWM1ZGQ5Yy0xODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgkNIKXd1QOdQLsxGQaIT7naKWZyCaIeqxpnneVM6cv1d5y72IBzb14IYHbxI 3H3+83JlEh2jGikY5vm3kDg+pEhJ6ZhNeiDBqvknvB2+Nf/xGrRbKWQjboVmHG9G 9HFRuvROV/hnXJATIjs2fQaPYkQTLxlbk76ENDy4tI8KvNEcazc/yYCcKh8W3BJ8 1IMErjWOfYA/Oe9DHR/Z2YmCg4h3c9++1QSl5+z1pm+qfrDcveLNbdpo/QPxBigw b/e8EfAFpfCdQHRnK9zs2F3pxEN+fRj3aRMD7rpvfJTxyQXZhtKE2ZadwDY92q1r p8l0848Z+TDJSBZ8wuPZgvHywwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPA+OId3 yAh7cNIr9DYuQrM8MwX1MB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pD Ukdld1BQeVpmWDZ4aEs1MlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACHCa1Q1XPNI7BNfS6ev7zsYdk8ANnpI8Qi2tI4Mi8lFZ/9jCS7Ft1HTTCtaB bQ7q+o4/3qCFc1HRRCFV6yoYmkD1yUa0gDeq5tLpNjhA8oSvjBkT4u3BVl0JWQu9 MoGhhvZdHq/auP+KqEEtE2IrkZK6kOLUiu7396t03qqgMa0MHv/gy9/5YqDDYJhq 7OA5VnaZsL79tXQ6p9V6Oe+bKXahxCPpgt7VDKTpf4F/2D5N/ySp1xp8CcVTRUT5 rHtEFUHvafcwZXMa95EpuaBuOUwPG7Sb05mWyM6Z3ojt21iL1k38FdSrrD1kVvOv mzyjGj7V3vRViSarqZ66T6PtqQ== -----END CERTIFICATE-----Generated at Thu Oct 8 17:47:02 2026 by rpki-client