$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json) Hash identifier: 1otHj3mH8Yghg8TgQAJxXmaNR3/hOw4r3/g69CnuJms= Subject key identifier: CE:0E:8D:88:C9:31:96:C7:FF:3A:4F:72:96:39:4E:E0:17:71:77:B4 Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 147D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft Manifest number: 1447 Signing time: Sun 20 Sep 2026 16:52:47 +0000 Manifest this update: Sun 20 Sep 2026 16:52:46 +0000 Manifest next update: Sun 27 Sep 2026 16:52:46 +0000 Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: Ttgg5cOEtVqEk7WZj1nqwEnnrDdqJQPkkblNWWPGQew=) 2: 999C6728F7FF11F08B2BFA086C6F56BC.roa (hash: 5jwoaJRF05ynypppsournA2NpxdgiK2g9i/wb3qUNp4=) 3: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WqMqFVIMW/WczjTWRvzLRKr2fBm6q4MFQ+IAb2s3IrY=) 4: 40567CA8F25A11F09752333B5F6F56BC.roa (hash: 4OEr8GYD/68Q3dhtUrIhuI6SwejTwEeFTSAEWL1/kTk=) 5: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: lwkWaq6p0L37tuMHM356+eKrIkOsIPecy57fgsnLnhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5245 (0x147d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Sep 20 16:52:46 2026 GMT Not After : Sep 27 16:52:46 2026 GMT Subject: CN=6ab00f5f-2c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:18:bc:df:28:f8:2d:aa:6d:26:a8:86:b7: cf:25:7a:b0:e6:76:e8:2e:f4:e9:77:33:87:07:60: e9:b3:85:b6:42:27:25:7b:63:19:53:a4:05:8b:87: 0d:e4:fa:7d:db:b8:f0:d4:50:14:d9:5c:13:a3:f8: ba:73:38:69:b3:f4:29:e9:a5:8f:4d:d7:ef:48:ee: 02:bd:1e:43:c9:bf:bd:3b:bc:c6:ba:25:4d:4f:c8: 8b:61:d1:db:ff:f9:da:5f:5a:24:89:4e:a0:93:5d: 38:d9:e3:cc:c9:c5:9f:db:39:de:12:e1:cb:fa:7c: 45:aa:6d:81:dc:70:5b:d0:e1:47:6a:dd:75:26:b2: 81:b6:66:27:39:dc:a0:0e:9f:c5:47:1f:88:90:20: 1a:e4:5c:d4:db:76:6c:a6:ff:2f:7d:b7:de:78:12: 6f:d2:c3:c9:1c:4a:b5:cc:1b:b6:94:9f:fb:e9:f1: 7c:f9:e6:22:93:d6:39:bc:9f:09:eb:64:10:f5:84: 48:ce:d0:fd:c7:b0:3a:55:66:2f:c3:70:a7:d5:2e: 08:8d:22:ce:a0:81:ba:9f:15:6e:b5:21:07:80:70: cc:02:b4:14:12:d4:b7:f9:06:79:9c:d7:81:aa:9a: 01:cd:57:54:1a:d7:65:4b:40:d4:e7:1f:c1:66:bb: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:8D:88:C9:31:96:C7:FF:3A:4F:72:96:39:4E:E0:17:71:77:B4 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d9:82:fb:8f:7f:ec:7b:22:74:ca:06:70:74:31:00:05:aa: 11:fa:6b:c8:55:a0:5b:d2:26:e0:42:2e:84:d4:51:32:3b:c3: 9e:64:23:80:52:4f:74:9f:82:e8:01:70:1d:77:20:ad:93:1e: a3:e5:9f:a9:a7:f3:0a:41:00:5e:55:dd:7b:0a:61:3e:f6:44: ee:dd:c7:0a:95:25:88:2c:42:09:64:6f:53:7d:10:c6:43:7e: 63:39:f9:d3:8e:8d:04:a9:36:1a:18:e4:36:ff:8b:ef:e4:82: c5:2a:a4:0b:d9:ad:a6:fd:7d:4a:98:df:b8:85:53:37:b5:d1: 1d:d2:e7:c2:49:f0:ba:44:d6:0b:8a:f9:ce:a4:a4:4a:22:55: 08:d0:cc:84:ea:7f:29:87:bc:5c:9a:30:73:c4:63:f9:11:4f: d0:e4:3b:52:76:57:5a:9c:bc:7a:53:df:10:39:dc:12:3a:01: 41:57:c1:c4:ba:9f:b3:05:d0:f7:01:7b:90:3a:4b:07:2f:a7: 62:64:7e:00:b0:3d:f2:53:be:3c:03:29:85:b6:2c:10:7f:fe: 6e:e1:7c:3b:1a:8d:fa:99:d8:ff:1a:bc:74:04:2f:74:72:4d: 4e:d3:7e:6d:a0:f4:3c:3e:a1:99:d7:97:bb:2d:a4:2a:7d:ff: ee:26:65:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjYwOTIwMTY1MjQ2WhcNMjYwOTI3MTY1MjQ2WjAYMRYwFAYD VQQDEw02YWIwMGY1Zi0yYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7oYvN8o+C2qbSaohrfPJXqw5nboLvTpdzOHB2Dps4W2Qicle2MZU6QFi4cN 5Pp927jw1FAU2VwTo/i6czhps/Qp6aWPTdfvSO4CvR5Dyb+9O7zGuiVNT8iLYdHb //naX1okiU6gk1042ePMycWf2zneEuHL+nxFqm2B3HBb0OFHat11JrKBtmYnOdyg Dp/FRx+IkCAa5FzU23Zspv8vfbfeeBJv0sPJHEq1zBu2lJ/76fF8+eYik9Y5vJ8J 62QQ9YRIztD9x7A6VWYvw3Cn1S4IjSLOoIG6nxVutSEHgHDMArQUEtS3+QZ5nNeB qpoBzVdUGtdlS0DU5x/BZrvvkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4OjYjJ MZbH/zpPcpY5TuAXcXe0MB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh UUxvV1cyd0NCQVdpTEdTenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtmC+49/7HsidMoGcHQxAAWqEfpryFWgW9Im4EIuhNRRMjvDnmQjgFJPdJ+C 6AFwHXcgrZMeo+WfqafzCkEAXlXdewphPvZE7t3HCpUliCxCCWRvU30QxkN+Yzn5 046NBKk2GhjkNv+L7+SCxSqkC9mtpv19SpjfuIVTN7XRHdLnwknwukTWC4r5zqSk SiJVCNDMhOp/KYe8XJowc8Rj+RFP0OQ7UnZXWpy8elPfEDncEjoBQVfBxLqfswXQ 9wF7kDpLBy+nYmR+ALA98lO+PAMphbYsEH/+buF8OxqN+pnY/xq8dAQvdHJNTtN+ baD0PD6hmdeXuy2kKn3/7iZlKQ== -----END CERTIFICATE-----Generated at Mon Sep 21 13:46:11 2026 by rpki-client