$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: 18XBM4d427Vhu5JT5H6WyyLR46M7atLgc5J+GnZ+zMc= Subject key identifier: 35:FF:E3:4A:05:43:7F:4D:E0:61:FB:AD:8D:AC:87:94:B9:C7:4F:43 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 9D Signing time: Fri 25 Sep 2026 07:23:23 +0000 Manifest this update: Fri 25 Sep 2026 07:23:23 +0000 Manifest next update: Fri 02 Oct 2026 07:23:23 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: hEc2sipdXzyrd8c2yX4RUYoebfUttbVcgWtpovrvxJ0=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Sep 25 07:23:23 2026 GMT Not After : Oct 2 07:23:23 2026 GMT Subject: CN=6ab6216b-3a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:ad:f5:51:2c:a4:b5:fc:74:7f:5a:c1:2a: e2:21:11:b3:2a:86:63:87:94:91:35:21:e8:cf:9d: 70:54:9f:8a:3f:82:23:13:0e:53:a8:a3:6f:1b:fd: c5:03:9a:89:bc:09:1b:79:9c:c5:c2:19:87:f1:eb: 2b:8a:46:3a:b6:3a:24:f8:4f:31:ad:d3:e6:5e:d0: f7:a0:ad:e7:d9:2c:38:13:aa:02:44:a7:e3:d7:2e: a7:3a:81:be:85:62:85:75:c7:96:f0:84:c8:03:a4: 57:dd:75:21:49:e5:6e:a3:f8:45:b9:95:aa:c5:ef: b0:1a:ba:9b:c3:17:de:0c:20:24:62:1b:8a:92:13: 09:08:35:9c:02:25:a2:5a:7e:6b:79:cd:fc:05:5d: d5:90:fb:be:f3:6b:98:21:a6:d9:c1:e3:86:a6:c2: 2b:72:e3:4b:5d:d4:1c:3e:29:c0:19:16:16:de:71: 6f:4e:c8:b1:58:f5:1a:6b:c8:e9:cc:50:8b:ea:fb: 04:87:52:7a:87:db:3f:0e:b6:f3:6c:09:fd:04:72: fe:49:60:62:2f:29:62:9d:63:e6:a1:52:6f:91:8e: 9a:0e:f6:f5:d0:98:11:55:71:99:d0:1c:c6:66:b8: 60:e6:ac:c1:4e:6d:c6:7a:04:0f:8b:8a:1f:51:bd: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FF:E3:4A:05:43:7F:4D:E0:61:FB:AD:8D:AC:87:94:B9:C7:4F:43 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:b3:f0:db:de:b2:f5:9d:ae:99:97:09:27:31:18:39:a5: ba:42:52:32:9b:66:c3:ec:a4:4e:2b:84:e7:fc:0c:1b:49:a1: d4:dd:15:d8:08:23:e9:be:91:b0:3b:0f:c7:1c:08:cc:7c:11: fe:af:cd:7c:3c:bc:9a:80:56:52:d6:5e:e6:4b:89:e5:ec:01: 01:e3:f1:28:a5:ec:67:87:9c:6b:86:72:73:7e:03:d2:e1:6a: ec:72:36:5a:ec:ce:f5:70:5b:c4:cc:17:58:39:b8:28:af:81: 6e:4d:a1:e8:8e:3b:05:b1:1a:5e:a3:32:99:31:91:a9:fa:d7: 30:4b:9c:e7:ea:98:dd:f3:af:66:46:df:11:cc:c6:f1:de:81: 27:5b:6c:a7:d0:1d:ea:01:07:a9:45:49:12:59:5a:fc:86:ea: 9a:69:ec:0d:86:23:3b:d4:f1:4e:ae:06:dc:18:da:95:f7:93: 49:13:46:04:90:3e:49:d2:35:d5:fc:16:0b:a5:b8:39:aa:af: dc:57:08:e0:1d:27:55:d6:87:af:f5:fa:4d:23:47:d0:9d:0b: 1d:99:82:1c:63:de:44:fb:d2:fa:4a:95:e6:d0:f0:13:b4:cc: 74:b1:4e:2b:20:d6:96:65:0c:97:9f:0a:d1:44:f0:65:99:a8: 9c:a5:b6:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyRTExMTAvBgNVBAUTKDg1QjdFREI1QTY4NEJFM0Q5QTYyOTc1OTkwQTcxRDk5 OERFRjUxOEIwHhcNMjYwOTI1MDcyMzIzWhcNMjYxMDAyMDcyMzIzWjAYMRYwFAYD VQQDEw02YWI2MjE2Yi0zYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJat9VEspLX8dH9awSriIRGzKoZjh5SRNSHoz51wVJ+KP4IjEw5TqKNvG/3F A5qJvAkbeZzFwhmH8esrikY6tjok+E8xrdPmXtD3oK3n2Sw4E6oCRKfj1y6nOoG+ hWKFdceW8ITIA6RX3XUhSeVuo/hFuZWqxe+wGrqbwxfeDCAkYhuKkhMJCDWcAiWi Wn5rec38BV3VkPu+82uYIabZweOGpsIrcuNLXdQcPinAGRYW3nFvTsixWPUaa8jp zFCL6vsEh1J6h9s/DrbzbAn9BHL+SWBiLylinWPmoVJvkY6aDvb10JgRVXGZ0BzG Zrhg5qzBTm3GegQPi4ofUb11SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDX/40oF Q39N4GH7rY2sh5S5x09DMB8GA1UdIwQYMBaAFIW37bWmhL49mmKXWZCnHZmN71GL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJFMS8wQUJCMzU2OEM4 RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFhRXZqMmFZcGRaa0tjZG1ZM3ZV WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJFMS8wQUJCMzU2OEM4RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFhRXZq MmFZcGRaa0tjZG1ZM3ZVWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASFKz8NvesvWdrpmXCScxGDmlukJSMptmw+ykTiuE5/wMG0mh1N0V2Agj6b6R sDsPxxwIzHwR/q/NfDy8moBWUtZe5kuJ5ewBAePxKKXsZ4eca4Zyc34D0uFq7HI2 WuzO9XBbxMwXWDm4KK+Bbk2h6I47BbEaXqMymTGRqfrXMEuc5+qY3fOvZkbfEczG 8d6BJ1tsp9Ad6gEHqUVJElla/IbqmmnsDYYjO9TxTq4G3BjalfeTSRNGBJA+SdI1 1fwWC6W4Oaqv3FcI4B0nVdaHr/X6TSNH0J0LHZmCHGPeRPvS+kqV5tDwE7TMdLFO KyDWlmUMl58K0UTwZZmonKW2+Q== -----END CERTIFICATE-----Generated at Fri Sep 25 18:17:07 2026 by rpki-client