$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json) Hash identifier: vcjTDe3X1pLBPaGMJ5UgJrjl73KFyfYheHYk/BYsXk0= Subject key identifier: 18:EE:DA:4B:08:E3:C5:EB:FD:6C:43:BF:3E:FC:7A:BA:F8:74:99:A2 Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft Manifest number: 96 Signing time: Sun 20 Sep 2026 15:05:32 +0000 Manifest this update: Sun 20 Sep 2026 15:05:32 +0000 Manifest next update: Sun 27 Sep 2026 15:05:32 +0000 Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: AWRWQpZJkcGXVnTYph6jwGzXu3kJ4ygeZrUAEcMbgS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Validity Not Before: Sep 20 15:05:32 2026 GMT Not After : Sep 27 15:05:32 2026 GMT Subject: CN=6aaff63c-e442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:71:d2:9d:1b:02:25:ad:27:65:6e:c0:6f: 50:f5:c5:61:c4:dc:1b:42:a1:1b:f4:91:4d:08:be: 3d:fe:ff:e5:e2:9b:a1:3e:0b:9c:b5:f3:fc:d2:1c: 9b:44:4c:85:02:3f:3d:3a:1a:d5:6f:d9:f1:e8:83: f9:49:eb:96:84:06:de:fb:e5:9c:b8:bd:de:cf:40: 91:5f:d3:ea:96:14:7c:ba:35:be:a2:91:2e:aa:a6: ad:a8:64:f0:4c:b0:d8:20:fd:ca:39:08:b8:e0:77: bb:ca:c5:cc:a2:8f:76:6e:bd:03:01:d3:d0:b7:30: 7a:83:11:93:19:36:ef:ac:fe:53:99:ca:dc:0a:99: 81:d8:5a:f3:ec:45:d9:07:a6:22:6b:15:79:eb:38: 71:5f:65:de:f1:e7:4a:bd:55:56:62:4a:f4:2f:36: d5:53:a3:43:2b:36:8c:75:39:0b:bd:ab:ca:42:b2: a1:dc:bd:92:e7:86:37:d8:45:f6:6f:5d:00:d4:4c: 47:42:06:8e:ed:06:a4:f5:03:03:9c:ce:0a:68:27: 89:d8:58:0d:49:3f:1e:87:09:3b:0c:77:9a:31:ec: cf:9a:91:16:32:df:c4:6a:13:8c:a2:61:1b:dc:e6: ff:5a:4e:5d:42:72:c3:11:84:70:db:16:9e:b6:c4: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:DA:4B:08:E3:C5:EB:FD:6C:43:BF:3E:FC:7A:BA:F8:74:99:A2 X509v3 Authority Key Identifier: keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f4:9d:ad:85:5a:03:02:70:b0:22:b9:a6:5b:19:51:7a:f4: e0:1b:7e:74:17:48:21:71:4a:5b:d7:b8:54:76:aa:72:6f:54: 47:0f:ec:64:f3:00:10:9e:49:f8:42:33:cc:15:00:ca:8b:27: c9:9e:9c:35:2c:f6:3b:15:6f:92:d7:a7:4e:72:5a:d6:d3:a8: 8e:c2:5c:86:80:cb:be:b7:56:30:85:28:6a:a5:9b:01:e4:20: 99:ea:95:68:ac:a6:dd:45:0c:60:ba:d6:f6:f7:15:d1:23:e6: e5:ed:f0:aa:4f:ff:ec:24:c0:1d:a2:2f:59:4e:4b:0c:d1:68: 2f:7c:40:40:50:f3:66:ce:ac:b9:66:ec:29:63:15:8d:e7:49: cf:1d:45:b6:eb:4f:b6:2b:84:de:16:a3:c5:1b:7d:f4:08:8e: aa:80:96:d7:3e:eb:3c:4f:fb:ea:2a:dd:ed:74:28:b1:85:b6: 76:54:48:f2:ba:fa:c3:c2:af:86:9e:18:5d:0f:4d:27:a6:c6: 14:00:79:6f:f1:01:25:34:09:25:56:1b:4f:1e:a9:97:49:2f: 44:f3:2f:0f:21:02:e1:ec:b9:0a:81:62:1a:c9:62:c5:39:aa: 38:6f:d0:c2:04:1b:f5:fc:c0:f1:7a:8a:6a:c2:0e:38:ed:f6: 42:f8:d5:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDg2MTIxOTI4RDlCNDAxRTMxRDZBN0IyMDZFQjAxNjJE Mzg2RTA0NzIwHhcNMjYwOTIwMTUwNTMyWhcNMjYwOTI3MTUwNTMyWjAYMRYwFAYD VQQDEw02YWFmZjYzYy1lNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71Bx0p0bAiWtJ2VuwG9Q9cVhxNwbQqEb9JFNCL49/v/l4puhPguctfP80hyb REyFAj89OhrVb9nx6IP5SeuWhAbe++WcuL3ez0CRX9PqlhR8ujW+opEuqqatqGTw TLDYIP3KOQi44He7ysXMoo92br0DAdPQtzB6gxGTGTbvrP5TmcrcCpmB2Frz7EXZ B6YiaxV56zhxX2Xe8edKvVVWYkr0LzbVU6NDKzaMdTkLvavKQrKh3L2S54Y32EX2 b10A1ExHQgaO7Qak9QMDnM4KaCeJ2FgNST8ehwk7DHeaMezPmpEWMt/EahOMomEb 3Ob/Wk5dQnLDEYRw2xaetsSjywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBju2ksI 48Xr/WxDvz78err4dJmiMB8GA1UdIwQYMBaAFIYSGSjZtAHjHWp7IG6wFi04bgRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy8zMEE1NEY2Q0Q2 NUYxMUYwQjA2RkQ4QTIwQUI0M0UxMy9oaElaS05tMEFlTWRhbnNnYnJBV0xUaHVC SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hoSVpLTm0wQWVNZGFuc2dickFXTFRodUJISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy8zMEE1NEY2Q0Q2NUYxMUYwQjA2RkQ4QTIwQUI0M0UxMy9oaElaS05tMEFl TWRhbnNnYnJBV0xUaHVCSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArfSdrYVaAwJwsCK5plsZUXr04Bt+dBdIIXFKW9e4VHaqcm9URw/sZPMAEJ5J +EIzzBUAyosnyZ6cNSz2OxVvktenTnJa1tOojsJchoDLvrdWMIUoaqWbAeQgmeqV aKym3UUMYLrW9vcV0SPm5e3wqk//7CTAHaIvWU5LDNFoL3xAQFDzZs6suWbsKWMV jedJzx1FtutPtiuE3hajxRt99AiOqoCW1z7rPE/76ird7XQosYW2dlRI8rr6w8Kv hp4YXQ9NJ6bGFAB5b/EBJTQJJVYbTx6pl0kvRPMvDyEC4ey5CoFiGslixTmqOG/Q wgQb9fzA8XqKasIOOO32QvjVIA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:01:50 2026 by rpki-client