$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json) Hash identifier: qA6Ud7Yq5PPA7n/x6GaiRYFOHYHm0Xpfynw0dWIpxv8= Subject key identifier: 02:5C:C8:B0:4B:96:A1:AD:50:C8:46:90:89:E7:18:76:C9:63:3D:B5 Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft Manifest number: 0308 Signing time: Fri 25 Sep 2026 01:05:51 +0000 Manifest this update: Fri 25 Sep 2026 01:05:50 +0000 Manifest next update: Fri 02 Oct 2026 01:05:50 +0000 Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: cWaJaYVNv0bg2y8v4JY21vO0MdjZe9tUyAljz9Uh3vo=) 2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: NdFnlMSr/V5noQXIsNx/D5f9zVB2iTgM5spp/nQu96Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Validity Not Before: Sep 25 01:05:50 2026 GMT Not After : Oct 2 01:05:50 2026 GMT Subject: CN=6ab5c8ef-6c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:6a:99:14:8e:59:10:33:e4:1f:ed:25:4f: 0e:83:75:84:e6:df:48:91:87:46:81:25:13:05:a9: 26:5b:f1:1f:d2:22:52:66:1b:8b:da:70:6d:da:55: 27:bf:6c:60:0f:f5:86:bb:ba:cd:8e:b2:07:4c:bb: 74:9a:57:84:4b:1a:3d:3c:93:d4:96:5f:c8:46:40: 39:6a:ca:0f:1d:d5:2b:f2:14:2c:4c:65:c0:cf:50: a4:92:4f:01:ba:e8:18:34:9e:ec:61:ae:be:e3:84: 30:e4:f6:aa:70:b5:de:c2:ed:be:71:cc:d8:6c:3f: fb:1a:d3:aa:14:a7:a1:a9:36:d5:ec:e6:84:c5:16: 59:f6:6a:e2:8d:09:c1:2c:82:2c:8c:85:dd:93:16: 2c:39:c7:2d:ba:fe:5e:48:88:8c:6a:2f:1c:26:84: 9c:ce:18:c2:60:63:ea:b4:3a:1b:45:d4:eb:a3:97: e7:8b:7d:86:6b:31:0d:86:05:aa:ec:ab:f5:97:c3: 9d:eb:04:ce:31:9d:71:42:d0:c8:16:b9:9c:9e:68: 5e:d4:50:41:bb:a9:0b:5f:0e:9a:88:b8:24:98:65: f3:d8:07:ca:09:60:03:8c:49:35:c5:43:e8:e4:27: cd:98:86:5c:67:15:f4:09:f9:3d:c3:02:e2:54:09: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5C:C8:B0:4B:96:A1:AD:50:C8:46:90:89:E7:18:76:C9:63:3D:B5 X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:65:49:e3:f1:2a:b1:b4:12:c6:01:e2:4a:a0:9f:c4:4b:80: e2:89:9f:e9:10:60:ce:ca:cb:44:bc:5c:12:86:a4:cb:73:c8: 82:90:d6:f3:25:a1:aa:98:f3:62:20:cf:e7:81:80:a4:c2:5b: b3:f9:4c:1d:c3:69:ff:33:f6:db:60:04:e7:a9:b0:c9:ad:77: f6:07:06:b9:f9:7e:64:29:13:0e:70:a5:5f:21:22:f3:15:46: 34:5b:4a:69:1e:66:48:62:eb:21:09:bc:c2:f4:14:8c:dc:56: c0:6a:4c:c1:3f:55:d4:cc:bb:3a:0f:d3:22:ac:83:d4:62:a6: 51:b3:4d:df:0b:88:28:09:64:b6:7b:90:57:bf:85:f4:43:e9: a7:72:3a:b1:93:b0:92:42:d8:e9:0c:4b:36:ba:02:36:c8:5a: e4:42:4b:c3:92:e9:0f:f3:c6:9a:1e:c5:71:57:8d:64:0e:17: 57:25:68:3a:61:d9:93:d6:b0:bc:dd:1a:23:1e:71:dd:6e:e2: ae:44:ea:84:9c:0d:32:fe:d1:db:d3:f8:87:90:3b:4a:33:8d: f9:10:9e:98:ba:d1:09:7b:5c:60:37:21:ff:a8:45:6a:15:e5: 8d:a0:39:17:af:33:05:99:8a:3b:33:b7:28:22:6b:74:e6:bd: 79:20:7c:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjYwOTI1MDEwNTUwWhcNMjYxMDAyMDEwNTUwWjAYMRYwFAYD VQQDEw02YWI1YzhlZi02YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBlqmRSOWRAz5B/tJU8Og3WE5t9IkYdGgSUTBakmW/Ef0iJSZhuL2nBt2lUn v2xgD/WGu7rNjrIHTLt0mleESxo9PJPUll/IRkA5asoPHdUr8hQsTGXAz1Ckkk8B uugYNJ7sYa6+44Qw5PaqcLXewu2+cczYbD/7GtOqFKehqTbV7OaExRZZ9mrijQnB LIIsjIXdkxYsOcctuv5eSIiMai8cJoSczhjCYGPqtDobRdTro5fni32GazENhgWq 7Kv1l8Od6wTOMZ1xQtDIFrmcnmhe1FBBu6kLXw6aiLgkmGXz2AfKCWADjEk1xUPo 5CfNmIZcZxX0Cfk9wwLiVAltCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJcyLBL lqGtUMhGkInnGHbJYz21MB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh Rzg0dnJGN20zSGhiQUtreDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoWVJ4/EqsbQSxgHiSqCfxEuA4omf6RBgzsrLRLxcEoaky3PIgpDW8yWhqpjz YiDP54GApMJbs/lMHcNp/zP222AE56mwya139gcGufl+ZCkTDnClXyEi8xVGNFtK aR5mSGLrIQm8wvQUjNxWwGpMwT9V1My7Og/TIqyD1GKmUbNN3wuIKAlktnuQV7+F 9EPpp3I6sZOwkkLY6QxLNroCNsha5EJLw5LpD/PGmh7FcVeNZA4XVyVoOmHZk9aw vN0aIx5x3W7irkTqhJwNMv7R29P4h5A7SjON+RCemLrRCXtcYDch/6hFahXljaA5 F68zBZmKOzO3KCJrdOa9eSB8qQ== -----END CERTIFICATE-----Generated at Fri Sep 25 05:55:29 2026 by rpki-client