$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: g189K+C9a2a5gpbJxZeegHqO2Qq0k8To26TtlS33uFg= Subject key identifier: 71:AB:CC:52:B7:D8:A8:16:5F:88:2D:3C:B8:6C:39:C3:2E:D8:89:D2 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0525 Signing time: Tue 22 Sep 2026 23:14:47 +0000 Manifest this update: Tue 22 Sep 2026 23:14:46 +0000 Manifest next update: Tue 29 Sep 2026 23:14:46 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: OxkgZpAL0/VzqQeUbtpWJh/0a3cUBKHoGTsrpChcYnU=) 2: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: nTqCgWsgMqkkVQO1onPyXIdhw/sgly+V7QUcjgkYkRU=) 3: F45C79E262F711EC8184F344C4F9AE02.roa (hash: N6QDQkW63cni5s3lT0BX7q7ZKDgD5wrDskQ0i3AMnL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Sep 22 23:14:46 2026 GMT Not After : Sep 29 23:14:46 2026 GMT Subject: CN=6ab30be7-239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:03:4c:86:85:87:04:9c:98:e3:90:ab:26:9e: 22:05:6e:59:a4:7e:ec:8b:38:4a:2c:8e:d4:8f:3b: 67:06:06:25:9c:6e:6f:3b:ad:c0:b8:6d:0c:ad:3c: ee:a6:5d:71:63:22:7d:72:6a:cc:6c:7a:89:c1:42: 80:bf:a9:1f:26:f5:b4:54:f2:58:1a:cf:3b:93:90: d8:42:2f:fe:ac:e7:a9:36:40:72:0d:9f:71:b2:ba: d2:99:5c:2e:a2:9a:71:c5:3f:e4:8d:b0:ac:c1:8c: e1:eb:03:a5:ae:46:69:bd:19:e6:5c:e4:5f:49:40: 76:20:98:88:bc:16:90:4a:1f:d1:f5:fa:46:34:20: 9f:7e:8c:98:c8:0c:ce:d1:1f:b3:f5:35:fa:f3:8f: 68:66:10:11:81:8d:fe:16:c1:06:e5:83:b4:d8:b1: 53:c3:2f:31:eb:b0:d4:13:fe:54:5b:fd:16:b6:48: 38:3a:7c:6c:8a:75:15:1a:b5:bb:07:95:4a:9e:67: e3:a9:94:82:87:f0:fc:aa:97:a2:0d:e2:9d:b6:7c: 11:3b:4d:cf:e3:dc:4e:c9:5c:a0:66:a1:39:f5:88: 11:16:d5:60:68:45:2c:cd:55:d0:ed:79:f3:70:ea: e4:81:35:0b:08:64:be:f9:0b:b1:9d:b0:be:28:79: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AB:CC:52:B7:D8:A8:16:5F:88:2D:3C:B8:6C:39:C3:2E:D8:89:D2 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:29:60:2a:73:c6:e4:6c:db:70:bc:96:e6:c0:fb:c1:1d:92: 3d:f6:b4:59:2d:cc:6c:a2:e6:3e:53:d5:43:d6:bb:65:e9:b0: db:cf:ac:38:15:4d:1b:d7:b3:e5:04:61:eb:77:4d:51:fb:95: 09:0e:7a:1c:14:5e:23:4a:4c:ae:b0:d1:81:b8:a7:80:cd:1b: ec:f6:10:7c:01:3f:23:15:50:bf:88:b4:3b:d6:34:52:ef:9c: 8d:f9:4c:34:df:b4:e3:43:23:5d:47:b6:36:0f:52:1a:48:e0: 0a:cd:4c:43:ac:b7:d3:58:ff:95:09:e3:60:47:3e:61:b6:91: d1:b2:52:79:63:63:eb:34:a9:a5:79:f7:62:5c:a2:6f:ff:4a: d1:0b:01:60:44:49:c9:19:fd:3a:cd:3a:0b:95:73:28:a7:9d: 1f:19:58:f2:84:45:3c:c7:a1:07:07:be:4a:98:13:06:59:d5: f3:0a:ac:42:41:bb:6f:78:d3:45:2d:fa:26:c6:4d:d1:04:7c: 08:c0:df:54:3f:d9:51:34:00:fa:28:fb:55:a0:1f:75:a8:13: 76:ad:92:ca:17:02:01:49:2f:a0:26:1b:b7:25:14:fd:e3:bc: 5a:8f:1a:db:c3:db:2e:4e:b4:b9:0f:dc:c7:94:ed:d8:39:60: ed:7c:cf:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjYwOTIyMjMxNDQ2WhcNMjYwOTI5MjMxNDQ2WjAYMRYwFAYD VQQDEw02YWIzMGJlNy0yMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wNMhoWHBJyY45CrJp4iBW5ZpH7sizhKLI7UjztnBgYlnG5vO63AuG0MrTzu pl1xYyJ9cmrMbHqJwUKAv6kfJvW0VPJYGs87k5DYQi/+rOepNkByDZ9xsrrSmVwu oppxxT/kjbCswYzh6wOlrkZpvRnmXORfSUB2IJiIvBaQSh/R9fpGNCCffoyYyAzO 0R+z9TX6849oZhARgY3+FsEG5YO02LFTwy8x67DUE/5UW/0Wtkg4OnxsinUVGrW7 B5VKnmfjqZSCh/D8qpeiDeKdtnwRO03P49xOyVygZqE59YgRFtVgaEUszVXQ7Xnz cOrkgTULCGS++QuxnbC+KHm6jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGrzFK3 2KgWX4gtPLhsOcMu2InSMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSlgKnPG5GzbcLyW5sD7wR2SPfa0WS3MbKLmPlPVQ9a7Zemw28+sOBVNG9ez 5QRh63dNUfuVCQ56HBReI0pMrrDRgbingM0b7PYQfAE/IxVQv4i0O9Y0Uu+cjflM NN+040MjXUe2Ng9SGkjgCs1MQ6y301j/lQnjYEc+YbaR0bJSeWNj6zSppXn3Ylyi b/9K0QsBYERJyRn9Os06C5VzKKedHxlY8oRFPMehBwe+SpgTBlnV8wqsQkG7b3jT RS36JsZN0QR8CMDfVD/ZUTQA+ij7VaAfdagTdq2SyhcCAUkvoCYbtyUU/eO8Wo8a 28PbLk60uQ/cx5Tt2Dlg7XzP1A== -----END CERTIFICATE-----Generated at Thu Sep 24 08:01:45 2026 by rpki-client