$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: F8WkAwK7qT0MDBhCClECghoBlfqiGKwkp4TfZ+BBR3E= Subject key identifier: 1F:E1:22:C3:85:33:FB:DD:CF:5B:0C:31:36:21:09:77:BF:DC:EE:A3 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 079A Signing time: Sun 20 Sep 2026 21:24:58 +0000 Manifest this update: Sun 20 Sep 2026 21:24:58 +0000 Manifest next update: Sun 27 Sep 2026 21:24:58 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: A1jCptlDIKD9rVRu9HEG3bcMf2eXMmI67K2Asv+t8XE=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: tjPB8xU2pzQXxPzoDOvibf/wCuzZoo3PXAjj5jlFvKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Sep 20 21:24:58 2026 GMT Not After : Sep 27 21:24:58 2026 GMT Subject: CN=6ab04f2a-3d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:65:d0:b0:09:02:20:2a:9b:01:0a:45:7a: 2f:15:e0:e9:b7:25:86:0e:98:b5:37:47:0e:70:1c: 90:af:08:e2:3f:ab:a8:34:01:9f:0e:f2:60:a0:cb: 75:38:7e:ec:ee:a5:94:a4:3e:59:eb:ba:c6:35:ca: 3e:19:0a:72:d3:10:1c:86:56:a0:c0:35:77:d2:33: 0a:5e:17:0e:cb:57:f4:fc:19:ad:cd:a4:c7:a1:b6: 6d:e7:84:28:64:6f:3b:3d:89:ae:ab:c0:27:21:7e: 00:f9:86:1e:91:b3:da:38:86:9c:77:9d:c6:f0:41: 15:82:91:ef:43:19:7f:2b:4a:17:67:b4:d6:20:ce: ff:41:de:d6:0a:1c:b7:f5:9d:0b:f5:34:4b:d3:e2: 59:07:05:fd:32:93:cb:f9:f9:1d:a6:54:27:54:cf: 16:a5:09:8e:36:a5:8a:2b:a0:27:1f:c0:60:37:cb: bf:6f:4c:5e:45:47:60:57:60:d6:bc:27:ad:fc:b9: 83:87:fb:e4:9a:b0:73:f6:ab:6d:4c:57:c7:2f:c7: c9:db:56:c1:12:11:67:30:57:60:81:87:f2:14:99: 02:b6:52:09:5a:40:55:0d:31:d7:2b:31:87:27:2c: 2a:0f:a0:df:62:fa:33:00:82:ec:f3:94:43:3f:54: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E1:22:C3:85:33:FB:DD:CF:5B:0C:31:36:21:09:77:BF:DC:EE:A3 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f0:06:cc:64:b5:31:99:71:59:6a:ce:95:cf:95:fc:0f:57: 48:5f:90:15:27:79:9c:c4:9c:41:67:a0:7c:af:b8:4d:38:b8: 0d:71:8d:50:33:ba:42:d9:8d:a8:35:2a:3c:10:59:55:7e:bc: 5f:ee:fa:c6:13:25:19:31:aa:00:ea:c8:59:84:30:79:aa:4c: d8:7b:72:73:82:99:dc:b3:51:96:65:23:84:1a:85:d2:e8:ea: 95:74:20:07:e3:d4:1f:32:ea:83:f7:62:7e:76:3d:80:75:b4: a4:dd:ab:a8:36:15:01:89:52:70:0d:e5:d6:35:98:03:08:b1: 2e:d5:01:77:af:28:20:2c:92:c0:fd:f4:18:1d:9b:a3:d5:f2: c8:34:2c:6e:7b:13:c8:7a:f9:2a:6d:e4:f8:c1:42:78:14:ee: af:6e:54:4c:83:7b:9d:53:e3:37:d5:5d:d6:93:6f:c1:d5:53: 75:4b:a9:12:73:53:fd:73:f1:7c:12:ad:65:3a:15:55:19:8e: bd:8e:7e:52:32:05:00:27:9f:e1:f8:e7:71:34:79:11:6c:ce: 3a:31:a7:aa:2f:b0:3c:14:b6:44:9e:6b:97:dc:7d:3e:15:99: fa:1b:83:95:b6:50:80:92:91:f7:95:bf:e1:f0:8e:7e:50:c4: 1b:48:a0:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjYwOTIwMjEyNDU4WhcNMjYwOTI3MjEyNDU4WjAYMRYwFAYD VQQDEw02YWIwNGYyYS0zZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh+Rl0LAJAiAqmwEKRXovFeDptyWGDpi1N0cOcByQrwjiP6uoNAGfDvJgoMt1 OH7s7qWUpD5Z67rGNco+GQpy0xAchlagwDV30jMKXhcOy1f0/BmtzaTHobZt54Qo ZG87PYmuq8AnIX4A+YYekbPaOIacd53G8EEVgpHvQxl/K0oXZ7TWIM7/Qd7WChy3 9Z0L9TRL0+JZBwX9MpPL+fkdplQnVM8WpQmONqWKK6AnH8BgN8u/b0xeRUdgV2DW vCet/LmDh/vkmrBz9qttTFfHL8fJ21bBEhFnMFdggYfyFJkCtlIJWkBVDTHXKzGH JywqD6DfYvozAILs85RDP1SiEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/hIsOF M/vdz1sMMTYhCXe/3O6jMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAofAGzGS1MZlxWWrOlc+V/A9XSF+QFSd5nMScQWegfK+4TTi4DXGNUDO6QtmN qDUqPBBZVX68X+76xhMlGTGqAOrIWYQweapM2Htyc4KZ3LNRlmUjhBqF0ujqlXQg B+PUHzLqg/difnY9gHW0pN2rqDYVAYlScA3l1jWYAwixLtUBd68oICySwP30GB2b o9XyyDQsbnsTyHr5Km3k+MFCeBTur25UTIN7nVPjN9Vd1pNvwdVTdUupEnNT/XPx fBKtZToVVRmOvY5+UjIFACef4fjncTR5EWzOOjGnqi+wPBS2RJ5rl9x9PhWZ+huD lbZQgJKR95W/4fCOflDEG0igww== -----END CERTIFICATE-----Generated at Mon Sep 21 22:18:26 2026 by rpki-client