$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json) Hash identifier: D6J6fPopFaVawnJaCssdXivnqgjZZWeDpD+IvH/w8YI= Subject key identifier: 14:DD:BD:BC:6F:13:67:91:3D:9C:79:97:64:DD:87:9C:7F:7B:3B:11 Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft Manifest number: A2 Signing time: Mon 21 Sep 2026 07:14:06 +0000 Manifest this update: Mon 21 Sep 2026 07:14:05 +0000 Manifest next update: Mon 28 Sep 2026 07:14:05 +0000 Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: OqYvQ9E/WJGG76kk0VfFrGRftUh4sEy9DPvC8aQia3A=) 2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Validity Not Before: Sep 21 07:14:05 2026 GMT Not After : Sep 28 07:14:05 2026 GMT Subject: CN=6ab0d93d-ee62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:1e:0c:a1:c6:e1:e5:d1:4e:d7:e9:f0:29: e9:fe:5a:ac:6c:28:24:6d:a7:93:ab:5c:2a:19:60: b0:41:55:03:6d:b6:bf:e1:78:d9:b7:fb:57:d5:36: 54:1c:cb:de:36:a3:8b:16:fe:56:98:8d:b1:9e:ff: e2:a8:52:d2:51:4e:3b:7e:5e:29:74:16:fd:13:f2: 21:29:85:09:cf:dc:7f:8e:b9:62:f4:c4:d0:84:16: 2f:76:7a:19:89:b1:94:f6:c8:da:2c:a9:e9:ca:27: af:24:ac:51:84:a7:1d:e7:71:da:0e:08:43:47:70: 3e:68:70:13:67:f0:93:25:d7:a3:f1:2f:0b:2a:7d: aa:46:8e:02:ff:6f:e3:16:7c:3b:14:c0:cc:36:a8: 99:2f:bb:65:58:0b:ae:9c:14:d9:6e:44:69:ac:5c: ac:70:4c:19:6a:f6:a7:0e:e9:70:bf:af:64:7b:e6: 17:a6:45:9a:0a:aa:9b:33:39:3f:db:6c:d7:7d:c6: bb:e1:5c:db:0b:f4:9e:38:81:67:dc:b2:89:53:26: f8:8e:79:07:e4:5a:da:c6:82:44:ef:d9:29:cc:f2: af:df:e6:da:19:c6:09:c5:c9:6f:b9:39:34:39:43: d4:64:62:9d:45:24:1f:01:a7:d1:67:64:75:83:40: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DD:BD:BC:6F:13:67:91:3D:9C:79:97:64:DD:87:9C:7F:7B:3B:11 X509v3 Authority Key Identifier: keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:20:cc:df:5e:99:df:42:9a:40:79:3c:38:09:61:b6:1b:a5: 98:33:ba:c4:00:14:64:b1:4d:4e:6a:bc:1a:45:3f:26:5e:1d: 85:76:18:07:c5:6e:39:6a:a2:f0:56:b5:f0:b3:47:8f:de:f0: 8e:d3:23:cd:b0:d6:07:f1:b6:25:b0:79:84:cb:a0:c6:68:9a: cc:c5:da:10:b1:4d:c0:37:c7:43:bb:9d:ea:1c:44:e2:e6:d2: e4:f1:08:d6:f6:5f:e6:eb:bc:20:a1:96:17:43:10:ae:32:23: c9:91:e9:13:85:21:7c:22:ae:7d:23:de:91:da:dd:f4:96:0c: 3b:48:be:ba:d4:83:b0:10:00:cd:07:71:13:4f:54:10:65:01: 78:ee:20:2b:9e:df:c8:ff:33:f5:1f:9c:9f:ec:23:fd:57:ed: 84:3f:da:fd:2f:d1:4f:0d:6b:cf:22:7a:02:ad:2a:51:14:27: 67:96:59:cc:9d:17:40:0e:da:61:3c:d1:35:36:92:60:58:c3: 5b:3b:81:d5:8d:32:09:7f:5e:d7:15:f0:f1:40:2d:3c:3c:d1: 67:70:8e:b8:1a:3d:d5:77:61:52:2b:e0:b3:df:3b:8c:97:cb: 20:aa:fa:51:57:c8:2b:ad:e9:6e:50:5f:b2:ec:c8:e4:68:26: e1:dc:d9:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ5QkExMTAvBgNVBAUTKEU4NzkwMzAxN0FCMUYwNkE5Q0I0NkFCMDIxQkQwQjky MUM5QUZBODgwHhcNMjYwOTIxMDcxNDA1WhcNMjYwOTI4MDcxNDA1WjAYMRYwFAYD VQQDEw02YWIwZDkzZC1lZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/AeDKHG4eXRTtfp8Cnp/lqsbCgkbaeTq1wqGWCwQVUDbba/4XjZt/tX1TZU HMveNqOLFv5WmI2xnv/iqFLSUU47fl4pdBb9E/IhKYUJz9x/jrli9MTQhBYvdnoZ ibGU9sjaLKnpyievJKxRhKcd53HaDghDR3A+aHATZ/CTJdej8S8LKn2qRo4C/2/j Fnw7FMDMNqiZL7tlWAuunBTZbkRprFyscEwZavanDulwv69ke+YXpkWaCqqbMzk/ 22zXfca74VzbC/SeOIFn3LKJUyb4jnkH5FraxoJE79kpzPKv3+baGcYJxclvuTk0 OUPUZGKdRSQfAafRZ2R1g0CPBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTdvbxv E2eRPZx5l2Tdh5x/ezsRMB8GA1UdIwQYMBaAFOh5AwF6sfBqnLRqsCG9C5IcmvqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDlCQS9FMzY3RjZDNkJF RjUxMUYwOUI3RTcyMDlDNEY5QUUwMi82SGtEQVhxeDhHcWN0R3F3SWIwTGtoeWEt b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDlCQS9FMzY3RjZDNkJFRjUxMUYwOUI3RTcyMDlDNEY5QUUwMi82SGtEQVhxeDhH cWN0R3F3SWIwTGtoeWEtb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWyDM316Z30KaQHk8OAlhthulmDO6xAAUZLFNTmq8GkU/Jl4dhXYYB8VuOWqi 8Fa18LNHj97wjtMjzbDWB/G2JbB5hMugxmiazMXaELFNwDfHQ7ud6hxE4ubS5PEI 1vZf5uu8IKGWF0MQrjIjyZHpE4UhfCKufSPekdrd9JYMO0i+utSDsBAAzQdxE09U EGUBeO4gK57fyP8z9R+cn+wj/VfthD/a/S/RTw1rzyJ6Aq0qURQnZ5ZZzJ0XQA7a YTzRNTaSYFjDWzuB1Y0yCX9e1xXw8UAtPDzRZ3COuBo91XdhUivgs987jJfLIKr6 UVfIK63pblBfsuzI5Ggm4dzZ0g== -----END CERTIFICATE-----Generated at Mon Sep 21 19:50:15 2026 by rpki-client