$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: D5A+amrWHDCUfEzLAO/NV2f+qfCitgpCMlgiwQTn1+U= Subject key identifier: 9F:EF:E5:EC:5C:96:5B:11:5A:CF:44:BF:AD:A6:83:B6:46:93:44:ED Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: AF Signing time: Mon 21 Sep 2026 07:10:16 +0000 Manifest this update: Mon 21 Sep 2026 07:10:15 +0000 Manifest next update: Mon 28 Sep 2026 07:10:15 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: r1xPMgzy6AV4F/T+9gVQciQUXCya9jmc3807pFlrPdQ=) 2: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=) 3: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Sep 21 07:10:15 2026 GMT Not After : Sep 28 07:10:15 2026 GMT Subject: CN=6ab0d858-510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:4e:d1:a2:e1:3e:af:71:a2:91:a4:f5:6f: 41:af:5e:c0:60:e1:62:89:c3:e8:ab:72:0f:0c:f9: 63:16:a6:62:c2:9e:6c:a4:80:66:bf:07:41:70:58: 42:4a:2e:43:d8:0f:30:87:f3:fa:d0:25:4b:43:6b: 24:4f:50:9e:88:52:e1:88:85:c7:c2:d2:12:51:81: c5:a6:0c:0f:e6:7b:6a:61:5d:22:e4:64:fa:2c:ee: 5c:d2:d2:b4:2d:a6:4e:1f:fb:ed:c1:29:11:3b:4c: 20:d4:5f:5a:ad:2e:51:b7:17:aa:f8:36:79:d7:5a: 30:68:1f:7d:d2:7e:1f:fe:0f:8f:34:17:54:6a:65: c1:ee:3e:44:57:e8:71:ec:0b:64:06:ae:5b:22:76: 67:e9:81:4a:7c:0d:01:c0:be:7e:37:ad:e1:9d:f6: 85:cf:78:19:a2:7a:7e:b6:74:f0:a5:39:ab:f6:e3: 5c:82:f7:30:08:e6:77:3f:be:c3:64:e5:9b:97:0f: f5:6b:dc:96:7c:e3:cf:e3:50:a6:0e:6f:0c:5d:da: 26:e9:84:65:5a:b3:a0:69:bc:a7:40:84:9a:ee:a4: 34:65:b1:4c:79:80:49:74:df:ac:3a:cb:42:d9:4c: d7:f5:b9:da:ec:43:d3:57:2a:59:eb:1a:35:4e:7c: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EF:E5:EC:5C:96:5B:11:5A:CF:44:BF:AD:A6:83:B6:46:93:44:ED X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:13:ed:d7:62:0d:f0:9f:04:db:66:b4:5a:74:63:27:ae:6f: 83:1c:89:32:af:f6:f6:12:e7:fe:80:34:a8:ff:f3:f4:b6:fc: db:ae:62:9a:8c:df:14:d2:42:48:c5:ca:03:a7:d5:fc:41:92: 8b:2a:e7:c0:fe:08:f8:7b:57:5d:a9:df:62:50:36:df:9c:09: a5:8c:33:e2:d2:b6:d8:35:40:a0:c6:de:19:04:c6:f2:2b:61: 60:74:5c:5a:61:8e:28:8e:5f:4e:34:75:c9:f2:6c:e1:d3:56: cd:7e:72:91:7b:47:d3:35:ef:89:54:5a:c9:68:01:cb:c0:4b: aa:5a:51:1f:1c:7b:50:32:a9:96:56:be:dd:be:f2:3f:65:68: 82:d4:e9:b9:fe:82:20:93:c9:b4:a4:17:69:c5:35:04:60:95: ba:80:64:a0:cb:44:e6:dd:0c:ca:bc:f3:a8:66:6b:62:8e:0c: 8a:6e:bd:bb:06:73:97:91:7d:88:27:bb:77:ad:0f:66:58:92: 23:d3:21:01:8d:a2:ed:74:d9:a6:a4:3a:80:0b:de:13:15:f4: bb:11:57:a6:b2:4b:c5:64:07:5a:79:43:77:b3:7b:76:35:b1: e9:35:fa:8b:41:f7:b7:ac:5d:98:11:b6:c2:51:e3:db:2e:54: a3:1e:2a:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc4QTcxMTAvBgNVBAUTKDFDNTk2ODU4NkNCNEM3RTI4M0YxNDE5RjU4NTA0NjhF REE1NTk2ODIwHhcNMjYwOTIxMDcxMDE1WhcNMjYwOTI4MDcxMDE1WjAYMRYwFAYD VQQDEw02YWIwZDg1OC01MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoA9O0aLhPq9xopGk9W9Br17AYOFiicPoq3IPDPljFqZiwp5spIBmvwdBcFhC Si5D2A8wh/P60CVLQ2skT1CeiFLhiIXHwtISUYHFpgwP5ntqYV0i5GT6LO5c0tK0 LaZOH/vtwSkRO0wg1F9arS5Rtxeq+DZ511owaB990n4f/g+PNBdUamXB7j5EV+hx 7AtkBq5bInZn6YFKfA0BwL5+N63hnfaFz3gZonp+tnTwpTmr9uNcgvcwCOZ3P77D ZOWblw/1a9yWfOPP41CmDm8MXdom6YRlWrOgabynQISa7qQ0ZbFMeYBJdN+sOstC 2UzX9bna7EPTVypZ6xo1TnymtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/v5exc llsRWs9Ev62mg7ZGk0TtMB8GA1UdIwQYMBaAFBxZaFhstMfig/FBn1hQRo7aVZaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzhBNy9GQUU5NkM0QUI2 MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgtS0Q4VUdmV0ZCR2p0cFZs b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy9GQUU5NkM0QUI2MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgt S0Q4VUdmV0ZCR2p0cFZsb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtxPt12IN8J8E22a0WnRjJ65vgxyJMq/29hLn/oA0qP/z9Lb8265imozfFNJC SMXKA6fV/EGSiyrnwP4I+HtXXanfYlA235wJpYwz4tK22DVAoMbeGQTG8ithYHRc WmGOKI5fTjR1yfJs4dNWzX5ykXtH0zXviVRayWgBy8BLqlpRHxx7UDKplla+3b7y P2VogtTpuf6CIJPJtKQXacU1BGCVuoBkoMtE5t0MyrzzqGZrYo4Mim69uwZzl5F9 iCe7d60PZliSI9MhAY2i7XTZpqQ6gAveExX0uxFXprJLxWQHWnlDd7N7djWx6TX6 i0H3t6xdmBG2wlHj2y5Uox4qPw== -----END CERTIFICATE-----Generated at Mon Sep 21 17:43:49 2026 by rpki-client