$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: E28KAH1utqQP5IKyrVOYJ00A6aU2gRwWFyEoXT6/D0k= Subject key identifier: 8E:6B:92:F5:F4:79:C0:C5:D0:9D:B1:DE:1E:0D:0A:E1:70:26:54:AC Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0CAA Signing time: Tue 22 Sep 2026 18:28:53 +0000 Manifest this update: Tue 22 Sep 2026 18:28:53 +0000 Manifest next update: Tue 29 Sep 2026 18:28:53 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: FFrwfOP8egcJpI9tH7Za1rf7gCV7uqCWTa1mg0ZSjJU=) 2: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) 3: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Sep 22 18:28:53 2026 GMT Not After : Sep 29 18:28:53 2026 GMT Subject: CN=6ab2c8e5-9aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:9a:3d:8c:38:3e:fc:af:c3:ae:da:e5:7f: 4e:e1:68:d3:f9:d3:fc:66:1b:9c:ff:a7:ba:d7:bc: 89:b9:fe:dc:30:66:66:cc:e6:62:e3:13:20:56:4f: 2a:3f:fa:18:9a:c6:e1:de:1d:74:ae:ec:57:c2:a1: 94:74:7f:d7:18:1a:9a:92:43:3c:1e:26:6f:fc:b1: 6a:6e:16:0a:86:9d:3d:b9:06:63:45:a1:13:7e:ea: 88:56:fd:44:a6:6c:ce:39:48:fa:cf:73:9b:46:b7: 26:f6:b3:b3:2b:b4:18:b2:98:8b:25:85:6b:67:8b: d7:27:58:6a:11:eb:aa:b5:a9:1f:76:0d:87:56:d6: ea:a0:f5:69:be:a0:3a:2b:d7:cb:a8:63:2c:af:88: f6:8f:55:4f:8f:13:c9:75:ea:49:89:d5:07:5e:66: f8:b2:5a:d4:7e:ec:1f:33:50:73:74:cb:3e:d9:79: 6f:3d:46:a8:4a:91:37:ec:a1:69:07:45:bc:bd:bc: 18:44:a2:ef:d8:fc:a1:cf:81:e3:6e:7c:80:0a:43: 15:54:43:a3:ad:e3:5d:8a:f0:c6:d5:ab:f1:e6:3d: b4:02:68:47:c9:38:3a:b2:df:c2:98:05:25:07:50: 40:6c:71:4e:0a:3d:21:d0:91:d1:68:c0:4b:63:29: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:92:F5:F4:79:C0:C5:D0:9D:B1:DE:1E:0D:0A:E1:70:26:54:AC X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:92:63:87:35:06:a1:e4:1d:74:ad:fe:80:db:f3:7c:96:2f: dc:1d:3a:52:07:3e:0f:e4:f3:5d:ea:01:77:44:c8:16:9a:af: 59:72:99:00:ed:c3:2a:04:ad:11:8c:b9:1c:f4:28:c4:69:2d: cf:44:7a:17:1a:d5:83:41:2d:4a:f9:3a:ba:70:f0:fe:2b:7b: c1:b8:18:21:3a:19:ea:11:26:d7:a7:45:d1:08:92:86:8f:62: 1b:35:67:6c:12:73:71:93:4b:1b:84:12:58:bc:5f:b2:19:6b: 0e:ec:5d:ff:2b:22:e9:f7:d9:e9:d1:f2:2f:66:7b:ad:dc:58: e1:79:d5:b2:36:75:fc:f2:99:99:9d:38:43:7c:e3:39:b6:26: 27:80:38:2b:80:f9:d6:55:8a:a7:61:78:44:45:d4:c6:71:09: 8f:41:c2:6b:86:22:87:63:a6:d8:a8:e9:d3:e2:a2:8b:bd:7f: c4:0b:5a:0a:7d:d3:a6:e9:a4:d3:f7:cf:e3:6f:9a:30:c2:c2: 2f:48:7c:08:36:85:85:c3:23:7b:8b:6e:bc:98:49:13:86:4a: 7a:8a:d4:bf:89:54:dc:f5:25:11:8c:d0:c5:e9:12:f8:65:86: cd:eb:13:8c:da:18:22:78:30:c3:7e:f1:39:8d:92:ba:be:a1: 08:6a:89:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYwOTIyMTgyODUzWhcNMjYwOTI5MTgyODUzWjAYMRYwFAYD VQQDEw02YWIyYzhlNS05YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0aaPYw4Pvyvw67a5X9O4WjT+dP8Zhuc/6e617yJuf7cMGZmzOZi4xMgVk8q P/oYmsbh3h10ruxXwqGUdH/XGBqakkM8HiZv/LFqbhYKhp09uQZjRaETfuqIVv1E pmzOOUj6z3ObRrcm9rOzK7QYspiLJYVrZ4vXJ1hqEeuqtakfdg2HVtbqoPVpvqA6 K9fLqGMsr4j2j1VPjxPJdepJidUHXmb4slrUfuwfM1BzdMs+2XlvPUaoSpE37KFp B0W8vbwYRKLv2Pyhz4HjbnyACkMVVEOjreNdivDG1avx5j20AmhHyTg6st/CmAUl B1BAbHFOCj0h0JHRaMBLYylOSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5rkvX0 ecDF0J2x3h4NCuFwJlSsMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEZJjhzUGoeQddK3+gNvzfJYv3B06Ugc+D+TzXeoBd0TIFpqvWXKZAO3DKgSt EYy5HPQoxGktz0R6FxrVg0EtSvk6unDw/it7wbgYIToZ6hEm16dF0QiSho9iGzVn bBJzcZNLG4QSWLxfshlrDuxd/ysi6ffZ6dHyL2Z7rdxY4XnVsjZ1/PKZmZ04Q3zj ObYmJ4A4K4D51lWKp2F4REXUxnEJj0HCa4Yih2Om2Kjp0+Kii71/xAtaCn3Tpumk 0/fP42+aMMLCL0h8CDaFhcMje4tuvJhJE4ZKeorUv4lU3PUlEYzQxekS+GWGzesT jNoYIngww37xOY2Sur6hCGqJ6A== -----END CERTIFICATE-----Generated at Thu Sep 24 10:16:54 2026 by rpki-client