$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json) Hash identifier: eNRrm+9ZU0AKSpRK5fioQIQQ8P99Dr0oh1Uc6CE6OME= Subject key identifier: 98:E4:63:64:BD:CF:BF:B0:60:BC:16:5B:A1:50:E7:54:A6:24:5D:79 Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Certificate serial: 09DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft Manifest number: 09D4 Signing time: Sun 20 Sep 2026 19:48:28 +0000 Manifest this update: Sun 20 Sep 2026 19:48:27 +0000 Manifest next update: Sun 27 Sep 2026 19:48:27 +0000 Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: vBBi56k3hNLSN9UkndnACx3xqxhrN2Z4B822Kf3lIpA=) 2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: IPSlPyfz0+bJclfH4V522k6JGFoLnfNN2pg5rNIteNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2525 (0x9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Validity Not Before: Sep 20 19:48:27 2026 GMT Not After : Sep 27 19:48:27 2026 GMT Subject: CN=6ab0388c-bd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:ca:26:bc:6b:39:e4:8a:75:e9:bf:c8:b3: bf:0b:b1:61:a4:65:0d:32:ce:11:5f:3b:64:3c:b1: 23:be:b2:16:b7:0f:26:79:28:c6:ca:cb:58:d2:17: 3a:be:c9:9c:ad:d2:86:1a:39:ff:99:1e:80:22:42: 34:ab:d1:17:73:e2:69:16:95:60:96:af:be:59:33: a0:bf:96:0f:67:f3:50:a4:01:5e:58:c1:4d:c4:fa: e5:13:aa:f2:3f:8f:d8:b6:55:c5:2d:c0:7d:62:28: 7a:4d:c7:8d:29:b5:f9:6e:91:e7:13:34:12:23:c1: 2f:ec:35:27:67:2a:a1:71:88:21:4c:c2:fc:27:a8: d2:21:a5:13:d9:b9:02:55:11:b4:a6:b3:f0:98:4b: 04:38:9d:a1:ae:18:77:b2:7a:a1:c5:aa:62:97:34: dd:ba:91:ae:aa:f3:b0:26:e0:0b:74:1f:43:e0:1f: 03:21:f8:60:87:92:36:6a:8b:44:06:ea:30:cc:77: 96:0a:cf:2a:04:5b:e9:71:6e:20:b9:3d:3d:5a:35: e1:d2:47:3b:d0:ed:96:40:10:66:62:89:2a:bc:cb: fb:86:1f:f1:aa:68:2c:e8:bc:37:8b:9e:d8:45:06: 88:dc:a6:1f:ab:17:75:31:1a:ad:db:fb:55:c7:fe: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E4:63:64:BD:CF:BF:B0:60:BC:16:5B:A1:50:E7:54:A6:24:5D:79 X509v3 Authority Key Identifier: keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:dd:a9:3e:02:30:52:59:1c:83:d8:01:92:6e:95:8a:51:93: 91:78:06:9b:46:b1:b1:2f:ad:fa:5f:c6:07:e5:0e:ac:a5:08: 66:ae:a5:0c:2a:c8:87:85:d7:1d:bc:42:75:55:fc:32:35:4d: 5b:29:8c:4c:7f:98:17:9f:c2:4d:0f:13:b5:26:47:cc:02:8d: 4a:a2:fd:16:b3:cb:c4:0e:20:0b:af:3e:79:ea:da:04:2d:6c: 21:f3:a0:54:3a:58:5e:12:44:03:51:d8:ef:32:16:c7:7d:6c: b7:80:58:62:58:7b:98:c6:2f:45:20:6e:c7:26:93:41:d3:57: 8b:28:4f:6b:30:52:a9:c8:e0:c8:82:42:c2:a5:1e:a3:6c:22: 37:90:e3:8f:3b:d1:8a:85:eb:04:60:e3:03:2f:cc:64:6b:ad: 58:59:46:31:60:de:15:0e:44:19:dc:b2:f0:a4:4d:e8:3f:0b: f4:da:6e:0b:87:fd:48:29:59:80:0a:e8:4a:f5:f4:54:3a:7c: 8e:64:39:ae:b2:75:78:cb:54:16:fd:3c:d0:f1:c3:a9:02:f6: 4f:49:b1:a5:83:5d:ad:ce:2a:f4:82:1f:14:06:6b:9d:9f:2d: 9b:ab:ed:55:93:99:00:bc:87:3b:10:e1:1c:4a:ad:d4:44:a8: 45:a7:91:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4 MzRDQUJDMTMwHhcNMjYwOTIwMTk0ODI3WhcNMjYwOTI3MTk0ODI3WjAYMRYwFAYD VQQDEw02YWIwMzg4Yy1iZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHPKJrxrOeSKdem/yLO/C7FhpGUNMs4RXztkPLEjvrIWtw8meSjGystY0hc6 vsmcrdKGGjn/mR6AIkI0q9EXc+JpFpVglq++WTOgv5YPZ/NQpAFeWMFNxPrlE6ry P4/YtlXFLcB9Yih6TceNKbX5bpHnEzQSI8Ev7DUnZyqhcYghTML8J6jSIaUT2bkC VRG0prPwmEsEOJ2hrhh3snqhxapilzTdupGuqvOwJuALdB9D4B8DIfhgh5I2aotE BuowzHeWCs8qBFvpcW4guT09WjXh0kc70O2WQBBmYokqvMv7hh/xqmgs6Lw3i57Y RQaI3KYfqxd1MRqt2/tVx/7zDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjkY2S9 z7+wYLwWW6FQ51SmJF15MB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2 Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wMzExNjMxMkFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1y eVBTbURJYVV5Ui1EVEt2Qk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQd2pPgIwUlkcg9gBkm6VilGTkXgGm0axsS+t+l/GB+UOrKUIZq6lDCrIh4XX HbxCdVX8MjVNWymMTH+YF5/CTQ8TtSZHzAKNSqL9FrPLxA4gC68+eeraBC1sIfOg VDpYXhJEA1HY7zIWx31st4BYYlh7mMYvRSBuxyaTQdNXiyhPazBSqcjgyIJCwqUe o2wiN5DjjzvRioXrBGDjAy/MZGutWFlGMWDeFQ5EGdyy8KRN6D8L9NpuC4f9SClZ gAroSvX0VDp8jmQ5rrJ1eMtUFv080PHDqQL2T0mxpYNdrc4q9IIfFAZrnZ8tm6vt VZOZALyHOxDhHEqt1ESoRaeRhQ== -----END CERTIFICATE-----Generated at Mon Sep 21 10:11:13 2026 by rpki-client