$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: GBt29P96WLIyoG1PYHEjZ6Fj7KMrMBFuKxCGHwFRab8= Subject key identifier: 28:01:1C:33:04:B6:06:70:6B:47:BF:73:AC:1F:86:43:78:6E:DD:AE Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 01CA Signing time: Mon 21 Sep 2026 03:48:32 +0000 Manifest this update: Mon 21 Sep 2026 03:48:32 +0000 Manifest next update: Mon 28 Sep 2026 03:48:32 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: QMtfjQBAiDDi6FHF7QkUtozNlJQC2haoI+DFeLCwVoY=) 2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: BYKkFXMozWzhv1SFqTrB4VKA3O1SFw8hm1zrdVgqCeI=) 3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: xILVq3Pl1ryIoRueMpMu286AyVmWUfGzcv0mFdI+Wv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Sep 21 03:48:32 2026 GMT Not After : Sep 28 03:48:32 2026 GMT Subject: CN=6ab0a910-c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:cf:79:b3:c8:68:22:d0:3e:4b:56:a0:62: e7:db:ee:16:3e:b8:8b:00:2b:1d:d7:34:70:e5:6f: ae:61:14:68:e1:91:94:cf:fd:6f:33:31:64:62:a4: 9c:96:76:00:6c:09:88:43:66:d7:9e:dc:0f:b0:eb: 0e:13:00:1f:b2:9d:ff:fd:bd:fe:d2:15:fd:b5:c4: 30:0a:fc:b8:b8:b7:50:b5:b9:eb:18:72:5a:28:ef: dc:d3:dd:37:be:7b:a8:c2:cb:26:30:5d:2d:bb:67: 20:03:ec:70:54:36:20:95:5c:ea:15:57:a6:b4:1c: d2:41:7d:4b:83:86:46:d3:63:91:ec:03:98:4e:f2: 91:ee:3e:20:61:09:c1:67:26:20:2c:95:c0:1e:5a: f7:aa:e3:47:37:b6:cf:73:f4:69:10:a6:97:c3:c0: 14:c1:49:46:ec:5c:d5:df:c4:07:59:79:ee:52:13: 98:74:61:9f:1d:b0:97:0e:cd:8e:76:7d:a0:34:da: e2:fb:ed:5b:7f:a1:a8:10:c9:f3:28:b2:78:dd:5d: 70:e0:c2:0c:ce:06:52:4d:a4:1e:4d:d4:3e:b4:d4: 53:ee:ff:b9:d5:ad:aa:a6:76:61:2e:fb:c0:44:16: c4:c0:29:3a:52:bf:cc:b4:72:4f:3e:18:77:1d:2d: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:1C:33:04:B6:06:70:6B:47:BF:73:AC:1F:86:43:78:6E:DD:AE X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:81:1c:04:9b:50:9f:fe:36:d1:88:e7:01:bb:ac:38:eb:4a: 40:20:c4:d0:27:b3:ad:b1:25:08:a2:5c:29:c1:1c:df:b9:db: d2:70:74:60:9b:fd:85:82:21:26:36:da:f3:0e:2f:66:8f:0e: 77:d8:05:5e:64:19:9a:ce:ad:46:70:5b:9d:46:9f:4f:81:34: 60:5a:29:46:d4:b0:ed:73:11:db:8b:6a:d6:80:20:10:8e:d4: 0a:cc:8a:71:e5:ad:1b:6f:da:4b:53:72:a0:68:f8:e0:e9:4f: 7f:ed:67:f9:b7:b3:c0:f4:ae:31:a1:0f:d6:ec:73:38:a0:99: d5:32:b9:4b:bf:91:28:5e:3f:9b:3c:12:1d:f5:a0:c1:30:a5: 71:d4:fb:a7:69:d2:6d:6c:df:e6:72:9a:59:c5:d7:e9:4b:6c: a5:a2:c8:32:26:98:c6:08:fe:4e:7a:1b:52:db:32:9b:9c:35: a0:5c:1f:7e:70:8b:b7:a7:f4:fa:27:bc:cb:49:a0:4a:c5:17: f2:51:ea:35:6e:82:cf:c1:29:2a:82:c2:28:5e:e8:8f:c8:b9: ea:52:4f:fd:eb:03:48:89:fc:ea:8a:cc:6c:cc:6a:bc:d0:28: 65:e5:c8:a3:e4:78:71:91:36:6a:7b:0d:5d:23:57:4a:2f:35: 19:fa:e4:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYwOTIxMDM0ODMyWhcNMjYwOTI4MDM0ODMyWjAYMRYwFAYD VQQDEw02YWIwYTkxMC1jNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0avPebPIaCLQPktWoGLn2+4WPriLACsd1zRw5W+uYRRo4ZGUz/1vMzFkYqSc lnYAbAmIQ2bXntwPsOsOEwAfsp3//b3+0hX9tcQwCvy4uLdQtbnrGHJaKO/c0903 vnuowssmMF0tu2cgA+xwVDYglVzqFVemtBzSQX1Lg4ZG02OR7AOYTvKR7j4gYQnB ZyYgLJXAHlr3quNHN7bPc/RpEKaXw8AUwUlG7FzV38QHWXnuUhOYdGGfHbCXDs2O dn2gNNri++1bf6GoEMnzKLJ43V1w4MIMzgZSTaQeTdQ+tNRT7v+51a2qpnZhLvvA RBbEwCk6Ur/MtHJPPhh3HS3IbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgBHDME tgZwa0e/c6wfhkN4bt2uMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIEcBJtQn/420YjnAbusOOtKQCDE0CezrbElCKJcKcEc37nb0nB0YJv9hYIh Jjba8w4vZo8Od9gFXmQZms6tRnBbnUafT4E0YFopRtSw7XMR24tq1oAgEI7UCsyK ceWtG2/aS1NyoGj44OlPf+1n+bezwPSuMaEP1uxzOKCZ1TK5S7+RKF4/mzwSHfWg wTClcdT7p2nSbWzf5nKaWcXX6UtspaLIMiaYxgj+TnobUtsym5w1oFwffnCLt6f0 +ie8y0mgSsUX8lHqNW6Cz8EpKoLCKF7oj8i56lJP/esDSIn86orMbMxqvNAoZeXI o+R4cZE2ansNXSNXSi81Gfrk9g== -----END CERTIFICATE-----Generated at Tue Sep 22 14:58:38 2026 by rpki-client