$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: MGVv5UUr2nFymZFc1JZHebXfgRFARyHhUttggTrWWsc= Subject key identifier: BC:EC:1B:2A:ED:75:07:F5:16:26:CC:29:07:38:1A:5B:A3:8A:8D:6F Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 05A5 Signing time: Sun 20 Sep 2026 23:01:45 +0000 Manifest this update: Sun 20 Sep 2026 23:01:44 +0000 Manifest next update: Sun 27 Sep 2026 23:01:44 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: txWhhdfWe5cDHiLqeXos9qTE26C67kludTu180lS2d8=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=) 3: FE0D78046DE911F18A77D2D25CA30FBC.roa (hash: XiBXgFzUAWL1pwnYSYxy1I5MTxdL8wu1faYe0BCjxYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Sep 20 23:01:44 2026 GMT Not After : Sep 27 23:01:44 2026 GMT Subject: CN=6ab065d8-97d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:47:9c:4f:6e:b1:ec:3c:8f:dd:83:ca:68: 9a:a6:d1:98:04:a2:c8:74:77:b1:67:d7:5a:56:36: dd:f0:cc:7d:11:c7:a1:57:4c:0b:1e:75:78:b3:bd: bd:28:5d:b3:58:6a:9a:24:32:99:ca:8c:6d:87:cd: 9e:a7:3d:f1:a1:99:66:15:06:78:6b:53:b8:8a:11: e6:75:fc:51:3f:fd:8c:36:08:e5:c1:38:a7:9f:57: fd:77:60:c4:4a:08:51:3c:16:96:50:be:8e:af:e3: f0:50:92:28:91:fa:f5:ef:a2:31:b1:8d:87:e8:00: 94:81:a6:91:65:0a:1f:d0:ab:2f:5d:ba:2c:a4:1e: 9c:45:ba:f0:68:67:6c:b9:13:4d:16:b3:3d:9e:76: ff:90:86:53:ab:1f:e5:70:95:17:43:a3:6c:71:22: 72:92:bc:31:ff:21:51:b9:d2:90:d8:40:3e:9c:23: 61:f1:97:b0:00:69:8a:93:c6:34:4a:8c:bd:39:8f: a7:fd:73:a1:a2:e3:e4:a0:e4:c8:2a:c2:2f:ab:52: 55:2b:c4:a4:86:34:47:11:4d:f1:1d:2f:bd:61:18: 9c:62:b5:96:7a:d1:cc:77:12:ac:a5:81:bf:d0:9e: 1f:d2:0d:ee:db:8c:35:85:3a:d6:e7:fd:d6:63:30: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EC:1B:2A:ED:75:07:F5:16:26:CC:29:07:38:1A:5B:A3:8A:8D:6F X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:91:bc:4e:1d:6a:8f:bb:31:27:88:68:06:21:0c:2d:1a:a5: ff:73:fb:5d:f4:e1:14:6f:f3:4d:76:d9:55:bb:ba:2d:93:01: e5:fd:fa:cf:e1:89:39:b5:14:87:ec:9e:67:31:95:f4:9c:0b: bf:34:4f:c0:d1:a7:ea:e8:91:bf:6b:f1:97:c9:06:7c:08:1a: 69:de:43:eb:bd:5c:53:ad:e6:48:cc:98:f9:18:ed:2c:0e:bb: 83:5b:e0:f0:a4:b3:c9:24:66:76:1b:85:8b:f2:a9:a1:79:01: b5:d2:e6:5d:e6:ca:ff:9b:e1:4a:4f:22:52:1a:1b:5b:f4:31: 26:9f:ef:25:10:50:09:48:56:51:28:f7:93:8a:14:34:09:68: 93:84:b5:b6:8d:c8:95:82:28:f6:34:73:3c:d0:0b:f8:a5:2a: bd:94:f0:47:4a:1e:12:8b:ae:4a:75:3e:3b:ea:85:ee:69:6f: 50:45:4e:d6:e7:cb:8c:32:2e:40:d0:93:bf:b0:24:69:37:15: ed:e2:bb:3c:26:cb:a4:63:36:3e:94:a2:ca:5f:c7:5d:13:fb: ac:06:5f:06:94:21:1d:e5:ed:85:58:36:34:aa:91:47:29:5b: 37:4b:9d:cd:69:ec:ab:aa:0c:c2:c1:0f:96:ae:fd:0b:0d:71: c2:27:18:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjYwOTIwMjMwMTQ0WhcNMjYwOTI3MjMwMTQ0WjAYMRYwFAYD VQQDEw02YWIwNjVkOC05N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbZHnE9usew8j92DymiaptGYBKLIdHexZ9daVjbd8Mx9EcehV0wLHnV4s729 KF2zWGqaJDKZyoxth82epz3xoZlmFQZ4a1O4ihHmdfxRP/2MNgjlwTinn1f9d2DE SghRPBaWUL6Or+PwUJIokfr176IxsY2H6ACUgaaRZQof0KsvXbospB6cRbrwaGds uRNNFrM9nnb/kIZTqx/lcJUXQ6NscSJykrwx/yFRudKQ2EA+nCNh8ZewAGmKk8Y0 Soy9OY+n/XOhouPkoOTIKsIvq1JVK8SkhjRHEU3xHS+9YRicYrWWetHMdxKspYG/ 0J4f0g3u24w1hTrW5/3WYzA0RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzsGyrt dQf1FibMKQc4Glujio1vMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU5G8Th1qj7sxJ4hoBiEMLRql/3P7XfThFG/zTXbZVbu6LZMB5f36z+GJObUU h+yeZzGV9JwLvzRPwNGn6uiRv2vxl8kGfAgaad5D671cU63mSMyY+RjtLA67g1vg 8KSzySRmdhuFi/KpoXkBtdLmXebK/5vhSk8iUhobW/QxJp/vJRBQCUhWUSj3k4oU NAlok4S1to3IlYIo9jRzPNAL+KUqvZTwR0oeEouuSnU+O+qF7mlvUEVO1ufLjDIu QNCTv7AkaTcV7eK7PCbLpGM2PpSiyl/HXRP7rAZfBpQhHeXthVg2NKqRRylbN0ud zWnsq6oMwsEPlq79Cw1xwicY9Q== -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:19 2026 by rpki-client