$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json) Hash identifier: D4GfDWMHQORWPzrArvIsuCPYSPGhDyXzPbqreTB1CNU= Subject key identifier: FC:90:1B:5B:AD:D1:75:91:0E:4F:F7:34:EF:F5:EE:55:6E:C6:92:6E Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft Manifest number: 0945 Signing time: Sun 20 Sep 2026 20:04:41 +0000 Manifest this update: Sun 20 Sep 2026 20:04:40 +0000 Manifest next update: Sun 27 Sep 2026 20:04:40 +0000 Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: XVkFX2XUfFgh4m/kCOy192ZX7KS80BKhqJMxbwHIm8w=) 2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: DnarnMUtuY2dzqecITNkqpdGiG9N5Q5Cf2m+lbFecbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: Sep 20 20:04:40 2026 GMT Not After : Sep 27 20:04:40 2026 GMT Subject: CN=6ab03c59-c6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:4a:c6:45:4e:e5:7d:bc:9e:29:87:92:20: ae:9c:9a:7d:e0:cd:ca:7d:e7:c0:67:10:e6:00:8c: c0:08:f3:04:69:07:01:d4:85:c8:c2:f6:f9:c0:85: c5:36:3f:39:9c:11:74:76:67:bb:5c:85:19:13:0f: ef:e2:80:27:61:05:b5:2d:e4:e8:44:25:1b:c2:c8: b5:a0:b2:d2:bd:1a:8c:a0:0d:c7:90:96:f0:ca:df: d5:40:f3:7f:7b:ce:00:f0:93:79:32:2b:2d:a2:6a: a2:7d:f2:80:00:e2:eb:76:2a:11:fe:b1:7c:7c:a0: 0e:b8:20:82:73:47:c1:46:d9:db:88:15:0a:17:ee: 0c:40:43:ec:db:4f:a5:e5:f4:f3:1c:ce:b4:1e:8d: e1:fc:3f:c1:f9:b4:2d:3a:7a:b2:73:bd:24:08:a6: 06:24:0a:cd:8d:b9:8d:1d:52:c8:c9:33:45:3e:b9: 37:2c:e2:74:db:4a:67:7b:fc:45:a3:08:1f:79:2b: ad:e3:24:ff:20:13:17:4c:64:20:b9:d7:a8:cc:03: 69:6b:c6:7b:32:d6:07:f2:a0:c6:1d:6a:a3:39:e1: 1b:d9:6a:f2:27:84:10:5b:66:48:30:c7:cc:d3:e9: 46:8a:d2:39:f9:cc:07:5e:3c:cf:9a:55:93:a3:9e: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:1B:5B:AD:D1:75:91:0E:4F:F7:34:EF:F5:EE:55:6E:C6:92:6E X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:f1:0a:08:ca:ca:8d:a4:f3:63:36:50:c0:58:dc:2e:ca:ce: 3f:7c:49:77:25:72:0e:82:de:65:bd:0c:80:60:5d:b3:79:69: 42:18:8d:46:a9:f4:5a:bd:3a:49:20:35:e7:ed:ca:df:dd:e6: 32:f6:da:e7:66:2c:fa:7c:18:4e:3c:42:cf:38:fe:9a:3b:6e: c4:e7:67:4d:f7:85:02:56:b8:37:fc:c4:cb:40:52:02:e3:37: fe:62:df:37:42:71:47:b8:6a:76:95:44:9d:40:2b:e8:b6:e9: c0:c7:5b:31:da:a4:9b:17:42:8c:dc:d5:77:7d:14:e0:34:45: a3:d0:63:6a:28:47:53:9b:e6:37:0b:e7:e5:0d:07:fb:69:86: e2:a7:83:37:3e:c5:9e:df:28:16:6d:97:78:ae:ef:8e:1a:d0: bb:04:c7:62:54:3d:08:55:8c:47:4a:83:07:59:8a:b1:0e:67: ab:a3:fb:b8:22:84:31:f8:dd:07:74:89:30:9c:5a:94:f9:ef: 26:f2:be:fc:78:c6:4e:81:53:7f:1f:ec:70:14:cf:b1:f7:a5: f5:09:37:99:41:71:b6:1c:51:d4:9a:cf:35:c1:5f:3a:be:e7: 05:9d:bd:b6:c7:c1:1a:d3:a0:8f:83:b4:61:32:4b:5d:21:70: fa:90:2f:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjYwOTIwMjAwNDQwWhcNMjYwOTI3MjAwNDQwWjAYMRYwFAYD VQQDEw02YWIwM2M1OS1jNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01tKxkVO5X28nimHkiCunJp94M3KfefAZxDmAIzACPMEaQcB1IXIwvb5wIXF Nj85nBF0dme7XIUZEw/v4oAnYQW1LeToRCUbwsi1oLLSvRqMoA3HkJbwyt/VQPN/ e84A8JN5MistomqiffKAAOLrdioR/rF8fKAOuCCCc0fBRtnbiBUKF+4MQEPs20+l 5fTzHM60Ho3h/D/B+bQtOnqyc70kCKYGJArNjbmNHVLIyTNFPrk3LOJ020pne/xF owgfeSut4yT/IBMXTGQgudeozANpa8Z7MtYH8qDGHWqjOeEb2WryJ4QQW2ZIMMfM 0+lGitI5+cwHXjzPmlWTo57zLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyQG1ut 0XWRDk/3NO/17lVuxpJuMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO QjFTd1BwaHlyVGlBeFU1TDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvvEKCMrKjaTzYzZQwFjcLsrOP3xJdyVyDoLeZb0MgGBds3lpQhiNRqn0Wr06 SSA15+3K393mMvba52Ys+nwYTjxCzzj+mjtuxOdnTfeFAla4N/zEy0BSAuM3/mLf N0JxR7hqdpVEnUAr6LbpwMdbMdqkmxdCjNzVd30U4DRFo9BjaihHU5vmNwvn5Q0H +2mG4qeDNz7Fnt8oFm2XeK7vjhrQuwTHYlQ9CFWMR0qDB1mKsQ5nq6P7uCKEMfjd B3SJMJxalPnvJvK+/HjGToFTfx/scBTPsfel9Qk3mUFxthxR1JrPNcFfOr7nBZ29 tsfBGtOgj4O0YTJLXSFw+pAvhQ== -----END CERTIFICATE-----Generated at Tue Sep 22 12:08:33 2026 by rpki-client