$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft File: HLlfP3vebhmbdAuSgqxyKk7amZs.mft (raw, json) Hash identifier: 5VeyqK35dF4rWXMieSyb229DaftILKisX/5mtFDTaM4= Subject key identifier: 0F:C4:BF:75:F1:6D:7E:BC:CB:F9:AD:11:51:F3:40:73:5A:08:D0:D4 Authority key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B Certificate issuer: /CN=A91E4EEF/serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft Manifest number: 9E Signing time: Wed 23 Sep 2026 07:16:18 +0000 Manifest this update: Wed 23 Sep 2026 07:16:18 +0000 Manifest next update: Wed 30 Sep 2026 07:16:18 +0000 Files and hashes: 1: HLlfP3vebhmbdAuSgqxyKk7amZs.crl (hash: wkzrFRGkUQlnWe6AGgqXn4G1t/RiXIAnkvaGHG1AL+E=) 2: 0C1F9D8CF13A11F08789470C566F56BC.roa (hash: sgoDIUBe0jr7XN1MyW0ONqjTLm6kK+bIbhy55Li2/S8=) 3: 304D9EDEF13A11F0A5B04E41566F56BC.roa (hash: AC/jIeXBOHw70y2QOJSmCZ+NDE9I0e7M9WpwuYpLz9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Validity Not Before: Sep 23 07:16:18 2026 GMT Not After : Sep 30 07:16:18 2026 GMT Subject: CN=6ab37cc2-bc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:b8:4d:be:01:39:65:9b:a4:86:e7:56:58: f1:37:c6:2f:c4:af:ef:d3:1e:02:55:5c:c3:cf:07: df:8e:39:fe:1f:16:af:23:50:27:70:2e:a3:75:55: 48:ab:58:b0:74:e2:29:a5:fb:22:27:03:52:58:89: 0c:14:f7:51:e9:b7:88:9e:e8:63:ec:c1:0f:9f:8e: 3f:fd:af:21:61:d4:3e:00:d5:63:35:ec:a8:af:a3: c5:90:9d:72:a5:31:0c:0e:d3:39:7b:47:a9:e4:79: 30:23:37:9d:b1:0a:0c:fb:a9:25:05:b2:40:b0:34: 99:86:83:b9:57:d2:fb:a0:c7:9c:a8:94:6d:d7:0b: f8:49:ca:c0:f3:8d:a4:c2:ed:99:4c:24:0c:e7:a8: 59:97:97:45:13:3c:d9:2a:69:11:4f:d8:02:2b:7f: 33:f5:ab:9e:54:6b:be:d5:5a:8e:5e:8b:e6:0c:7d: 62:24:ad:00:33:12:4a:66:d9:a4:d2:8b:b8:1d:26: 93:d7:83:3a:32:f0:22:4b:7f:9b:5a:7c:80:0b:5f: be:49:84:f2:ed:5b:54:86:5d:b5:3f:29:f5:31:50: 7b:6f:22:71:a8:d1:52:b4:fc:9c:e2:42:b4:3b:08: 8b:6f:0e:aa:92:8b:1a:cd:7d:37:06:4a:11:b7:b2: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C4:BF:75:F1:6D:7E:BC:CB:F9:AD:11:51:F3:40:73:5A:08:D0:D4 X509v3 Authority Key Identifier: keyid:1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1b:2a:bb:b0:c6:61:23:a7:67:c6:a7:0d:4d:af:c9:82:af: 52:76:8e:55:7c:2a:ed:69:03:02:e9:89:3f:8a:b4:4f:64:f7: 5d:46:fb:ec:4c:4b:23:5f:9e:f9:29:86:36:57:fa:50:4c:e8: b6:8b:dc:36:e3:82:cb:ff:0b:a6:2f:aa:63:f6:5f:5f:0f:d0: 94:60:23:65:f5:7c:9a:b9:3f:1f:fd:c3:15:f1:c8:cd:19:29: cd:2e:11:7a:45:67:8a:bc:7f:6e:ff:f9:0a:58:4d:fc:1d:b2: ec:7c:88:0a:9c:c4:3a:01:17:ff:d3:ed:69:0d:7f:23:35:3d: ca:47:27:6c:4c:a7:c4:75:eb:61:6a:77:ea:52:a3:db:87:49: 3a:59:b0:ea:18:f2:b1:16:c7:4b:29:b4:f0:bb:38:b0:ce:17: 97:d3:da:60:d6:6a:65:68:4e:37:67:96:e3:0a:17:0f:5d:a5: 49:1e:b5:c7:d5:35:78:a9:ed:a4:35:2c:bf:ac:56:43:8d:73: 92:c9:9d:fb:69:e3:40:9b:86:44:9c:c6:af:8b:2d:bf:cb:26: d3:7e:7c:e7:b7:c6:5c:f0:a0:01:b7:32:cd:ad:17:be:40:82: d5:a1:21:10:8b:ee:1b:e9:c8:cc:56:6d:30:38:9f:4d:5c:a5: b8:1e:c0:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRUYxMTAvBgNVBAUTKDFDQjk1RjNGN0JERTZFMTk5Qjc0MEI5MjgyQUM3MjJB NEVEQTk5OUIwHhcNMjYwOTIzMDcxNjE4WhcNMjYwOTMwMDcxNjE4WjAYMRYwFAYD VQQDEw02YWIzN2NjMi1iYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfm4Tb4BOWWbpIbnVljxN8YvxK/v0x4CVVzDzwffjjn+HxavI1AncC6jdVVI q1iwdOIppfsiJwNSWIkMFPdR6beInuhj7MEPn44//a8hYdQ+ANVjNeyor6PFkJ1y pTEMDtM5e0ep5HkwIzedsQoM+6klBbJAsDSZhoO5V9L7oMecqJRt1wv4ScrA842k wu2ZTCQM56hZl5dFEzzZKmkRT9gCK38z9aueVGu+1VqOXovmDH1iJK0AMxJKZtmk 0ou4HSaT14M6MvAiS3+bWnyAC1++SYTy7VtUhl21Pyn1MVB7byJxqNFStPyc4kK0 OwiLbw6qkosazX03BkoRt7LzXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/Ev3Xx bX68y/mtEVHzQHNaCNDUMB8GA1UdIwQYMBaAFBy5Xz973m4Zm3QLkoKscipO2pmb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVFRi9DRUE4MzZCQURF RjMxMUYwOUVENDEyOTY1NzZGNTZCQy9ITGxmUDN2ZWJobWJkQXVTZ3F4eUtrN2Ft WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMbGZQM3ZlYmhtYmRBdVNncXh5S2s3YW1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVFRi9DRUE4MzZCQURFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy9ITGxmUDN2ZWJo bWJkQXVTZ3F4eUtrN2FtWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAahsqu7DGYSOnZ8anDU2vyYKvUnaOVXwq7WkDAumJP4q0T2T3XUb77ExLI1+e +SmGNlf6UEzotovcNuOCy/8Lpi+qY/ZfXw/QlGAjZfV8mrk/H/3DFfHIzRkpzS4R ekVnirx/bv/5ClhN/B2y7HyICpzEOgEX/9PtaQ1/IzU9ykcnbEynxHXrYWp36lKj 24dJOlmw6hjysRbHSym08Ls4sM4Xl9PaYNZqZWhON2eW4woXD12lSR61x9U1eKnt pDUsv6xWQ41zksmd+2njQJuGRJzGr4stv8sm035857fGXPCgAbcyza0XvkCC1aEh EIvuG+nIzFZtMDifTVyluB7AkA== -----END CERTIFICATE-----Generated at Wed Sep 23 20:33:01 2026 by rpki-client