$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft File: He4XpqM4DuSI7ztuISW4eOZAckg.mft (raw, json) Hash identifier: 2nfngF7oi/AJwRG56xfifsa+bfb4YjEF6W4FqekW4xg= Subject key identifier: 59:26:88:47:16:13:2B:DA:82:B2:C2:D1:44:2A:BE:A9:7F:17:F2:0A Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft Manifest number: 027A Signing time: Mon 21 Sep 2026 02:04:18 +0000 Manifest this update: Mon 21 Sep 2026 02:04:18 +0000 Manifest next update: Mon 28 Sep 2026 02:04:18 +0000 Files and hashes: 1: He4XpqM4DuSI7ztuISW4eOZAckg.crl (hash: 7GTjCYQaGSEI0atHd7GPcoYzEV7eFU6SEpHA6nZCXro=) 2: 3C248A948D4111F1AD3AABFD6211F970.roa (hash: bBEKBjnwEkzANt3BU+uWRZGtxiwc6NAtMeokJphAkAc=) 3: 91A463F68EF211F1955665D66611F970.roa (hash: 3Zu4wSnQBBq3lkzK9F3PC+ZEn2jGSzlYHJFjGae8M2g=) 4: 805A2E74660311EF90397033C4F9AE02.roa (hash: 5vtGlk0S0hYad6mDuGYTky+IHAV1KVmi2xi5vEoQKNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Validity Not Before: Sep 21 02:04:18 2026 GMT Not After : Sep 28 02:04:18 2026 GMT Subject: CN=6ab090a2-9a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:2e:f6:82:fe:6c:77:fa:30:14:48:bb:75: e3:ed:62:ac:61:f1:22:37:7e:8f:1d:38:db:97:4c: 81:bc:7d:db:f8:78:3c:8e:d2:2f:28:1f:46:57:e2: ea:17:e2:0d:af:72:40:83:fb:08:50:05:4e:5e:8f: 05:05:35:f9:63:9b:37:db:cb:b0:87:59:d0:ae:0b: 9e:0c:f8:39:25:5e:e2:50:d5:26:1e:ac:36:bd:6c: 7f:8a:9a:65:7d:58:85:b2:d5:97:e9:a9:c5:84:2c: 6d:c1:b4:fc:a9:80:9e:ba:8f:0a:44:0e:80:e6:11: bc:c9:1f:a5:93:fe:7f:a7:47:fa:22:8c:a8:98:ac: 8d:3b:e0:29:4e:41:5b:a2:42:e8:63:cd:03:57:92: 64:47:59:7b:5f:3e:28:13:29:45:80:bb:91:bf:9c: 48:6c:30:a0:59:8a:9d:25:fc:ac:95:35:65:fb:b0: 07:aa:fd:8e:6b:a7:3d:fd:90:18:e1:3a:1f:c1:91: 60:c8:30:9c:48:d8:ba:a1:0b:eb:0a:bb:88:20:ae: 93:cc:d3:92:17:13:38:a0:be:cd:46:98:80:52:08: c2:97:19:73:a0:df:2f:86:be:de:92:d0:1c:45:0d: 34:1f:e3:43:ef:e2:06:cd:ff:64:f0:84:82:e5:4e: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:26:88:47:16:13:2B:DA:82:B2:C2:D1:44:2A:BE:A9:7F:17:F2:0A X509v3 Authority Key Identifier: keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4a:39:98:46:31:60:17:a9:7d:93:d6:94:32:fb:8e:24:86: 35:c3:1b:10:f8:8f:7b:78:c9:7f:d4:63:d4:4f:12:f2:20:62: 1e:b8:9d:3b:7e:7c:08:ff:3d:fe:76:25:b4:e0:11:84:6f:38: 1c:84:cb:ed:16:0d:2a:42:ae:0c:a5:3b:95:21:48:20:11:0c: 4c:37:51:cd:a1:81:1d:a7:d7:62:8b:00:9a:4f:56:f2:ef:fd: 63:c9:03:e4:89:ce:71:68:c7:c5:55:d3:5b:55:a5:d3:9e:10: f6:7d:e0:e1:44:35:88:54:a9:50:59:99:63:d0:79:a3:38:b7: 65:71:87:1a:69:4c:bf:d1:a9:d1:f7:45:5c:ca:d1:a5:b4:64: c4:6d:0f:be:e4:fc:82:78:71:cf:ab:e4:e5:c9:f0:47:25:21: 8e:09:99:49:ce:03:4f:60:71:59:ae:96:df:7a:8e:86:96:9c: 77:60:e5:00:5b:27:f5:21:62:6d:ca:72:69:16:36:50:b2:44: 01:e4:d8:b5:c7:ce:69:33:d0:39:91:26:93:e7:c6:8a:17:bb: d0:2b:71:76:6d:7f:e5:b2:d0:b5:98:78:1c:56:ec:75:15:fe: 13:ee:29:b5:23:dd:ae:5e:0e:61:d9:25:9f:0a:a7:64:ed:02: 1e:b2:8a:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4 RTY0MDcyNDgwHhcNMjYwOTIxMDIwNDE4WhcNMjYwOTI4MDIwNDE4WjAYMRYwFAYD VQQDEw02YWIwOTBhMi05YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/Yu9oL+bHf6MBRIu3Xj7WKsYfEiN36PHTjbl0yBvH3b+Hg8jtIvKB9GV+Lq F+INr3JAg/sIUAVOXo8FBTX5Y5s328uwh1nQrgueDPg5JV7iUNUmHqw2vWx/ippl fViFstWX6anFhCxtwbT8qYCeuo8KRA6A5hG8yR+lk/5/p0f6IoyomKyNO+ApTkFb okLoY80DV5JkR1l7Xz4oEylFgLuRv5xIbDCgWYqdJfyslTVl+7AHqv2Oa6c9/ZAY 4TofwZFgyDCcSNi6oQvrCruIIK6TzNOSFxM4oL7NRpiAUgjClxlzoN8vhr7ektAc RQ00H+ND7+IGzf9k8ISC5U59pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkmiEcW EyvagrLC0UQqvql/F/IKMB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyMi8zRjdENjhBOEZERTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1 U0k3enR1SVNXNGVPWkFja2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcko5mEYxYBepfZPWlDL7jiSGNcMbEPiPe3jJf9Rj1E8S8iBiHridO358CP89 /nYltOARhG84HITL7RYNKkKuDKU7lSFIIBEMTDdRzaGBHafXYosAmk9W8u/9Y8kD 5InOcWjHxVXTW1Wl054Q9n3g4UQ1iFSpUFmZY9B5ozi3ZXGHGmlMv9Gp0fdFXMrR pbRkxG0PvuT8gnhxz6vk5cnwRyUhjgmZSc4DT2BxWa6W33qOhpacd2DlAFsn9SFi bcpyaRY2ULJEAeTYtcfOaTPQOZEmk+fGihe70Ctxdm1/5bLQtZh4HFbsdRX+E+4p tSPdrl4OYdklnwqnZO0CHrKKDA== -----END CERTIFICATE-----Generated at Tue Sep 22 05:22:37 2026 by rpki-client