$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: F93mhQA0BwvZZwPEXzSdfyZIiNX/O4HlZ6kHie8rJOE= Subject key identifier: 17:7A:57:40:6F:33:3C:25:C9:5F:49:00:00:41:A2:4A:6D:9B:D3:53 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 07C0 Signing time: Sun 20 Sep 2026 21:23:22 +0000 Manifest this update: Sun 20 Sep 2026 21:23:22 +0000 Manifest next update: Sun 27 Sep 2026 21:23:22 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: xhXKfsB6qS+lDz1VCrfeDfVcSN8KxtIZKIw7OmPe6+k=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) 3: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) 4: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Sep 20 21:23:22 2026 GMT Not After : Sep 27 21:23:22 2026 GMT Subject: CN=6ab04eca-fd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:c8:98:61:a1:63:65:69:4a:69:30:ad:38: dd:c6:d9:4b:c7:16:0c:b8:51:9f:3e:93:9a:27:75: 1a:61:e2:35:f3:7f:61:c4:e9:c6:13:86:f6:67:b2: 27:4a:5e:5d:77:8d:40:1f:99:5d:46:b7:91:1a:5b: 0d:2d:79:7d:b6:c1:47:c2:44:1d:f0:97:1b:f4:81: 5f:d9:7d:47:90:80:2e:0e:aa:f1:e5:f5:52:b0:82: ec:a3:70:7e:c1:11:52:bc:35:10:79:43:00:f6:b5: 2d:8f:8c:2d:62:93:ba:e6:54:7b:1f:73:51:2a:51: ad:ae:13:11:5e:eb:a8:fc:6c:9b:ff:b8:31:71:72: ae:15:70:8a:d5:f1:21:67:5b:85:7a:d7:91:36:73: c7:13:cc:f6:b8:f1:36:83:9a:3b:c5:14:d1:78:87: e9:45:a1:40:17:6e:63:68:79:0d:f7:bf:ee:31:14: 0a:b4:c4:9b:f9:ad:e9:4d:da:02:c4:c6:32:e1:6d: d0:bc:4e:b8:98:1d:e1:d9:ec:b2:34:9d:7f:cd:83: 01:4a:6c:35:fe:68:f6:03:c9:f9:7c:d5:88:80:6c: 96:d7:e9:d2:6a:08:3a:5e:df:e8:a4:97:c0:97:e3: 74:ee:f1:70:c4:b2:62:fb:df:ba:ac:13:c5:9a:aa: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7A:57:40:6F:33:3C:25:C9:5F:49:00:00:41:A2:4A:6D:9B:D3:53 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a1:1f:ac:f5:bd:48:0c:eb:38:72:8d:2c:bd:e5:80:49:f7: 1d:83:41:14:03:12:d2:bd:52:c4:3f:29:7a:00:28:e7:e8:a2: 43:33:a5:fd:12:90:a9:68:2d:fe:ab:98:f3:f4:c7:c5:97:b5: 02:2e:91:ac:31:c2:5f:1d:d5:6c:0f:c4:5c:94:91:42:a2:7a: b0:c5:9b:03:0f:e5:92:63:f9:79:2f:ec:8c:36:6c:c9:8d:a3: f7:4f:d4:fc:c2:b6:ac:1d:7e:ab:83:3f:a0:54:c0:93:ab:fd: 8a:4d:cc:b9:23:d5:8e:ce:ec:d1:5b:9e:6d:80:ec:8d:12:70: e4:ff:b0:63:c5:cf:c2:0e:30:1a:58:ca:87:67:cc:1c:c6:3a: f5:6d:1f:a6:22:70:d3:10:78:a5:b1:f7:d1:ac:ff:3e:06:ce: d9:a3:75:4d:e2:09:68:d5:00:a1:9e:1e:57:b6:91:30:16:c7: 0d:ee:d4:f6:09:f8:f7:e1:a4:5b:10:28:60:8a:b0:f4:14:8c: 9f:a4:eb:ee:17:b7:60:24:cd:f5:b7:8f:01:db:a8:ab:62:41: ee:b8:13:b6:6d:ff:41:6e:e6:77:46:5a:be:dc:c2:a7:93:91: a5:f1:d3:e6:90:50:44:f8:6e:98:f5:49:23:83:8d:f2:84:9d: ee:f4:60:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYwOTIwMjEyMzIyWhcNMjYwOTI3MjEyMzIyWjAYMRYwFAYD VQQDEw02YWIwNGVjYS1mZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug/ImGGhY2VpSmkwrTjdxtlLxxYMuFGfPpOaJ3UaYeI1839hxOnGE4b2Z7In Sl5dd41AH5ldRreRGlsNLXl9tsFHwkQd8Jcb9IFf2X1HkIAuDqrx5fVSsILso3B+ wRFSvDUQeUMA9rUtj4wtYpO65lR7H3NRKlGtrhMRXuuo/Gyb/7gxcXKuFXCK1fEh Z1uFeteRNnPHE8z2uPE2g5o7xRTReIfpRaFAF25jaHkN97/uMRQKtMSb+a3pTdoC xMYy4W3QvE64mB3h2eyyNJ1/zYMBSmw1/mj2A8n5fNWIgGyW1+nSagg6Xt/opJfA l+N07vFwxLJi+9+6rBPFmqqfrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBd6V0Bv MzwlyV9JAABBokptm9NTMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArKEfrPW9SAzrOHKNLL3lgEn3HYNBFAMS0r1SxD8pegAo5+iiQzOl/RKQqWgt /quY8/THxZe1Ai6RrDHCXx3VbA/EXJSRQqJ6sMWbAw/lkmP5eS/sjDZsyY2j90/U /MK2rB1+q4M/oFTAk6v9ik3MuSPVjs7s0VuebYDsjRJw5P+wY8XPwg4wGljKh2fM HMY69W0fpiJw0xB4pbH30az/PgbO2aN1TeIJaNUAoZ4eV7aRMBbHDe7U9gn49+Gk WxAoYIqw9BSMn6Tr7he3YCTN9bePAduoq2JB7rgTtm3/QW7md0ZavtzCp5ORpfHT 5pBQRPhumPVJI4ON8oSd7vRg6g== -----END CERTIFICATE-----Generated at Mon Sep 21 17:49:54 2026 by rpki-client