$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json) Hash identifier: pcU1MAJ4hMoS5n2QGBhSAUK1tik0uI/HF93gFh5GT8k= Subject key identifier: EF:9A:5A:FA:0B:9C:88:C2:F3:FD:10:D5:C9:DB:93:84:73:B3:0B:E7 Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft Manifest number: 08D2 Signing time: Tue 06 Oct 2026 20:44:33 +0000 Manifest this update: Tue 06 Oct 2026 20:44:32 +0000 Manifest next update: Tue 13 Oct 2026 20:44:32 +0000 Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: n/b3F67FPsI8hkqE94KBQFiN63QBxjmalV2ZLUuW5Zk=) 2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: cGYw9RXkN6jl5Saa1Bh0uceE3pbuIShbY5CrfH5p5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Validity Not Before: Oct 6 20:44:32 2026 GMT Not After : Oct 13 20:44:32 2026 GMT Subject: CN=6ac55db0-e7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:c6:62:7f:71:1d:10:59:08:55:e8:7e:e0: 61:e8:69:d3:df:d4:5d:72:de:ce:f1:20:80:38:08: 59:d8:63:cc:a7:84:09:37:d8:56:b5:73:cf:13:e9: 1b:18:d4:ea:23:55:87:ef:de:37:a1:c2:c1:9e:f7: c8:b3:79:d5:43:c7:25:b0:3d:81:6e:e9:a8:4d:7d: 31:b4:17:a8:50:1c:18:49:91:ab:1b:1d:d8:5e:4d: d8:33:80:46:e0:79:d7:74:55:05:41:2e:35:c9:a1: 60:58:42:e0:6b:8f:b0:b5:78:cf:2e:4e:3e:67:39: 9d:31:da:07:96:ec:b7:51:74:b9:f4:52:25:64:25: 19:99:3c:a2:45:cc:a0:8c:68:28:0c:da:c1:dd:6b: af:7a:ef:4d:a7:65:ea:12:b9:1c:2b:4c:05:f1:89: a4:8d:52:cb:e0:ea:a9:45:13:0f:d4:5c:2f:32:79: ec:f7:0a:41:76:0d:b2:e8:05:ca:cc:3e:1d:70:0b: 66:7b:c6:58:1e:9b:24:22:a9:5d:1b:85:8f:74:16: d4:d7:59:8a:2d:b2:0b:2f:47:e0:63:9c:cc:c4:5e: 96:63:5d:d5:01:9e:ae:01:46:a9:10:49:8b:78:7c: 81:85:67:f2:b5:3f:46:75:97:87:bb:e1:b2:d2:e2: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9A:5A:FA:0B:9C:88:C2:F3:FD:10:D5:C9:DB:93:84:73:B3:0B:E7 X509v3 Authority Key Identifier: keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d2:8e:3f:79:14:63:a5:71:8a:ae:d6:ea:2b:47:64:f8:bb: bb:6e:bb:7b:09:f2:d2:38:2c:4d:39:93:44:99:13:61:71:06: bd:f3:10:18:53:23:91:a9:42:b7:2e:42:f4:ea:83:27:fa:cf: ee:bc:0d:0e:75:3c:cf:a6:a5:70:01:e4:ea:09:49:14:79:3b: c3:1a:38:25:15:49:d0:8e:31:9f:e7:bf:3f:d2:e0:bc:1d:df: a6:49:c6:77:b2:9d:a0:d9:dc:49:c5:a4:ce:08:a4:26:25:7a: 74:bd:8b:59:23:10:58:b9:3e:59:cc:03:fa:6f:d3:7d:e1:75: 14:f5:0b:9f:92:28:27:43:41:c5:1b:c6:a5:86:f8:13:60:c0: 27:8c:54:22:58:f6:96:93:51:57:4b:36:29:fb:8d:12:bf:30: 2f:96:5f:bc:f1:ce:d3:99:48:8e:b1:af:78:89:49:8f:a8:33: db:98:97:5b:b4:79:1d:c7:42:7a:15:75:bc:ba:30:78:6b:de: 92:a0:d8:c0:25:5c:84:bd:d4:04:93:d8:82:0f:82:87:fa:b9: 48:1d:f9:4a:0d:45:57:cc:72:a8:a0:91:dc:0b:55:ef:09:ba: d0:30:35:f2:c1:0a:e9:6c:7a:ae:25:df:e1:29:c6:fc:84:9b: 51:ea:5c:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx NkRGMjZFQzIwHhcNMjYxMDA2MjA0NDMyWhcNMjYxMDEzMjA0NDMyWjAYMRYwFAYD VQQDEw02YWM1NWRiMC1lN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAXGYn9xHRBZCFXofuBh6GnT39Rdct7O8SCAOAhZ2GPMp4QJN9hWtXPPE+kb GNTqI1WH7943ocLBnvfIs3nVQ8clsD2BbumoTX0xtBeoUBwYSZGrGx3YXk3YM4BG 4HnXdFUFQS41yaFgWELga4+wtXjPLk4+ZzmdMdoHluy3UXS59FIlZCUZmTyiRcyg jGgoDNrB3Wuveu9Np2XqErkcK0wF8YmkjVLL4OqpRRMP1FwvMnns9wpBdg2y6AXK zD4dcAtme8ZYHpskIqldG4WPdBbU11mKLbILL0fgY5zMxF6WY13VAZ6uAUapEEmL eHyBhWfytT9GdZeHu+Gy0uLlcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+aWvoL nIjC8/0Q1cnbk4RzswvnMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1 cEtZdmVFemwtN0VXM3lic0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV9KOP3kUY6Vxiq7W6itHZPi7u267ewny0jgsTTmTRJkTYXEGvfMQGFMjkalC ty5C9OqDJ/rP7rwNDnU8z6alcAHk6glJFHk7wxo4JRVJ0I4xn+e/P9LgvB3fpknG d7KdoNncScWkzgikJiV6dL2LWSMQWLk+WcwD+m/TfeF1FPULn5IoJ0NBxRvGpYb4 E2DAJ4xUIlj2lpNRV0s2KfuNEr8wL5ZfvPHO05lIjrGveIlJj6gz25iXW7R5HcdC ehV1vLoweGvekqDYwCVchL3UBJPYgg+Ch/q5SB35Sg1FV8xyqKCR3AtV7wm60DA1 8sEK6Wx6riXf4SnG/ISbUepcfA== -----END CERTIFICATE-----Generated at Thu Oct 8 16:30:32 2026 by rpki-client