$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: dtesLzbmLdF/SRFDuO5Ui9TtWPcbogjoF9chrHuZ2MM= Subject key identifier: 93:9A:59:5A:4D:3D:19:94:87:BF:EC:2A:15:84:E9:2C:58:C1:86:54 Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 0148 Signing time: Mon 21 Sep 2026 05:27:36 +0000 Manifest this update: Mon 21 Sep 2026 05:27:35 +0000 Manifest next update: Mon 28 Sep 2026 05:27:35 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: dfmN7Nx6sY3QJi/JormM1SSSUv+h4+l2+ImWFDsco2k=) 2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=) 3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Sep 21 05:27:35 2026 GMT Not After : Sep 28 05:27:35 2026 GMT Subject: CN=6ab0c047-c5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:16:11:04:7b:10:cd:c5:ed:fd:d2:79:15: 08:d2:68:f2:f9:99:cc:c1:74:88:d3:1b:cd:59:54: ec:c0:1f:8a:7a:0d:82:96:3c:fe:a7:14:15:b2:3a: cf:c8:74:fc:f5:80:af:a0:27:18:ed:03:8b:55:86: 12:97:67:b4:f3:7e:db:f3:7c:fb:a7:64:1a:2f:c9: 51:c3:52:f2:58:ab:f2:b1:9b:e7:63:a6:2c:14:8b: ac:8b:60:b6:68:73:38:83:0c:a4:97:e8:a3:5d:87: 7e:f8:de:70:8d:87:06:48:5f:b2:50:0c:6e:b7:e5: 62:93:5e:53:ad:83:86:50:35:76:09:28:39:b7:73: 2f:a5:46:17:1d:99:fa:c4:75:f1:d1:dd:ee:b8:43: 59:af:c1:88:5f:c4:6e:41:b0:65:25:c4:52:c5:e4: 02:67:27:4c:a3:0d:99:fa:68:8d:29:93:2f:4b:a6: b4:bb:58:d7:d2:07:d3:86:50:32:8a:40:7b:ff:cf: df:ae:b0:d4:5e:41:81:2f:c5:88:6c:bf:87:ad:ed: 74:6e:00:b1:c9:db:01:6d:be:26:d9:f7:83:15:d8: 14:c7:67:a8:4c:c7:5e:75:5c:7d:a8:09:e1:00:3e: a6:d8:17:bf:68:7a:5e:c6:28:c1:78:af:bd:7b:65: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:59:5A:4D:3D:19:94:87:BF:EC:2A:15:84:E9:2C:58:C1:86:54 X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:6b:01:07:1c:43:dc:ad:36:81:37:56:84:3d:8a:63:05: 43:9a:e7:4c:e2:98:0a:39:4b:aa:94:16:6c:44:f8:37:32:63: cb:3f:74:6e:98:f6:84:26:05:ed:17:b0:5b:fa:d4:c8:8c:50: c7:3a:31:eb:e3:9d:88:b8:66:63:0c:84:5b:67:f1:66:9c:ce: c6:e6:c0:9b:1f:e5:8b:fd:71:97:38:6e:5b:4f:8b:50:80:3b: 2e:7d:bf:50:99:59:06:40:99:ea:4f:97:cc:de:8c:12:3f:79: 36:8c:03:68:59:f9:c4:5f:9e:1d:1f:72:ba:51:98:51:b2:13: 49:28:fe:9d:90:4b:72:ff:14:63:b7:52:dd:f7:e9:51:d9:14: ce:05:11:e8:69:a8:23:21:6d:25:f8:b8:73:8d:27:f7:6d:81: 4f:af:cf:58:7f:5f:5b:03:64:83:ce:62:df:61:96:3b:c0:d2: b8:55:3c:c2:77:37:11:ba:06:37:39:7c:05:e5:7a:8b:1a:14: 8a:fc:15:50:fd:00:3d:12:d5:63:2f:8b:54:c8:a4:a1:98:7f: d8:8d:69:63:2b:1a:ec:57:3e:af:98:a1:94:2f:26:b2:8f:2d: fd:ad:e7:da:52:74:bd:78:ca:b0:51:b6:d1:41:1c:6d:db:d4: 87:72:00:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1 NkM1N0FERUQwHhcNMjYwOTIxMDUyNzM1WhcNMjYwOTI4MDUyNzM1WjAYMRYwFAYD VQQDEw02YWIwYzA0Ny1jNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6QWEQR7EM3F7f3SeRUI0mjy+ZnMwXSI0xvNWVTswB+Keg2Cljz+pxQVsjrP yHT89YCvoCcY7QOLVYYSl2e0837b83z7p2QaL8lRw1LyWKvysZvnY6YsFIusi2C2 aHM4gwykl+ijXYd++N5wjYcGSF+yUAxut+Vik15TrYOGUDV2CSg5t3MvpUYXHZn6 xHXx0d3uuENZr8GIX8RuQbBlJcRSxeQCZydMow2Z+miNKZMvS6a0u1jX0gfThlAy ikB7/8/frrDUXkGBL8WIbL+Hre10bgCxydsBbb4m2feDFdgUx2eoTMdedVx9qAnh AD6m2Be/aHpexijBeK+9e2WtmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOaWVpN PRmUh7/sKhWE6SxYwYZUMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz UHQzOHNhMWNUQ05XeFhyZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO/9rAQccQ9ytNoE3VoQ9imMFQ5rnTOKYCjlLqpQWbET4NzJjyz90bpj2hCYF 7RewW/rUyIxQxzox6+OdiLhmYwyEW2fxZpzOxubAmx/li/1xlzhuW0+LUIA7Ln2/ UJlZBkCZ6k+XzN6MEj95NowDaFn5xF+eHR9yulGYUbITSSj+nZBLcv8UY7dS3ffp UdkUzgUR6GmoIyFtJfi4c40n922BT6/PWH9fWwNkg85i32GWO8DSuFU8wnc3EboG Nzl8BeV6ixoUivwVUP0APRLVYy+LVMikoZh/2I1pYysa7Fc+r5ihlC8mso8t/a3n 2lJ0vXjKsFG20UEcbdvUh3IAjw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:16:15 2026 by rpki-client