$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: iHoNcyx9RL271k6zx1AJ5P3XAqYZe/O6PvVoD3fKMl0= Subject key identifier: 61:55:A5:01:22:D0:3A:36:18:54:39:64:1A:48:9B:79:F9:A4:6B:1A Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: 9D Signing time: Sat 19 Sep 2026 07:28:28 +0000 Manifest this update: Sat 19 Sep 2026 07:28:27 +0000 Manifest next update: Sat 26 Sep 2026 07:28:27 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: hDMhtPyt4Eo4/etqRTTE5ZPFySZtGcpD4+Xdi3wm+fw=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: C6n4CKTLus0le6GvOuMAOqp7CZSB754RPW+BsJBKvDo=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: msyCQ/czlxVP4EfnOfA3beQPUOxdvP8PZzB1UIGuVjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Sep 19 07:28:27 2026 GMT Not After : Sep 26 07:28:27 2026 GMT Subject: CN=6aae399b-6682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:c2:5b:ab:07:bd:17:42:b9:24:14:42:46: fe:f6:de:51:fa:64:e6:28:7b:e2:ed:91:4e:b5:ca: 7d:15:cc:51:e2:4e:3e:35:fe:14:86:4e:13:29:8c: 13:22:85:58:09:b2:43:cf:30:e4:2f:89:c0:5f:53: c1:33:a9:d2:89:5d:a6:93:f9:9e:cc:34:96:31:70: 89:09:f8:07:fb:ca:73:28:99:f7:dc:d0:ff:71:aa: f0:41:a8:53:cc:ca:d3:d0:49:04:04:a4:3b:f8:d4: 58:1e:ff:7d:4e:80:c8:32:be:ad:93:dc:f4:d5:30: 4e:8f:06:f1:23:c6:19:34:8f:9d:46:6a:a5:b7:16: 0e:a2:f9:e1:5f:83:9e:1b:e9:75:48:0b:a1:49:f3: b3:97:04:6c:64:ef:f3:39:4a:f5:a5:6c:ee:cb:d0: 01:fe:ec:bb:8b:5e:26:03:d4:d1:38:58:b3:37:a2: df:12:e0:3a:a1:ec:5f:98:43:80:30:7e:2f:10:8c: af:bd:f1:74:dc:e8:36:e6:06:f8:4c:d2:ff:88:12: d1:0a:63:12:88:38:c8:49:db:71:4a:fb:37:2d:9f: ef:1c:4e:b8:d2:30:de:c2:10:42:f7:5e:ba:1a:c5: 07:04:3d:af:30:d7:4a:f8:05:34:df:9f:f0:41:46: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:A5:01:22:D0:3A:36:18:54:39:64:1A:48:9B:79:F9:A4:6B:1A X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:be:b5:64:e1:d3:37:70:d1:51:e7:46:44:14:fe:69:06:a3: a6:c0:17:0f:ff:cb:75:0a:d8:ff:d6:af:5d:e4:46:d7:31:e2: 1a:a5:e3:cc:5a:73:ff:0d:ce:8a:76:1d:4f:3d:f1:4f:9f:4f: 83:82:d5:35:b6:50:90:32:eb:f7:45:69:a8:7b:b3:4e:67:5e: 98:dc:7a:52:8a:4b:c6:f2:b6:8d:ad:5b:96:9f:dc:6d:a8:e7: 8b:b0:c0:b5:89:92:70:ac:93:fc:61:7a:7f:5d:9f:bd:94:2b: a9:a8:a6:8b:81:30:df:18:f0:5f:57:ec:c7:c3:b1:14:bf:60: f6:cd:ac:a1:d0:00:ee:86:da:8f:73:c4:36:2a:8f:c4:20:a1: 81:15:0f:46:f2:eb:58:bf:24:c2:33:c6:70:d1:ad:ad:02:87: bd:a0:4d:0e:4b:8f:40:66:e7:9f:4d:29:e4:02:e3:16:4c:bb: 86:bc:00:ca:59:45:20:fe:5f:ae:ec:1c:58:cf:d3:d8:59:7f: a9:50:8a:17:35:c1:9d:05:3b:5a:e5:9e:d5:c3:a1:ab:82:a2: 5e:42:03:15:29:04:ec:d3:84:70:7c:5b:84:5c:91:05:75:6e: ed:9e:f2:cb:1e:a3:a2:9f:6b:f4:1e:7b:20:6c:04:aa:53:01: 71:73:dc:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDUxMTAvBgNVBAUTKDFFNTMwRkE5RjY2MEE4REMxNzM4QzdBQTBDOEFGQzc3 RjRGMEJCQjMwHhcNMjYwOTE5MDcyODI3WhcNMjYwOTI2MDcyODI3WjAYMRYwFAYD VQQDEw02YWFlMzk5Yi02NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSrCW6sHvRdCuSQUQkb+9t5R+mTmKHvi7ZFOtcp9FcxR4k4+Nf4Uhk4TKYwT IoVYCbJDzzDkL4nAX1PBM6nSiV2mk/mezDSWMXCJCfgH+8pzKJn33ND/carwQahT zMrT0EkEBKQ7+NRYHv99ToDIMr6tk9z01TBOjwbxI8YZNI+dRmqltxYOovnhX4Oe G+l1SAuhSfOzlwRsZO/zOUr1pWzuy9AB/uy7i14mA9TROFizN6LfEuA6oexfmEOA MH4vEIyvvfF03Og25gb4TNL/iBLRCmMSiDjISdtxSvs3LZ/vHE640jDewhBC9166 GsUHBD2vMNdK+AU035/wQUa4vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFVpQEi 0Do2GFQ5ZBpIm3n5pGsaMB8GA1UdIwQYMBaAFB5TD6n2YKjcFzjHqgyK/Hf08Luz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNS80MDBDNURFQ0Qw MTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FOd1hPTWVxRElyOGRfVHd1 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FO d1hPTWVxRElyOGRfVHd1N00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFr61ZOHTN3DRUedGRBT+aQajpsAXD//LdQrY/9avXeRG1zHiGqXjzFpz/w3O inYdTz3xT59Pg4LVNbZQkDLr90VpqHuzTmdemNx6UopLxvK2ja1blp/cbajni7DA tYmScKyT/GF6f12fvZQrqaimi4Ew3xjwX1fsx8OxFL9g9s2sodAA7obaj3PENiqP xCChgRUPRvLrWL8kwjPGcNGtrQKHvaBNDkuPQGbnn00p5ALjFky7hrwAyllFIP5f ruwcWM/T2Fl/qVCKFzXBnQU7WuWe1cOhq4KiXkIDFSkE7NOEcHxbhFyRBXVu7Z7y yx6jop9r9B57IGwEqlMBcXPc2g== -----END CERTIFICATE-----Generated at Mon Sep 21 01:59:02 2026 by rpki-client