$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: cg2h5sULqX+92BXNYwxjadE8Ppd7CPckM/noHQ+yz54= Subject key identifier: 47:5B:64:3D:F0:34:4E:E6:F1:9F:97:04:B9:6D:B3:39:67:4A:6F:BE Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0AF2 Signing time: Sat 10 Oct 2026 19:26:10 +0000 Manifest this update: Sat 10 Oct 2026 19:26:09 +0000 Manifest next update: Sat 17 Oct 2026 19:26:09 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: MzqAIsS1L8fIOnjjtQ2iYPhOvwVAjrtyJfoQHLtxzP4=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: MObLxHg+0HyslwCyt5x1ibD8HWNnbjOCAqyl5AXJDCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Oct 10 19:26:09 2026 GMT Not After : Oct 17 19:26:09 2026 GMT Subject: CN=6aca9152-411b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:7a:c1:1d:2d:71:4f:06:e8:c0:d9:92:1c: 3b:71:fd:0a:00:30:c7:ed:fc:08:c1:df:7f:9d:0e: 8d:56:81:b5:61:35:6b:70:d1:c5:9d:cd:12:c6:e4: 64:0b:dd:b7:cc:e6:1b:6b:d4:79:e1:f6:1d:87:7f: 5a:ad:a8:c0:94:78:99:92:3f:d4:d4:69:82:16:1d: f7:05:20:18:cc:dd:04:76:26:ed:c0:3c:ee:c8:a7: 63:cd:05:ae:c7:9c:e6:b9:86:e1:eb:30:e1:59:ff: 5a:b3:78:91:4c:ea:15:a7:1d:62:00:9f:8b:71:f7: 0b:9c:e4:dd:44:0a:b7:90:92:33:b0:b1:a5:a5:ed: 59:27:fd:99:94:f8:30:14:bd:75:0e:88:b7:1c:8e: 1c:08:2c:52:14:ee:2e:89:0b:50:51:13:1c:f5:15: ec:8b:9d:78:5e:93:a7:2a:5e:4e:31:f7:aa:f9:5c: f8:ca:10:55:84:17:a5:d7:42:99:bb:ce:54:77:e5: 11:a4:81:21:97:7b:84:f6:e0:b4:87:d6:2b:0d:10: 12:7b:41:5d:03:99:78:c3:ce:ad:30:cc:7d:43:0b: 3b:ce:40:ca:01:2e:7d:57:a4:b3:2a:d6:83:cb:02: d3:94:50:f9:6d:61:30:c5:74:c8:8b:c9:96:5f:02: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:64:3D:F0:34:4E:E6:F1:9F:97:04:B9:6D:B3:39:67:4A:6F:BE X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4f:cb:4c:1e:e0:82:47:35:b1:56:65:6c:63:0c:ee:12:e6: 45:07:94:32:6f:93:49:38:fe:70:17:07:ba:0f:31:d1:82:7d: 32:fd:95:de:fb:95:e2:1b:4b:07:75:95:7d:4d:b9:af:0f:9e: dc:81:79:d7:d2:27:35:f5:71:16:5b:05:27:43:a3:52:fc:e6: 93:77:c1:9f:8b:40:f8:1d:b3:54:0d:aa:0a:b6:92:2e:cd:3d: 39:49:b3:d0:fa:6a:d5:97:d7:e7:49:8a:47:6e:39:ad:a2:d5: f7:11:d1:d4:9f:8b:f2:92:62:c8:ee:cb:ae:36:ed:e9:8f:60: d5:66:62:35:b9:e3:96:08:e1:6a:a9:d3:1c:50:4d:fe:98:f3: 84:db:3b:a0:0b:36:dd:75:07:1c:bb:91:e2:09:4e:b8:6a:0d: 4c:5e:96:1a:a2:ba:37:63:71:4b:61:10:fb:5a:fe:46:99:43: ec:7d:85:6a:19:50:bd:c6:d3:bb:0a:3d:9f:70:25:d5:f3:d8: 8a:05:fa:9c:16:46:ec:fa:76:8f:32:74:2e:ef:f3:7f:79:c9: d7:59:f1:3c:f2:4f:6e:ac:96:bf:f4:6e:f0:d9:a1:c5:f3:ba: 08:98:9f:82:e3:3c:cb:ab:2f:fe:78:08:69:89:a8:d4:ec:fe: 55:07:6b:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjYxMDEwMTkyNjA5WhcNMjYxMDE3MTkyNjA5WjAYMRYwFAYD VQQDEw02YWNhOTE1Mi00MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI56wR0tcU8G6MDZkhw7cf0KADDH7fwIwd9/nQ6NVoG1YTVrcNHFnc0SxuRk C923zOYba9R54fYdh39arajAlHiZkj/U1GmCFh33BSAYzN0EdibtwDzuyKdjzQWu x5zmuYbh6zDhWf9as3iRTOoVpx1iAJ+LcfcLnOTdRAq3kJIzsLGlpe1ZJ/2ZlPgw FL11Doi3HI4cCCxSFO4uiQtQURMc9RXsi514XpOnKl5OMfeq+Vz4yhBVhBel10KZ u85Ud+URpIEhl3uE9uC0h9YrDRASe0FdA5l4w86tMMx9Qws7zkDKAS59V6SzKtaD ywLTlFD5bWEwxXTIi8mWXwKpRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdbZD3w NE7m8Z+XBLltszlnSm++MB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtU/LTB7ggkc1sVZlbGMM7hLmRQeUMm+TSTj+cBcHug8x0YJ9Mv2V3vuV4htL B3WVfU25rw+e3IF519InNfVxFlsFJ0OjUvzmk3fBn4tA+B2zVA2qCraSLs09OUmz 0Ppq1ZfX50mKR245raLV9xHR1J+L8pJiyO7Lrjbt6Y9g1WZiNbnjlgjhaqnTHFBN /pjzhNs7oAs23XUHHLuR4glOuGoNTF6WGqK6N2NxS2EQ+1r+RplD7H2FahlQvcbT uwo9n3Al1fPYigX6nBZG7Pp2jzJ0Lu/zf3nJ11nxPPJPbqyWv/Ru8NmhxfO6CJif guM8y6sv/ngIaYmo1Oz+VQdrsg== -----END CERTIFICATE-----Generated at Sun Oct 11 15:30:52 2026 by rpki-client