$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: 0gh5fJVZ2apHmjW+bMvx0QPa0xaNp644cop1tQ0kt0s= Subject key identifier: B5:8D:64:C5:0C:6D:8A:86:E9:B1:A2:73:5D:1F:18:14:ED:4B:BA:B2 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 10DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 10D1 Signing time: Tue 22 Sep 2026 17:14:15 +0000 Manifest this update: Tue 22 Sep 2026 17:14:14 +0000 Manifest next update: Tue 29 Sep 2026 17:14:14 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: fWy1CR970wkqRiRLfFpeTxws00Q4mVAOt7Q/FaXhxn4=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4317 (0x10dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Sep 22 17:14:14 2026 GMT Not After : Sep 29 17:14:14 2026 GMT Subject: CN=6ab2b767-bbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:73:c8:93:49:79:50:22:0c:eb:b8:34:b1: 20:e6:2a:07:2d:c6:c9:23:68:dd:91:06:3a:a2:52: f1:5e:04:8c:65:bb:01:4a:5e:4a:42:6e:a4:b3:b3: c7:8d:b1:a5:01:41:26:37:9e:35:8a:20:bb:9a:f0: 03:3a:f8:08:3c:31:96:a7:5d:51:c8:ff:c0:d3:e0: bb:a1:65:61:49:76:ca:a4:f0:f0:f2:d3:46:55:f7: 80:8a:44:e1:90:53:5c:c8:00:64:52:9b:58:c8:4e: 3a:84:85:6a:56:38:50:41:52:c9:3b:f6:bb:93:bb: 9c:f6:6b:c6:d4:9b:77:89:14:e8:e5:d8:62:a8:4c: a3:da:08:dd:1e:9b:08:eb:87:ba:04:28:7f:41:ee: 72:86:c3:f3:66:9c:82:76:2e:be:ac:04:92:76:45: 3c:ed:2c:7b:8d:f1:e9:0a:4b:de:36:52:b1:98:b2: e4:24:90:ba:27:b3:c9:32:df:e8:c6:b6:83:a9:1d: 99:b4:58:96:fe:c7:94:b3:41:8c:51:2b:4f:33:72: f3:af:ea:a8:43:5d:b0:6c:7e:a8:f6:60:e8:b8:a9: 15:7b:6e:e2:0f:96:0b:e2:7e:40:c0:79:01:8f:b9: af:00:36:81:7d:ed:36:7f:7c:5e:f5:22:dc:5b:05: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8D:64:C5:0C:6D:8A:86:E9:B1:A2:73:5D:1F:18:14:ED:4B:BA:B2 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ec:b9:f6:23:a1:a3:7b:8e:27:72:42:d4:90:64:9b:42:c1: f3:10:7a:b2:c1:10:f4:16:a2:f8:10:7f:3b:4b:d4:8f:37:43: bc:80:2f:6b:f5:87:f9:41:2c:99:fd:af:71:39:91:ce:6d:6d: c2:f5:e9:c0:59:92:d2:a2:3e:2b:a7:1a:99:f9:07:26:0b:bd: e6:6e:06:39:4a:bc:a7:e0:15:52:04:8d:90:59:2b:3b:39:a9: f7:a3:39:a6:dd:85:a1:6b:94:2f:cd:59:0c:ea:a8:85:0b:67: d7:30:65:5f:a2:66:23:21:73:93:d0:1b:56:af:3f:54:0e:e1: 99:16:e9:75:9b:f7:b4:f5:dc:ad:60:33:37:8c:48:69:bb:9f: 2a:14:14:34:d3:a7:ab:1f:bd:d8:13:3b:fc:5a:ef:b7:da:81: 35:b3:0b:bf:58:2b:e0:fa:20:f7:ab:1d:af:52:10:fc:3c:2b: bf:cf:8c:38:ff:f2:f8:2c:08:d1:15:46:cf:6d:57:d1:11:77: 15:2e:72:a5:d9:e8:83:fb:df:a8:75:36:56:f6:b1:27:5a:c3: 3f:a3:dd:bd:cc:d8:02:cc:21:34:bf:54:63:23:56:78:51:3b: c5:17:db:23:2e:6a:db:38:f8:32:f0:35:ed:cb:68:b4:e4:f2: 25:31:08:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjYwOTIyMTcxNDE0WhcNMjYwOTI5MTcxNDE0WjAYMRYwFAYD VQQDEw02YWIyYjc2Ny1iYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7dzyJNJeVAiDOu4NLEg5ioHLcbJI2jdkQY6olLxXgSMZbsBSl5KQm6ks7PH jbGlAUEmN541iiC7mvADOvgIPDGWp11RyP/A0+C7oWVhSXbKpPDw8tNGVfeAikTh kFNcyABkUptYyE46hIVqVjhQQVLJO/a7k7uc9mvG1Jt3iRTo5dhiqEyj2gjdHpsI 64e6BCh/Qe5yhsPzZpyCdi6+rASSdkU87Sx7jfHpCkveNlKxmLLkJJC6J7PJMt/o xraDqR2ZtFiW/seUs0GMUStPM3Lzr+qoQ12wbH6o9mDouKkVe27iD5YL4n5AwHkB j7mvADaBfe02f3xe9SLcWwVytwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWNZMUM bYqG6bGic10fGBTtS7qyMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoey59iOho3uOJ3JC1JBkm0LB8xB6ssEQ9Bai+BB/O0vUjzdDvIAva/WH+UEs mf2vcTmRzm1twvXpwFmS0qI+K6camfkHJgu95m4GOUq8p+AVUgSNkFkrOzmp96M5 pt2FoWuUL81ZDOqohQtn1zBlX6JmIyFzk9AbVq8/VA7hmRbpdZv3tPXcrWAzN4xI abufKhQUNNOnqx+92BM7/Frvt9qBNbMLv1gr4Pog96sdr1IQ/Dwrv8+MOP/y+CwI 0RVGz21X0RF3FS5ypdnog/vfqHU2VvaxJ1rDP6PdvczYAswhNL9UYyNWeFE7xRfb Iy5q2zj4MvA17ctotOTyJTEI4A== -----END CERTIFICATE-----Generated at Thu Sep 24 14:47:28 2026 by rpki-client