$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json) Hash identifier: HXiyPjKoIiSl29I0wJKAldMofnoek8tImCYEGXZXmYQ= Subject key identifier: 6A:D7:8F:1F:D2:6A:E7:3F:28:F7:31:DB:E4:17:2B:15:96:CC:67:93 Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft Manifest number: F9 Signing time: Mon 21 Sep 2026 06:17:42 +0000 Manifest this update: Mon 21 Sep 2026 06:17:42 +0000 Manifest next update: Mon 28 Sep 2026 06:17:42 +0000 Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: x+wRxb2jPa8sywO1P4roUCPbKtiyPY23iA+A+kIm4gA=) 2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Validity Not Before: Sep 21 06:17:42 2026 GMT Not After : Sep 28 06:17:42 2026 GMT Subject: CN=6ab0cc06-9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:d6:99:7c:ab:7a:e8:cd:29:de:c4:6b:5a: 9f:fa:df:15:0a:aa:fd:53:32:88:7c:a6:b3:5a:ee: fa:0b:01:28:62:67:bb:8e:87:10:14:01:f4:46:e1: bb:4b:f7:2e:e4:5f:10:0b:42:3e:12:e7:4b:f6:80: 4c:0a:e8:ac:36:e1:5e:35:86:fc:97:98:14:fe:bc: 56:69:f8:3d:22:c7:bd:1e:8b:35:39:fd:71:c1:a1: 86:4d:56:10:d8:a1:67:d2:b4:f8:e4:91:f1:39:aa: 0e:50:a4:c6:80:c7:97:84:bb:23:7e:af:df:b7:06: dd:8e:2f:86:73:b3:43:24:be:25:38:ed:be:17:6f: 9e:f7:f0:85:95:ff:ec:35:54:e0:c5:2f:64:f7:37: 13:11:7e:5f:d1:be:87:3a:63:77:ba:42:2f:89:bc: d2:74:a3:e5:d6:74:6d:e0:fb:ff:0c:40:77:49:a6: fa:ce:74:2d:0d:66:b2:b1:a3:13:d1:a8:3f:e7:51: fc:a7:69:d7:8e:5c:96:9c:d9:48:e1:3c:e1:57:b8: 5c:77:33:ae:21:8d:42:56:bf:ce:39:e1:86:a5:8f: 0a:55:29:17:6a:a9:af:25:a6:01:2d:2c:47:0b:1b: df:2e:2f:a4:dd:9b:77:ca:24:ef:0c:48:5d:92:93: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D7:8F:1F:D2:6A:E7:3F:28:F7:31:DB:E4:17:2B:15:96:CC:67:93 X509v3 Authority Key Identifier: keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:dd:5d:24:a5:f5:ed:da:5e:c8:71:bc:52:51:90:26:0b: c1:4c:29:91:22:54:29:d0:5d:d4:83:88:8c:b0:10:e5:b7:9b: 49:73:ae:6f:61:29:6f:4a:86:9a:13:1c:71:6f:e6:dd:58:86: 4a:9d:e3:65:c3:66:c2:a7:45:e1:44:35:ea:d0:71:93:c8:99: 31:3a:f1:01:d3:04:87:03:e5:83:c2:4d:a4:94:bf:a9:75:d4: 6b:e6:50:c2:21:15:09:72:97:a0:04:ec:b4:53:8a:d7:a9:87: 30:b6:89:f5:95:58:a1:d0:31:a2:8b:71:d9:3c:fc:52:a1:dc: 02:7c:02:00:b9:d3:9f:59:08:97:6d:2f:5c:4f:61:ee:c9:1d: 72:a4:3a:64:22:af:cf:32:7f:d4:61:6e:ae:9e:85:70:06:e5: b3:4b:4d:77:bf:e1:28:13:bb:eb:77:c2:5c:09:e3:ff:8e:81: b2:66:9c:ea:55:cc:e9:db:52:e5:65:eb:b0:7e:90:59:f3:1e: ed:bd:dd:d8:1f:2c:b7:30:06:d7:42:a9:a8:c3:d9:fe:16:19: ca:ed:22:9b:d2:ae:ef:56:6e:67:f9:c3:0b:cb:98:6a:e9:50: 44:e8:4b:9e:2c:72:2b:fc:19:5b:12:55:d3:5c:b4:88:85:0f: 95:9c:55:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxNzcxMTAvBgNVBAUTKDFDRDJENEYzMjZBMTg0QTQ4N0JGMjJBQ0Q3OEFENUMw NjhGNDY2NjEwHhcNMjYwOTIxMDYxNzQyWhcNMjYwOTI4MDYxNzQyWjAYMRYwFAYD VQQDEw02YWIwY2MwNi05ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc7WmXyreujNKd7Ea1qf+t8VCqr9UzKIfKazWu76CwEoYme7jocQFAH0RuG7 S/cu5F8QC0I+EudL9oBMCuisNuFeNYb8l5gU/rxWafg9Ise9Hos1Of1xwaGGTVYQ 2KFn0rT45JHxOaoOUKTGgMeXhLsjfq/ftwbdji+Gc7NDJL4lOO2+F2+e9/CFlf/s NVTgxS9k9zcTEX5f0b6HOmN3ukIvibzSdKPl1nRt4Pv/DEB3Sab6znQtDWaysaMT 0ag/51H8p2nXjlyWnNlI4TzhV7hcdzOuIY1CVr/OOeGGpY8KVSkXaqmvJaYBLSxH CxvfLi+k3Zt3yiTvDEhdkpO1GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrXjx/S auc/KPcx2+QXKxWWzGeTMB8GA1UdIwQYMBaAFBzS1PMmoYSkh78irNeK1cBo9GZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODE3Ny84QkEzRDhDNDNE REIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhLU0h2eUtzMTRyVndHajBa bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOTFU4eWFoaEtTSHZ5S3MxNHJWd0dqMFptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODE3Ny84QkEzRDhDNDNEREIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhL U0h2eUtzMTRyVndHajBabUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgoXdXSSl9e3aXshxvFJRkCYLwUwpkSJUKdBd1IOIjLAQ5bebSXOub2Epb0qG mhMccW/m3ViGSp3jZcNmwqdF4UQ16tBxk8iZMTrxAdMEhwPlg8JNpJS/qXXUa+ZQ wiEVCXKXoATstFOK16mHMLaJ9ZVYodAxootx2Tz8UqHcAnwCALnTn1kIl20vXE9h 7skdcqQ6ZCKvzzJ/1GFurp6FcAbls0tNd7/hKBO763fCXAnj/46Bsmac6lXM6dtS 5WXrsH6QWfMe7b3d2B8stzAG10KpqMPZ/hYZyu0im9Ku71ZuZ/nDC8uYaulQROhL nixyK/wZWxJV01y0iIUPlZxVZA== -----END CERTIFICATE-----Generated at Tue Sep 22 14:51:55 2026 by rpki-client