$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft File: HWndGf85hYAXzNTWJChu2UUIdl4.mft (raw, json) Hash identifier: mXou1uyangYt8cBaUtQBBstvkriBsXJxOQjz1ES5vPA= Subject key identifier: 1E:36:FC:9A:90:67:8D:08:97:BF:C9:3C:46:2D:D2:DA:19:EB:C1:BF Authority key identifier: 1D:69:DD:19:FF:39:85:80:17:CC:D4:D6:24:28:6E:D9:45:08:76:5E Certificate issuer: /CN=A91FDCA0/serialNumber=1D69DD19FF39858017CCD4D624286ED94508765E Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft Manifest number: 08 Signing time: Mon 21 Sep 2026 09:13:38 +0000 Manifest this update: Mon 21 Sep 2026 09:13:38 +0000 Manifest next update: Mon 28 Sep 2026 09:13:38 +0000 Files and hashes: 1: HWndGf85hYAXzNTWJChu2UUIdl4.crl (hash: bx9g0ycVgAb01ia6JqGZNAvOysFQJiKvPqkVazikVYw=) 2: DD4CA7C6B02D11F194FC8FE23A11F970.roa (hash: vbdU2q1m5He7gWpqkceFYruOg0Qt8/kbSUYbNIuqG94=) 3: WmMM-KD6RiDvI2A1D04hHOOwlDc.asa (hash: esSsw+qecb87rsRu4HEkTi2pPjm8WTnGLsqaIKbWMck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.crl rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCA0, serialNumber=1D69DD19FF39858017CCD4D624286ED94508765E Validity Not Before: Sep 21 09:13:38 2026 GMT Not After : Sep 28 09:13:38 2026 GMT Subject: CN=6ab0f542-3b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:9e:d5:c9:ca:9e:aa:42:83:d8:23:ff:d8: 78:44:f2:62:61:7b:52:7d:0b:68:3c:37:d0:24:cf: 2a:92:ff:0d:be:05:82:e0:f4:7f:bc:03:02:26:20: aa:9c:15:27:93:ae:af:d6:cc:1f:e9:a0:8d:a3:1e: 39:43:d4:fd:6e:75:cd:ec:d5:1b:04:93:26:0f:fb: 35:22:ae:f1:40:b6:84:28:88:c2:99:37:72:3e:8b: a4:75:68:cd:b4:00:0f:92:45:16:59:79:6a:0a:10: 48:61:f7:00:5d:09:cb:c8:4e:0c:20:1c:aa:60:df: 7a:81:b0:ff:37:45:fc:2e:be:74:2c:ae:e3:ac:d0: ae:3d:36:6b:83:79:8c:c3:ac:b9:29:11:34:00:66: 35:68:4e:fe:aa:89:c3:5f:85:c4:09:93:cc:cd:78: cb:46:0b:8e:49:9f:c5:0f:0d:e9:80:fd:3a:4c:22: 37:e1:bc:26:f0:f6:c5:1f:2a:21:8a:06:8b:43:ff: 97:e4:2d:d0:50:da:98:c3:58:d2:b8:15:bb:91:4c: 73:8a:af:91:09:ca:0f:74:5a:26:29:e6:30:d5:f9: 86:d1:8a:ff:81:ed:ed:22:d9:7e:5a:ff:b5:81:43: 71:cd:fd:f2:9e:e5:ad:d6:27:bf:b5:22:45:84:00: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:FC:9A:90:67:8D:08:97:BF:C9:3C:46:2D:D2:DA:19:EB:C1:BF X509v3 Authority Key Identifier: keyid:1D:69:DD:19:FF:39:85:80:17:CC:D4:D6:24:28:6E:D9:45:08:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e3:8b:24:98:34:63:9d:6e:1a:52:03:56:26:84:20:a9:4b: 55:2b:87:47:0d:2c:ee:f0:9c:96:8b:81:18:d5:28:a4:53:ed: 82:bd:2d:c3:39:fc:5d:80:54:8f:76:ac:0e:24:33:f4:0c:fb: 63:92:3f:a2:1e:41:27:80:42:ce:24:10:44:94:11:2a:40:41: 01:7a:39:62:82:86:3c:81:9a:ad:99:f8:e7:f3:9d:23:ce:36: fa:db:76:4a:e4:81:49:41:07:7a:a0:76:63:3d:ea:5f:13:f6: ec:46:41:e8:fa:33:5b:9c:e9:4d:c5:cf:a4:a4:8e:d3:8f:07: 92:40:29:1d:fc:ef:36:53:df:13:7e:da:1e:53:64:bd:09:eb: 36:7c:72:9f:10:b5:76:cb:1b:33:e8:ab:a5:ca:65:3c:02:51: 69:2a:86:ba:6d:e0:33:16:59:44:70:a5:de:3d:7c:7f:51:0d: 0a:9c:14:7b:3d:f7:aa:f5:44:d0:44:05:f9:3b:14:18:c7:0a: 37:1d:7b:8d:e5:7f:b6:59:41:4c:e9:c7:28:eb:8f:74:13:b2: 66:c1:2e:ba:b3:6e:a7:f8:e4:08:28:09:e8:ee:b8:c2:8d:df: 03:23:71:2c:e4:8d:96:a4:3f:18:da:be:61:34:a0:d0:51:bd: f4:5a:5b:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RENBMDExMC8GA1UEBRMoMUQ2OUREMTlGRjM5ODU4MDE3Q0NENEQ2MjQyODZFRDk0 NTA4NzY1RTAeFw0yNjA5MjEwOTEzMzhaFw0yNjA5MjgwOTEzMzhaMBgxFjAUBgNV BAMTDTZhYjBmNTQyLTNiMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC05J7VycqeqkKD2CP/2HhE8mJhe1J9C2g8N9AkzyqS/w2+BYLg9H+8AwImIKqc FSeTrq/WzB/poI2jHjlD1P1udc3s1RsEkyYP+zUirvFAtoQoiMKZN3I+i6R1aM20 AA+SRRZZeWoKEEhh9wBdCcvITgwgHKpg33qBsP83RfwuvnQsruOs0K49NmuDeYzD rLkpETQAZjVoTv6qicNfhcQJk8zNeMtGC45Jn8UPDemA/TpMIjfhvCbw9sUfKiGK BotD/5fkLdBQ2pjDWNK4FbuRTHOKr5EJyg90WiYp5jDV+YbRiv+B7e0i2X5a/7WB Q3HN/fKe5a3WJ7+1IkWEAAXVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHjb8mpBn jQiXv8k8Ri3S2hnrwb8wHwYDVR0jBBgwFoAUHWndGf85hYAXzNTWJChu2UUIdl4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQ0EwLzM1NUU5RkVBQjAx QjExRjFCRjE1RDQwNTM0MTFGOTcwL0hXbmRHZjg1aFlBWHpOVFdKQ2h1MlVVSWRs NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFduZEdmODVoWUFYek5UV0pDaHUyVVVJZGw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Q0EwLzM1NUU5RkVBQjAxQjExRjFCRjE1RDQwNTM0MTFGOTcwL0hXbmRHZjg1aFlB WHpOVFdKQ2h1MlVVSWRsNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA244skmDRjnW4aUgNWJoQgqUtVK4dHDSzu8JyWi4EY1SikU+2CvS3DOfxdgFSP dqwOJDP0DPtjkj+iHkEngELOJBBElBEqQEEBejligoY8gZqtmfjn850jzjb623ZK 5IFJQQd6oHZjPepfE/bsRkHo+jNbnOlNxc+kpI7TjweSQCkd/O82U98TftoeU2S9 Ces2fHKfELV2yxsz6KulymU8AlFpKoa6beAzFllEcKXePXx/UQ0KnBR7Pfeq9UTQ RAX5OxQYxwo3HXuN5X+2WUFM6cco6490E7JmwS66s26n+OQIKAno7rjCjd8DI3Es 5I2WpD8Y2r5hNKDQUb30Wlv4 -----END CERTIFICATE-----Generated at Mon Sep 21 17:53:49 2026 by rpki-client