$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: qtT8XJpUHPOOppxIJiUBy/H7Wx66Hq18zZhjOWN+tHM= Subject key identifier: DA:0F:C9:3C:42:0D:B5:28:E2:47:4C:67:63:E0:9C:E7:71:69:4E:27 Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 0671 Signing time: Tue 22 Sep 2026 22:18:19 +0000 Manifest this update: Tue 22 Sep 2026 22:18:19 +0000 Manifest next update: Tue 29 Sep 2026 22:18:19 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: yPgj/nRBeJX2UoD2rdlmtdh1WX7RVojRuAsR4r0A2lE=) 2: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=) 3: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=) 4: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=) 5: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Sep 22 22:18:19 2026 GMT Not After : Sep 29 22:18:19 2026 GMT Subject: CN=6ab2feab-be24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:d8:45:cd:ca:a5:3b:c0:d8:e7:7e:4e:4e: 72:70:3f:d2:c4:c9:3a:c7:1b:d6:8a:c0:c7:90:0f: 24:90:96:16:f8:43:62:a9:63:e1:3a:c0:5b:a1:aa: 32:ff:31:03:8d:49:b8:2f:35:01:a1:9c:b9:20:91: 86:21:c7:77:86:bb:a7:20:69:74:63:08:df:a7:43: 4d:fb:35:2f:39:e1:a5:1b:44:95:93:b9:f0:7d:f3: 87:76:48:68:19:c9:a6:67:0d:08:39:51:db:c8:6e: 1b:53:52:73:d0:2b:28:4b:6d:28:b7:aa:77:db:92: b1:f6:2f:d5:4b:76:89:79:ef:6a:77:7d:f3:c4:be: d2:b0:5e:eb:5a:9a:e5:80:a3:ca:bb:97:94:e2:d2: ae:34:88:f4:27:0c:f7:b8:27:17:a3:5b:0a:93:ac: 18:99:b8:72:21:11:23:b7:1f:6e:47:b3:1e:6e:c8: 63:c1:23:e4:75:2e:fe:cc:c1:13:29:3c:b3:f7:22: 31:50:74:37:f4:b0:57:a9:13:8c:26:15:36:53:c1: 13:23:74:65:22:1e:f1:89:37:d3:68:12:01:f0:0b: 4c:26:cf:84:15:20:97:63:49:a1:87:70:e8:41:ce: 4d:83:f2:52:27:ba:b0:1e:6a:0c:2c:f8:82:df:38: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:C9:3C:42:0D:B5:28:E2:47:4C:67:63:E0:9C:E7:71:69:4E:27 X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:38:43:f3:01:70:fc:40:86:e5:c4:ad:25:ab:78:2b:a6: b5:62:11:cf:0b:61:f7:a5:1e:76:2a:54:8e:b9:a0:57:e9:c9: f0:9c:64:23:2e:9a:34:c9:28:d6:3b:a3:97:16:9c:4c:66:47: ff:bf:9a:29:40:b2:41:51:4a:02:bd:d9:73:60:64:04:3d:1f: f7:c7:6a:28:23:09:8a:6a:78:16:30:46:2e:11:80:28:88:7f: d3:6c:ea:a2:e0:16:73:e2:2d:54:df:48:32:6d:e7:3e:dc:86: 43:a6:7c:11:21:b4:62:c2:5d:29:a0:55:17:63:6d:c8:7b:f0: 43:cb:83:c1:37:cb:08:6d:8a:0f:1d:54:df:3d:bd:ee:b9:74: 20:bc:5e:ed:6d:28:73:8d:34:e2:8c:c4:63:b3:3e:fd:08:11: b8:7c:07:51:ce:ca:15:db:16:f1:ed:5a:0b:af:65:fa:b7:64: c2:b3:61:9c:00:dc:90:69:a4:e5:59:9e:9b:c9:38:8a:10:2d: e0:e3:b0:7e:68:c2:98:4c:06:e1:23:b0:33:89:68:74:b6:23: 7f:04:df:f9:07:2f:24:fb:05:bc:68:b2:8e:87:03:c1:fa:96: 92:19:ba:b4:76:c7:b1:11:74:a6:46:a4:e9:e0:18:75:b1:0b: 01:7e:ee:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjYwOTIyMjIxODE5WhcNMjYwOTI5MjIxODE5WjAYMRYwFAYD VQQDEw02YWIyZmVhYi1iZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPfYRc3KpTvA2Od+Tk5ycD/SxMk6xxvWisDHkA8kkJYW+ENiqWPhOsBboaoy /zEDjUm4LzUBoZy5IJGGIcd3hrunIGl0Ywjfp0NN+zUvOeGlG0SVk7nwffOHdkho GcmmZw0IOVHbyG4bU1Jz0CsoS20ot6p325Kx9i/VS3aJee9qd33zxL7SsF7rWprl gKPKu5eU4tKuNIj0Jwz3uCcXo1sKk6wYmbhyIREjtx9uR7MebshjwSPkdS7+zMET KTyz9yIxUHQ39LBXqROMJhU2U8ETI3RlIh7xiTfTaBIB8AtMJs+EFSCXY0mhh3Do Qc5Ng/JSJ7qwHmoMLPiC3zjmawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoPyTxC DbUo4kdMZ2PgnOdxaU4nMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9Y4Q/MBcPxAhuXErSWreCumtWIRzwth96UedipUjrmgV+nJ8JxkIy6aNMko 1jujlxacTGZH/7+aKUCyQVFKAr3Zc2BkBD0f98dqKCMJimp4FjBGLhGAKIh/02zq ouAWc+ItVN9IMm3nPtyGQ6Z8ESG0YsJdKaBVF2NtyHvwQ8uDwTfLCG2KDx1U3z29 7rl0ILxe7W0oc4004ozEY7M+/QgRuHwHUc7KFdsW8e1aC69l+rdkwrNhnADckGmk 5Vmem8k4ihAt4OOwfmjCmEwG4SOwM4lodLYjfwTf+QcvJPsFvGiyjocDwfqWkhm6 tHbHsRF0pkak6eAYdbELAX7uSA== -----END CERTIFICATE-----Generated at Thu Sep 24 17:37:15 2026 by rpki-client