$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: oIvtQ+bpidwDv55NXNlxqpHBLs94J6arkUv2YUMYRKw= Subject key identifier: 5C:84:EE:44:AB:8A:DD:2B:7B:A4:0D:40:C1:20:09:B9:D8:8A:FB:68 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0CC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0CB9 Signing time: Sun 20 Sep 2026 18:30:02 +0000 Manifest this update: Sun 20 Sep 2026 18:30:01 +0000 Manifest next update: Sun 27 Sep 2026 18:30:01 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: 3eiQxzjxn6gYRJcy1EHk+dOymHKHZTq+TFasgNMm7h0=) 2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) 3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Sep 20 18:30:01 2026 GMT Not After : Sep 27 18:30:01 2026 GMT Subject: CN=6ab0262a-8416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:10:da:25:49:95:23:d2:56:ba:88:f8:63: 39:b3:c2:99:67:ef:3f:86:23:fa:c9:9a:8a:21:e4: d8:36:2c:c4:d9:e7:9c:36:66:eb:ce:0d:46:2c:ca: ee:0d:eb:2c:1a:08:b9:5f:18:6f:5c:44:66:88:20: e7:2b:13:42:95:05:11:e6:a8:0c:86:ce:79:b0:86: 2f:5a:5b:87:be:6d:36:39:8d:a1:7c:78:d7:aa:1c: 11:5f:ee:61:21:fd:cc:bd:14:76:85:fd:dc:f6:9d: 7d:8a:cc:fc:24:fc:f3:e0:26:62:37:8b:da:5e:6d: 0b:12:2f:b1:3c:6c:a6:2c:37:d2:8f:5d:df:45:e5: 17:86:ba:9a:98:43:40:51:f5:26:17:b4:6b:f7:92: 84:03:1a:61:f3:2c:f4:4e:d6:97:ae:72:a1:f9:1b: 27:30:35:18:fd:fc:8a:bd:c8:d7:56:60:20:29:1c: 63:cb:a6:d4:8e:c6:ac:d5:a7:2b:40:91:a9:08:72: 12:04:28:79:95:e4:92:8f:8f:06:61:ae:f8:46:e0: 8a:06:92:b1:0d:b3:e4:d8:c8:d4:89:2d:e9:89:df: e3:f5:c6:3c:eb:87:51:39:93:30:02:2e:10:a0:d1: 4a:4c:0c:6a:ab:66:a0:12:3a:ec:ee:8e:1f:dc:0f: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:84:EE:44:AB:8A:DD:2B:7B:A4:0D:40:C1:20:09:B9:D8:8A:FB:68 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:dc:66:2f:f6:64:fa:3b:cd:84:5b:1f:0b:46:56:50:fd:9c: 68:d6:3e:f7:76:42:8f:91:d3:17:06:95:d8:10:56:e8:a0:03: a5:ac:57:59:ae:e5:fd:d3:58:45:55:3d:f8:af:83:a9:db:50: 32:07:74:89:77:e6:71:f8:ad:b8:93:c3:e6:19:f2:7c:27:87: 6d:0b:20:d8:55:99:e0:6e:18:9c:58:e9:98:83:5c:23:85:fa: 10:26:72:09:d1:ad:0e:ae:2d:4d:5c:f5:38:11:12:e2:d8:c6: 4a:6c:08:cd:27:5d:a0:c8:30:f7:e1:e3:31:66:5f:78:33:31: b4:df:77:0a:20:22:df:12:a4:12:ef:03:63:27:cc:da:bb:68: b2:0a:f9:47:33:ff:51:2d:82:ab:8a:e6:ce:e2:6c:99:d0:a1: 14:a4:7d:2e:db:8c:61:4c:44:65:f2:0e:92:5c:20:39:b2:c9: ef:29:9a:94:3f:a7:1a:d4:7f:04:63:90:0c:fc:1a:18:3d:8c: 41:2c:7d:78:65:76:4e:7c:bd:a5:74:84:3f:ac:28:51:6f:dc: b0:80:29:6f:1b:43:80:10:d0:35:0e:a1:e8:f1:6f:34:6a:ce: 37:43:dc:bf:ab:5e:c8:f4:39:7b:13:b2:be:a7:08:f8:37:6a: 71:ac:70:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwOTIwMTgzMDAxWhcNMjYwOTI3MTgzMDAxWjAYMRYwFAYD VQQDEw02YWIwMjYyYS04NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw98Q2iVJlSPSVrqI+GM5s8KZZ+8/hiP6yZqKIeTYNizE2eecNmbrzg1GLMru DessGgi5XxhvXERmiCDnKxNClQUR5qgMhs55sIYvWluHvm02OY2hfHjXqhwRX+5h If3MvRR2hf3c9p19isz8JPzz4CZiN4vaXm0LEi+xPGymLDfSj13fReUXhrqamENA UfUmF7Rr95KEAxph8yz0TtaXrnKh+RsnMDUY/fyKvcjXVmAgKRxjy6bUjsas1acr QJGpCHISBCh5leSSj48GYa74RuCKBpKxDbPk2MjUiS3pid/j9cY864dROZMwAi4Q oNFKTAxqq2agEjrs7o4f3A/3kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyE7kSr it0re6QNQMEgCbnYivtoMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXtxmL/Zk+jvNhFsfC0ZWUP2caNY+93ZCj5HTFwaV2BBW6KADpaxXWa7l/dNY RVU9+K+DqdtQMgd0iXfmcfituJPD5hnyfCeHbQsg2FWZ4G4YnFjpmINcI4X6ECZy CdGtDq4tTVz1OBES4tjGSmwIzSddoMgw9+HjMWZfeDMxtN93CiAi3xKkEu8DYyfM 2rtosgr5RzP/US2Cq4rmzuJsmdChFKR9LtuMYUxEZfIOklwgObLJ7ymalD+nGtR/ BGOQDPwaGD2MQSx9eGV2Tny9pXSEP6woUW/csIApbxtDgBDQNQ6h6PFvNGrON0Pc v6teyPQ5exOyvqcI+Ddqcaxwmw== -----END CERTIFICATE-----Generated at Mon Sep 21 19:16:45 2026 by rpki-client