$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json) Hash identifier: KlzH5wlURLkDirFtW2FsZhem9PqVv96l+8hhsJfZIVs= Subject key identifier: 7E:79:A2:10:47:75:27:4E:F7:EA:D0:17:51:E6:2A:08:B3:32:B4:71 Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Certificate serial: 08FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft Manifest number: 08DD Signing time: Wed 28 Oct 2026 20:47:07 +0000 Manifest this update: Wed 28 Oct 2026 20:47:07 +0000 Manifest next update: Wed 04 Nov 2026 20:47:07 +0000 Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: L8OJINUclyqagFJPjcVR7tB4E40+r1c+rNH25pXH68Q=) 2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: cGYw9RXkN6jl5Saa1Bh0uceE3pbuIShbY5CrfH5p5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 20:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2300 (0x8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Validity Not Before: Oct 28 20:47:07 2026 GMT Not After : Nov 4 20:47:07 2026 GMT Subject: CN=6ae25f4b-35a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:69:fe:54:c4:bf:92:57:19:68:23:cf:c8: 92:f6:0b:67:5f:a0:2c:75:a3:65:1f:af:2c:d2:55: 7c:3f:67:44:0e:d7:ac:61:5a:cd:c7:b7:f2:e6:a1: 92:51:84:9e:e3:8a:f6:a3:24:d8:e2:4c:c6:bb:fb: b7:95:03:f0:a7:f1:e4:a4:51:50:af:b1:26:f9:cc: 64:d1:9b:f1:c5:3a:9b:4b:99:49:90:f9:25:cc:5c: 5f:d6:22:a9:ff:3e:32:82:f2:62:03:e6:9d:b7:66: 2b:73:f8:75:b4:6e:36:c2:3d:e4:b5:88:a1:b2:e7: 5b:ef:ee:0b:cd:59:20:75:b3:69:58:95:f4:2c:b7: 3e:4c:b0:79:e1:dc:eb:ac:95:05:40:84:3b:66:e9: 8f:74:23:00:94:83:dc:f4:c8:bd:7b:a7:68:77:e7: 8a:8d:ff:9d:c9:01:46:20:cb:12:e2:2f:ce:6c:43: 06:87:9c:86:dc:3f:e1:81:0c:ec:9b:d0:ce:15:9e: ca:b2:c5:e6:c1:85:c1:53:9a:ba:7e:02:fd:60:b3: c3:22:9b:2c:cb:0e:12:9c:9f:36:80:66:e2:e8:83: 8e:03:c9:50:75:d5:c8:1e:6f:99:ca:ca:36:d4:27: 6a:08:99:9d:e5:52:ba:17:a0:47:02:db:ed:83:13: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:79:A2:10:47:75:27:4E:F7:EA:D0:17:51:E6:2A:08:B3:32:B4:71 X509v3 Authority Key Identifier: keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d7:a4:2a:55:e0:40:b2:5c:85:ae:86:f3:dd:e0:12:c3:46: 8d:f2:bb:46:97:fe:db:5b:01:a2:b4:0a:bf:22:1c:2b:d3:4a: 66:7a:1f:79:f1:e9:ea:87:68:13:ff:5e:30:e9:2f:d3:2e:ba: aa:ed:7e:7f:4f:e6:68:fa:cc:5d:53:51:0a:95:f7:7d:e1:0d: b5:12:53:1f:68:52:43:80:66:a7:92:ec:a2:14:2a:a8:55:6d: 7d:60:da:d8:29:76:da:b1:0b:bd:1f:d5:bf:e6:38:72:38:aa: 48:d5:22:19:0f:06:31:19:90:4a:67:ca:cb:61:49:26:a0:28: 37:68:0e:1e:db:53:7d:d9:2f:69:47:dd:23:b6:ca:d8:d6:ef: cb:99:15:5e:10:02:7b:3f:fe:35:85:19:70:58:24:dc:c0:f5: 38:ca:9a:0f:27:12:54:d3:48:54:96:c0:67:e2:ed:d5:e9:84: 46:12:cf:17:db:4a:41:ad:d8:eb:83:e9:de:0c:34:41:83:48: a5:12:86:9f:ed:57:d5:f5:5a:bc:6a:e2:21:cf:fd:b5:65:23: 0e:48:14:23:8c:b8:7d:0d:5a:95:87:be:79:6e:04:81:93:c3: 59:aa:d0:12:0d:6a:27:67:6b:45:a2:e2:9e:37:8e:ec:10:e9: f2:4c:3f:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx NkRGMjZFQzIwHhcNMjYxMDI4MjA0NzA3WhcNMjYxMTA0MjA0NzA3WjAYMRYwFAYD VQQDEw02YWUyNWY0Yi0zNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvExp/lTEv5JXGWgjz8iS9gtnX6AsdaNlH68s0lV8P2dEDtesYVrNx7fy5qGS UYSe44r2oyTY4kzGu/u3lQPwp/HkpFFQr7Em+cxk0ZvxxTqbS5lJkPklzFxf1iKp /z4ygvJiA+adt2Yrc/h1tG42wj3ktYihsudb7+4LzVkgdbNpWJX0LLc+TLB54dzr rJUFQIQ7ZumPdCMAlIPc9Mi9e6dod+eKjf+dyQFGIMsS4i/ObEMGh5yG3D/hgQzs m9DOFZ7KssXmwYXBU5q6fgL9YLPDIpssyw4SnJ82gGbi6IOOA8lQddXIHm+Zyso2 1CdqCJmd5VK6F6BHAtvtgxN1XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH55ohBH dSdO9+rQF1HmKgizMrRxMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1 cEtZdmVFemwtN0VXM3lic0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdekKlXgQLJcha6G893gEsNGjfK7Rpf+21sBorQKvyIcK9NKZnofefHp6odo E/9eMOkv0y66qu1+f0/maPrMXVNRCpX3feENtRJTH2hSQ4Bmp5LsohQqqFVtfWDa 2Cl22rELvR/Vv+Y4cjiqSNUiGQ8GMRmQSmfKy2FJJqAoN2gOHttTfdkvaUfdI7bK 2Nbvy5kVXhACez/+NYUZcFgk3MD1OMqaDycSVNNIVJbAZ+Lt1emERhLPF9tKQa3Y 64Pp3gw0QYNIpRKGn+1X1fVavGriIc/9tWUjDkgUI4y4fQ1alYe+eW4EgZPDWarQ Eg1qJ2drRaLinjeO7BDp8kw/Vg== -----END CERTIFICATE-----Generated at Fri Oct 30 02:29:06 2026 by rpki-client