$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: doRoMgdQ5rnEKzkwATlgkfCCslROs7s2cGk5UKHuY9w= Subject key identifier: 09:78:D0:2D:CB:A6:A5:E9:30:75:E0:6E:52:69:02:88:00:18:0D:2C Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 045A Signing time: Tue 27 Oct 2026 00:01:14 +0000 Manifest this update: Tue 27 Oct 2026 00:01:14 +0000 Manifest next update: Tue 03 Nov 2026 00:01:14 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: wuPzm42cfn5vO63wc/bk0UJa6dfTP7G1fse1iwbu408=) 2: 64197A380C4E11F1BFF51C3A113D8C67.roa (hash: DAX9aDACQRDZ+tftq+yUNOaT2K9U/BHvepIgwRyOpVA=) 3: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 5/C78J7CGduYZZHMWLrqDIi3wwIwSEbHrU1i1xBS0wY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Oct 27 00:01:14 2026 GMT Not After : Nov 3 00:01:14 2026 GMT Subject: CN=6adfe9ca-e04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:95:05:dc:9c:4f:f3:1e:80:d9:69:e1:dc: 30:5e:51:df:fb:07:f6:82:7a:da:e2:de:42:3a:ee: 1a:f3:18:6d:40:cf:65:a4:ad:a2:87:98:63:d5:dc: 51:11:27:3c:66:09:af:67:dd:c2:b9:3c:0e:d2:ef: ed:26:5b:10:18:bf:6c:23:24:65:39:ad:3e:03:ac: bd:3e:b9:3b:15:eb:33:09:a2:e2:75:74:b9:c5:67: 61:41:8b:f3:e7:7d:b3:23:70:d6:5c:6f:36:81:87: 27:a5:db:28:c8:f7:be:fb:02:7f:7b:c6:c2:83:30: 96:2f:a3:17:3d:a7:50:35:f1:0c:95:03:50:d3:a0: 53:45:37:bd:f5:0f:9d:3e:26:7d:ec:0f:4e:01:79: 6e:5f:42:6b:72:0e:2e:52:b5:01:76:ae:d8:39:e9: 6b:29:5e:77:53:b7:bc:a2:67:42:b3:ca:14:7d:16: 2a:57:79:bc:40:54:b2:8b:32:da:80:4e:a6:6d:05: 1b:69:e1:0a:91:ac:a3:ef:bf:39:62:0d:af:33:94: 77:f7:46:24:b0:f1:56:c4:f7:80:b7:4c:16:3b:fe: 75:21:18:93:37:af:d7:96:79:37:38:d3:fd:8a:16: 00:49:7a:e4:4c:16:4b:14:99:5a:8c:ef:e7:41:86: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:78:D0:2D:CB:A6:A5:E9:30:75:E0:6E:52:69:02:88:00:18:0D:2C X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:42:57:35:d0:e1:85:4c:22:a2:eb:2a:85:d4:13:07:cc:aa: 66:8e:9d:80:a5:5d:36:a4:b0:af:b3:47:98:05:87:95:ea:f1: a7:95:36:cf:e5:d1:3d:4a:ed:05:1b:b8:ad:ba:2d:f1:f8:78: 62:b7:67:66:9d:f4:c3:ec:68:9b:48:fb:2a:c0:c9:18:1a:3c: b1:d7:79:c4:d0:08:d2:9b:c1:43:f8:e6:ed:2d:55:ba:58:9b: 7f:8b:4b:4b:d3:b6:55:ac:4f:08:72:ad:0d:ca:c6:e6:20:85: 69:73:69:40:9d:e0:3b:ae:c7:c8:95:a4:dd:6e:d7:75:28:b0: a1:0c:fb:94:89:21:76:c8:00:59:fb:32:c5:ee:3c:43:2e:28: 06:ec:41:ee:90:be:35:11:a5:22:11:1c:9e:08:5e:b4:3b:7f: 71:fe:69:db:73:8f:80:b7:bf:49:ba:9f:d3:1d:9e:e4:3a:39: 68:16:bc:4b:98:67:d7:a9:3e:bc:56:f1:84:03:21:15:74:96: 08:6f:05:c5:b7:23:28:63:90:a1:01:72:26:2f:bd:8e:54:4f: 36:f4:b4:d6:89:a7:ae:76:12:e1:d5:74:f9:4b:41:b0:1f:1b: 86:42:69:84:7f:d1:b6:2c:91:b3:79:d0:55:fe:80:20:d0:05: 07:62:81:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjYxMDI3MDAwMTE0WhcNMjYxMTAzMDAwMTE0WjAYMRYwFAYD VQQDEw02YWRmZTljYS1lMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1OVBdycT/MegNlp4dwwXlHf+wf2gnra4t5COu4a8xhtQM9lpK2ih5hj1dxR ESc8ZgmvZ93CuTwO0u/tJlsQGL9sIyRlOa0+A6y9Prk7FeszCaLidXS5xWdhQYvz 532zI3DWXG82gYcnpdsoyPe++wJ/e8bCgzCWL6MXPadQNfEMlQNQ06BTRTe99Q+d PiZ97A9OAXluX0Jrcg4uUrUBdq7YOelrKV53U7e8omdCs8oUfRYqV3m8QFSyizLa gE6mbQUbaeEKkayj7785Yg2vM5R390YksPFWxPeAt0wWO/51IRiTN6/Xlnk3ONP9 ihYASXrkTBZLFJlajO/nQYbezwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAl40C3L pqXpMHXgblJpAogAGA0sMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA0JXNdDhhUwiousqhdQTB8yqZo6dgKVdNqSwr7NHmAWHlerxp5U2z+XRPUrt BRu4rbot8fh4YrdnZp30w+xom0j7KsDJGBo8sdd5xNAI0pvBQ/jm7S1Vulibf4tL S9O2VaxPCHKtDcrG5iCFaXNpQJ3gO67HyJWk3W7XdSiwoQz7lIkhdsgAWfsyxe48 Qy4oBuxB7pC+NRGlIhEcnghetDt/cf5p23OPgLe/Sbqf0x2e5Do5aBa8S5hn16k+ vFbxhAMhFXSWCG8FxbcjKGOQoQFyJi+9jlRPNvS01omnrnYS4dV0+UtBsB8bhkJp hH/RtiyRs3nQVf6AINAFB2KBGQ== -----END CERTIFICATE-----Generated at Wed Oct 28 13:07:24 2026 by rpki-client