$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json) Hash identifier: 5pAx1RuZEK0u3/6yC9HmsIG2EqXo1acRyhvalhbCajM= Subject key identifier: 0C:51:17:2D:AE:AA:23:C1:60:97:C8:47:E7:66:28:6E:10:69:25:C8 Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft Manifest number: 017A Signing time: Sat 03 Oct 2026 05:36:43 +0000 Manifest this update: Sat 03 Oct 2026 05:36:42 +0000 Manifest next update: Sat 10 Oct 2026 05:36:42 +0000 Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: bwqlSdHOgsda4vGAWr+vQGXDQpOZJRET+8vH+kUdmtc=) 2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: W9u5qlB4WlP9CIfe+lgCw0P7bcpuJCWbMFYa3TvAgqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E Validity Not Before: Oct 3 05:36:42 2026 GMT Not After : Oct 10 05:36:42 2026 GMT Subject: CN=6ac0946b-ed45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:4e:21:64:74:d5:10:7d:85:6f:a8:d8:09: 15:e5:b1:69:25:25:15:fd:68:4c:d3:81:39:f8:89: 40:8e:ac:5e:9e:3a:73:72:47:68:b5:39:fa:0b:45: e5:3a:ac:89:e1:5b:1e:9b:52:72:00:58:6e:71:d1: 31:da:61:fc:63:40:e7:06:03:30:d6:99:41:9e:65: 5b:cb:8c:d5:04:00:32:8f:81:01:70:42:10:e8:c9: 66:88:9c:37:d2:3b:69:40:b7:f0:84:30:2b:f1:0b: 16:8b:e0:bf:79:de:c5:79:b7:38:c0:e2:6f:73:0e: 9d:96:7d:f8:fa:4e:02:7b:d0:9e:9b:6b:dc:e4:2e: 4e:c3:04:09:cd:86:e1:ef:95:59:5d:a1:4c:f2:01: 8e:a4:e7:a2:bf:d5:aa:f8:c2:d0:84:0b:30:a5:ad: 57:4d:5a:34:84:21:7f:1e:a1:0e:1e:08:ac:36:e2: c1:32:5f:c8:47:ac:ca:ec:9a:51:22:7e:e8:6e:d7: 24:cd:1e:60:77:87:ba:4c:ef:73:19:7f:e5:4f:a7: b5:27:55:96:99:5b:8f:a5:24:72:4e:37:b4:c3:c5: ba:74:fd:29:3f:b5:17:c8:08:cf:e5:f2:3e:5b:bb: 1b:fb:7b:4e:af:6f:b4:81:d1:31:4a:ed:9b:85:eb: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:51:17:2D:AE:AA:23:C1:60:97:C8:47:E7:66:28:6E:10:69:25:C8 X509v3 Authority Key Identifier: keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cf:6d:82:d5:7c:f4:b0:ff:68:21:b6:f2:2f:07:a4:a7:73: ba:67:e1:c6:fc:35:00:71:7b:69:77:d9:66:ef:72:17:b2:57: b4:89:67:c5:91:b7:c4:66:1a:8d:4a:35:2c:75:7a:17:0d:b3: 2c:8f:d1:72:9a:8a:1e:23:37:d6:f0:81:8c:04:34:67:15:d9: c8:f5:50:b5:56:e8:3e:03:2f:e1:a0:bc:3e:d3:e4:15:b8:a0: 4a:6b:8a:ee:d7:91:7c:fe:b7:cf:76:86:50:55:61:ef:2d:74: 8b:b4:e7:7a:60:3d:fc:58:58:5a:68:87:b0:f7:a5:ba:50:19: 75:b5:9a:4c:25:cb:90:85:18:e9:5e:86:a3:b4:7f:d0:23:6e: f1:e3:36:a8:f0:c0:33:6a:c6:53:3d:36:5f:be:7f:68:ca:11: c0:f2:10:00:47:75:ee:8d:d7:bc:6d:cf:0c:3a:8b:32:16:62: 4e:83:44:5d:2b:9a:ea:d7:df:41:b5:8c:63:7c:59:86:51:69: c8:7f:e3:93:e1:8a:c7:1a:4e:6b:e8:02:99:e5:6d:1b:ba:9b: 9e:d3:9c:e6:84:10:fc:35:bd:36:2c:24:fc:c4:d4:96:b6:71: ff:67:f5:d5:63:72:ee:c6:93:f2:a3:40:c5:95:91:df:6c:40: 47:5d:3a:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NDgxMTAvBgNVBAUTKDFERDFCODY4Nzg4NjkyNEM0NjEzMTE2MDUwRUU5MEU5 RDQ5NDI2OUUwHhcNMjYxMDAzMDUzNjQyWhcNMjYxMDEwMDUzNjQyWjAYMRYwFAYD VQQDEw02YWMwOTQ2Yi1lZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR1OIWR01RB9hW+o2AkV5bFpJSUV/WhM04E5+IlAjqxenjpzckdotTn6C0Xl OqyJ4Vsem1JyAFhucdEx2mH8Y0DnBgMw1plBnmVby4zVBAAyj4EBcEIQ6MlmiJw3 0jtpQLfwhDAr8QsWi+C/ed7Febc4wOJvcw6dln34+k4Ce9Cem2vc5C5OwwQJzYbh 75VZXaFM8gGOpOeiv9Wq+MLQhAswpa1XTVo0hCF/HqEOHgisNuLBMl/IR6zK7JpR In7obtckzR5gd4e6TO9zGX/lT6e1J1WWmVuPpSRyTje0w8W6dP0pP7UXyAjP5fI+ W7sb+3tOr2+0gdExSu2bhesdAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxRFy2u qiPBYJfIR+dmKG4QaSXIMB8GA1UdIwQYMBaAFB3RuGh4hpJMRhMRYFDukOnUlCae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg0OC9DMjUxQjVCMjlC MTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2treEdFeEZnVU82UTZkU1VK cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkRzRhSGlHa2t4R0V4RmdVTzZRNmRTVUpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg0OC9DMjUxQjVCMjlCMTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2tr eEdFeEZnVU82UTZkU1VKcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW89tgtV89LD/aCG28i8HpKdzumfhxvw1AHF7aXfZZu9yF7JXtIlnxZG3xGYa jUo1LHV6Fw2zLI/RcpqKHiM31vCBjAQ0ZxXZyPVQtVboPgMv4aC8PtPkFbigSmuK 7teRfP63z3aGUFVh7y10i7TnemA9/FhYWmiHsPelulAZdbWaTCXLkIUY6V6Go7R/ 0CNu8eM2qPDAM2rGUz02X75/aMoRwPIQAEd17o3XvG3PDDqLMhZiToNEXSua6tff QbWMY3xZhlFpyH/jk+GKxxpOa+gCmeVtG7qbntOc5oQQ/DW9Niwk/MTUlrZx/2f1 1WNy7saT8qNAxZWR32xAR106Aw== -----END CERTIFICATE-----Generated at Sun Oct 4 19:58:46 2026 by rpki-client