$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: Hid+qH60+Uhsp5GJpmuq+b9rHnIfWRcEItWL1PG7XeE= Subject key identifier: AF:E8:F3:86:72:2D:E7:BB:53:92:E9:AC:CA:60:D5:75:D0:51:D3:8D Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 01DD Signing time: Sun 25 Oct 2026 04:02:19 +0000 Manifest this update: Sun 25 Oct 2026 04:02:18 +0000 Manifest next update: Sun 01 Nov 2026 04:02:18 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: fB5+WbSRT1cmcNH7/g0miNcuEIl2iK20BhzFaCfAEI4=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: 1zV+/1R8NXTU00HPSWjbCXmTRWs8S22JUS1CXgvAzR4=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: GCQF0mtb8Gekl6O8/+EeLV+4PjQyO396ilHkXd+2kuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Oct 25 04:02:18 2026 GMT Not After : Nov 1 04:02:18 2026 GMT Subject: CN=6add7f4a-89ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:ec:0f:05:7b:94:45:d1:53:b6:7b:e3:62: e6:f1:34:5f:19:98:b9:56:dd:3e:9e:5e:0a:33:bb: 17:23:a9:44:04:f8:5c:7d:42:d5:91:1f:78:c1:03: 2a:ce:e2:5c:3e:74:c4:29:3a:c5:08:2e:a7:52:1c: 69:56:c2:7c:75:a2:f4:c8:1e:37:e2:3f:63:f4:ea: 95:86:91:3f:a2:65:40:7a:35:d4:62:4a:3b:4c:6b: b7:2d:11:0f:37:83:37:2d:aa:83:b2:64:82:e1:e2: b4:75:c9:6a:41:b3:e6:bc:6a:3a:42:4d:5c:71:81: ac:93:50:b7:9a:d8:e1:95:bb:28:0b:90:14:1f:57: 8a:d5:82:83:c7:71:5b:dc:53:d0:34:a1:ab:50:1f: e7:30:1e:63:62:d4:3d:18:8a:47:7a:a0:d7:fa:cd: 86:eb:76:c0:44:6f:7b:32:ae:f1:a2:59:de:a1:89: 51:4d:ad:75:f0:20:f0:14:15:b2:4d:1b:76:fa:5f: 05:16:8f:d9:8d:73:e5:45:4b:7c:0f:b8:2b:5e:06: ae:67:01:4c:85:7e:5e:e1:6c:34:41:64:88:a3:8e: 6b:ed:e2:0b:0d:31:68:68:4f:6c:9f:a2:6a:14:b0: 71:3d:f8:23:68:54:38:18:8f:3f:2b:90:04:de:04: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:F3:86:72:2D:E7:BB:53:92:E9:AC:CA:60:D5:75:D0:51:D3:8D X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:04:f2:59:f3:34:10:a7:60:fb:1d:82:20:c8:e5:8e:55:bf: 69:31:e9:6d:6c:2b:4d:6b:17:26:d2:d8:8e:a2:ad:ad:a8:2e: 6f:bd:10:c8:47:56:56:6d:4c:43:67:f8:a6:9a:bc:d4:3f:ad: c3:16:bb:6f:5a:c6:86:e1:11:56:c1:f8:93:fb:06:97:e9:eb: c8:a5:e9:07:67:70:d5:6a:78:c7:5c:d9:1f:b9:44:2e:7e:c5: ad:fe:dc:75:3c:b8:bd:0d:43:dc:b4:40:1e:a1:86:97:2b:92: 8b:4d:b4:67:99:ed:f4:eb:99:50:43:ce:56:24:25:19:57:f5: 5d:bb:0a:18:0c:e5:7b:40:48:05:95:1b:f6:51:eb:65:17:20: b9:f4:a0:aa:dd:ab:63:2a:34:00:ab:6f:a5:45:f4:ef:26:79: bf:7b:90:2d:80:fe:d6:d8:5e:d0:37:7a:85:74:c9:fc:5c:b5: e2:2d:19:78:e7:d9:49:69:bf:94:e2:35:da:4f:8e:81:6c:6e: fa:a8:90:13:3d:d0:41:ea:55:c4:b0:c5:dc:35:b1:b6:49:a5: cb:e2:a1:ac:c2:37:92:61:ca:46:1a:e8:74:9a:4f:af:23:5c: 1e:8a:58:1a:26:6b:cd:22:02:18:7c:7f:45:0f:13:70:55:2e: 55:9e:14:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjYxMDI1MDQwMjE4WhcNMjYxMTAxMDQwMjE4WjAYMRYwFAYD VQQDEw02YWRkN2Y0YS04OWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4PsDwV7lEXRU7Z742Lm8TRfGZi5Vt0+nl4KM7sXI6lEBPhcfULVkR94wQMq zuJcPnTEKTrFCC6nUhxpVsJ8daL0yB434j9j9OqVhpE/omVAejXUYko7TGu3LREP N4M3LaqDsmSC4eK0dclqQbPmvGo6Qk1ccYGsk1C3mtjhlbsoC5AUH1eK1YKDx3Fb 3FPQNKGrUB/nMB5jYtQ9GIpHeqDX+s2G63bARG97Mq7xolneoYlRTa118CDwFBWy TRt2+l8FFo/ZjXPlRUt8D7grXgauZwFMhX5e4Ww0QWSIo45r7eILDTFoaE9sn6Jq FLBxPfgjaFQ4GI8/K5AE3gSUPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/o84Zy Lee7U5LprMpg1XXQUdONMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQTyWfM0EKdg+x2CIMjljlW/aTHpbWwrTWsXJtLYjqKtragub70QyEdWVm1M Q2f4ppq81D+twxa7b1rGhuERVsH4k/sGl+nryKXpB2dw1Wp4x1zZH7lELn7Frf7c dTy4vQ1D3LRAHqGGlyuSi020Z5nt9OuZUEPOViQlGVf1XbsKGAzle0BIBZUb9lHr ZRcgufSgqt2rYyo0AKtvpUX07yZ5v3uQLYD+1the0Dd6hXTJ/Fy14i0ZeOfZSWm/ lOI12k+OgWxu+qiQEz3QQepVxLDF3DWxtkmly+KhrMI3kmHKRhrodJpPryNcHopY GiZrzSICGHx/RQ8TcFUuVZ4UNQ== -----END CERTIFICATE-----Generated at Sun Oct 25 11:23:39 2026 by rpki-client