$ rpki-client -vvvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft File: He-yCnpR7hjdetBq2qxJEePi95Q.mft (raw, json) Hash identifier: bK9ZhD6mYRgoTZctvi8+cZqi/GUl6kE2Ly8O6wMlvIk= Subject key identifier: 60:AE:E1:CC:DA:83:F4:31:32:9C:1D:5A:50:12:DD:9B:B6:78:57:11 Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft Manifest number: 02D7 Signing time: Wed 07 Oct 2026 01:34:25 +0000 Manifest this update: Wed 07 Oct 2026 01:34:25 +0000 Manifest next update: Wed 14 Oct 2026 01:34:25 +0000 Files and hashes: 1: He-yCnpR7hjdetBq2qxJEePi95Q.crl (hash: lvRh8OvW9+zv8ye++zUdeyll6V32LVLwOgdpUltIEPU=) 2: 54365208708411EDA8B14246C4F9AE02.roa (hash: XkgCUe6o/GCC4RXMS466VJWBGD4478vydtNuBFIJtZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Validity Not Before: Oct 7 01:34:25 2026 GMT Not After : Oct 14 01:34:25 2026 GMT Subject: CN=6ac5a1a1-23e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:84:dd:f8:af:36:f7:78:6c:69:9f:a4:a5: 3b:3f:bd:1d:3d:cf:db:cd:ce:40:50:33:42:56:dc: f2:a4:54:9e:3d:83:03:2e:5c:95:c0:f2:b0:d5:9b: 08:f2:96:75:2a:8c:b5:72:54:a6:94:dd:a2:e6:39: 78:ec:9e:fa:13:dd:a5:a2:6f:e0:47:b8:b4:65:da: d8:87:25:90:eb:58:69:6e:56:24:ef:ad:59:a4:c2: 67:76:0b:ac:8c:d9:77:22:79:6c:18:31:e0:ad:00: 1b:a7:54:6f:27:19:c7:ba:d9:bb:8d:ac:c3:7e:f1: 50:1d:ff:d9:37:25:4d:86:8f:fe:b0:36:14:de:ed: a3:1b:07:da:23:5d:72:fd:be:aa:e9:4f:7c:e6:15: 93:59:95:7e:53:5b:85:da:d1:62:de:8d:fb:78:09: 7b:b8:fc:09:19:12:58:27:0c:c2:a4:a7:6f:08:c1: bb:53:22:4f:bd:03:e8:7a:8d:cb:76:76:fb:06:94: f4:5c:e2:cc:ce:c8:33:d2:c9:72:e9:91:37:5a:a4: 72:fd:d4:ef:e5:fd:ca:91:04:0c:03:44:82:2f:21: ab:a9:ee:bc:87:42:8c:4b:f7:85:d2:d1:cc:77:26: 0f:9f:e7:96:6d:bf:4c:c9:f3:57:2c:97:7a:37:c6: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AE:E1:CC:DA:83:F4:31:32:9C:1D:5A:50:12:DD:9B:B6:78:57:11 X509v3 Authority Key Identifier: keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:cf:e9:fa:b7:13:21:d9:43:d8:86:0f:96:8e:a7:16:50:17: a8:0d:34:e2:06:33:fb:7b:9c:a7:38:a2:37:79:39:9a:3e:46: 0a:ea:fa:28:b9:67:09:9b:f6:49:d1:a0:68:c4:09:4a:15:e9: 4f:c4:0a:73:25:2e:03:58:b7:c6:6a:e0:d5:1a:3c:bf:79:14: 1a:5a:4a:54:f4:22:ba:59:18:11:3d:58:a0:51:b6:14:87:52: b4:f1:70:71:3b:6d:f7:5b:33:f7:c1:56:bd:68:2e:3b:a1:f4: dc:a7:f8:58:06:1c:66:86:85:0c:48:8e:b3:2a:f9:b7:0a:3a: 74:5c:ec:07:a0:f5:1e:67:c6:ba:02:b0:7d:c7:d0:55:41:0f: 26:c5:87:0e:84:f1:35:21:85:a0:f2:fb:3e:34:b0:06:47:21: 37:1f:f0:1b:a2:96:c6:f2:40:2c:d7:49:60:7e:70:43:75:c8: 12:c2:5f:9b:72:1f:74:04:a4:4d:de:ed:88:72:8a:52:e2:a0: 3a:63:49:6a:da:26:12:52:ad:a9:84:4c:dc:50:4e:62:b4:17: 1d:06:07:44:3e:95:fb:e4:fc:32:40:f7:9d:d4:95:dd:aa:37: ec:3d:9c:4d:01:ca:de:b0:7a:54:79:37:1d:23:06:e3:03:45: 26:cc:99:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1RTMxMTAvBgNVBAUTKDFERUZCMjBBN0E1MUVFMThERDdBRDA2QURBQUM0OTEx RTNFMkY3OTQwHhcNMjYxMDA3MDEzNDI1WhcNMjYxMDE0MDEzNDI1WjAYMRYwFAYD VQQDEw02YWM1YTFhMS0yM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbiE3fivNvd4bGmfpKU7P70dPc/bzc5AUDNCVtzypFSePYMDLlyVwPKw1ZsI 8pZ1Koy1clSmlN2i5jl47J76E92lom/gR7i0ZdrYhyWQ61hpblYk761ZpMJndgus jNl3InlsGDHgrQAbp1RvJxnHutm7jazDfvFQHf/ZNyVNho/+sDYU3u2jGwfaI11y /b6q6U985hWTWZV+U1uF2tFi3o37eAl7uPwJGRJYJwzCpKdvCMG7UyJPvQPoeo3L dnb7BpT0XOLMzsgz0sly6ZE3WqRy/dTv5f3KkQQMA0SCLyGrqe68h0KMS/eF0tHM dyYPn+eWbb9MyfNXLJd6N8ZYgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCu4cza g/QxMpwdWlAS3Zu2eFcRMB8GA1UdIwQYMBaAFB3vsgp6Ue4Y3XrQatqsSRHj4veU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODVFMy8xQjEyQTgyNDcw NzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdoamRldEJxMnF4SkVlUGk5 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlLXlDbnBSN2hqZGV0QnEycXhKRWVQaTk1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODVFMy8xQjEyQTgyNDcwNzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdo amRldEJxMnF4SkVlUGk5NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs8/p+rcTIdlD2IYPlo6nFlAXqA004gYz+3ucpziiN3k5mj5GCur6KLlnCZv2 SdGgaMQJShXpT8QKcyUuA1i3xmrg1Ro8v3kUGlpKVPQiulkYET1YoFG2FIdStPFw cTtt91sz98FWvWguO6H03Kf4WAYcZoaFDEiOsyr5two6dFzsB6D1HmfGugKwfcfQ VUEPJsWHDoTxNSGFoPL7PjSwBkchNx/wG6KWxvJALNdJYH5wQ3XIEsJfm3IfdASk Td7tiHKKUuKgOmNJatomElKtqYRM3FBOYrQXHQYHRD6V++T8MkD3ndSV3ao37D2c TQHK3rB6VHk3HSMG4wNFJsyZTg== -----END CERTIFICATE-----Generated at Thu Oct 8 08:52:11 2026 by rpki-client