$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: guCn9xxpj+6cv8TU/QFuLbeLM0dyelvhUgDEHww8xMA= Subject key identifier: 8A:F7:19:F7:1F:8E:BA:3E:21:D5:07:67:0B:1B:7A:1A:FE:AA:D2:11 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0499 Signing time: Wed 07 Oct 2026 00:10:59 +0000 Manifest this update: Wed 07 Oct 2026 00:10:58 +0000 Manifest next update: Wed 14 Oct 2026 00:10:58 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: z9pHTjNIBZy4bZ7yRqVaxpHzBzKnY+izvLMxUzvAp+8=) 2: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg=) 3: 06FA5A64774011F0BE2D3736C4F9AE02.roa (hash: cl/4/5b1299P9Rw9mt6jtdWymjlwHiUICZ1E9aWqHuM=) 4: F570D764773F11F09FC02036C4F9AE02.roa (hash: gvPu45DyIqZBu1jQxEhjgfSh962TYPXbAHfGb3N8kR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Oct 7 00:10:58 2026 GMT Not After : Oct 14 00:10:58 2026 GMT Subject: CN=6ac58e13-b1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:cb:66:36:54:7f:96:c6:aa:81:48:9d:ad: e9:23:96:78:f7:4b:68:4a:7d:76:58:47:d6:bc:21: a9:34:d1:63:3c:5c:dd:15:87:4d:a4:7a:77:3f:31: 4e:4b:fd:5b:d9:1c:9f:9a:4b:f6:02:41:cf:b1:1c: 64:8c:f1:b6:41:ad:4d:bc:1b:78:b6:8f:ee:81:a0: 9b:fd:19:ad:08:a8:b0:2c:9a:61:3a:54:10:85:87: c4:38:65:6f:20:ea:36:49:43:a4:a9:b0:69:f7:93: 2e:e0:a2:94:7e:c2:50:f2:0e:af:b2:ae:ab:b3:7b: 03:42:b9:49:5a:80:9d:d7:e7:6b:e4:40:cd:07:a1: 7a:ae:be:4e:09:54:0f:9a:b7:bc:ab:80:75:85:7e: 61:77:dd:01:c4:3a:26:08:7a:d6:5b:3f:4f:cf:b7: e7:25:c9:0d:40:cc:6a:80:be:7d:13:69:d5:b0:e6: 2e:a8:11:e6:1a:84:44:0f:1c:be:30:2c:e3:b3:24: 34:33:c5:27:32:29:17:41:91:bd:66:dd:01:f5:39: d5:da:73:f9:f3:cb:4f:5d:83:ae:75:b2:4a:8b:c1: 0e:d7:9d:a3:15:ca:a2:7c:57:31:fa:22:dc:82:2f: 80:de:f5:df:4b:ed:a6:4a:bd:7e:6b:80:e5:82:97: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:19:F7:1F:8E:BA:3E:21:D5:07:67:0B:1B:7A:1A:FE:AA:D2:11 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:26:c2:35:00:bf:24:1e:f5:fa:2d:84:91:77:d1:fa:6c:0b: dc:08:d0:00:a1:26:31:cf:61:2f:48:b9:cb:7e:9f:b4:33:90: 93:ed:6f:7f:2b:37:53:f1:5b:9b:8c:d5:52:33:be:2a:91:91: 92:99:ad:dd:a1:bc:dd:5e:9f:ae:9a:ab:10:8a:61:84:e4:21: 8c:92:7f:53:d2:e0:47:ea:cc:ee:71:7b:4e:f7:5c:7b:12:14: da:6a:a6:2d:9d:9a:b6:4f:8e:01:32:e1:55:f0:73:04:94:7f: f4:4c:8a:4a:17:cf:1c:c6:43:14:61:a6:68:e7:f6:a9:c4:98: c5:96:8a:60:ed:22:42:a7:a0:8c:d4:8c:98:12:2a:4d:03:2b: 04:d1:16:09:c3:88:71:64:a0:30:b5:fd:d8:fb:5d:b9:49:32: f5:70:bd:f3:86:ba:63:37:f7:1e:fb:6c:bf:bc:a7:e3:6c:1c: 03:a3:c2:14:53:2e:17:14:14:99:f5:52:be:79:db:84:62:e4: 7a:9f:6e:67:53:5e:8f:2b:ea:9a:91:cb:02:f1:cc:04:aa:fe: 8c:b3:8c:0b:d7:6b:a0:dd:18:f2:b8:64:0c:9a:9f:78:0d:c5: 8b:79:36:a1:65:7d:13:2d:17:31:15:8b:3d:e6:07:87:f6:47: 37:fa:44:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYxMDA3MDAxMDU4WhcNMjYxMDE0MDAxMDU4WjAYMRYwFAYD VQQDEw02YWM1OGUxMy1iMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCLLZjZUf5bGqoFIna3pI5Z490toSn12WEfWvCGpNNFjPFzdFYdNpHp3PzFO S/1b2Ryfmkv2AkHPsRxkjPG2Qa1NvBt4to/ugaCb/RmtCKiwLJphOlQQhYfEOGVv IOo2SUOkqbBp95Mu4KKUfsJQ8g6vsq6rs3sDQrlJWoCd1+dr5EDNB6F6rr5OCVQP mre8q4B1hX5hd90BxDomCHrWWz9Pz7fnJckNQMxqgL59E2nVsOYuqBHmGoREDxy+ MCzjsyQ0M8UnMikXQZG9Zt0B9TnV2nP588tPXYOudbJKi8EO152jFcqifFcx+iLc gi+A3vXfS+2mSr1+a4DlgpdKpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIr3Gfcf jro+IdUHZwsbehr+qtIRMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOibCNQC/JB71+i2EkXfR+mwL3AjQAKEmMc9hL0i5y36ftDOQk+1vfys3U/Fb m4zVUjO+KpGRkpmt3aG83V6frpqrEIphhOQhjJJ/U9LgR+rM7nF7TvdcexIU2mqm LZ2atk+OATLhVfBzBJR/9EyKShfPHMZDFGGmaOf2qcSYxZaKYO0iQqegjNSMmBIq TQMrBNEWCcOIcWSgMLX92PtduUky9XC984a6Yzf3Hvtsv7yn42wcA6PCFFMuFxQU mfVSvnnbhGLkep9uZ1NejyvqmpHLAvHMBKr+jLOMC9droN0Y8rhkDJqfeA3Fi3k2 oWV9Ey0XMRWLPeYHh/ZHN/pEpg== -----END CERTIFICATE-----Generated at Wed Oct 7 06:05:11 2026 by rpki-client