$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json) Hash identifier: skmxPLU+CpPQYKwo0k/0VmhpT/NbQdF3QlH2gZExn5U= Subject key identifier: A3:D2:0C:51:9A:D8:BA:B1:74:DE:E9:B7:80:F2:05:24:7E:29:35:7F Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft Manifest number: 09CC Signing time: Tue 06 Oct 2026 20:00:26 +0000 Manifest this update: Tue 06 Oct 2026 20:00:25 +0000 Manifest next update: Tue 13 Oct 2026 20:00:25 +0000 Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: rv2YS4nrS8GH446qEAgTHeGRkLBANw2xXWRDWMBl0QQ=) 2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: V81dD3x6Xu9JhvlyqWC7cihyerGfmzPLwxY1DFEcyJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Validity Not Before: Oct 6 20:00:25 2026 GMT Not After : Oct 13 20:00:25 2026 GMT Subject: CN=6ac5535a-11a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:98:5c:c2:6c:f2:d6:5b:d2:1c:9c:8c:a9: dc:91:a4:0e:50:3e:96:b8:3a:ba:e8:83:05:7b:21: 0a:46:67:42:81:df:32:71:5b:f9:39:47:16:80:51: 06:b8:7b:fa:8a:6b:a8:51:80:9b:e5:ff:2d:a9:b8: 8e:a7:aa:e0:0b:0d:60:0d:1f:e4:b6:53:42:87:46: 09:c4:f1:53:47:0e:c8:4e:39:3e:06:8e:0d:f1:84: 46:0b:63:f4:4f:f8:83:b8:b2:aa:ea:8c:6c:9b:6a: 2a:48:8b:c0:bc:bc:62:bc:a3:5f:9f:b3:1a:0d:b0: 33:a8:54:3b:f7:f3:e5:14:eb:d3:b0:41:ce:8d:0c: 96:62:61:5e:46:a7:1b:21:22:e6:6a:38:e3:07:fd: 85:07:09:79:28:22:7a:86:b5:49:89:49:b3:e5:7c: 70:d2:a4:30:24:e5:b8:0c:61:ca:76:ad:b1:52:45: 24:ca:36:98:3e:f6:4d:12:71:b3:7a:48:9b:be:39: 0b:67:4f:cc:a9:97:ac:2f:48:f9:d0:7f:32:23:a4: b8:97:22:36:a9:90:36:7c:aa:96:c7:e2:68:62:f2: 90:8a:17:20:b6:01:60:1f:be:79:21:f4:98:83:a6: 55:92:cc:e2:8d:64:da:a0:0f:0e:6f:d4:8c:65:b1: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D2:0C:51:9A:D8:BA:B1:74:DE:E9:B7:80:F2:05:24:7E:29:35:7F X509v3 Authority Key Identifier: keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:31:12:65:38:cc:dd:be:73:98:49:9b:25:02:83:3f:2e: e4:61:a6:a6:80:ae:4f:e0:fb:84:8b:45:a0:a3:21:2b:5d:98: d1:8e:a3:8d:16:2d:0d:4e:04:ea:ae:65:3b:98:27:ce:58:a8: e8:7a:03:ac:db:92:0d:13:0b:41:ca:39:f2:3a:56:17:5b:8d: b0:17:f2:cd:ce:48:54:20:63:5c:3b:8b:c9:a2:c7:92:7e:40: 43:3d:77:61:ff:ad:cd:a4:3c:bd:ad:53:b3:68:9d:e4:60:35: e8:a1:ad:c8:28:aa:d4:f8:59:24:3d:ac:48:91:0f:d9:67:e9: 32:c4:de:d8:3b:66:e9:de:4c:50:f0:ff:e3:30:54:e2:61:53: f3:de:db:be:e0:b2:8a:53:49:e8:39:8f:4a:5f:d3:92:81:b2: 7b:34:03:5c:32:e1:fb:a0:66:47:c2:1e:97:ae:3c:8f:c9:d9: 09:63:9a:45:01:3a:46:f2:27:ad:d1:17:e8:93:a5:7a:64:17: f0:fe:55:34:d6:50:15:19:26:05:39:a9:81:88:59:04:69:4f: 4d:ea:09:e1:88:d1:82:d0:03:5a:e3:7f:6e:e7:be:db:cf:ac: 02:e0:dc:2f:df:c2:9c:f6:c5:ba:ab:dc:8d:3e:f4:15:51:7a: f0:a9:a7:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyQzYxMTAvBgNVBAUTKDFEQTAxQUZDMDg4OENBQTYxNzFFMEEwRTc0MUNGQzkw NEVEMkRGNkYwHhcNMjYxMDA2MjAwMDI1WhcNMjYxMDEzMjAwMDI1WjAYMRYwFAYD VQQDEw02YWM1NTM1YS0xMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHCYXMJs8tZb0hycjKnckaQOUD6WuDq66IMFeyEKRmdCgd8ycVv5OUcWgFEG uHv6imuoUYCb5f8tqbiOp6rgCw1gDR/ktlNCh0YJxPFTRw7ITjk+Bo4N8YRGC2P0 T/iDuLKq6oxsm2oqSIvAvLxivKNfn7MaDbAzqFQ79/PlFOvTsEHOjQyWYmFeRqcb ISLmajjjB/2FBwl5KCJ6hrVJiUmz5Xxw0qQwJOW4DGHKdq2xUkUkyjaYPvZNEnGz ekibvjkLZ0/MqZesL0j50H8yI6S4lyI2qZA2fKqWx+JoYvKQihcgtgFgH755IfSY g6ZVkszijWTaoA8Ob9SMZbHS8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPSDFGa 2LqxdN7pt4DyBSR+KTV/MB8GA1UdIwQYMBaAFB2gGvwIiMqmFx4KDnQc/JBO0t9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJDNi8xRURGRTQ5NkIx RDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlxWVhIZ29PZEJ6OGtFN1Mz MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhQWFfQWlJeXFZWEhnb09kQno4a0U3UzMyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJDNi8xRURGRTQ5NkIxRDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlx WVhIZ29PZEJ6OGtFN1MzMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkCcxEmU4zN2+c5hJmyUCgz8u5GGmpoCuT+D7hItFoKMhK12Y0Y6jjRYtDU4E 6q5lO5gnzlio6HoDrNuSDRMLQco58jpWF1uNsBfyzc5IVCBjXDuLyaLHkn5AQz13 Yf+tzaQ8va1Ts2id5GA16KGtyCiq1PhZJD2sSJEP2WfpMsTe2Dtm6d5MUPD/4zBU 4mFT897bvuCyilNJ6DmPSl/TkoGyezQDXDLh+6BmR8Iel648j8nZCWOaRQE6RvIn rdEX6JOlemQX8P5VNNZQFRkmBTmpgYhZBGlPTeoJ4YjRgtADWuN/bue+28+sAuDc L9/CnPbFuqvcjT70FVF68KmneA== -----END CERTIFICATE-----Generated at Thu Oct 8 11:19:54 2026 by rpki-client