$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json) Hash identifier: 0c3RFYE/YfjKoiMRpD3TMNgXwdnOpHHqphShUBWUXzE= Subject key identifier: 2B:20:A1:EB:DD:03:22:EB:1F:86:A2:25:60:7D:71:9D:93:00:21:13 Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft Manifest number: 09B3 Signing time: Tue 18 Aug 2026 20:15:46 +0000 Manifest this update: Tue 18 Aug 2026 20:15:45 +0000 Manifest next update: Tue 25 Aug 2026 20:15:45 +0000 Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: CLwNSQaXd5xrVkzueC34MW3HyjFB3oC9+Y+HmNlafIw=) 2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: V81dD3x6Xu9JhvlyqWC7cihyerGfmzPLwxY1DFEcyJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Validity Not Before: Aug 18 20:15:45 2026 GMT Not After : Aug 25 20:15:45 2026 GMT Subject: CN=6a84bd72-fae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:f7:06:51:c2:0e:91:69:9b:b8:35:23:af: 9a:8c:ad:c8:4d:a7:0c:19:48:db:97:dd:9c:bb:16: 57:5d:9c:d7:65:b1:d5:c3:1d:65:02:54:91:3e:f6: 8e:8f:bf:b0:f9:fa:e4:97:5d:75:63:21:b3:cf:6d: d9:ec:f8:10:b3:b0:1a:84:d4:eb:02:80:08:72:7e: b6:b3:bd:36:fb:37:1f:73:53:7a:d2:2b:29:a4:9f: a7:42:03:f0:90:75:a1:20:52:a7:46:56:12:1c:bb: 49:67:6a:31:63:85:ef:95:f6:2a:db:f6:5e:72:41: 7f:02:1f:bc:f3:51:7a:a0:67:26:66:a6:c4:9e:93: 96:e8:fb:07:75:f2:01:c1:85:20:c4:f8:ac:b9:c1: 41:de:e3:f7:a6:d4:d1:e4:ee:e5:f3:59:47:2c:4f: 33:95:dc:56:bf:c4:ba:83:9c:72:df:c6:33:34:ac: e8:99:83:cd:a1:4e:53:4c:54:c9:30:61:14:77:4f: 53:4d:41:d5:aa:4f:93:d0:db:8a:47:a8:22:9b:fb: 33:7f:81:6c:29:70:76:4f:14:13:14:55:54:82:ef: 29:19:aa:89:95:b8:2c:20:73:96:aa:4f:92:f0:25: a3:32:1f:7a:7e:4a:a6:93:5e:17:0f:b4:ec:15:1e: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:A1:EB:DD:03:22:EB:1F:86:A2:25:60:7D:71:9D:93:00:21:13 X509v3 Authority Key Identifier: keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:31:e4:92:b7:81:c3:e1:6b:49:a9:5b:48:74:32:75:93:8c: 43:c2:27:d0:07:89:e3:40:4c:ee:1f:7b:e5:7b:59:f5:56:20: a6:e1:b6:62:83:23:ce:8b:68:91:e5:35:11:6c:09:77:56:18: 31:3b:c1:5d:82:d8:36:4b:e2:0b:f8:63:dd:85:f1:05:09:2d: 0d:e6:27:a3:60:35:f7:2e:a8:76:3d:7d:3f:68:48:56:b9:60: 80:98:74:69:c0:17:db:1a:a3:49:5f:4d:72:29:9a:d2:21:f9: 4a:db:2c:03:6e:c4:d2:b3:50:82:85:e9:5d:5c:01:0c:18:16: 14:de:ea:7a:25:c6:91:dc:e9:30:fd:1c:f1:3d:d9:ef:d3:31: d9:fb:04:86:df:cf:f7:08:c5:08:7c:87:e8:3d:cb:78:54:d8: 76:05:5e:e0:42:3e:c2:f2:b1:c5:c0:f0:d9:d1:4c:79:99:71: 0b:08:f1:c1:78:70:84:bd:3f:6e:35:8c:91:5d:6c:88:65:45: 69:6f:97:be:72:9c:df:18:b5:0a:03:85:67:80:bd:ff:3a:55: 43:de:a5:d2:17:ec:a4:67:8e:3b:af:ed:f3:00:db:05:37:1d: 1d:48:c4:1b:9a:d1:02:b1:61:96:41:ea:13:a5:8a:ca:6b:a5: 28:83:2c:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyQzYxMTAvBgNVBAUTKDFEQTAxQUZDMDg4OENBQTYxNzFFMEEwRTc0MUNGQzkw NEVEMkRGNkYwHhcNMjYwODE4MjAxNTQ1WhcNMjYwODI1MjAxNTQ1WjAYMRYwFAYD VQQDEw02YTg0YmQ3Mi1mYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuin3BlHCDpFpm7g1I6+ajK3ITacMGUjbl92cuxZXXZzXZbHVwx1lAlSRPvaO j7+w+frkl111YyGzz23Z7PgQs7AahNTrAoAIcn62s702+zcfc1N60isppJ+nQgPw kHWhIFKnRlYSHLtJZ2oxY4XvlfYq2/ZeckF/Ah+881F6oGcmZqbEnpOW6PsHdfIB wYUgxPisucFB3uP3ptTR5O7l81lHLE8zldxWv8S6g5xy38YzNKzomYPNoU5TTFTJ MGEUd09TTUHVqk+T0NuKR6gim/szf4FsKXB2TxQTFFVUgu8pGaqJlbgsIHOWqk+S 8CWjMh96fkqmk14XD7TsFR6B0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsgoevd AyLrH4aiJWB9cZ2TACETMB8GA1UdIwQYMBaAFB2gGvwIiMqmFx4KDnQc/JBO0t9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJDNi8xRURGRTQ5NkIx RDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlxWVhIZ29PZEJ6OGtFN1Mz MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhQWFfQWlJeXFZWEhnb09kQno4a0U3UzMyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJDNi8xRURGRTQ5NkIxRDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlx WVhIZ29PZEJ6OGtFN1MzMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQzHkkreBw+FrSalbSHQydZOMQ8In0AeJ40BM7h975XtZ9VYgpuG2YoMjzoto keU1EWwJd1YYMTvBXYLYNkviC/hj3YXxBQktDeYno2A19y6odj19P2hIVrlggJh0 acAX2xqjSV9Ncima0iH5StssA27E0rNQgoXpXVwBDBgWFN7qeiXGkdzpMP0c8T3Z 79Mx2fsEht/P9wjFCHyH6D3LeFTYdgVe4EI+wvKxxcDw2dFMeZlxCwjxwXhwhL0/ bjWMkV1siGVFaW+XvnKc3xi1CgOFZ4C9/zpVQ96l0hfspGeOO6/t8wDbBTcdHUjE G5rRArFhlkHqE6WKymulKIMsAA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:41:58 2026 by rpki-client