$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: 1vj/mB8i1UBQ71PsBuAuGvHIau9WsUaFn1vCuhYRu2Y= Subject key identifier: D4:60:73:28:C5:91:09:CB:03:E9:F3:B5:04:C4:54:24:D7:FC:31:F6 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: F3 Signing time: Sun 25 Oct 2026 06:48:27 +0000 Manifest this update: Sun 25 Oct 2026 06:48:26 +0000 Manifest next update: Sun 01 Nov 2026 06:48:26 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: kIm7P+kfrhF2e8yLzYs4ChGfFSA5M+4IXKh372SJx1o=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Oct 25 06:48:26 2026 GMT Not After : Nov 1 06:48:26 2026 GMT Subject: CN=6adda63b-b0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:d9:4c:49:c5:d9:70:b8:06:b0:a4:0c:be: fd:8c:6f:e4:3f:a2:ec:f4:af:6a:23:03:e3:f1:f3: c6:30:4a:9f:bb:96:58:50:97:8d:35:0c:b4:d6:b9: 7e:f9:0e:2c:7d:e5:d7:aa:d2:92:f4:99:8f:f1:d9: 62:fc:b8:e6:33:78:0c:a0:4b:ae:cf:72:c6:5a:62: fe:7d:9a:af:25:9d:44:f0:99:8a:ba:b8:9b:55:22: 6e:4f:da:a9:d8:e9:2e:30:8e:e0:c6:90:b7:75:83: a5:13:13:50:07:fd:23:3b:ed:6c:d0:34:ab:86:ea: 3d:75:10:83:9e:0d:31:61:51:4b:f3:9d:17:f9:92: 26:ad:78:6f:c2:e9:c9:13:b8:d6:95:1f:db:29:58: e7:4f:77:a8:79:10:77:34:d8:39:fb:a1:ae:0c:d1: ce:c0:86:a2:14:e4:8d:09:71:d4:43:cf:d8:75:15: b1:c6:bd:18:f7:94:e8:1f:07:bf:5e:52:d7:93:39: df:6e:ab:f9:7d:7d:af:39:43:ba:f0:6b:5b:5c:34: 80:7f:59:48:3a:d5:2a:f0:eb:03:c8:0d:00:49:1f: 7c:47:fd:c3:00:5d:85:d9:3f:be:e1:0c:26:4b:12: a5:76:35:1b:09:cf:82:ff:7b:e9:3b:5b:c6:8d:2c: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:60:73:28:C5:91:09:CB:03:E9:F3:B5:04:C4:54:24:D7:FC:31:F6 X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:f2:12:74:b9:32:4d:f4:d9:97:6d:43:5b:13:56:44:f5:e5: 7b:9b:fc:8d:ba:71:eb:5b:33:af:46:57:7b:f3:56:88:3c:b4: b5:53:aa:30:6f:1c:bf:42:6f:29:aa:1c:cf:a2:be:51:fb:ac: 84:b3:92:87:02:8b:43:0f:8f:77:f8:ea:91:e8:51:9e:c7:70: 82:e8:cf:c8:96:a6:77:c0:59:ac:94:d2:64:d9:95:f0:9e:c2: e6:05:36:6f:8d:dc:fc:da:2a:56:04:67:ae:b0:85:2a:c5:05: 32:7e:1a:38:67:92:72:bd:61:22:29:a2:d8:89:61:0f:d4:de: 83:dc:b3:de:91:94:17:fa:48:9e:a6:90:4e:d7:9f:05:43:2e: 0a:6d:4d:19:4d:c1:32:49:4c:69:d3:d9:b1:e8:9e:c1:a4:47: fb:8c:55:92:55:9e:f8:fe:f8:57:a5:44:78:a1:6a:c8:9f:2f: e4:82:82:35:2d:19:00:6b:36:cc:db:96:97:82:69:82:60:c4: 01:77:a8:1a:8c:20:f5:9d:11:8c:dc:69:47:a0:04:aa:0d:cf: f0:d3:38:56:1c:ed:dc:12:b0:45:da:4d:84:87:e6:00:f8:03: 13:9c:06:2e:0d:ba:4a:48:27:be:59:a7:45:de:91:f6:14:bb: 5d:a9:c2:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFQTQxMTAvBgNVBAUTKDFEMjQyRTM3QjdBNzQ2QzM3RTQ1NDE0NTZBQjAwOThC M0I1NzNDRkMwHhcNMjYxMDI1MDY0ODI2WhcNMjYxMTAxMDY0ODI2WjAYMRYwFAYD VQQDEw02YWRkYTYzYi1iMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2vZTEnF2XC4BrCkDL79jG/kP6Ls9K9qIwPj8fPGMEqfu5ZYUJeNNQy01rl+ +Q4sfeXXqtKS9JmP8dli/LjmM3gMoEuuz3LGWmL+fZqvJZ1E8JmKuribVSJuT9qp 2OkuMI7gxpC3dYOlExNQB/0jO+1s0DSrhuo9dRCDng0xYVFL850X+ZImrXhvwunJ E7jWlR/bKVjnT3eoeRB3NNg5+6GuDNHOwIaiFOSNCXHUQ8/YdRWxxr0Y95ToHwe/ XlLXkznfbqv5fX2vOUO68GtbXDSAf1lIOtUq8OsDyA0ASR98R/3DAF2F2T++4Qwm SxKldjUbCc+C/3vpO1vGjSwgEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRgcyjF kQnLA+nztQTEVCTX/DH2MB8GA1UdIwQYMBaAFB0kLje3p0bDfkVBRWqwCYs7Vzz8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkVBNC8yNjREQ0YxQzYz QUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJzTi1SVUZGYXJBSml6dFhQ UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkVBNC8yNjREQ0YxQzYzQUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJz Ti1SVUZGYXJBSml6dFhQUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6vISdLkyTfTZl21DWxNWRPXle5v8jbpx61szr0ZXe/NWiDy0tVOqMG8cv0Jv Kaocz6K+UfushLOShwKLQw+Pd/jqkehRnsdwgujPyJamd8BZrJTSZNmV8J7C5gU2 b43c/NoqVgRnrrCFKsUFMn4aOGeScr1hIimi2IlhD9Teg9yz3pGUF/pInqaQTtef BUMuCm1NGU3BMklMadPZseiewaRH+4xVklWe+P74V6VEeKFqyJ8v5IKCNS0ZAGs2 zNuWl4JpgmDEAXeoGowg9Z0RjNxpR6AEqg3P8NM4Vhzt3BKwRdpNhIfmAPgDE5wG Lg26SkgnvlmnRd6R9hS7XanCEQ== -----END CERTIFICATE-----Generated at Mon Oct 26 04:57:42 2026 by rpki-client