$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json) Hash identifier: kyOuHVvU0OVMFfhtjXhPSXFqXDv/JGwT2Z1B/dnpcQs= Subject key identifier: 92:5A:F0:21:0B:95:71:CF:09:61:96:34:19:40:4F:2B:1E:F1:A6:9E Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft Manifest number: 016B Signing time: Sat 29 Aug 2026 04:55:44 +0000 Manifest this update: Sat 29 Aug 2026 04:55:43 +0000 Manifest next update: Sat 05 Sep 2026 04:55:43 +0000 Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: ZI4dWavq01e8XGXp2x4enM11DBy+QZk/MCrh8mx0rzA=) 2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Validity Not Before: Aug 29 04:55:43 2026 GMT Not After : Sep 5 04:55:43 2026 GMT Subject: CN=6a926650-799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:43:49:f9:26:7e:6b:d7:3d:c9:7b:77:0a: 4d:7b:49:d3:c3:b5:eb:36:ad:da:c7:de:38:9c:4f: e2:95:ba:6e:2e:2f:03:f8:ed:20:69:7e:39:4a:fb: 71:16:14:db:98:df:33:27:86:e7:5e:a9:90:58:48: 59:93:94:1e:de:a0:b8:2b:4f:9f:e1:94:f9:13:c2: a4:52:24:3c:8d:fb:45:46:21:77:d5:a7:a9:cc:c0: 59:d3:04:1a:ab:bb:7d:f1:49:c3:82:e3:f6:f5:5d: f7:23:60:92:53:6b:18:f6:7e:43:65:96:b2:bf:6e: ff:15:09:f9:32:96:5b:23:b7:77:84:2d:8f:5e:fa: a4:aa:aa:2b:39:06:d8:84:9f:e0:57:f0:03:c9:2a: 49:ed:8c:9b:ca:a0:cb:b4:0c:7a:84:b5:f0:05:25: 07:d0:63:52:4e:b2:53:62:dd:f7:2b:2e:4d:8f:5c: e4:cd:99:fa:5f:b0:cd:81:53:ce:76:dd:79:9f:8d: 51:25:4a:2f:16:a6:9c:e8:16:96:d9:61:84:61:5b: 06:6c:ec:f8:cf:a7:48:de:3c:75:c6:cc:bc:8e:c4: 51:3d:64:85:15:c5:db:72:54:85:a4:50:96:24:2c: 44:41:fb:da:ab:d3:53:69:1e:3a:93:73:03:c6:73: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:F0:21:0B:95:71:CF:09:61:96:34:19:40:4F:2B:1E:F1:A6:9E X509v3 Authority Key Identifier: keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:22:45:e8:5d:3f:b8:81:58:07:b6:a0:51:78:50:d7:ec:7b: 27:c4:98:6a:81:bc:c3:28:89:f6:86:27:14:01:7a:96:71:9e: ba:4f:12:1b:60:d1:dc:a1:44:6e:e5:7e:b6:36:4c:d8:39:1d: 25:11:39:b0:b1:a3:7e:35:ea:dc:fd:c0:12:8a:af:85:b9:d0: 1a:6a:ba:97:8c:a8:15:41:29:68:6d:48:eb:5c:ff:fe:30:f9: 50:ac:5b:6d:da:83:d1:5d:24:e3:6e:25:32:e0:54:4e:c2:64: 51:31:f1:8b:8c:5a:a0:75:f8:16:40:96:9c:37:8a:36:75:0a: d6:42:d6:14:88:27:61:55:61:18:f9:8c:b5:2a:ce:cd:cb:5a: 9d:40:a7:86:8d:f3:03:88:ac:a9:45:82:25:ff:ff:2a:76:a7: 03:75:36:4c:c1:5c:14:8e:fb:c6:b8:6b:35:5f:6a:6d:7e:f6: 20:2a:07:ea:c7:f3:08:b1:81:8f:0e:71:26:39:94:77:e3:bc: 61:46:92:c4:b0:cd:a3:3e:9c:77:9d:10:d7:31:63:68:bd:52: e2:e9:b8:ac:be:ca:4d:50:5c:4b:89:3c:80:6b:9d:01:c7:68: e3:c0:23:24:a5:1e:9f:76:62:f7:46:3c:73:96:4d:63:60:09: cb:4e:de:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QzMxMTAvBgNVBAUTKDFFNUMxMDdFRkQwM0NGMTNEMjE0QTM5QTZBMkNFOERE QUQzMDQ3MEUwHhcNMjYwODI5MDQ1NTQzWhcNMjYwOTA1MDQ1NTQzWjAYMRYwFAYD VQQDEw02YTkyNjY1MC03OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWpDSfkmfmvXPcl7dwpNe0nTw7XrNq3ax944nE/ilbpuLi8D+O0gaX45Svtx FhTbmN8zJ4bnXqmQWEhZk5Qe3qC4K0+f4ZT5E8KkUiQ8jftFRiF31aepzMBZ0wQa q7t98UnDguP29V33I2CSU2sY9n5DZZayv27/FQn5MpZbI7d3hC2PXvqkqqorOQbY hJ/gV/ADySpJ7YybyqDLtAx6hLXwBSUH0GNSTrJTYt33Ky5Nj1zkzZn6X7DNgVPO dt15n41RJUovFqac6BaW2WGEYVsGbOz4z6dI3jx1xsy8jsRRPWSFFcXbclSFpFCW JCxEQfvaq9NTaR46k3MDxnPzKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJa8CEL lXHPCWGWNBlATyse8aaeMB8GA1UdIwQYMBaAFB5cEH79A88T0hSjmmos6N2tMEcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlDMy80NUNDODJDQzgw NjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4UFNGS09hYWl6bzNhMHdS dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsd1FmdjBEenhQU0ZLT2FhaXpvM2Ewd1J3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlDMy80NUNDODJDQzgwNjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4 UFNGS09hYWl6bzNhMHdSdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACiJF6F0/uIFYB7agUXhQ1+x7J8SYaoG8wyiJ9oYnFAF6lnGeuk8SG2DR3KFE buV+tjZM2DkdJRE5sLGjfjXq3P3AEoqvhbnQGmq6l4yoFUEpaG1I61z//jD5UKxb bdqD0V0k424lMuBUTsJkUTHxi4xaoHX4FkCWnDeKNnUK1kLWFIgnYVVhGPmMtSrO zctanUCnho3zA4isqUWCJf//KnanA3U2TMFcFI77xrhrNV9qbX72ICoH6sfzCLGB jw5xJjmUd+O8YUaSxLDNoz6cd50Q1zFjaL1S4um4rL7KTVBcS4k8gGudAcdo48Aj JKUen3Zi90Y8c5ZNY2AJy07ebg== -----END CERTIFICATE-----Generated at Sun Aug 30 23:58:02 2026 by rpki-client