$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: oqe8IMO9jqtRW9cZeAATGtL5A46SuhS96ZZb8OAHOvQ= Subject key identifier: 4C:4A:49:3C:F3:97:AD:7A:F7:80:BF:C9:2B:B9:B2:68:A0:4A:32:38 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 029D Signing time: Mon 19 Oct 2026 02:14:01 +0000 Manifest this update: Mon 19 Oct 2026 02:14:00 +0000 Manifest next update: Mon 26 Oct 2026 02:14:00 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: xwVyIzvtp3KTi8S6NOYbm1uVLqBg7zqtGc3UgzLotQQ=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Oct 19 02:14:00 2026 GMT Not After : Oct 26 02:14:00 2026 GMT Subject: CN=6ad57ce9-c12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:ab:f6:e9:73:17:6e:c8:f8:97:f1:64:1d: 5b:31:2d:69:9d:0a:b1:18:d5:2d:9a:c3:0f:67:7f: bf:ac:f8:9b:0a:a6:24:1b:5e:48:54:e5:89:40:03: 18:d6:4d:21:ab:8e:15:74:fd:ce:b5:95:95:e2:dc: 56:2c:de:bf:47:c0:ac:3f:f3:26:7d:1c:f1:e7:44: 17:fc:3f:ee:9a:14:34:6c:23:c9:62:b5:a6:94:03: 12:52:15:7b:e2:49:20:0b:a7:bc:7a:87:b3:25:85: 8f:8b:04:b9:a0:9b:11:81:08:e6:5c:3b:2e:f6:6a: 7b:9f:f0:35:bd:b1:8a:ae:13:83:68:40:ac:9c:18: 9b:e2:4d:d1:8f:b5:1d:54:cc:9a:a6:fe:f7:5f:ca: ec:17:b4:07:62:6d:b7:d4:fa:bf:fd:55:b3:d6:99: 9f:4b:d5:40:e3:1a:22:57:a9:47:77:8f:ec:22:5f: 72:41:a0:0d:c5:4d:3a:5c:c2:2b:7f:80:a4:2d:43: 4f:bc:b5:5d:6c:7d:f6:4c:40:b8:0e:dd:4f:8c:ae: c9:b1:e9:92:a6:ec:60:a2:4b:08:c4:87:13:28:e5: 95:d3:08:0b:ff:ba:4b:9f:6d:60:e7:0d:ca:bf:14: fb:5e:fd:fa:88:cd:1d:08:63:f6:13:93:14:8d:c4: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4A:49:3C:F3:97:AD:7A:F7:80:BF:C9:2B:B9:B2:68:A0:4A:32:38 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1e:b6:d5:3f:7b:0f:85:69:96:4b:19:69:71:fc:06:67:f5: 63:7e:99:29:b7:00:63:eb:12:4a:03:b1:e5:54:e0:d3:54:46: ab:bb:28:d3:44:76:75:5d:e7:66:4f:53:96:e7:e4:51:7d:10: 1e:ed:46:18:33:ca:4f:0f:39:60:ef:d1:30:8d:21:f6:72:46: ae:b9:06:f2:76:ef:f1:51:ba:5e:44:8d:30:4b:a2:2c:8d:fd: 17:58:a6:ce:87:c4:ee:71:cf:15:81:1c:9c:c0:f5:fb:7c:40: 24:39:91:e8:cb:05:1e:f3:93:43:3a:f3:8f:ac:45:65:e5:a0: 37:d4:85:49:09:92:ee:82:c6:ce:58:f4:9a:e5:58:0b:21:3e: 9b:96:d1:6a:3c:1e:fb:2f:49:0c:06:1b:74:b5:ee:5f:bb:c2: 75:7e:ef:49:c4:4f:77:72:f3:ea:b4:7c:d0:8c:91:65:3e:11: 57:dd:69:db:dd:5b:03:d3:e7:19:9e:b5:7f:d6:34:41:1b:25: d3:00:13:63:9a:2f:ec:c1:8b:46:59:bb:a6:6c:8e:88:88:a9: 9a:61:8f:54:df:26:1e:93:99:e0:75:0b:81:1b:d9:a3:5c:d1: 0b:6b:1b:82:e1:3f:b4:40:e1:e5:90:d5:b1:9f:46:58:80:d7: 96:6a:60:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYxMDE5MDIxNDAwWhcNMjYxMDI2MDIxNDAwWjAYMRYwFAYD VQQDEw02YWQ1N2NlOS1jMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn6r9ulzF27I+JfxZB1bMS1pnQqxGNUtmsMPZ3+/rPibCqYkG15IVOWJQAMY 1k0hq44VdP3OtZWV4txWLN6/R8CsP/MmfRzx50QX/D/umhQ0bCPJYrWmlAMSUhV7 4kkgC6e8eoezJYWPiwS5oJsRgQjmXDsu9mp7n/A1vbGKrhODaECsnBib4k3Rj7Ud VMyapv73X8rsF7QHYm231Pq//VWz1pmfS9VA4xoiV6lHd4/sIl9yQaANxU06XMIr f4CkLUNPvLVdbH32TEC4Dt1PjK7JsemSpuxgoksIxIcTKOWV0wgL/7pLn21g5w3K vxT7Xv36iM0dCGP2E5MUjcSqDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExKSTzz l61694C/ySu5smigSjI4MB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYx621T97D4VplksZaXH8Bmf1Y36ZKbcAY+sSSgOx5VTg01RGq7so00R2dV3n Zk9TlufkUX0QHu1GGDPKTw85YO/RMI0h9nJGrrkG8nbv8VG6XkSNMEuiLI39F1im zofE7nHPFYEcnMD1+3xAJDmR6MsFHvOTQzrzj6xFZeWgN9SFSQmS7oLGzlj0muVY CyE+m5bRajwe+y9JDAYbdLXuX7vCdX7vScRPd3Lz6rR80IyRZT4RV91p291bA9Pn GZ61f9Y0QRsl0wATY5ov7MGLRlm7pmyOiIipmmGPVN8mHpOZ4HULgRvZo1zRC2sb guE/tEDh5ZDVsZ9GWIDXlmpgBQ== -----END CERTIFICATE-----Generated at Tue Oct 20 10:08:35 2026 by rpki-client