$ rpki-client -vvvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: QsYmMHwIsuWQOFMnUAMBfVAvI07MS8nfyi+efSU7p7Q= Subject key identifier: B5:E6:37:C6:7D:0B:C1:B5:F4:61:62:E0:73:CA:3F:DF:C4:8E:1B:61 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0EC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0E81 Signing time: Mon 26 Oct 2026 17:45:04 +0000 Manifest this update: Mon 26 Oct 2026 17:45:03 +0000 Manifest next update: Mon 02 Nov 2026 17:45:03 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: WuqA2xkupRPx0KPiFfySFAFowYiz7TVfZKki48zbpn4=) 2: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 2cFCTlNDIlFSidle/7a/SIVrcL9hkecXR8zTHPDN7pw=) 3: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 8EN8240RkeXll20v+ZKEM2l0H0r1O4pLdIwi1aSMet0=) 4: F2826A504FCF11EB88444467C4F9AE02.roa (hash: mfbNnHkGQfEzmbx5mnkWRdxSzdOXfwYbg2Dz8Uggeow=) 5: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: NM4ahWOPO+ilsHy5HGWnTut3f/HXCR5WoP1fo7WCekM=) 6: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: I6uNdzqOJkpVqoIsCJtM/LW7p85XLPeVISRh21FNOaE=) 7: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: SKc7rTK6TrshCb8g4KIsNcbpMMrJrhQX8+vln7hiYKM=) 8: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: zgSxrM3JDm57m2vX62mOv6kyES6AEYoM+0Yal9gdLNY=) 9: D0551B50046411F09760073DC4F9AE02.roa (hash: JF98zUiYfD63waJbzjs77cTdpfkwhQ0ndKwrtYlw7VI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3783 (0xec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Oct 26 17:45:03 2026 GMT Not After : Nov 2 17:45:03 2026 GMT Subject: CN=6adf91a0-cca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:56:1e:e6:0c:f9:67:8b:70:a3:58:29:66: 1e:84:8c:79:71:36:09:94:b5:26:3f:7b:4e:84:3d: bd:7f:fe:ad:0c:57:38:88:17:f0:60:54:c7:59:6b: bd:5f:e4:dc:2e:b9:98:ff:67:90:96:ad:c0:d8:4b: d0:2c:9a:01:e9:6e:a0:19:8e:0b:8d:bc:d7:20:7b: 8a:25:d4:d0:b4:dc:64:7a:e7:33:1b:75:fb:df:da: e4:3c:33:9c:9b:39:9e:42:d8:13:66:cd:e9:dc:6b: 68:d7:7d:88:51:0f:d9:5d:32:a0:31:c8:b6:c4:01: c3:75:7b:99:5e:43:56:0a:65:36:b5:6d:c5:37:3e: f9:ba:7b:55:b2:9a:f3:47:20:c9:1b:52:c9:f9:70: 79:a2:68:ac:a0:da:ef:e0:d5:ec:57:17:b8:dd:dc: 6c:bc:e7:f0:10:8b:c1:5b:f6:60:b3:b0:a6:e7:4f: 65:a5:8e:ef:fe:24:ae:e9:e8:22:d9:e4:50:e0:cd: 3a:da:2b:8d:31:97:cb:ff:12:00:3f:08:bf:3f:99: e3:85:b2:38:27:dc:98:e3:67:59:73:69:e4:a2:1d: 30:a0:fa:2c:79:d5:e0:67:06:c7:bb:bf:23:d6:60: b4:8d:c7:33:02:c9:ab:fd:91:5e:65:4b:2a:b9:e9: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:37:C6:7D:0B:C1:B5:F4:61:62:E0:73:CA:3F:DF:C4:8E:1B:61 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:06:64:2e:cd:d4:8a:66:23:99:a2:c7:b5:22:32:8e:bb: f5:23:b7:93:18:bf:cc:aa:bc:71:4c:6a:53:a7:4a:a6:5d:71: ed:07:d0:89:c4:11:16:77:cf:fc:56:19:66:f1:1d:72:67:eb: fd:5a:48:94:1b:31:c5:42:1a:bf:49:04:50:3d:8d:d6:bc:d4: 05:7c:9b:2d:b5:59:29:2b:37:aa:a7:65:2b:6e:5d:6d:7f:18: 60:92:0b:ed:2c:03:9b:1f:e0:90:da:7d:21:d3:ec:dc:c8:e3: cf:61:86:94:17:2f:28:6b:dc:b4:fb:fc:88:93:15:91:e0:01: 0c:ed:ca:03:51:af:54:03:41:fa:e1:e0:13:45:d3:16:c6:c2: 50:b8:00:70:68:12:a7:30:10:00:9e:f5:53:d0:a8:25:3f:6f: 31:da:11:ea:64:1d:b7:62:42:f8:85:ba:d8:ff:9f:d7:45:0d: 39:a0:8e:e8:db:03:f0:13:27:91:14:65:c6:48:62:9b:32:a2: 77:4f:3b:58:33:d4:3b:9d:d7:00:1a:e9:84:05:a2:a8:5f:46: 32:1e:12:36:dc:20:06:d5:35:01:58:66:86:bd:db:cd:cd:2e: 3d:e3:83:4b:de:ee:23:d1:19:2e:0d:e9:e1:d3:a1:c3:6d:84: 14:3f:71:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjYxMDI2MTc0NTAzWhcNMjYxMTAyMTc0NTAzWjAYMRYwFAYD VQQDEw02YWRmOTFhMC1jY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqNWHuYM+WeLcKNYKWYehIx5cTYJlLUmP3tOhD29f/6tDFc4iBfwYFTHWWu9 X+TcLrmY/2eQlq3A2EvQLJoB6W6gGY4LjbzXIHuKJdTQtNxkeuczG3X739rkPDOc mzmeQtgTZs3p3Gto132IUQ/ZXTKgMci2xAHDdXuZXkNWCmU2tW3FNz75untVsprz RyDJG1LJ+XB5omisoNrv4NXsVxe43dxsvOfwEIvBW/Zgs7Cm509lpY7v/iSu6egi 2eRQ4M062iuNMZfL/xIAPwi/P5njhbI4J9yY42dZc2nkoh0woPosedXgZwbHu78j 1mC0jcczAsmr/ZFeZUsquemZ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXmN8Z9 C8G19GFi4HPKP9/EjhthMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANN4GZC7N1IpmI5mix7UiMo679SO3kxi/zKq8cUxqU6dKpl1x7QfQicQRFnfP /FYZZvEdcmfr/VpIlBsxxUIav0kEUD2N1rzUBXybLbVZKSs3qqdlK25dbX8YYJIL 7SwDmx/gkNp9IdPs3Mjjz2GGlBcvKGvctPv8iJMVkeABDO3KA1GvVANB+uHgE0XT FsbCULgAcGgSpzAQAJ71U9CoJT9vMdoR6mQdt2JC+IW62P+f10UNOaCO6NsD8BMn kRRlxkhimzKid087WDPUO53XABrphAWiqF9GMh4SNtwgBtU1AVhmhr3bzc0uPeOD S97uI9EZLg3p4dOhw22EFD9xRw== -----END CERTIFICATE-----Generated at Mon Oct 26 21:11:08 2026 by rpki-client