$ rpki-client -vvvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: hq/3rtz0d0y39QQgChYqepZPLJ9x0g9N1GJ39pg+aLA= Subject key identifier: 79:17:F2:ED:B9:34:2A:D1:8E:30:20:9F:DA:DB:35:9E:DF:F6:33:2E Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0EAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0E69 Signing time: Tue 08 Sep 2026 17:50:27 +0000 Manifest this update: Tue 08 Sep 2026 17:50:27 +0000 Manifest next update: Tue 15 Sep 2026 17:50:27 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: /CtaaJ8SypSQvjo2PCUtycPspK5N2fF5oxBonSVAv4M=) 2: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 2cFCTlNDIlFSidle/7a/SIVrcL9hkecXR8zTHPDN7pw=) 3: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: NM4ahWOPO+ilsHy5HGWnTut3f/HXCR5WoP1fo7WCekM=) 4: F2826A504FCF11EB88444467C4F9AE02.roa (hash: mfbNnHkGQfEzmbx5mnkWRdxSzdOXfwYbg2Dz8Uggeow=) 5: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: SKc7rTK6TrshCb8g4KIsNcbpMMrJrhQX8+vln7hiYKM=) 6: D0551B50046411F09760073DC4F9AE02.roa (hash: JF98zUiYfD63waJbzjs77cTdpfkwhQ0ndKwrtYlw7VI=) 7: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 8EN8240RkeXll20v+ZKEM2l0H0r1O4pLdIwi1aSMet0=) 8: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: zgSxrM3JDm57m2vX62mOv6kyES6AEYoM+0Yal9gdLNY=) 9: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: I6uNdzqOJkpVqoIsCJtM/LW7p85XLPeVISRh21FNOaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 17:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3759 (0xeaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Sep 8 17:50:27 2026 GMT Not After : Sep 15 17:50:27 2026 GMT Subject: CN=6aa04ae3-f8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:bc:2b:23:44:8d:69:40:a3:ae:8a:d5:6c: 93:b3:f4:14:cd:1d:63:46:39:cd:9c:b8:d9:6f:c3: 57:b6:3f:4c:b3:32:a8:87:21:e5:9f:20:cc:f1:3d: 41:07:78:dc:67:bf:5c:1d:a6:61:e6:19:5d:5a:a5: 68:f3:a3:34:0a:c7:db:bf:f2:fa:ce:0a:a7:3c:72: 1b:e0:d1:ea:85:63:38:19:2b:ad:c0:94:69:be:73: b4:45:5d:7a:db:92:8b:52:95:20:31:e5:15:2a:80: a1:ed:66:39:12:d3:db:da:66:ef:f5:02:61:7a:d8: d8:ca:8d:98:85:32:15:ff:b8:c4:23:bb:35:00:2f: b2:14:75:fa:64:b9:73:c6:1a:b1:49:6c:e3:f4:84: 78:a8:ef:d5:61:ed:f2:29:99:f1:f3:40:86:55:9a: b1:c4:58:7f:fd:6b:fb:b2:d8:17:bc:65:6b:60:2e: 33:ea:ee:af:e8:bb:74:be:df:cb:ca:67:ae:a6:44: 7d:4b:cc:92:ce:ea:f5:f5:5b:5b:c6:03:97:b2:5d: d2:93:96:a4:64:a6:b2:fa:40:cb:ec:9d:05:fd:35: 4d:80:6a:f7:e7:04:f5:f3:10:f2:57:5e:34:da:61: 99:9f:7a:fd:8e:31:c1:01:6e:a8:92:cc:35:34:d4: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:F2:ED:B9:34:2A:D1:8E:30:20:9F:DA:DB:35:9E:DF:F6:33:2E X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:27:2c:b8:9c:6a:dd:d3:9e:a7:c0:74:9e:d5:4c:0c:c3:7f: 36:4e:65:ce:e8:e2:65:26:71:80:62:cb:74:e9:f4:aa:ec:ae: 1c:1f:dc:79:49:84:29:60:1b:f2:58:72:81:4b:c8:b6:86:c7: 45:86:ef:62:cf:a1:6f:9f:a9:e3:5c:47:ee:8f:ef:25:54:32: a6:ee:3a:57:c0:d6:26:69:38:01:96:88:cc:3a:4a:5e:bd:ba: c6:e4:b5:8a:17:0c:d8:82:58:14:0c:7c:f7:5d:c6:aa:5b:20: c3:32:3f:0a:7c:75:ee:9a:82:d2:bd:64:d8:3b:6d:b3:00:b1: ce:dd:a9:13:76:26:0d:3d:51:34:9f:02:35:64:88:9b:6f:1c: 44:04:95:93:96:0e:d4:47:18:4b:1d:cf:f8:35:38:82:8b:61: 02:de:e3:b7:2d:42:40:77:a2:af:73:ee:d3:c4:31:3c:04:ae: 3a:fa:71:1a:73:34:55:b7:16:da:b2:2b:ad:bc:b3:53:42:94: 80:3a:82:c2:f6:6d:0d:fa:c5:7d:0a:2f:b0:ac:2c:04:48:a4: 75:68:f2:62:b7:12:0e:0f:1d:71:99:ae:dd:cb:1f:a0:68:de: 60:65:bf:b7:84:a9:01:e7:a1:e0:22:be:59:4f:e8:1d:20:2e: 6b:c2:ad:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjYwOTA4MTc1MDI3WhcNMjYwOTE1MTc1MDI3WjAYMRYwFAYD VQQDEw02YWEwNGFlMy1mOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4em8KyNEjWlAo66K1WyTs/QUzR1jRjnNnLjZb8NXtj9MszKohyHlnyDM8T1B B3jcZ79cHaZh5hldWqVo86M0Csfbv/L6zgqnPHIb4NHqhWM4GSutwJRpvnO0RV16 25KLUpUgMeUVKoCh7WY5EtPb2mbv9QJhetjYyo2YhTIV/7jEI7s1AC+yFHX6ZLlz xhqxSWzj9IR4qO/VYe3yKZnx80CGVZqxxFh//Wv7stgXvGVrYC4z6u6v6Lt0vt/L ymeupkR9S8ySzur19VtbxgOXsl3Sk5akZKay+kDL7J0F/TVNgGr35wT18xDyV140 2mGZn3r9jjHBAW6oksw1NNSPBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkX8u25 NCrRjjAgn9rbNZ7f9jMuMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoScsuJxq3dOep8B0ntVMDMN/Nk5lzujiZSZxgGLLdOn0quyuHB/ceUmEKWAb 8lhygUvItobHRYbvYs+hb5+p41xH7o/vJVQypu46V8DWJmk4AZaIzDpKXr26xuS1 ihcM2IJYFAx8913GqlsgwzI/Cnx17pqC0r1k2DttswCxzt2pE3YmDT1RNJ8CNWSI m28cRASVk5YO1EcYSx3P+DU4gothAt7jty1CQHeir3Pu08QxPASuOvpxGnM0VbcW 2rIrrbyzU0KUgDqCwvZtDfrFfQovsKwsBEikdWjyYrcSDg8dcZmu3csfoGjeYGW/ t4SpAeeh4CK+WU/oHSAua8KtGQ== -----END CERTIFICATE-----Generated at Thu Sep 10 05:19:21 2026 by rpki-client