$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: e4OupGDT0sqxFNSZ+buNaI3CsdPP+XYHZJcaY6Wr7ak= Subject key identifier: 92:63:2D:47:7C:85:05:DE:04:FD:3B:60:CA:9A:B6:76:31:FC:86:8D Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 027B Signing time: Sat 17 Oct 2026 02:38:12 +0000 Manifest this update: Sat 17 Oct 2026 02:38:11 +0000 Manifest next update: Sat 24 Oct 2026 02:38:11 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: IVOukse2mf2w03K8Ntof4qHoluja0CgKICpodqr2ZOU=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=) 3: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) 4: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 02:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Oct 17 02:38:11 2026 GMT Not After : Oct 24 02:38:11 2026 GMT Subject: CN=6ad2df94-9d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:1d:c4:70:9a:f4:11:02:7b:8b:71:1f:8a: 20:5d:79:e5:44:61:4a:49:82:4d:28:39:19:52:e0: d9:fc:f7:00:62:0f:82:a6:3e:60:30:14:b6:be:1c: e5:d4:da:2e:f5:74:90:42:f0:7a:e0:60:c5:23:f5: a9:45:8d:be:11:44:3b:79:ee:67:4b:ca:54:bb:5c: 5d:f5:ef:d3:c9:86:26:b3:28:fd:dc:2b:cd:48:3d: d0:e8:ac:81:56:89:6b:24:83:bd:24:d3:79:d5:6c: 21:10:c3:af:2b:10:76:6f:7c:cc:d4:38:68:6a:3f: 1d:5a:ed:92:ef:05:35:f7:22:1f:d4:10:12:08:ff: 2e:ea:5f:8f:40:3c:76:be:53:44:15:a2:b2:34:7c: 08:e3:5c:ad:ef:cb:d0:8c:b1:a7:a5:bc:53:a6:8a: 44:1c:db:31:b2:84:46:0d:f1:4d:3b:06:ad:c1:4f: 60:14:3a:c0:c1:d3:7b:46:91:a2:28:44:dd:f1:e3: 01:64:a0:1a:47:bc:16:15:c6:4b:7e:29:d8:0e:e2: ef:9f:a9:13:4e:54:c6:b6:0e:2a:c2:54:21:0e:82: a6:b1:aa:d5:d8:78:f5:ef:9e:e0:99:b5:4e:69:dc: b6:f4:1e:24:e6:34:e7:ad:41:cd:86:88:32:ed:e4: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:63:2D:47:7C:85:05:DE:04:FD:3B:60:CA:9A:B6:76:31:FC:86:8D X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f0:dc:c7:40:88:26:7f:24:d4:89:07:97:66:cf:fe:4c:89: 7d:51:95:df:20:e0:f8:fa:30:c7:60:d2:eb:eb:27:2b:2f:56: 6f:85:55:6c:0b:d4:0c:7e:7f:2f:89:5b:f2:cd:81:df:38:ce: 61:fe:f6:d8:41:11:3a:75:2c:7f:bb:4a:3d:76:05:3b:d2:e7: 45:fa:39:e9:91:67:14:fd:35:5f:aa:68:9a:9e:52:27:9b:50: 7f:40:9c:4d:be:61:3c:11:80:da:6b:38:7e:e4:e1:1c:fd:a0: 4c:84:9c:a2:b1:8b:3a:f4:31:19:30:fd:fd:ae:fe:6a:75:83: c4:32:8c:31:c7:b8:c6:be:3b:b8:36:d3:96:d4:37:73:29:9c: 1b:e7:34:c9:9b:94:4e:84:90:13:7f:f8:26:65:8c:8a:b9:83: dc:ed:8c:67:70:31:31:47:cf:fd:10:14:ef:75:12:eb:ae:4b: 58:27:6d:d8:61:4d:2a:80:fd:f9:10:86:4d:05:64:c3:c0:61: 5a:a2:04:d2:42:06:59:30:f9:52:59:f1:e4:cb:ce:97:11:89: 20:bf:0d:45:08:c6:92:91:84:5f:e2:35:fe:64:4f:14:02:da: c3:2d:7d:2d:61:5c:7a:fa:3d:1e:56:9d:d0:b5:21:ab:77:d4: e0:29:fa:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYxMDE3MDIzODExWhcNMjYxMDI0MDIzODExWjAYMRYwFAYD VQQDEw02YWQyZGY5NC05ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWcdxHCa9BECe4txH4ogXXnlRGFKSYJNKDkZUuDZ/PcAYg+Cpj5gMBS2vhzl 1Nou9XSQQvB64GDFI/WpRY2+EUQ7ee5nS8pUu1xd9e/TyYYmsyj93CvNSD3Q6KyB VolrJIO9JNN51WwhEMOvKxB2b3zM1Dhoaj8dWu2S7wU19yIf1BASCP8u6l+PQDx2 vlNEFaKyNHwI41yt78vQjLGnpbxTpopEHNsxsoRGDfFNOwatwU9gFDrAwdN7RpGi KETd8eMBZKAaR7wWFcZLfinYDuLvn6kTTlTGtg4qwlQhDoKmsarV2Hj1757gmbVO ady29B4k5jTnrUHNhogy7eRKEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJjLUd8 hQXeBP07YMqatnYx/IaNMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/Dcx0CIJn8k1IkHl2bP/kyJfVGV3yDg+Powx2DS6+snKy9Wb4VVbAvUDH5/ L4lb8s2B3zjOYf722EEROnUsf7tKPXYFO9LnRfo56ZFnFP01X6pomp5SJ5tQf0Cc Tb5hPBGA2ms4fuThHP2gTIScorGLOvQxGTD9/a7+anWDxDKMMce4xr47uDbTltQ3 cymcG+c0yZuUToSQE3/4JmWMirmD3O2MZ3AxMUfP/RAU73US665LWCdt2GFNKoD9 +RCGTQVkw8BhWqIE0kIGWTD5Ulnx5MvOlxGJIL8NRQjGkpGEX+I1/mRPFALawy19 LWFcevo9Hlad0LUhq3fU4Cn6pQ== -----END CERTIFICATE-----Generated at Sun Oct 18 09:20:59 2026 by rpki-client