$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: WXZAPa0Ivwmyqj36FU4QKLYKicT3UypCeqUJaX/+X+8= Subject key identifier: 9A:7D:44:43:7A:9D:ED:AB:DD:98:AD:0B:48:55:93:CA:47:9F:17:E9 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 0460 Signing time: Tue 13 Oct 2026 00:19:03 +0000 Manifest this update: Tue 13 Oct 2026 00:19:03 +0000 Manifest next update: Tue 20 Oct 2026 00:19:03 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: nRKHJjxlYMUaX/BcDbjvIWw5goxIqTZtydJVnPG82Ug=) 2: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=) 3: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 74u63+bcbtzbnwhLBuZvwYUeCNjr3rxkxpotr9+jKD4=) 4: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 00:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Oct 13 00:19:03 2026 GMT Not After : Oct 20 00:19:03 2026 GMT Subject: CN=6acd78f7-fe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:e6:07:6c:e8:95:ed:25:7c:13:71:a3:8c: 77:f0:ba:72:1b:c7:a6:a7:56:28:03:3f:33:ee:de: 84:63:e5:34:7b:08:63:82:48:6c:dd:7e:c2:be:e9: cb:9c:c0:a4:48:3a:92:b1:1b:9c:f1:6c:ae:ce:03: 6f:04:16:77:c5:df:9d:4d:33:c6:93:6b:14:44:95: 8f:3c:ca:2d:88:d1:ed:09:79:4d:e6:74:d3:ee:69: 02:0b:e7:4b:b0:52:e3:30:ad:ee:e6:1d:67:5e:c0: f9:36:e8:a1:25:dd:24:ae:cf:55:7d:90:77:99:f7: c0:08:f1:42:c0:0c:f7:60:15:83:6e:59:24:f9:d0: 41:f3:cf:b1:02:de:5a:2c:9e:c1:2d:71:4a:dc:ec: 96:af:b4:b5:77:11:7b:93:65:bd:c2:23:17:05:f4: 5a:3b:2b:a0:15:3d:55:77:20:6e:97:6c:13:34:dc: d0:55:29:34:bb:9d:41:70:74:84:51:d5:03:e5:bc: ca:00:7a:7b:f0:38:e7:1d:bd:c3:3e:28:b4:55:52: a0:4e:a7:29:24:c3:e7:26:b5:1a:8c:5e:a9:30:87: 39:6e:48:f0:b2:fb:0e:88:cd:87:e8:2f:9d:7c:9b: ee:fd:71:20:87:d2:7b:e1:09:04:94:3f:68:8b:91: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7D:44:43:7A:9D:ED:AB:DD:98:AD:0B:48:55:93:CA:47:9F:17:E9 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:0e:f6:02:80:a7:1b:40:95:ca:75:7c:0c:13:3a:1e:74:ce: 2e:f5:27:da:22:23:99:8d:6d:0a:87:c6:9c:13:95:96:ff:5f: 6e:4b:a9:32:12:06:f3:bc:e8:f4:46:01:c5:4d:eb:8c:b9:56: 03:db:af:ca:e4:ea:c5:ff:07:e1:a1:05:27:8c:ae:95:72:0d: 15:a5:8a:7f:aa:b2:0a:b3:17:09:f4:5c:d7:ce:e5:f7:1a:d7: b4:83:c8:91:f8:e4:ef:38:b3:55:51:45:80:4f:08:d2:ca:53: d3:bd:24:40:43:1e:69:12:9a:8a:46:48:8e:71:01:44:41:11: dc:d1:53:4a:06:c1:e8:29:4e:81:06:0e:ae:86:c6:bf:2a:5d: 5e:5f:a9:40:d9:76:2f:f8:9b:21:f4:d0:cd:17:9c:26:c0:ad: 35:71:c5:29:f2:5b:de:b5:93:eb:c5:1b:bf:d5:00:ba:b4:f9: c9:0b:1e:58:89:32:1e:2e:29:52:24:47:7a:40:59:c4:38:25: 9c:45:d3:c6:df:70:bd:7c:07:df:10:b8:c9:e7:bb:42:fe:9e: de:7c:ba:a4:f7:c0:40:62:8c:c0:11:d8:e4:8e:24:45:91:50: ea:e3:00:cf:74:44:f7:57:ae:aa:88:86:e3:dd:2e:98:b3:00: f7:d7:5a:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYxMDEzMDAxOTAzWhcNMjYxMDIwMDAxOTAzWjAYMRYwFAYD VQQDEw02YWNkNzhmNy1mZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArX/mB2zole0lfBNxo4x38LpyG8emp1YoAz8z7t6EY+U0ewhjgkhs3X7CvunL nMCkSDqSsRuc8WyuzgNvBBZ3xd+dTTPGk2sURJWPPMotiNHtCXlN5nTT7mkCC+dL sFLjMK3u5h1nXsD5NuihJd0krs9VfZB3mffACPFCwAz3YBWDblkk+dBB88+xAt5a LJ7BLXFK3OyWr7S1dxF7k2W9wiMXBfRaOyugFT1VdyBul2wTNNzQVSk0u51BcHSE UdUD5bzKAHp78DjnHb3DPii0VVKgTqcpJMPnJrUajF6pMIc5bkjwsvsOiM2H6C+d fJvu/XEgh9J74QkElD9oi5HfNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJp9REN6 ne2r3ZitC0hVk8pHnxfpMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcA72AoCnG0CVynV8DBM6HnTOLvUn2iIjmY1tCofGnBOVlv9fbkupMhIG87zo 9EYBxU3rjLlWA9uvyuTqxf8H4aEFJ4yulXINFaWKf6qyCrMXCfRc187l9xrXtIPI kfjk7zizVVFFgE8I0spT070kQEMeaRKaikZIjnEBREER3NFTSgbB6ClOgQYOrobG vypdXl+pQNl2L/ibIfTQzRecJsCtNXHFKfJb3rWT68Ubv9UAurT5yQseWIkyHi4p UiRHekBZxDglnEXTxt9wvXwH3xC4yee7Qv6e3ny6pPfAQGKMwBHY5I4kRZFQ6uMA z3RE91euqoiG490umLMA99daYA== -----END CERTIFICATE-----Generated at Tue Oct 13 18:41:10 2026 by rpki-client