$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: hF7sd3YXwrr3rq7Pn9ElzAA43rEKr5Wuz2LNwzCo5qc= Subject key identifier: D2:41:52:01:EB:F9:36:BD:63:18:07:61:C9:91:28:40:6C:02:8F:13 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 0243 Signing time: Wed 09 Sep 2026 02:52:36 +0000 Manifest this update: Wed 09 Sep 2026 02:52:36 +0000 Manifest next update: Wed 16 Sep 2026 02:52:36 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: P143kUP+mD1D8aHzTSPg1KilEryfkfK1taxtrI2iB7c=) 2: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: OXtGQAmVv6/zcLdy3u3i2oyqHV0zpKuoz/3nmtWN4+c=) 3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: o+6ZDuPIrO5DnJqINIScEMsH1AtzfYFLtkRLVBpnBNo=) 4: F9F53948599011EEB54F7158C4F9AE02.roa (hash: 53jUno38hR5QrdEYJgj5E34tWdnvnUXHFCIqAyPF2Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 02:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Sep 9 02:52:36 2026 GMT Not After : Sep 16 02:52:36 2026 GMT Subject: CN=6aa0c9f4-e3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:bc:bf:0e:9f:7a:60:a4:bf:6c:26:87:2c: f2:67:c5:01:76:38:aa:b0:e8:b2:5c:8b:0e:32:ba: f9:b6:e7:36:be:13:e2:0e:13:d9:2b:5a:ce:0b:3e: e5:31:89:9f:7f:47:ef:8b:2c:06:a9:92:ee:9f:0b: 6f:7e:30:31:a5:06:81:3d:f5:11:70:e2:90:91:5a: b9:74:f8:b0:55:22:2b:72:96:ca:d5:46:db:6b:e0: a2:32:2d:0f:db:6b:8f:e7:6b:25:74:1b:9f:82:31: 78:92:27:b3:61:9e:17:35:ee:af:b2:af:8c:0c:87: be:09:00:7c:16:1f:6a:e3:92:5a:7d:08:cf:b6:d1: 47:aa:48:28:03:c8:82:a2:99:fa:7d:73:0c:d2:37: 4b:0a:24:b8:c4:75:fd:44:36:73:9a:20:cf:a4:51: f5:f3:d4:61:ec:57:77:1e:88:ef:f6:52:34:86:17: d0:7e:02:b6:3f:26:46:53:c5:1b:67:71:1b:c5:8e: ac:d5:87:6a:3f:14:85:fb:00:ef:16:c8:68:48:b6: be:fa:dd:18:7e:12:a9:2c:87:cd:67:e8:01:4e:e8: 57:d2:1d:f4:71:dc:0b:5d:91:0d:66:c6:5b:ce:a7: 90:36:98:eb:f5:04:3f:18:18:e7:56:18:57:c2:ab: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:52:01:EB:F9:36:BD:63:18:07:61:C9:91:28:40:6C:02:8F:13 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6b:5e:17:8a:c9:76:54:09:29:e2:95:5d:13:85:4f:49:a3: ae:99:82:1d:dd:a1:62:35:c2:4b:24:81:4b:16:34:a8:54:41: 2e:e7:e1:6e:96:b1:c3:30:d4:cc:b8:20:49:43:71:86:31:a4: 2d:ec:27:cc:3a:cf:f6:05:87:95:9e:7f:f7:ba:34:f9:e8:7c: fb:1c:79:df:3c:bc:10:b3:eb:9b:cc:50:46:ca:38:3a:5b:d1: ce:e1:f4:e7:b9:81:42:09:28:b7:f8:11:43:96:bf:88:68:74: d2:8f:ea:41:be:c1:11:33:52:f4:1e:da:72:da:df:97:9e:bd: 56:4c:e2:9c:09:96:87:cd:8f:f4:cd:6c:65:00:c8:fa:72:b8: 98:04:f0:86:8f:52:33:7f:bf:0c:e5:3d:d6:3c:9d:54:69:e6: 6a:69:eb:b5:f9:b9:e9:a1:a5:08:a4:da:e8:53:f6:5f:8f:76: 5e:f7:19:8a:31:e3:7e:61:c2:e7:f1:46:51:ab:fe:6d:7a:4f: 56:23:2d:6b:6a:5d:1d:b4:7f:69:d8:5e:c6:f3:fb:88:f4:40: bf:5e:78:1c:72:ad:da:df:b6:e9:c9:9d:d3:95:06:ab:50:33: 88:15:88:de:8d:00:cd:f8:29:67:8e:90:6c:6c:d4:89:bd:06: 82:92:0b:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjYwOTA5MDI1MjM2WhcNMjYwOTE2MDI1MjM2WjAYMRYwFAYD VQQDEw02YWEwYzlmNC1lM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsC8vw6femCkv2wmhyzyZ8UBdjiqsOiyXIsOMrr5tuc2vhPiDhPZK1rOCz7l MYmff0fviywGqZLunwtvfjAxpQaBPfURcOKQkVq5dPiwVSIrcpbK1Ubba+CiMi0P 22uP52sldBufgjF4kiezYZ4XNe6vsq+MDIe+CQB8Fh9q45JafQjPttFHqkgoA8iC opn6fXMM0jdLCiS4xHX9RDZzmiDPpFH189Rh7Fd3Hojv9lI0hhfQfgK2PyZGU8Ub Z3EbxY6s1YdqPxSF+wDvFshoSLa++t0YfhKpLIfNZ+gBTuhX0h30cdwLXZENZsZb zqeQNpjr9QQ/GBjnVhhXwqv7gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJBUgHr +Ta9YxgHYcmRKEBsAo8TMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHGteF4rJdlQJKeKVXROFT0mjrpmCHd2hYjXCSySBSxY0qFRBLufhbpaxwzDU zLggSUNxhjGkLewnzDrP9gWHlZ5/97o0+eh8+xx53zy8ELPrm8xQRso4OlvRzuH0 57mBQgkot/gRQ5a/iGh00o/qQb7BETNS9B7actrfl569VkzinAmWh82P9M1sZQDI +nK4mATwho9SM3+/DOU91jydVGnmamnrtfm56aGlCKTa6FP2X492XvcZijHjfmHC 5/FGUav+bXpPViMta2pdHbR/adhexvP7iPRAv154HHKt2t+26cmd05UGq1AziBWI 3o0AzfgpZ46QbGzUib0GgpILjA== -----END CERTIFICATE-----Generated at Thu Sep 10 18:11:20 2026 by rpki-client