$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: Zc6ArX91vc0qXVUjWd5jj28PUVG5vBfNOkTqcDLUVu8= Subject key identifier: A0:1B:2D:06:F1:02:95:67:4C:CE:43:B7:48:72:29:3B:39:B6:30:F1 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 1A3A Signing time: Tue 06 Oct 2026 16:22:12 +0000 Manifest this update: Tue 06 Oct 2026 16:22:11 +0000 Manifest next update: Tue 13 Oct 2026 16:22:11 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: oPhgMUsErOq6pgSBR5Gbtf3mYnK7sZozdi/OcchiJjg=) 2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=) 3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6740 (0x1a54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Oct 6 16:22:11 2026 GMT Not After : Oct 13 16:22:11 2026 GMT Subject: CN=6ac52034-4c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:b3:1f:28:3c:8c:6c:21:97:41:f9:1c:23: 59:4a:a4:4e:e1:b0:3a:58:3b:eb:21:d0:14:28:53: 79:3c:fb:16:83:cc:f3:ce:43:d6:d4:cb:c8:80:b3: 41:59:7f:f2:34:6b:31:3b:a0:a9:fd:5f:2e:47:68: e1:93:b5:9b:42:a6:63:03:9d:e9:28:d3:b5:e3:b0: fc:e8:cd:61:3d:c7:c9:f9:ea:99:9b:5c:ef:4d:f0: c5:c6:ce:cf:3c:13:bd:a9:ee:d1:fe:d2:df:50:94: dd:96:29:30:4a:1b:37:79:bb:28:be:4c:47:65:d3: 18:fe:b4:04:da:ff:70:b5:1e:d2:4b:67:45:07:d2: 59:d9:15:4e:ef:15:5c:63:b3:ba:9b:ef:03:87:b0: 66:4b:09:78:ad:4e:b0:e3:4f:98:85:9c:62:1a:dd: c4:ba:21:7d:c0:32:d1:0d:f6:d9:df:bb:ff:41:9f: 62:64:8d:2d:57:7a:21:1d:d4:8a:be:5a:3e:a5:ba: 4c:8f:26:05:95:94:ab:8b:77:97:2a:75:e6:66:21: ee:df:a2:2f:6d:d7:fe:c6:fb:b6:c0:51:a6:27:9f: 40:29:38:ec:26:f2:a3:24:ad:3b:f8:cc:e2:ab:8c: dd:8a:36:48:8f:67:51:d0:02:c2:4e:12:49:79:4c: 99:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:2D:06:F1:02:95:67:4C:CE:43:B7:48:72:29:3B:39:B6:30:F1 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ff:45:44:d9:f4:fa:d7:db:22:54:1e:26:b6:f2:f0:ac:8f: f6:f9:d0:e2:2e:5f:81:66:ff:cc:4a:93:82:f9:72:e0:b8:52: 03:60:5b:13:5b:66:11:25:c2:75:e8:ae:f9:48:5d:1f:28:82: a4:99:d3:93:8b:79:98:70:3d:fa:0d:cc:f1:11:64:74:79:15: 9e:14:ba:d9:c9:67:06:81:af:95:f0:0d:49:ce:fa:0d:f1:ed: 7d:dd:75:76:73:13:e3:53:9e:27:d9:96:85:47:f7:2d:4d:b0: 12:43:41:a2:e2:0a:79:d7:b4:56:ac:94:a5:45:92:c5:39:93: ec:b3:3f:f3:07:27:76:59:13:64:b9:5f:1d:8f:21:5e:ef:fe: ed:85:05:29:93:ba:50:5b:e0:e2:11:c6:ae:53:78:a2:d6:0c: 16:04:56:3e:63:55:e2:38:21:59:a1:1f:b0:85:e0:36:28:b5: dc:57:64:1d:78:e7:a9:25:ea:9c:9b:1a:09:6a:f4:cb:4c:00: 46:9a:29:f2:8e:72:70:d1:da:27:fa:39:33:44:90:c7:da:22: 11:6d:94:8c:9a:53:89:f9:7e:39:6b:3a:63:0f:fe:d0:8a:8c: c9:ef:3e:3c:6a:34:c7:db:6e:91:15:17:46:10:73:0c:7c:7d: 13:7e:d7:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjYxMDA2MTYyMjExWhcNMjYxMDEzMTYyMjExWjAYMRYwFAYD VQQDEw02YWM1MjAzNC00YzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkqzHyg8jGwhl0H5HCNZSqRO4bA6WDvrIdAUKFN5PPsWg8zzzkPW1MvIgLNB WX/yNGsxO6Cp/V8uR2jhk7WbQqZjA53pKNO147D86M1hPcfJ+eqZm1zvTfDFxs7P PBO9qe7R/tLfUJTdlikwShs3ebsovkxHZdMY/rQE2v9wtR7SS2dFB9JZ2RVO7xVc Y7O6m+8Dh7BmSwl4rU6w40+YhZxiGt3EuiF9wDLRDfbZ37v/QZ9iZI0tV3ohHdSK vlo+pbpMjyYFlZSri3eXKnXmZiHu36Ivbdf+xvu2wFGmJ59AKTjsJvKjJK07+Mzi q4zdijZIj2dR0ALCThJJeUyZTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAbLQbx ApVnTM5Dt0hyKTs5tjDxMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUf9FRNn0+tfbIlQeJrby8KyP9vnQ4i5fgWb/zEqTgvly4LhSA2BbE1tmESXC deiu+UhdHyiCpJnTk4t5mHA9+g3M8RFkdHkVnhS62clnBoGvlfANSc76DfHtfd11 dnMT41OeJ9mWhUf3LU2wEkNBouIKede0VqyUpUWSxTmT7LM/8wcndlkTZLlfHY8h Xu/+7YUFKZO6UFvg4hHGrlN4otYMFgRWPmNV4jghWaEfsIXgNii13FdkHXjnqSXq nJsaCWr0y0wARpop8o5ycNHaJ/o5M0SQx9oiEW2UjJpTifl+OWs6Yw/+0IqMye8+ PGo0x9tukRUXRhBzDHx9E37XwA== -----END CERTIFICATE-----Generated at Wed Oct 7 13:06:59 2026 by rpki-client