$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft File: HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json) Hash identifier: AqvHvd/FzsbkQhD67xPoqCvZ2jqOEOvFqLPtiTmCUcQ= Subject key identifier: AF:82:3A:1C:22:3F:F9:BE:3A:AC:09:A7:42:B1:7B:11:29:BD:0C:81 Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF Certificate issuer: /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft Manifest number: A0 Signing time: Thu 08 Oct 2026 22:57:12 +0000 Manifest this update: Thu 08 Oct 2026 22:57:12 +0000 Manifest next update: Thu 15 Oct 2026 22:57:12 +0000 Files and hashes: 1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: y4ZI0REpNdo8S7cORNW0nWHO2vNIkci6T41RysINmVc=) 2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 22:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF Validity Not Before: Oct 8 22:57:12 2026 GMT Not After : Oct 15 22:57:12 2026 GMT Subject: CN=6ac81fc8-05ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:13:2d:5a:ca:37:70:3b:6c:44:89:b3:20: e2:fa:7d:e2:bb:92:95:73:91:ae:f3:e8:a6:44:38: a8:0e:6e:76:43:00:60:d9:94:a3:a9:23:45:39:24: ac:5e:a1:27:61:94:ef:c8:ae:23:dd:bf:8e:fe:ee: 4d:c6:37:98:20:0e:de:8b:af:bf:4c:58:04:7d:3d: f4:c0:31:ef:df:4e:b6:9e:37:ea:01:b5:ff:61:d9: 40:25:54:e2:08:14:d1:ea:7b:ce:28:a3:b8:5e:07: df:49:1a:e3:65:50:31:c1:55:5a:cb:8b:94:1d:c1: 23:7c:4a:bf:89:8c:19:9f:38:2e:ce:61:70:c1:00: c5:a3:a6:1c:96:5d:00:bc:dc:62:b9:22:a8:22:f4: 11:80:84:8d:0f:7f:14:13:bf:4d:8b:72:84:db:96: f8:0d:01:59:6c:df:89:7f:3a:51:99:40:be:38:12: 83:08:1c:9c:0a:2c:6d:60:00:55:df:76:40:dd:24: fd:04:a6:cc:c0:81:df:2c:62:71:94:17:b0:f5:c3: e2:d0:d6:1b:37:b2:46:59:1b:cb:4b:4a:69:fa:47: 5e:26:94:2b:4f:45:65:1a:0c:1d:d0:24:ba:67:9f: 25:a3:65:29:49:02:2f:4b:53:25:d8:c1:49:1d:d5: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:82:3A:1C:22:3F:F9:BE:3A:AC:09:A7:42:B1:7B:11:29:BD:0C:81 X509v3 Authority Key Identifier: keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:36:c6:d2:2c:05:8e:d7:80:09:86:0a:80:71:2b:6a:38:60: 8e:7f:f6:ee:c1:10:ad:1e:89:b0:fb:7f:88:35:80:f5:18:1c: cc:01:56:f6:46:63:8c:5d:d3:87:bb:31:09:cb:b8:ad:36:83: eb:8f:c7:95:d0:1b:a6:44:83:6b:40:c0:6a:87:5b:aa:31:78: d4:b2:5b:90:a6:e5:b7:9e:89:39:b6:a2:c7:71:0d:22:48:2b: e7:e6:8d:bb:71:15:bc:28:1d:bf:fb:f5:85:2f:b9:fa:c0:f7: 16:51:8f:51:09:19:5d:67:8f:63:94:63:d2:ea:86:5c:51:31: 0d:e9:26:1f:51:65:40:74:f2:2c:70:78:e1:db:1c:8f:9a:7d: 9d:7e:1f:4a:30:20:e6:f5:1e:50:10:c2:8f:27:84:2d:d5:e4: 8d:55:29:8d:66:82:7f:85:af:f9:ef:bc:10:2c:25:40:f3:28: 17:f5:49:b8:c7:ae:97:b3:b9:3b:91:38:ed:a3:21:d5:2b:f3: 38:9d:ea:f6:94:36:45:d2:5b:56:4c:e5:90:8e:0c:1f:90:4c: dc:9e:c5:87:da:3a:7e:6f:13:ba:d4:ed:c0:49:b4:96:e6:a6: 10:f1:1f:48:54:ce:eb:c0:c7:14:cc:55:99:6b:a5:eb:9b:25: 6d:fe:6a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M4MUMxMTAvBgNVBAUTKDFDNkZGM0VDMDk4Mjk0QjQyRDk3OUYyNUI2OTYwNTky M0UxQ0NFRUYwHhcNMjYxMDA4MjI1NzEyWhcNMjYxMDE1MjI1NzEyWjAYMRYwFAYD VQQDEw02YWM4MWZjOC0wNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2oTLVrKN3A7bESJsyDi+n3iu5KVc5Gu8+imRDioDm52QwBg2ZSjqSNFOSSs XqEnYZTvyK4j3b+O/u5NxjeYIA7ei6+/TFgEfT30wDHv3062njfqAbX/YdlAJVTi CBTR6nvOKKO4XgffSRrjZVAxwVVay4uUHcEjfEq/iYwZnzguzmFwwQDFo6Ycll0A vNxiuSKoIvQRgISND38UE79Ni3KE25b4DQFZbN+JfzpRmUC+OBKDCBycCixtYABV 33ZA3ST9BKbMwIHfLGJxlBew9cPi0NYbN7JGWRvLS0pp+kdeJpQrT0VlGgwd0CS6 Z58lo2UpSQIvS1Ml2MFJHdUPSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+COhwi P/m+OqwJp0KxexEpvQyBMB8GA1UdIwQYMBaAFBxv8+wJgpS0LZefJbaWBZI+HM7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy84NjIwRkNBNkRG Q0ExMUYwQTQ1NTQ4NTY0RjZGNTZCQy9IR196N0FtQ2xMUXRsNThsdHBZRmtqNGN6 dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hHX3o3QW1DbExRdGw1OGx0cFlGa2o0Y3p1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzgxQy84NjIwRkNBNkRGQ0ExMUYwQTQ1NTQ4NTY0RjZGNTZCQy9IR196N0FtQ2xM UXRsNThsdHBZRmtqNGN6dTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjbG0iwFjteACYYKgHErajhgjn/27sEQrR6JsPt/iDWA9RgczAFW9kZjjF3T h7sxCcu4rTaD64/HldAbpkSDa0DAaodbqjF41LJbkKblt56JObaix3ENIkgr5+aN u3EVvCgdv/v1hS+5+sD3FlGPUQkZXWePY5Rj0uqGXFExDekmH1FlQHTyLHB44dsc j5p9nX4fSjAg5vUeUBDCjyeELdXkjVUpjWaCf4Wv+e+8ECwlQPMoF/VJuMeul7O5 O5E47aMh1SvzOJ3q9pQ2RdJbVkzlkI4MH5BM3J7Fh9o6fm8TutTtwEm0luamEPEf SFTO68DHFMxVmWul65slbf5qVQ== -----END CERTIFICATE-----Generated at Sat Oct 10 11:01:25 2026 by rpki-client