$ rpki-client -vvvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: fIrgjVtBQYk5YRaZped5/w5GsMemFhPgw/55pCp/5Dw= Subject key identifier: F8:88:EC:D2:26:C8:27:B4:A0:8C:63:9C:21:5B:A1:95:3B:88:E8:C8 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 02DB Signing time: Mon 05 Oct 2026 01:31:51 +0000 Manifest this update: Mon 05 Oct 2026 01:31:50 +0000 Manifest next update: Mon 12 Oct 2026 01:31:50 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: +9ch3+X+lbfU9l0MfaJbPXCNsaPFaHU6wf2LD2qOqus=) 2: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: PoqGkXQNYcMBSrW3Jl/FopL8iUygraN/G2t1e13sEIc=) 3: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: RcdZw8pUWX2ZvZ8iTnxEM6UNtvtFB49EdoW64Bkkw8U=) 4: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: PZelJVR91rZQn+1K6DzeKrU/OaplNw2OEalh3VTRehI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Oct 5 01:31:50 2026 GMT Not After : Oct 12 01:31:50 2026 GMT Subject: CN=6ac2fe07-2b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:e4:45:f4:67:2c:26:05:38:41:56:06:ec: 95:10:8c:e8:c7:1c:c3:ab:f3:3e:4a:38:21:8e:7b: f7:69:9c:e6:19:d5:3e:e8:5e:ce:03:06:b2:7c:1f: 30:4b:76:3d:49:1e:3b:2f:b2:a4:86:14:d6:d0:e4: 32:54:82:31:64:06:75:21:32:75:54:0e:2f:d2:41: 10:ce:08:6a:c9:eb:da:11:e9:33:99:b5:7c:a4:2d: f6:b3:1f:71:2c:b3:76:28:6e:2d:8c:ee:a1:48:6a: f0:3a:cd:0d:66:85:cc:00:dc:bc:65:f6:77:73:2c: ec:3a:71:1c:9f:49:29:b2:65:04:fc:fb:23:4a:79: 50:c0:32:f9:93:31:f2:64:73:cf:7c:86:f2:5d:51: 81:32:be:44:19:a7:21:dc:49:d2:18:12:e1:cb:ba: d2:df:ee:03:57:5e:56:1f:23:7a:6d:35:a9:a6:f0: df:0f:18:24:60:ae:9f:09:f7:2e:b6:9d:5c:b7:72: fb:ea:d8:60:e1:65:bc:4d:73:77:61:79:a8:07:ef: 0e:d0:f6:c8:f3:43:58:5f:df:b4:a3:ea:08:b8:c2: 8b:2d:55:cc:96:54:6e:9f:ed:93:99:31:39:48:f1: 92:ac:79:bf:ed:b7:1d:87:05:eb:71:21:c9:dc:a6: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:88:EC:D2:26:C8:27:B4:A0:8C:63:9C:21:5B:A1:95:3B:88:E8:C8 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:0d:bf:b3:a8:8a:88:28:3e:4e:86:d6:19:75:a3:d1:8c:8f: 99:b9:37:1f:cf:99:5d:7d:9d:08:fc:21:5a:11:17:a9:6e:59: 17:50:ca:a4:d1:a3:c4:75:0f:98:48:c6:a7:e6:64:5d:3c:3e: 72:c2:df:28:9d:25:ce:cd:86:bf:90:54:c1:b7:da:cb:de:02: a1:10:b6:8c:6f:14:39:1c:d0:50:36:29:79:27:5f:af:46:f1: 65:db:87:e3:14:1c:71:f3:5a:3d:3f:4d:27:63:35:00:36:4a: 08:8b:85:54:e9:11:e0:1f:2b:ee:71:b4:3c:e2:00:5b:7a:0c: f8:04:a6:ed:01:64:bb:80:97:b0:9c:94:66:b2:5c:36:90:b0: eb:3b:e7:2f:91:7d:05:92:a3:e9:4a:c0:70:5d:76:ea:83:20: 6c:47:99:76:49:07:7b:c3:6f:6f:6e:0c:97:1c:c5:af:52:4a: 59:d9:75:25:c4:6a:27:74:63:14:20:75:5f:78:71:71:b6:2c: 3c:be:69:c7:3b:4d:b1:6c:40:9c:64:70:d6:03:96:74:6e:2e: fe:74:32:1e:22:7a:db:84:f5:17:1b:59:38:b7:a0:e2:31:61: 58:0e:a1:74:eb:63:0d:5d:af:af:ce:d1:24:29:18:68:a2:54: 99:93:ac:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjYxMDA1MDEzMTUwWhcNMjYxMDEyMDEzMTUwWjAYMRYwFAYD VQQDEw02YWMyZmUwNy0yYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+PkRfRnLCYFOEFWBuyVEIzoxxzDq/M+Sjghjnv3aZzmGdU+6F7OAwayfB8w S3Y9SR47L7KkhhTW0OQyVIIxZAZ1ITJ1VA4v0kEQzghqyevaEekzmbV8pC32sx9x LLN2KG4tjO6hSGrwOs0NZoXMANy8ZfZ3cyzsOnEcn0kpsmUE/PsjSnlQwDL5kzHy ZHPPfIbyXVGBMr5EGach3EnSGBLhy7rS3+4DV15WHyN6bTWppvDfDxgkYK6fCfcu tp1ct3L76thg4WW8TXN3YXmoB+8O0PbI80NYX9+0o+oIuMKLLVXMllRun+2TmTE5 SPGSrHm/7bcdhwXrcSHJ3KavQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiI7NIm yCe0oIxjnCFboZU7iOjIMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArw2/s6iKiCg+TobWGXWj0YyPmbk3H8+ZXX2dCPwhWhEXqW5ZF1DKpNGjxHUP mEjGp+ZkXTw+csLfKJ0lzs2Gv5BUwbfay94CoRC2jG8UORzQUDYpeSdfr0bxZduH 4xQccfNaPT9NJ2M1ADZKCIuFVOkR4B8r7nG0POIAW3oM+ASm7QFku4CXsJyUZrJc NpCw6zvnL5F9BZKj6UrAcF126oMgbEeZdkkHe8Nvb24MlxzFr1JKWdl1JcRqJ3Rj FCB1X3hxcbYsPL5pxztNsWxAnGRw1gOWdG4u/nQyHiJ624T1FxtZOLeg4jFhWA6h dOtjDV2vr87RJCkYaKJUmZOs3Q== -----END CERTIFICATE-----Generated at Mon Oct 5 14:34:53 2026 by rpki-client