$ rpki-client -vvvf rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft File: HzX0DDZLiLCJrhL97baBXD8RqQY.mft (raw, json) Hash identifier: bG5vbRszJZh613BggGycToHdv3kmxDhCbvl2skKRpuM= Subject key identifier: 0A:57:31:2B:9F:BA:46:D1:D2:BB:37:F9:37:C1:AA:7E:EC:85:D0:98 Authority key identifier: 1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06 Certificate issuer: /CN=A91924F8/serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft Manifest number: 3F Signing time: Wed 07 Oct 2026 09:07:23 +0000 Manifest this update: Wed 07 Oct 2026 09:07:22 +0000 Manifest next update: Wed 14 Oct 2026 09:07:22 +0000 Files and hashes: 1: HzX0DDZLiLCJrhL97baBXD8RqQY.crl (hash: Oae4Bc39p34HTv9sYA1CksE5W6+JcAPDQM0Fc/QHtz8=) 2: CA5882E06D4611F1934851767447A888.roa (hash: PfXIGwgTTCIusRlPGqdMeq1XMVW+gcuIfsglflOola4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91924F8, serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906 Validity Not Before: Oct 7 09:07:22 2026 GMT Not After : Oct 14 09:07:22 2026 GMT Subject: CN=6ac60bcb-af34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:bd:c4:a0:d2:71:be:86:63:e3:99:3e:98: 64:12:fe:1d:3b:1c:54:2a:f7:5d:ed:a1:7e:a8:b9: c9:10:fb:ee:ea:03:dd:7b:cf:cc:c4:0a:fd:cb:0b: 0c:23:af:68:1a:09:a0:65:07:ad:00:74:04:e7:92: f7:57:f0:f3:d4:f6:25:00:c5:ba:b1:15:13:a4:ac: 6f:2b:83:f1:6f:5b:80:4d:54:45:bd:8f:1e:e1:c6: b7:9e:5a:04:8a:18:c4:db:21:a8:4d:a7:b1:14:19: b8:9b:3c:e3:3f:be:e2:c8:e6:13:75:ca:88:a0:4c: af:2f:14:00:eb:e2:d9:d5:f7:83:42:a5:d4:59:20: e0:3a:33:62:dc:0a:6f:82:f6:bf:3b:f0:0b:75:a5: c7:d8:f9:32:91:9c:08:09:e4:23:ca:db:db:95:37: 9c:d9:fd:70:10:70:31:3b:f0:4b:a0:a8:d5:6a:ab: 04:bf:b1:97:1e:5b:ab:1b:9e:6a:f9:9b:2b:ca:e3: b1:b0:95:8a:6e:85:a1:10:29:2f:e3:2a:6d:e6:5e: 25:b5:7f:50:87:1e:b3:cd:46:30:8e:48:0b:53:e4: 64:1f:f2:0e:18:45:38:39:08:28:b8:71:ed:f2:e3: 11:4a:fe:ed:18:3e:4f:9a:4a:05:38:92:6b:4f:5a: 3e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:31:2B:9F:BA:46:D1:D2:BB:37:F9:37:C1:AA:7E:EC:85:D0:98 X509v3 Authority Key Identifier: keyid:1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:27:0d:9e:9a:21:a5:be:8c:60:d4:2e:3e:a4:ac:45:39:fd: 46:2c:35:93:e7:d9:bd:ca:26:6e:38:b6:90:9d:f1:9c:d6:15: fb:74:88:b9:85:ea:a8:d9:16:d7:dd:41:7f:a0:b6:6c:d4:2d: 3b:c4:bb:4e:63:2a:4d:0c:0d:e4:74:b9:5d:91:cc:d3:f0:a1: c3:30:ab:c6:6f:c8:b1:b1:ce:bd:46:43:b8:8e:b5:eb:6a:87: 2f:12:8f:b7:fc:7b:f3:07:a5:88:50:07:b0:f2:2d:93:9c:16: e1:cd:a9:2a:97:b9:c8:6d:f7:35:a3:ce:75:2d:79:d4:b4:0f: 99:91:f1:98:9d:6b:01:c2:95:fa:59:f0:73:89:24:2c:be:32: d3:03:6c:06:55:7d:96:79:1e:00:cc:20:22:e1:4e:3d:b2:91: 70:2c:aa:59:c2:53:c3:74:c7:25:3a:8e:5a:d2:a3:2f:35:14: 07:17:d7:3a:72:1d:48:09:c7:be:96:85:f7:ab:9a:bf:ea:02: c2:fa:5e:37:33:c5:f4:b6:38:6d:7c:24:06:5a:95:38:39:5f: 0c:b5:be:e1:9c:5d:71:50:83:24:35:d5:48:12:c1:93:06:9c: 9e:1b:ad:b6:c7:a4:08:28:0d:d2:dd:8d:e9:ed:fd:c6:c7:45: a6:0d:4c:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjRGODExMC8GA1UEBRMoMUYzNUY0MEMzNjRCODhCMDg5QUUxMkZERURCNjgxNUMz RjExQTkwNjAeFw0yNjEwMDcwOTA3MjJaFw0yNjEwMTQwOTA3MjJaMBgxFjAUBgNV BAMTDTZhYzYwYmNiLWFmMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ+b3EoNJxvoZj45k+mGQS/h07HFQq913toX6ouckQ++7qA917z8zECv3LCwwj r2gaCaBlB60AdATnkvdX8PPU9iUAxbqxFROkrG8rg/FvW4BNVEW9jx7hxreeWgSK GMTbIahNp7EUGbibPOM/vuLI5hN1yoigTK8vFADr4tnV94NCpdRZIOA6M2LcCm+C 9r878At1pcfY+TKRnAgJ5CPK29uVN5zZ/XAQcDE78EugqNVqqwS/sZceW6sbnmr5 myvK47GwlYpuhaEQKS/jKm3mXiW1f1CHHrPNRjCOSAtT5GQf8g4YRTg5CCi4ce3y 4xFK/u0YPk+aSgU4kmtPWj6BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUClcxK5+6 RtHSuzf5N8GqfuyF0JgwHwYDVR0jBBgwFoAUHzX0DDZLiLCJrhL97baBXD8RqQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNEY4LzcxRkQxMzM4NjQx MTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxDSnJoTDk3YmFCWEQ4UnFR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHpYMEREWkxpTENKcmhMOTdiYUJYRDhScVFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NEY4LzcxRkQxMzM4NjQxMTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxD SnJoTDk3YmFCWEQ4UnFRWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyJw2emiGlvoxg1C4+pKxFOf1GLDWT59m9yiZuOLaQnfGc1hX7dIi5heqo2RbX 3UF/oLZs1C07xLtOYypNDA3kdLldkczT8KHDMKvGb8ixsc69RkO4jrXraocvEo+3 /HvzB6WIUAew8i2TnBbhzakql7nIbfc1o851LXnUtA+ZkfGYnWsBwpX6WfBziSQs vjLTA2wGVX2WeR4AzCAi4U49spFwLKpZwlPDdMclOo5a0qMvNRQHF9c6ch1ICce+ loX3q5q/6gLC+l43M8X0tjhtfCQGWpU4OV8Mtb7hnF1xUIMkNdVIEsGTBpyeG622 x6QIKA3S3Y3p7f3Gx0WmDUxC -----END CERTIFICATE-----Generated at Thu Oct 8 14:05:19 2026 by rpki-client