$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json) Hash identifier: jy2v91y8ZUQl+1sz5UroWylNsZnU3dBwVMKZ5g1nvhw= Subject key identifier: A0:EE:70:04:16:C7:C0:46:AC:A0:E6:4C:09:FB:3A:38:66:5D:4A:06 Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft Manifest number: 0AF6 Signing time: Thu 22 Oct 2026 19:26:35 +0000 Manifest this update: Thu 22 Oct 2026 19:26:34 +0000 Manifest next update: Thu 29 Oct 2026 19:26:34 +0000 Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: boU5EhF9QO8t+utVA0tC6rLe4HDbU+XWDmbbEw3aob0=) 2: 92A9A67EB40211F09714C855C4F9AE02.roa (hash: MN08xTHQWyAMmrT/Pkdf4mSOvLZ+rB9gXlkcOfJJ9xI=) 3: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (hash: K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=) 4: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: AAIxMzs/gvYk9K/xu4n64rt4zSe4EjThnQNO0Ai3Jj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 19:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Validity Not Before: Oct 22 19:26:34 2026 GMT Not After : Oct 29 19:26:34 2026 GMT Subject: CN=6ada636b-fe31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:5a:06:38:15:ee:96:15:f9:ef:6d:40:73: 7c:99:6a:07:42:1d:70:b9:75:0e:96:88:cc:b8:14: 7b:e1:c8:51:71:8e:78:83:f9:44:37:d7:a1:74:5c: cf:fb:4a:7c:5c:b7:ed:05:c3:2c:55:ec:53:4a:e3: 76:9a:d2:69:5b:fc:e8:36:d1:70:e2:32:83:35:12: d8:55:62:65:75:d3:12:12:b5:8a:d5:90:77:8f:42: 50:25:76:af:67:99:b4:4a:b5:f0:e3:2f:9f:1f:73: 9a:0a:33:8c:33:24:0c:cc:ad:f7:5a:27:a8:32:7c: f5:a8:ce:8d:42:0f:95:a5:35:e9:f4:25:3d:be:c0: d1:1a:c6:e0:d4:b9:28:c9:ef:a6:ee:30:87:2b:5e: 79:c0:c2:7d:50:4b:3e:01:fa:9b:c4:ff:af:4f:23: a3:fc:3a:31:a3:44:ac:4f:d4:08:37:e3:31:3b:6d: 0c:a6:02:7d:b7:80:20:0e:44:50:e5:93:93:67:02: 3d:ab:27:09:17:f7:22:dc:c7:e2:a0:9c:1f:d0:a8: 74:82:98:cc:d3:ad:82:22:46:7b:d1:ea:df:ea:39: de:e1:0b:ff:0a:ee:c6:11:62:04:b9:06:a3:f6:1e: f6:8c:15:a8:4f:fe:8a:46:fa:e8:7d:91:2d:7d:e4: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EE:70:04:16:C7:C0:46:AC:A0:E6:4C:09:FB:3A:38:66:5D:4A:06 X509v3 Authority Key Identifier: keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:7d:91:5d:ca:a4:30:9f:e7:16:1d:9a:2e:e8:cb:0b:5c:73: bd:18:dd:a9:ac:dc:ac:23:84:5f:6e:46:45:38:d6:eb:a8:ac: db:4d:87:d7:a7:5a:85:22:3d:6d:8e:5a:72:20:c1:da:fe:39: 09:6a:cd:94:2f:20:5f:6a:42:7a:da:5d:d9:04:a2:71:59:3e: 0b:1e:12:42:43:43:28:96:1b:01:eb:ef:a0:b2:ef:06:07:79: ff:1c:e2:de:70:a1:ce:7c:95:ed:0e:55:3c:ec:07:46:8b:7c: 8e:d9:e2:13:67:41:97:b0:41:2d:b6:9c:f1:90:ce:2a:35:ef: f5:89:1f:7a:30:a9:09:1c:34:75:a8:d8:ec:7d:82:dd:dd:6f: a4:18:63:4f:e4:4b:be:55:16:85:0d:46:35:77:c5:fa:78:11: cb:7f:c6:41:e9:ae:c6:be:04:f3:d5:3e:69:8e:dc:9b:1b:84: 96:2c:e1:7f:a7:86:4b:b3:4e:13:23:7b:40:cf:ba:6c:e0:ac: 97:1c:e4:c2:ca:7d:ea:e3:93:50:eb:3f:13:9b:a2:cf:75:9e: 9c:61:2c:70:3c:f1:b3:b8:44:7d:3c:16:68:94:3b:96:48:ad: 35:ac:93:20:6b:6d:8d:7d:70:10:79:f1:a1:37:a4:bd:ca:cb: 32:1d:04:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG NTE2NzlBRjEwHhcNMjYxMDIyMTkyNjM0WhcNMjYxMDI5MTkyNjM0WjAYMRYwFAYD VQQDEw02YWRhNjM2Yi1mZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIpaBjgV7pYV+e9tQHN8mWoHQh1wuXUOlojMuBR74chRcY54g/lEN9ehdFzP +0p8XLftBcMsVexTSuN2mtJpW/zoNtFw4jKDNRLYVWJlddMSErWK1ZB3j0JQJXav Z5m0SrXw4y+fH3OaCjOMMyQMzK33WieoMnz1qM6NQg+VpTXp9CU9vsDRGsbg1Lko ye+m7jCHK155wMJ9UEs+AfqbxP+vTyOj/Doxo0SsT9QIN+MxO20MpgJ9t4AgDkRQ 5ZOTZwI9qycJF/ci3MfioJwf0Kh0gpjM062CIkZ70erf6jne4Qv/Cu7GEWIEuQaj 9h72jBWoT/6KRvrofZEtfeQC+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDucAQW x8BGrKDmTAn7OjhmXUoGMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUJDRC82MUQwQzQ4NjdBM0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNK aTNLWXlaRUhYTXoxRm5tdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAln2RXcqkMJ/nFh2aLujLC1xzvRjdqazcrCOEX25GRTjW66is202H16dahSI9 bY5aciDB2v45CWrNlC8gX2pCetpd2QSicVk+Cx4SQkNDKJYbAevvoLLvBgd5/xzi 3nChznyV7Q5VPOwHRot8jtniE2dBl7BBLbac8ZDOKjXv9YkfejCpCRw0dajY7H2C 3d1vpBhjT+RLvlUWhQ1GNXfF+ngRy3/GQemuxr4E89U+aY7cmxuElizhf6eGS7NO EyN7QM+6bOCslxzkwsp96uOTUOs/E5uiz3WenGEscDzxs7hEfTwWaJQ7lkitNayT IGttjX1wEHnxoTekvcrLMh0EoQ== -----END CERTIFICATE-----Generated at Sat Oct 24 00:59:05 2026 by rpki-client