$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json) Hash identifier: L8MTU+dOO6S9mziqI2OzeBJXt0kFL32F6cWVLHYwDWE= Subject key identifier: 86:FC:0C:87:71:6E:1E:FB:60:BD:46:66:DE:04:B7:EF:A7:AF:FC:DD Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft Manifest number: 5A Signing time: Fri 23 Oct 2026 08:45:18 +0000 Manifest this update: Fri 23 Oct 2026 08:45:18 +0000 Manifest next update: Fri 30 Oct 2026 08:45:18 +0000 Files and hashes: 1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: u9Vh16nfT4UlBmxKn55AW2levy5diQxuuNxITGbY9Y0=) 2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Validity Not Before: Oct 23 08:45:18 2026 GMT Not After : Oct 30 08:45:18 2026 GMT Subject: CN=6adb1e9e-5c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:3e:e5:6c:c6:93:a5:e0:a6:ae:38:35:2b: 01:fa:eb:c9:3f:2d:f6:05:c4:cf:4e:d6:25:bd:a9: be:05:ce:18:11:4f:d6:8a:e5:0a:55:76:de:5e:97: 1e:c5:d8:83:25:f1:03:59:c0:11:ac:93:de:ae:81: ca:47:a4:1a:20:d5:1d:f7:66:cb:63:0c:cb:01:d2: 01:99:9a:b8:fe:fe:21:16:7b:ca:af:b3:5d:e8:dd: 5f:33:58:ef:55:92:a4:61:c3:42:f7:63:df:90:fa: a6:ae:ac:b0:15:12:5d:f0:59:0e:10:9f:8f:6e:9f: 24:ae:7d:c2:37:88:72:ea:0f:3d:a5:e0:59:31:48: db:68:09:d9:e5:12:49:14:f5:af:67:3f:b9:82:0e: 78:79:4e:b9:20:86:24:7c:0d:61:e9:98:09:b5:36: 3b:3f:fa:af:22:2a:c5:93:ae:b1:da:c0:cd:1f:1f: bf:c4:d5:1c:45:48:e9:c4:7b:c3:a5:7b:b7:7a:a7: 4a:8b:a6:d2:23:32:7e:2b:2e:0b:57:74:d8:fe:c5: 5f:8c:a9:5a:0c:84:81:dc:54:10:a2:31:d7:3c:a4: 07:bb:bc:18:ce:7d:07:02:cb:4f:f3:f5:3a:3d:d0: b8:97:4b:b8:9b:68:ff:36:17:5d:97:a9:c4:4a:fc: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:0C:87:71:6E:1E:FB:60:BD:46:66:DE:04:B7:EF:A7:AF:FC:DD X509v3 Authority Key Identifier: keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2c:30:fd:d3:38:c6:e7:2f:95:7d:dd:c7:7d:3b:c8:48:c6: 9e:4b:0a:a6:cf:6c:d2:35:14:80:32:d0:db:52:91:45:04:bf: f0:f3:37:47:a9:31:fe:8c:08:00:7f:b1:e2:70:be:01:92:03: 0d:d7:6b:b7:1a:f5:bb:38:b8:ef:8e:f9:26:32:7d:2d:be:74: ab:68:18:1a:99:21:03:dc:9a:17:5b:f4:e5:71:5c:c0:95:92: b9:be:0d:52:2b:b2:fb:dd:60:16:67:70:9a:e1:1d:46:de:10: 53:06:79:85:4f:d1:0d:89:18:56:ef:f5:07:7e:33:47:40:71: 14:b9:c6:48:19:43:6c:b8:d8:a6:1b:e4:cb:21:96:e0:ab:a6: ad:ed:9f:de:45:09:3e:49:3e:56:15:6f:88:15:d4:bf:24:b5: 7e:da:73:19:18:26:f2:94:55:ee:9a:40:8a:fb:5e:a8:37:88: eb:be:79:a3:86:f5:0a:dc:fb:eb:0c:a3:a5:10:90:0d:92:6b: 21:d1:0b:e5:7d:2d:15:be:95:de:7c:6d:bb:f8:41:89:ed:ff: 5d:2d:ab:58:48:7b:c9:d4:d1:ea:16:55:89:e0:6d:d6:69:4f: eb:58:15:28:0c:50:4d:43:4a:70:2d:03:1e:bd:8a:1a:68:27: 4e:89:7e:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB MDExRjZBNjAeFw0yNjEwMjMwODQ1MThaFw0yNjEwMzAwODQ1MThaMBgxFjAUBgNV BAMTDTZhZGIxZTllLTVjOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk/j7lbMaTpeCmrjg1KwH668k/LfYFxM9O1iW9qb4FzhgRT9aK5QpVdt5elx7F 2IMl8QNZwBGsk96ugcpHpBog1R33ZstjDMsB0gGZmrj+/iEWe8qvs13o3V8zWO9V kqRhw0L3Y9+Q+qaurLAVEl3wWQ4Qn49unySufcI3iHLqDz2l4FkxSNtoCdnlEkkU 9a9nP7mCDnh5TrkghiR8DWHpmAm1Njs/+q8iKsWTrrHawM0fH7/E1RxFSOnEe8Ol e7d6p0qLptIjMn4rLgtXdNj+xV+MqVoMhIHcVBCiMdc8pAe7vBjOfQcCy0/z9To9 0LiXS7ibaP82F12XqcRK/DOxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhvwMh3Fu HvtgvUZm3gS376ev/N0wHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+LDD90zjG5y+Vfd3HfTvISMaeSwqmz2zSNRSAMtDbUpFFBL/w8zdHqTH+jAgA f7HicL4BkgMN12u3GvW7OLjvjvkmMn0tvnSraBgamSED3JoXW/TlcVzAlZK5vg1S K7L73WAWZ3Ca4R1G3hBTBnmFT9ENiRhW7/UHfjNHQHEUucZIGUNsuNimG+TLIZbg q6at7Z/eRQk+ST5WFW+IFdS/JLV+2nMZGCbylFXumkCK+16oN4jrvnmjhvUK3Pvr DKOlEJANkmsh0QvlfS0VvpXefG27+EGJ7f9dLatYSHvJ1NHqFlWJ4G3WaU/rWBUo DFBNQ0pwLQMevYoaaCdOiX5p -----END CERTIFICATE-----Generated at Sat Oct 24 12:40:23 2026 by rpki-client