$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft File: hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft (raw, json) Hash identifier: YvnOrtLxnVni87qOUvAy5O16eELFVJIEppbJPWzt1rU= Subject key identifier: 2B:C4:4C:17:17:AD:94:AB:0B:7A:CB:26:1B:24:2F:59:C9:A8:0B:53 Authority key identifier: 84:7C:58:0E:65:A3:93:F0:C1:F5:B8:31:95:35:68:F6:F6:E9:C5:5F Certificate issuer: /CN=A91AA71B/serialNumber=847C580E65A393F0C1F5B831953568F6F6E9C55F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft Manifest number: 22 Signing time: Sat 03 Oct 2026 09:37:26 +0000 Manifest this update: Sat 03 Oct 2026 09:37:25 +0000 Manifest next update: Sat 10 Oct 2026 09:37:25 +0000 Files and hashes: 1: hHxYDmWjk_DB9bgxlTVo9vbpxV8.crl (hash: ZSsgZhNKw513WkyK5exzQyBycK7SRjQ8DUn3zNRr0Cc=) 2: EAF9ABE0918211F1A32E296B3711F970.roa (hash: MQaAIG5r20ociKbohW5fnr7qAW+027Wmnt0l3Iid9ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.crl rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA71B, serialNumber=847C580E65A393F0C1F5B831953568F6F6E9C55F Validity Not Before: Oct 3 09:37:25 2026 GMT Not After : Oct 10 09:37:25 2026 GMT Subject: CN=6ac0ccd6-f083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:be:45:ef:cf:aa:dc:cf:73:a8:55:45:ba: af:08:22:be:4a:30:4e:3d:b3:35:31:98:58:16:69: cf:44:89:01:b3:da:87:ef:84:04:87:ce:1f:f5:8c: a3:57:51:28:22:bb:f2:fd:55:71:9f:02:e4:71:28: 4b:d0:3a:d1:24:21:fb:af:23:74:4c:37:33:0b:69: 2d:45:9e:60:b0:f0:e5:b6:60:b3:b3:37:de:fd:3f: 7f:ca:c6:0c:c4:60:a9:0b:e3:d5:44:7e:bd:9a:78: fc:33:2c:f0:d2:38:cf:cf:ff:ce:60:c3:97:97:ad: e1:a7:9b:62:38:f4:b8:e5:24:53:fe:dc:9f:4b:78: d2:42:12:51:b8:b1:fe:ab:84:67:b6:d8:b9:fd:29: 50:8e:2e:f3:c6:fa:b3:c7:f7:e8:e2:df:c6:22:91: 82:ba:4e:f0:1d:f5:f6:9a:52:70:e6:17:3c:30:18: 4a:7a:86:ef:4e:a1:1b:ba:19:3d:46:7e:ee:95:c9: 0c:97:8e:d4:bd:d7:ed:22:93:a0:cb:bf:a8:6c:ff: ea:e0:01:e2:35:a2:4a:a2:da:28:db:16:ae:68:23: 7a:40:88:6c:13:6e:43:c1:9d:65:ad:44:cc:54:4c: 39:17:b9:f2:85:13:9e:e3:4e:91:d5:2a:ec:87:09: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:4C:17:17:AD:94:AB:0B:7A:CB:26:1B:24:2F:59:C9:A8:0B:53 X509v3 Authority Key Identifier: keyid:84:7C:58:0E:65:A3:93:F0:C1:F5:B8:31:95:35:68:F6:F6:E9:C5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:66:aa:de:84:e7:be:fb:3f:2d:7b:9a:a8:6c:31:56:87:72: 6b:79:a7:ad:56:aa:79:8b:58:48:0d:5d:ae:92:a3:b5:86:e1: b4:19:ec:24:1c:9e:20:5f:77:1d:82:45:c7:07:4d:e1:30:04: 76:93:04:c7:c0:8e:a2:1a:c0:22:a4:6a:3e:71:bb:24:99:18: 04:7f:00:22:9e:44:a0:8b:75:70:2e:56:50:88:9d:a6:1c:cb: 92:d1:4c:a8:f5:8f:53:39:7b:78:70:6e:a0:0c:6e:ce:66:03: e9:27:7e:4d:e4:01:b2:2e:cc:ed:35:e7:cf:cf:1e:64:79:b4: 12:b9:32:6a:93:78:48:ff:31:1c:00:6c:4c:f6:7b:cc:2e:ed: 69:2d:6c:6d:76:8a:f5:0a:e9:91:38:09:6f:9b:e2:e2:af:75: ba:ec:74:e3:5e:35:2b:a1:3f:93:70:35:3c:1d:67:e0:72:e3: 1f:ef:6b:47:ca:44:c0:1e:50:6c:80:b5:7f:5c:ba:b7:dd:aa: a4:1c:53:39:50:88:1f:cc:33:b1:86:2f:db:d9:4d:2e:47:d6: e3:05:aa:f4:62:92:a1:a4:bf:d8:c1:63:d5:a9:68:8c:24:5e: 3b:ce:52:21:7b:96:1b:56:17:a2:43:30:82:10:60:3f:b0:e3: b6:e3:5b:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTcxQjExMC8GA1UEBRMoODQ3QzU4MEU2NUEzOTNGMEMxRjVCODMxOTUzNTY4RjZG NkU5QzU1RjAeFw0yNjEwMDMwOTM3MjVaFw0yNjEwMTAwOTM3MjVaMBgxFjAUBgNV BAMTDTZhYzBjY2Q2LWYwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdNr5F78+q3M9zqFVFuq8IIr5KME49szUxmFgWac9EiQGz2ofvhASHzh/1jKNX USgiu/L9VXGfAuRxKEvQOtEkIfuvI3RMNzMLaS1FnmCw8OW2YLOzN979P3/KxgzE YKkL49VEfr2aePwzLPDSOM/P/85gw5eXreGnm2I49LjlJFP+3J9LeNJCElG4sf6r hGe22Ln9KVCOLvPG+rPH9+ji38YikYK6TvAd9faaUnDmFzwwGEp6hu9OoRu6GT1G fu6VyQyXjtS91+0ik6DLv6hs/+rgAeI1okqi2ijbFq5oI3pAiGwTbkPBnWWtRMxU TDkXufKFE57jTpHVKuyHCUG/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK8RMFxet lKsLessmGyQvWcmoC1MwHwYDVR0jBBgwFoAUhHxYDmWjk/DB9bgxlTVo9vbpxV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzFCLzkxNkIyNDQyOTA5 MTExRjFBMEVDMEQ4OTY5MTFGOTcwL2hIeFlEbVdqa19EQjliZ3hsVFZvOXZicHhW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEh4WURtV2prX0RCOWJneGxUVm85dmJweFY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzFCLzkxNkIyNDQyOTA5MTExRjFBMEVDMEQ4OTY5MTFGOTcwL2hIeFlEbVdqa19E QjliZ3hsVFZvOXZicHhWOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDBZqrehOe++z8te5qobDFWh3JreaetVqp5i1hIDV2ukqO1huG0GewkHJ4gX3cd gkXHB03hMAR2kwTHwI6iGsAipGo+cbskmRgEfwAinkSgi3VwLlZQiJ2mHMuS0Uyo 9Y9TOXt4cG6gDG7OZgPpJ35N5AGyLsztNefPzx5kebQSuTJqk3hI/zEcAGxM9nvM Lu1pLWxtdor1CumROAlvm+Lir3W67HTjXjUroT+TcDU8HWfgcuMf72tHykTAHlBs gLV/XLq33aqkHFM5UIgfzDOxhi/b2U0uR9bjBar0YpKhpL/YwWPVqWiMJF47zlIh e5YbVheiQzCCEGA/sOO241t8 -----END CERTIFICATE-----Generated at Sun Oct 4 18:41:52 2026 by rpki-client