$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: qH/qMEjSjbBx8lfxkemcefgipBYoTIxwOZl1lkV7Dec= Subject key identifier: E0:A7:8F:55:B8:B1:7A:49:E7:7E:2B:52:DF:5E:6B:4A:8D:29:F8:EE Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 150C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 1501 Signing time: Fri 02 Oct 2026 16:57:54 +0000 Manifest this update: Fri 02 Oct 2026 16:57:53 +0000 Manifest next update: Fri 09 Oct 2026 16:57:53 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: Xqh92GTgjtFNu5PZT37W50MqrdctwJA0UDFFe38zQ+4=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: WIOTnnHZpCOfxDVsg8g5aDJ6JWSGnelmuPFVOIcEOGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5388 (0x150c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Oct 2 16:57:53 2026 GMT Not After : Oct 9 16:57:53 2026 GMT Subject: CN=6abfe292-1b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:dd:c8:65:95:04:01:ac:b7:af:c5:62:8a: 22:ad:8d:2c:f7:1c:3f:15:94:1b:61:3c:28:d4:12: 9a:6f:ab:b1:06:5e:7f:aa:d5:fd:2e:6d:45:ba:28: ce:74:63:e4:e3:f9:6e:d3:ad:d9:6b:8a:52:2f:85: 4d:c3:4a:05:76:78:4f:fb:21:df:53:a7:51:f1:2e: b8:92:6e:63:b8:eb:5d:90:86:fc:51:16:e8:66:5b: a4:cc:77:9c:60:da:c5:45:14:8b:d2:11:f0:20:91: 9d:98:06:4c:38:5d:a9:9c:28:07:75:53:4a:77:71: fe:96:d7:e6:48:d8:a5:f7:77:10:ba:c0:15:5e:62: 99:43:52:9b:76:8f:7f:49:74:0b:f8:ea:96:57:19: 80:96:27:b2:45:0d:3c:00:1d:e2:2c:9b:af:7b:e3: 48:2a:89:d7:61:63:b4:2a:7e:f6:05:9d:32:56:9b: a7:17:18:7d:04:b3:35:c2:ca:80:ba:a8:78:08:54: 7e:f1:cb:cb:6f:f8:7a:7b:ff:8c:01:3c:7e:fc:d6: 9b:de:fd:d3:97:41:74:ed:cb:8e:f4:64:58:8d:f0: 0a:6b:8b:d8:7f:b9:e7:07:ee:ce:15:23:ad:57:6c: cb:d3:89:36:17:3f:76:49:9a:5d:77:c6:88:5e:89: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A7:8F:55:B8:B1:7A:49:E7:7E:2B:52:DF:5E:6B:4A:8D:29:F8:EE X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:cd:e3:3c:75:d3:6e:a9:fe:11:b7:35:9a:0a:83:5c:3a:0c: 61:7d:83:6c:3f:a5:6f:8f:ec:da:ad:35:8d:17:e8:22:ed:fb: 6d:ae:00:06:b1:a5:43:51:5c:6d:31:21:31:68:80:db:01:d4: 1e:08:69:9e:85:8a:8f:0e:af:6f:5a:3c:86:8d:bf:fb:cd:92: 23:ad:a8:be:a5:28:71:2e:76:68:d8:a8:0a:86:f5:1e:a5:a1: 77:86:6a:9d:b5:e7:ca:ad:db:8d:e6:66:59:99:99:61:0d:88: 31:d1:96:7c:2e:95:0e:ef:b8:4f:cc:9a:22:99:04:6a:29:17: 0d:45:4d:76:34:5b:dc:68:76:55:11:33:7f:05:d6:52:ed:ac: 68:b0:ef:07:5a:ea:79:02:a4:a7:e0:70:d1:f2:6f:84:41:c9: 25:cd:25:8c:b9:44:9e:a8:17:1a:3a:ef:9e:7b:20:c4:c5:0a: 90:c9:59:ec:c4:50:ec:c1:dd:36:cb:33:96:84:06:6b:b6:86: 83:02:90:da:f6:18:85:1e:6a:45:01:d1:f0:3c:73:8e:a5:ec: b7:88:0c:c3:b5:43:58:33:a5:0b:e2:d6:3e:94:c8:26:39:b7: 75:9e:a2:06:07:af:04:00:b3:a8:80:fa:46:81:ac:56:c8:98: d5:92:7f:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjYxMDAyMTY1NzUzWhcNMjYxMDA5MTY1NzUzWjAYMRYwFAYD VQQDEw02YWJmZTI5Mi0xYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjpvdyGWVBAGst6/FYooirY0s9xw/FZQbYTwo1BKab6uxBl5/qtX9Lm1FuijO dGPk4/lu063Za4pSL4VNw0oFdnhP+yHfU6dR8S64km5juOtdkIb8URboZlukzHec YNrFRRSL0hHwIJGdmAZMOF2pnCgHdVNKd3H+ltfmSNil93cQusAVXmKZQ1Kbdo9/ SXQL+OqWVxmAlieyRQ08AB3iLJuve+NIKonXYWO0Kn72BZ0yVpunFxh9BLM1wsqA uqh4CFR+8cvLb/h6e/+MATx+/Nab3v3Tl0F07cuO9GRYjfAKa4vYf7nnB+7OFSOt V2zL04k2Fz92SZpdd8aIXonACwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCnj1W4 sXpJ534rUt9ea0qNKfjuMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxc3jPHXTbqn+Ebc1mgqDXDoMYX2DbD+lb4/s2q01jRfoIu37ba4ABrGlQ1Fc bTEhMWiA2wHUHghpnoWKjw6vb1o8ho2/+82SI62ovqUocS52aNioCob1HqWhd4Zq nbXnyq3bjeZmWZmZYQ2IMdGWfC6VDu+4T8yaIpkEaikXDUVNdjRb3Gh2VREzfwXW Uu2saLDvB1rqeQKkp+Bw0fJvhEHJJc0ljLlEnqgXGjrvnnsgxMUKkMlZ7MRQ7MHd NsszloQGa7aGgwKQ2vYYhR5qRQHR8DxzjqXst4gMw7VDWDOlC+LWPpTIJjm3dZ6i BgevBACzqID6RoGsVsiY1ZJ/RQ== -----END CERTIFICATE-----Generated at Sun Oct 4 06:48:26 2026 by rpki-client