$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json) Hash identifier: G3HIFATw44hg38XGmdAR3VvtDzZ4Bm74ZDfbY9U7/GE= Subject key identifier: 39:C8:77:26:25:1B:08:9A:98:CC:38:EA:DF:94:44:6D:32:DD:CF:65 Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft Manifest number: A3 Signing time: Fri 16 Oct 2026 15:07:11 +0000 Manifest this update: Fri 16 Oct 2026 15:07:10 +0000 Manifest next update: Fri 23 Oct 2026 15:07:10 +0000 Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: h03LZgzNr5w52lKHnDdQ57B52L57rxo/lPm+kczxgCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 15:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Validity Not Before: Oct 16 15:07:10 2026 GMT Not After : Oct 23 15:07:10 2026 GMT Subject: CN=6ad23d9f-5d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:0a:3e:c1:c8:8d:e1:a1:5a:00:9b:d1:6c: 17:60:17:5f:22:99:a6:d3:01:01:e7:46:70:03:3d: b1:6d:7a:0d:f5:f3:e2:22:52:11:0c:a9:51:91:53: 2a:b5:42:e0:39:b8:09:d3:ec:b9:3b:fa:f6:63:43: 2e:ff:b8:75:ed:db:3f:ac:c9:a0:16:c3:f7:26:f6: 50:20:50:8b:73:3f:9c:8f:a7:35:ba:69:53:a6:a2: 52:89:e5:5a:88:26:03:2e:70:0a:ea:30:7d:7e:05: 37:3e:b1:56:2f:08:86:28:b7:c0:ab:91:82:2b:37: 8a:1e:34:60:6a:4e:f9:06:82:d2:ce:51:69:ab:41: 8b:a8:24:ab:c2:16:df:c8:3b:8a:68:77:b5:51:3f: 49:a1:fa:35:e2:ed:62:02:c7:d3:b6:c9:54:3e:57: f5:a9:01:57:24:0a:cd:19:18:99:71:6f:1a:d7:0c: fe:fc:85:45:b4:87:21:f1:a7:8d:ec:1a:b9:4c:1a: 34:20:74:5c:13:0d:92:3b:3a:a3:9e:b4:d6:51:7c: 79:70:d3:ca:86:95:fe:11:54:64:bd:3f:9b:9d:21: 5c:e8:ca:66:84:39:9f:41:f7:26:d6:e1:94:68:77: 8d:7c:16:1d:90:e4:87:d4:60:08:5f:11:32:4a:29: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C8:77:26:25:1B:08:9A:98:CC:38:EA:DF:94:44:6D:32:DD:CF:65 X509v3 Authority Key Identifier: keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:02:be:e9:bd:03:a3:18:0e:86:fc:0f:97:5c:bc:e7:af: e8:4a:1b:87:bd:43:d1:af:68:76:df:f5:da:f1:fa:65:24:31: 09:a2:b2:e5:90:76:e0:32:b6:df:8e:70:1a:3b:8e:7d:ad:06: 54:2d:ca:72:15:0d:14:ec:c1:c7:ce:e1:6d:64:40:88:2f:22: 4e:eb:ad:ea:9f:d5:a2:33:7e:82:5b:20:e5:9c:7f:41:a7:7b: 5a:2a:7a:8a:4c:fd:16:a5:95:78:6d:7d:44:0b:9e:ce:23:f4: ec:7e:51:a5:20:ee:e0:ad:be:2d:ce:1b:cf:98:a7:95:b2:1b: dd:d0:20:17:c4:e8:d4:af:40:a4:cc:a6:6a:4a:4e:2f:1f:51: 20:06:04:06:eb:77:73:a4:7b:1d:c3:0c:04:0f:ff:ab:1f:0b: 61:0f:c6:22:db:5a:97:80:a8:32:5f:8f:2c:6d:11:61:6d:71: be:f5:4c:2a:2e:db:54:78:f8:22:26:33:38:3b:ae:23:49:a9: 05:40:4f:69:c7:2f:fc:ed:e5:ea:6c:a5:7a:b6:75:5d:76:24: b9:c1:e3:f5:51:76:c4:3d:25:d5:62:f9:ba:70:b8:63:07:bf: 13:29:ed:bc:15:80:30:36:ce:01:2c:3b:4b:66:01:cb:10:ff: 45:b8:de:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDg2MTIxOTI4RDlCNDAxRTMxRDZBN0IyMDZFQjAxNjJE Mzg2RTA0NzIwHhcNMjYxMDE2MTUwNzEwWhcNMjYxMDIzMTUwNzEwWjAYMRYwFAYD VQQDEw02YWQyM2Q5Zi01ZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH0KPsHIjeGhWgCb0WwXYBdfIpmm0wEB50ZwAz2xbXoN9fPiIlIRDKlRkVMq tULgObgJ0+y5O/r2Y0Mu/7h17ds/rMmgFsP3JvZQIFCLcz+cj6c1umlTpqJSieVa iCYDLnAK6jB9fgU3PrFWLwiGKLfAq5GCKzeKHjRgak75BoLSzlFpq0GLqCSrwhbf yDuKaHe1UT9Jofo14u1iAsfTtslUPlf1qQFXJArNGRiZcW8a1wz+/IVFtIch8aeN 7Bq5TBo0IHRcEw2SOzqjnrTWUXx5cNPKhpX+EVRkvT+bnSFc6MpmhDmfQfcm1uGU aHeNfBYdkOSH1GAIXxEySilgPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnIdyYl GwiamMw46t+URG0y3c9lMB8GA1UdIwQYMBaAFIYSGSjZtAHjHWp7IG6wFi04bgRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy8zMEE1NEY2Q0Q2 NUYxMUYwQjA2RkQ4QTIwQUI0M0UxMy9oaElaS05tMEFlTWRhbnNnYnJBV0xUaHVC SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hoSVpLTm0wQWVNZGFuc2dickFXTFRodUJISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy8zMEE1NEY2Q0Q2NUYxMUYwQjA2RkQ4QTIwQUI0M0UxMy9oaElaS05tMEFl TWRhbnNnYnJBV0xUaHVCSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZjgCvum9A6MYDob8D5dcvOev6Eobh71D0a9odt/12vH6ZSQxCaKy5ZB24DK2 345wGjuOfa0GVC3KchUNFOzBx87hbWRAiC8iTuut6p/VojN+glsg5Zx/Qad7Wip6 ikz9FqWVeG19RAueziP07H5RpSDu4K2+Lc4bz5inlbIb3dAgF8To1K9ApMymakpO Lx9RIAYEBut3c6R7HcMMBA//qx8LYQ/GIttal4CoMl+PLG0RYW1xvvVMKi7bVHj4 IiYzODuuI0mpBUBPaccv/O3l6mylerZ1XXYkucHj9VF2xD0l1WL5unC4Ywe/Eynt vBWAMDbOASw7S2YByxD/Rbjemg== -----END CERTIFICATE-----Generated at Sun Oct 18 07:34:57 2026 by rpki-client