$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: 8iWk7Rg7mC0CpArgKSbXuTWGM1SxJNfV7F3JSNM3qfM= Subject key identifier: 16:2F:29:31:32:CA:90:B0:E3:31:AE:0B:28:0B:99:F8:0D:A1:6D:C9 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 0728 Signing time: Thu 08 Oct 2026 22:11:50 +0000 Manifest this update: Thu 08 Oct 2026 22:11:50 +0000 Manifest next update: Thu 15 Oct 2026 22:11:50 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: dDrdv4mkgjlOuiV6YfH/PgCASx43rEWkXIZlxbh3dj8=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: me3CaA0z4H42j2ZBEdmS9/zLWPoaMpSiN9HAM4HeT+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 22:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Oct 8 22:11:50 2026 GMT Not After : Oct 15 22:11:50 2026 GMT Subject: CN=6ac81526-8b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:26:03:d3:a8:6e:c6:c8:22:48:61:8a:5d: d0:8b:24:c9:a6:a9:89:1a:8d:44:f9:04:dd:e5:36: 4d:05:77:f6:f4:d0:e4:bf:df:f9:e0:4b:57:2d:e7: 7e:60:a4:9c:6a:d6:e5:13:a5:e1:04:e1:2d:74:61: ea:3e:6e:0d:d2:70:a2:df:9e:c7:8c:46:4d:a9:cd: c6:5a:45:eb:f0:ca:54:d8:4b:b1:08:ed:08:23:60: 5a:5f:ae:b0:2f:c2:9b:ec:14:41:81:dc:ee:91:a5: b1:fa:cd:04:26:c5:73:89:df:7f:f9:14:11:86:52: e2:b6:ec:6c:8e:c9:98:ac:b7:db:a4:7e:d3:46:fa: 4d:48:03:e5:12:8d:8a:ba:7e:62:70:b1:06:4c:b9: 32:fd:8e:14:ed:c5:29:15:02:3c:8e:76:76:91:21: 07:e3:8d:be:cb:3c:9a:76:6b:f0:b4:e8:e6:f1:65: db:c4:95:03:63:92:77:74:25:40:c4:0c:93:73:03: f3:98:99:8f:f3:c0:df:85:8c:6f:5e:91:d8:19:ed: 60:b0:ff:fb:16:17:55:eb:2b:e3:5c:c8:75:27:2c: a5:fc:b7:bc:4b:5c:ca:16:a7:33:2d:4e:30:be:2b: 88:66:51:9e:47:93:53:f6:4f:76:6f:a6:e9:84:10: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:29:31:32:CA:90:B0:E3:31:AE:0B:28:0B:99:F8:0D:A1:6D:C9 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1c:fc:59:9d:25:d0:17:54:00:a8:c2:dd:dd:8f:10:c0:9a: b2:31:0a:0a:5b:00:64:92:9d:79:e8:b8:ee:e0:5f:53:f3:0d: 9c:fd:b7:86:0d:73:3a:fe:9f:a7:88:52:e9:8c:dd:93:4e:20: 37:8a:12:84:8b:d7:cb:c6:17:b9:93:ec:55:c0:f5:76:d0:88: 1a:e6:ae:5d:b4:ea:27:f5:39:da:e1:4f:f8:22:ee:17:0d:61: 1a:68:c9:e3:2c:c7:3b:05:0d:5b:f4:2f:ab:23:c4:50:29:1d: a6:57:78:aa:c4:69:57:e0:53:8a:62:1a:20:51:02:1b:43:8f: d2:03:4d:b8:22:11:19:fe:ba:c8:9c:f3:07:f8:13:01:8f:db: 8c:0a:fb:7f:db:57:49:7d:ae:7e:c5:c5:0e:bf:9f:23:5f:10: 77:fe:f1:b1:77:2f:4d:45:35:ce:d5:36:a4:5f:08:dd:77:8f: 56:ec:82:fd:eb:20:be:28:0e:b1:8b:47:af:94:65:e3:af:6e: f6:ad:8b:5f:5c:be:ca:9a:cc:8d:96:0e:b5:50:49:06:5a:92: 62:d6:9f:1c:44:01:83:f5:7e:84:da:b6:2f:8d:da:a7:ef:76: 61:66:e8:95:7f:50:cc:fc:41:85:c7:f5:ab:0f:43:4b:7b:e0: 34:38:67:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjYxMDA4MjIxMTUwWhcNMjYxMDE1MjIxMTUwWjAYMRYwFAYD VQQDEw02YWM4MTUyNi04YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsgmA9OobsbIIkhhil3QiyTJpqmJGo1E+QTd5TZNBXf29NDkv9/54EtXLed+ YKScatblE6XhBOEtdGHqPm4N0nCi357HjEZNqc3GWkXr8MpU2EuxCO0II2BaX66w L8Kb7BRBgdzukaWx+s0EJsVzid9/+RQRhlLituxsjsmYrLfbpH7TRvpNSAPlEo2K un5icLEGTLky/Y4U7cUpFQI8jnZ2kSEH442+yzyadmvwtOjm8WXbxJUDY5J3dCVA xAyTcwPzmJmP88DfhYxvXpHYGe1gsP/7FhdV6yvjXMh1Jyyl/Le8S1zKFqczLU4w viuIZlGeR5NT9k92b6bphBBCNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYvKTEy ypCw4zGuCygLmfgNoW3JMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkxz8WZ0l0BdUAKjC3d2PEMCasjEKClsAZJKdeei47uBfU/MNnP23hg1zOv6f p4hS6Yzdk04gN4oShIvXy8YXuZPsVcD1dtCIGuauXbTqJ/U52uFP+CLuFw1hGmjJ 4yzHOwUNW/QvqyPEUCkdpld4qsRpV+BTimIaIFECG0OP0gNNuCIRGf66yJzzB/gT AY/bjAr7f9tXSX2ufsXFDr+fI18Qd/7xsXcvTUU1ztU2pF8I3XePVuyC/esgvigO sYtHr5Rl469u9q2LX1y+yprMjZYOtVBJBlqSYtafHEQBg/V+hNq2L43ap+92YWbo lX9QzPxBhcf1qw9DS3vgNDhn3w== -----END CERTIFICATE-----Generated at Fri Oct 9 17:42:33 2026 by rpki-client