$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft File: hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json) Hash identifier: pWf/EW+5GKu9NlUpzXdA620PNCpFGr9m1Ue0VfNPSpA= Subject key identifier: 8A:B6:14:31:E4:89:CC:F0:04:B0:21:A2:91:04:45:3A:30:99:95:91 Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 Certificate issuer: /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft Manifest number: 68 Signing time: Sat 05 Sep 2026 07:44:18 +0000 Manifest this update: Sat 05 Sep 2026 07:44:17 +0000 Manifest next update: Sat 12 Sep 2026 07:44:17 +0000 Files and hashes: 1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: qf4OFp5WMS6serIJhUieZKLGPX+nNUNAVa0mSQV59JI=) 2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 07:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Validity Not Before: Sep 5 07:44:17 2026 GMT Not After : Sep 12 07:44:17 2026 GMT Subject: CN=6a9bc851-8e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:b4:2b:2f:41:e1:71:87:d0:bb:eb:0b:6f: b5:b8:5a:1d:b6:44:43:d8:5c:fb:a9:4d:a7:e4:d2: 6d:54:a2:19:f3:1a:50:9f:a1:86:7a:0c:c7:ff:a0: 7e:e0:31:6f:b3:fe:4b:38:49:2c:18:36:a9:71:7a: 59:78:ae:91:97:66:4c:e6:20:79:52:c0:ee:4d:85: 90:06:9d:f7:09:88:00:83:c3:84:52:78:25:bf:2b: e2:bb:b1:2b:1d:1e:7d:86:31:75:a5:b0:4f:f4:f9: f9:42:70:ea:9b:1b:0f:28:a0:0e:ee:78:25:af:b4: f0:08:86:5c:eb:6f:51:81:71:e8:c2:5c:00:28:7f: f9:b7:16:44:6d:c9:29:a6:b6:b8:0b:03:48:5d:40: 68:94:4e:68:e4:9e:7d:93:60:e5:3c:7e:b1:dc:ed: 1c:97:92:c6:d4:84:39:ab:5f:25:e0:68:11:60:78: b7:cf:3a:67:c6:33:bc:19:4e:ba:e6:0f:7d:d5:f0: 45:71:29:ca:13:34:e7:b1:6b:64:15:7c:43:ac:76: b6:97:28:27:a1:de:60:ad:ad:58:31:c0:c6:9a:83: dd:16:3b:25:af:68:6f:1b:20:b4:92:42:c2:2e:92: d2:15:83:de:7a:ce:ab:20:23:40:8a:fe:ae:f3:1e: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B6:14:31:E4:89:CC:F0:04:B0:21:A2:91:04:45:3A:30:99:95:91 X509v3 Authority Key Identifier: keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:70:33:8d:c2:48:94:27:85:ab:c7:b5:3b:49:d9:e0:d5:07: 86:d7:98:93:ae:d0:98:ac:b8:c3:bb:ed:c9:e3:79:aa:d7:77: 20:aa:4d:a0:fb:1e:2b:b6:bc:bb:a1:61:42:f6:13:76:2c:e6: 1e:54:09:24:73:d1:81:49:f0:48:e1:40:6a:5f:3e:74:89:37: d5:e0:40:ab:05:64:fd:94:e6:41:e9:39:ba:0a:2c:5d:e8:2a: 58:73:b3:6d:f8:9c:1e:24:14:8e:ef:32:15:63:71:a1:f6:d1: c3:96:e8:3f:ab:c3:f1:bc:0b:6d:69:a1:4a:ae:5d:1f:3f:b9: e4:5c:87:67:31:08:e6:f5:7a:96:6f:8a:3c:4d:1d:4f:3b:6e: 4f:7e:03:b3:c9:3e:a9:99:c6:e7:a8:41:35:93:23:72:bb:4f: a7:55:19:43:8f:89:50:b9:ca:57:c7:3d:ed:44:4a:e0:1b:d4: 7b:d3:7f:f3:09:d9:c2:00:6c:4d:fe:82:eb:85:93:fd:c3:21: ac:07:fe:a4:21:88:be:50:11:26:04:58:df:8d:b6:e7:62:d7: 51:9d:2e:9e:bd:99:ca:d0:2a:34:07:85:75:65:2b:0f:3e:ec: df:02:cd:79:d6:42:1d:a4:63:52:12:b8:f6:eb:1c:d2:84:5e: 72:52:fb:9e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoODVGMjJEOTIxNTNGMjAxRDU5MjNBOUYyN0Y5NjFGQzc2 RDcxMTlCODAeFw0yNjA5MDUwNzQ0MTdaFw0yNjA5MTIwNzQ0MTdaMBgxFjAUBgNV BAMTDTZhOWJjODUxLThlMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeIbQrL0HhcYfQu+sLb7W4Wh22REPYXPupTafk0m1UohnzGlCfoYZ6DMf/oH7g MW+z/ks4SSwYNqlxell4rpGXZkzmIHlSwO5NhZAGnfcJiACDw4RSeCW/K+K7sSsd Hn2GMXWlsE/0+flCcOqbGw8ooA7ueCWvtPAIhlzrb1GBcejCXAAof/m3FkRtySmm trgLA0hdQGiUTmjknn2TYOU8frHc7RyXksbUhDmrXyXgaBFgeLfPOmfGM7wZTrrm D33V8EVxKcoTNOexa2QVfEOsdraXKCeh3mCtrVgxwMaag90WOyWvaG8bILSSQsIu ktIVg956zqsgI0CK/q7zHi+jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUirYUMeSJ zPAEsCGikQRFOjCZlZEwHwYDVR0jBBgwFoAUhfItkhU/IB1ZI6nyf5Yfx21xGbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0REREMzOTE2MTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIxWkk2bnlmNVlmeDIxeEdi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGZJdGtoVV9JQjFaSTZueWY1WWZ4MjF4R2JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0REREMzOTE2MTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIx Wkk2bnlmNVlmeDIxeEdiZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgcDONwkiUJ4Wrx7U7Sdng1QeG15iTrtCYrLjDu+3J43mq13cgqk2g+x4rtry7 oWFC9hN2LOYeVAkkc9GBSfBI4UBqXz50iTfV4ECrBWT9lOZB6Tm6Cixd6CpYc7Nt +JweJBSO7zIVY3Gh9tHDlug/q8PxvAttaaFKrl0fP7nkXIdnMQjm9XqWb4o8TR1P O25PfgOzyT6pmcbnqEE1kyNyu0+nVRlDj4lQucpXxz3tRErgG9R703/zCdnCAGxN /oLrhZP9wyGsB/6kIYi+UBEmBFjfjbbnYtdRnS6evZnK0Co0B4V1ZSsPPuzfAs15 1kIdpGNSErj26xzShF5yUvue -----END CERTIFICATE-----Generated at Sat Sep 5 11:06:41 2026 by rpki-client