$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: paX0nc+MMJNN3tIJWTZEc4VRCWNbV1QVSNicUm/hzy8= Subject key identifier: 7E:D7:16:D5:82:58:F8:ED:69:2B:03:19:41:DF:A6:67:1F:66:48:A4 Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0CB1 Signing time: Tue 06 Oct 2026 18:42:51 +0000 Manifest this update: Tue 06 Oct 2026 18:42:50 +0000 Manifest next update: Tue 13 Oct 2026 18:42:50 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: sWZ0E0qSsF8BDAKG1dsVZ/ldc/J30Bu+0ZAXAYlFPas=) 2: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) 3: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Oct 6 18:42:50 2026 GMT Not After : Oct 13 18:42:50 2026 GMT Subject: CN=6ac5412b-c9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:52:ae:e7:76:14:f8:61:5d:33:53:0e:25: 20:6a:4d:e7:a1:33:a5:d9:dd:e3:c0:6f:74:e4:86: 1f:25:4e:63:51:8e:a2:f4:a9:9c:12:59:58:c8:1b: 01:cf:f7:36:55:ba:d3:c4:e0:40:f4:20:9d:2a:48: da:e1:f1:4a:df:a4:49:85:be:c6:38:35:99:db:41: e2:64:14:5e:31:52:7d:a7:e6:6e:16:ab:de:de:d6: 24:31:ed:41:21:60:68:05:ee:bd:9f:32:71:67:f9: 69:02:68:9c:f5:40:f9:ca:68:a3:1a:6d:eb:43:5a: 35:11:07:6e:f7:e5:27:3c:d2:5f:b5:dd:62:4c:30: b1:19:bf:61:74:ea:f3:5e:fe:1c:2b:15:0e:99:6e: 61:6b:12:f7:63:71:2f:48:de:5b:3f:fc:02:43:4d: bd:21:82:a4:fb:bf:1b:59:d0:e0:aa:76:e4:b5:ff: 7e:63:e2:5e:ce:c1:ad:e1:0a:35:7f:49:0a:99:10: 05:c2:11:6f:2d:13:49:47:4f:00:99:1f:0e:95:bb: 67:13:d5:dc:95:e1:bd:07:3e:33:1f:03:71:af:37: 7b:76:9c:0d:28:1a:b6:01:45:df:88:27:44:60:ce: 2c:0a:5c:6e:9a:3d:24:ee:c6:79:a7:a9:41:f0:f9: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D7:16:D5:82:58:F8:ED:69:2B:03:19:41:DF:A6:67:1F:66:48:A4 X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:13:8d:0c:cb:17:1a:17:20:6c:3b:d5:83:30:41:14:62:ce: 96:9c:22:bf:ee:14:e3:88:f9:df:f8:59:4f:64:31:1b:34:17: 9e:88:76:21:5d:c9:1d:c7:a6:26:46:1a:f2:5d:2f:8d:fb:c9: cf:b4:1f:40:de:6c:db:5d:e3:c0:52:0f:2d:0e:e7:19:20:59: f7:8b:15:23:13:5f:9e:34:17:24:5a:21:ce:49:0d:42:85:80: 75:46:ed:f1:89:17:63:9c:f6:43:9e:62:08:b3:4d:53:0b:97: 49:07:f9:0d:c3:71:3d:90:3c:79:59:d9:7e:6f:a0:a7:3f:55: 89:66:b5:cc:d8:b7:f6:a9:4c:22:64:07:c2:41:b1:6a:14:01: 41:fc:79:c9:e1:27:6a:11:f0:a4:e6:c7:8e:69:a7:65:89:2b: f2:67:da:77:c8:78:90:d6:92:7c:2a:8c:ad:cf:4a:44:b8:7d: c0:96:2f:d6:95:80:97:7f:b8:5d:2b:8e:2b:ff:72:93:97:71: 32:97:14:7a:30:bf:b3:82:4b:5f:6c:73:98:fc:6e:bb:11:c2: 91:f1:1f:de:b6:98:bc:11:0d:ce:73:95:07:8c:7a:5c:a2:c4: aa:fb:e2:bf:ce:3b:5b:ab:cc:1f:a1:39:a9:58:17:78:97:4b: 6b:14:45:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYxMDA2MTg0MjUwWhcNMjYxMDEzMTg0MjUwWjAYMRYwFAYD VQQDEw02YWM1NDEyYi1jOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh5Srud2FPhhXTNTDiUgak3noTOl2d3jwG905IYfJU5jUY6i9KmcEllYyBsB z/c2VbrTxOBA9CCdKkja4fFK36RJhb7GODWZ20HiZBReMVJ9p+ZuFqve3tYkMe1B IWBoBe69nzJxZ/lpAmic9UD5ymijGm3rQ1o1EQdu9+UnPNJftd1iTDCxGb9hdOrz Xv4cKxUOmW5haxL3Y3EvSN5bP/wCQ029IYKk+78bWdDgqnbktf9+Y+JezsGt4Qo1 f0kKmRAFwhFvLRNJR08AmR8OlbtnE9XcleG9Bz4zHwNxrzd7dpwNKBq2AUXfiCdE YM4sClxumj0k7sZ5p6lB8PnPNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7XFtWC WPjtaSsDGUHfpmcfZkikMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqBONDMsXGhcgbDvVgzBBFGLOlpwiv+4U44j53/hZT2QxGzQXnoh2IV3JHcem JkYa8l0vjfvJz7QfQN5s213jwFIPLQ7nGSBZ94sVIxNfnjQXJFohzkkNQoWAdUbt 8YkXY5z2Q55iCLNNUwuXSQf5DcNxPZA8eVnZfm+gpz9ViWa1zNi39qlMImQHwkGx ahQBQfx5yeEnahHwpObHjmmnZYkr8mfad8h4kNaSfCqMrc9KRLh9wJYv1pWAl3+4 XSuOK/9yk5dxMpcUejC/s4JLX2xzmPxuuxHCkfEf3raYvBENznOVB4x6XKLEqvvi v847W6vMH6E5qVgXeJdLaxRFoA== -----END CERTIFICATE-----Generated at Tue Oct 6 22:58:53 2026 by rpki-client