$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B66/66C68C58AAAA11F1972880F83611F970/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.mft File: hXyQGcTzpxbRJ0NjnSCpoCMWA0s.mft (raw, json) Hash identifier: okQboXVsD4fC+OXhDWfJGzZYyS9FIUCyVtfIB+mC2cU= Subject key identifier: 60:4F:DA:33:B6:97:74:AC:ED:E2:FB:56:54:B7:AC:A9:16:FC:F6:23 Authority key identifier: 85:7C:90:19:C4:F3:A7:16:D1:27:43:63:9D:20:A9:A0:23:16:03:4B Certificate issuer: /CN=A91D2B66/serialNumber=857C9019C4F3A716D12743639D20A9A02316034B Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B66/66C68C58AAAA11F1972880F83611F970/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.mft Manifest number: 13 Signing time: Mon 05 Oct 2026 09:36:06 +0000 Manifest this update: Mon 05 Oct 2026 09:36:05 +0000 Manifest next update: Mon 12 Oct 2026 09:36:05 +0000 Files and hashes: 1: hXyQGcTzpxbRJ0NjnSCpoCMWA0s.crl (hash: sc2B7tcSUgDYe3m+yMNfz/yLWaO3kI/wc66skm9SUMk=) 2: 9B17BD50AAAB11F1B0917E723711F970.roa (hash: TQcE5JTZeEHSK6s3MQ6mItfhygQNQIq/0kyBo6A3DGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B66/66C68C58AAAA11F1972880F83611F970/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.crl rsync://rpki.apnic.net/member_repository/A91D2B66/66C68C58AAAA11F1972880F83611F970/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B66, serialNumber=857C9019C4F3A716D12743639D20A9A02316034B Validity Not Before: Oct 5 09:36:05 2026 GMT Not After : Oct 12 09:36:05 2026 GMT Subject: CN=6ac36f86-f3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3f:4c:98:b9:b7:96:16:8f:0e:0b:6a:c2:f8: 69:5c:f5:77:a0:01:28:48:c2:2e:aa:c9:ae:68:03: 6c:43:6b:98:66:6d:ac:ef:a3:85:b3:ae:c5:58:54: 04:11:f8:6f:f0:66:aa:47:72:d9:5f:27:61:0d:16: c7:9d:dd:62:1c:96:3b:5b:53:b3:9c:d3:e1:ce:51: a5:11:69:38:c0:22:82:65:47:f5:ea:fe:14:65:54: 39:89:fe:f2:fb:bd:ea:ff:e6:c1:a7:c0:41:a7:0b: 50:09:a4:a7:8c:de:ff:45:0b:50:3a:da:e8:a5:02: 45:43:86:b0:15:04:54:92:7e:e1:49:a3:e4:5c:8c: b1:d1:78:95:bc:a2:ce:a1:36:88:b7:84:f3:85:a4: d5:5f:f7:f8:d8:d2:b2:60:6b:88:b6:a4:80:5d:1b: 66:1b:ad:60:ca:ff:43:1e:38:ea:9b:99:85:97:a1: 5e:03:11:d7:10:06:9a:7d:5e:69:fa:8e:c4:1c:12: 54:e5:fa:62:8c:32:a9:be:d0:50:2f:05:e6:f8:ba: cf:02:73:93:0b:78:78:4f:7d:b0:67:30:6e:3d:4e: 9c:99:96:d0:ef:b0:c5:ca:bb:03:d0:bb:b3:1e:69: f2:35:a8:5f:e9:4a:6b:d3:29:74:42:70:95:35:f8: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4F:DA:33:B6:97:74:AC:ED:E2:FB:56:54:B7:AC:A9:16:FC:F6:23 X509v3 Authority Key Identifier: keyid:85:7C:90:19:C4:F3:A7:16:D1:27:43:63:9D:20:A9:A0:23:16:03:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B66/66C68C58AAAA11F1972880F83611F970/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B66/66C68C58AAAA11F1972880F83611F970/hXyQGcTzpxbRJ0NjnSCpoCMWA0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:49:d2:9c:29:7a:01:9c:c2:0f:1a:60:92:72:a1:aa:27:63: d3:8c:7b:9a:5a:24:9f:f8:0a:09:70:b8:58:99:98:12:e4:e2: 36:1b:41:11:07:6c:a0:2c:00:27:66:67:33:03:cb:4c:65:0c: b4:19:01:86:94:e5:2f:36:f4:f0:6a:14:fb:64:1f:fa:51:f6: f2:9e:f4:b7:29:cf:9b:98:98:11:88:91:6a:29:51:13:0e:9c: 4a:90:1c:dd:88:18:65:c9:91:32:b3:50:4d:e5:ef:c5:46:6c: 8f:e8:a3:1d:61:1e:fc:03:f3:20:82:a8:1e:f0:87:e4:8a:76: 74:34:65:92:e7:e9:48:ce:92:be:c7:bc:f9:b0:fd:0a:85:9a: 1a:5d:bf:8e:e7:9f:04:e7:7a:13:04:9c:7e:f0:6f:ae:c7:68: 44:2a:27:bf:75:c1:ac:d3:df:0e:c4:fe:94:bd:59:3b:dd:52: 58:a7:41:64:9f:44:fd:13:15:f7:de:7d:c1:4e:7e:a1:71:f7: a4:e5:b3:c4:fb:82:46:25:50:92:52:6d:0c:6b:9c:fb:6b:7e: 56:76:a5:52:ae:0d:dc:6b:ca:11:99:51:c6:04:7d:a5:e8:0c: 87:c3:d4:e3:10:c8:12:19:c2:1c:ac:30:2f:89:a4:52:40:e0: 14:52:dc:df -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI2NjExMC8GA1UEBRMoODU3QzkwMTlDNEYzQTcxNkQxMjc0MzYzOUQyMEE5QTAy MzE2MDM0QjAeFw0yNjEwMDUwOTM2MDVaFw0yNjEwMTIwOTM2MDVaMBgxFjAUBgNV BAMTDTZhYzM2Zjg2LWYzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1P0yYubeWFo8OC2rC+Glc9XegAShIwi6qya5oA2xDa5hmbazvo4WzrsVYVAQR +G/wZqpHctlfJ2ENFsed3WIcljtbU7Oc0+HOUaURaTjAIoJlR/Xq/hRlVDmJ/vL7 ver/5sGnwEGnC1AJpKeM3v9FC1A62uilAkVDhrAVBFSSfuFJo+RcjLHReJW8os6h Noi3hPOFpNVf9/jY0rJga4i2pIBdG2YbrWDK/0MeOOqbmYWXoV4DEdcQBpp9Xmn6 jsQcElTl+mKMMqm+0FAvBeb4us8Cc5MLeHhPfbBnMG49TpyZltDvsMXKuwPQu7Me afI1qF/pSmvTKXRCcJU1+A3hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYE/aM7aX dKzt4vtWVLesqRb89iMwHwYDVR0jBBgwFoAUhXyQGcTzpxbRJ0NjnSCpoCMWA0sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjY2LzY2QzY4QzU4QUFB QTExRjE5NzI4ODBGODM2MTFGOTcwL2hYeVFHY1R6cHhiUkowTmpuU0Nwb0NNV0Ew cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFh5UUdjVHpweGJSSjBOam5TQ3BvQ01XQTBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjY2LzY2QzY4QzU4QUFBQTExRjE5NzI4ODBGODM2MTFGOTcwL2hYeVFHY1R6cHhi UkowTmpuU0Nwb0NNV0Ewcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAjSdKcKXoBnMIPGmCScqGqJ2PTjHuaWiSf+AoJcLhYmZgS5OI2G0ERB2ygLAAn ZmczA8tMZQy0GQGGlOUvNvTwahT7ZB/6UfbynvS3Kc+bmJgRiJFqKVETDpxKkBzd iBhlyZEys1BN5e/FRmyP6KMdYR78A/Mggqge8IfkinZ0NGWS5+lIzpK+x7z5sP0K hZoaXb+O558E53oTBJx+8G+ux2hEKie/dcGs098OxP6UvVk73VJYp0Fkn0T9ExX3 3n3BTn6hcfek5bPE+4JGJVCSUm0Ma5z7a35WdqVSrg3ca8oRmVHGBH2l6AyHw9Tj EMgSGcIcrDAviaRSQOAUUtzf -----END CERTIFICATE-----Generated at Mon Oct 5 16:40:56 2026 by rpki-client