$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft File: HAQwdyQVc864WNlR8CsiBXujluc.mft (raw, json) Hash identifier: kQ/xYY1Ozp5sJaai0IFWcHVmsBjgL64dPkiuH2c0aKo= Subject key identifier: B6:F6:82:88:48:62:8A:B0:54:5A:CF:55:A9:34:10:0F:BA:35:48:C4 Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft Manifest number: 04E3 Signing time: Sat 03 Oct 2026 00:02:24 +0000 Manifest this update: Sat 03 Oct 2026 00:02:23 +0000 Manifest next update: Sat 10 Oct 2026 00:02:23 +0000 Files and hashes: 1: HAQwdyQVc864WNlR8CsiBXujluc.crl (hash: 60sz1Zp6Gl9c0NCR5tSi+JBDXjmjfOapwEsODS3jcVU=) 2: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (hash: xOj/wZXPscupT3ElrTmBaHlsw670Pw+Hr4mehf5CVBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Validity Not Before: Oct 3 00:02:23 2026 GMT Not After : Oct 10 00:02:23 2026 GMT Subject: CN=6ac04610-8105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:58:33:85:ac:27:f8:42:52:9b:1a:36:37: 4d:8a:a9:7d:c8:4e:d2:25:45:ca:7c:88:6d:d5:32: 78:60:1b:6c:ff:81:d5:39:09:f6:ee:e6:67:a1:c9: 5f:aa:62:69:7c:21:3c:46:64:03:df:a1:1e:20:52: 20:cc:6d:b8:77:3a:93:94:fc:33:79:ab:d8:28:be: 78:8d:84:6a:b2:b0:58:30:86:d3:bc:71:43:bd:78: ef:13:e1:e7:e6:5c:96:da:4f:80:66:07:37:3e:66: a9:fd:c5:85:4e:b2:61:91:28:ec:34:dd:35:40:2e: f7:f5:b9:06:f3:2f:41:59:29:9f:15:28:29:02:f0: 8c:4c:1f:b9:04:01:1b:a6:47:78:85:ba:9f:a8:65: fc:0a:71:81:a4:24:09:bc:23:7a:83:21:06:7b:aa: 33:3a:86:52:ca:21:c9:e6:87:09:a7:a6:07:46:32: b4:d5:01:49:ed:76:9c:6b:d4:64:c5:f6:ff:7f:25: 71:c2:c1:93:3e:c7:9d:ca:96:31:da:6c:37:48:39: 72:c6:fa:de:11:2c:a1:8f:89:d9:e2:72:67:8a:68: 8f:96:e0:4c:bf:51:a0:68:2b:8f:94:03:83:15:5d: 1d:7e:b1:37:33:28:eb:20:53:8c:9c:f8:b8:b0:df: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F6:82:88:48:62:8A:B0:54:5A:CF:55:A9:34:10:0F:BA:35:48:C4 X509v3 Authority Key Identifier: keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:71:ec:58:63:da:70:76:c6:ed:31:40:3b:8b:5b:60:37:8e: 75:1a:fd:cc:ae:ed:99:a9:b4:05:ce:ac:9f:f6:1f:8a:52:11: b8:d9:b9:69:7f:31:27:0f:72:e4:b1:5d:66:17:f5:3e:ab:aa: 54:13:40:72:02:80:cd:98:29:34:ac:04:78:7d:64:8c:3c:bd: cf:f5:6c:fe:bf:6b:6b:8e:d4:b6:a3:07:70:cb:06:4b:db:d0: f4:7c:b0:e3:e6:f2:57:9b:d6:0a:01:19:19:9b:49:25:b0:e3: 74:f6:20:33:10:04:42:b9:c1:58:08:3f:c9:43:3c:8a:03:c1: e5:7a:a6:eb:d0:8c:94:e3:d5:cb:bb:26:ef:e1:3e:ed:b0:33: fc:71:1e:f9:15:7a:a6:1b:2d:22:94:a4:a8:20:11:c4:14:e3: 8c:e8:9f:6c:34:fb:94:00:50:25:49:7c:d0:c7:d3:72:e8:f0: 5c:2f:99:e4:a7:c5:38:75:39:b7:c0:7a:2e:1f:e0:54:b2:c8: 8a:e2:f9:4b:15:c1:d6:b2:33:b4:03:83:d4:d9:11:63:b4:cc: 58:82:41:42:70:aa:cb:52:6e:12:6e:ab:b8:4a:70:22:30:1d: dd:40:22:24:a2:c0:96:1c:3e:3b:62:64:9f:a1:98:dd:6d:ff: de:9b:79:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ1QTIxMTAvBgNVBAUTKDFDMDQzMDc3MjQxNTczQ0VCODU4RDk1MUYwMkIyMjA1 N0JBMzk2RTcwHhcNMjYxMDAzMDAwMjIzWhcNMjYxMDEwMDAwMjIzWjAYMRYwFAYD VQQDEw02YWMwNDYxMC04MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGBYM4WsJ/hCUpsaNjdNiql9yE7SJUXKfIht1TJ4YBts/4HVOQn27uZnoclf qmJpfCE8RmQD36EeIFIgzG24dzqTlPwzeavYKL54jYRqsrBYMIbTvHFDvXjvE+Hn 5lyW2k+AZgc3Pmap/cWFTrJhkSjsNN01QC739bkG8y9BWSmfFSgpAvCMTB+5BAEb pkd4hbqfqGX8CnGBpCQJvCN6gyEGe6ozOoZSyiHJ5ocJp6YHRjK01QFJ7Xaca9Rk xfb/fyVxwsGTPsedypYx2mw3SDlyxvreESyhj4nZ4nJnimiPluBMv1GgaCuPlAOD FV0dfrE3MyjrIFOMnPi4sN92jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLb2gohI YoqwVFrPVak0EA+6NUjEMB8GA1UdIwQYMBaAFBwEMHckFXPOuFjZUfArIgV7o5bn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDVBMi9BM0QyRENBQTgw MDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4NjRXTmxSOENzaUJYdWps dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBUXdkeVFWYzg2NFdObFI4Q3NpQlh1amx1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDVBMi9BM0QyRENBQTgwMDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4 NjRXTmxSOENzaUJYdWpsdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALXHsWGPacHbG7TFAO4tbYDeOdRr9zK7tmam0Bc6sn/YfilIRuNm5aX8xJw9y 5LFdZhf1PquqVBNAcgKAzZgpNKwEeH1kjDy9z/Vs/r9ra47UtqMHcMsGS9vQ9Hyw 4+byV5vWCgEZGZtJJbDjdPYgMxAEQrnBWAg/yUM8igPB5Xqm69CMlOPVy7sm7+E+ 7bAz/HEe+RV6phstIpSkqCARxBTjjOifbDT7lABQJUl80MfTcujwXC+Z5KfFOHU5 t8B6Lh/gVLLIiuL5SxXB1rIztAOD1NkRY7TMWIJBQnCqy1JuEm6ruEpwIjAd3UAi JKLAlhw+O2Jkn6GY3W3/3pt5kQ== -----END CERTIFICATE-----Generated at Sun Oct 4 16:54:21 2026 by rpki-client