$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json) Hash identifier: aX8nzrT0rN67xukmkgI4cxNx5cthRW+uDiVawnRchIE= Subject key identifier: E8:B0:82:A2:3B:F6:DC:74:7F:18:39:61:3D:BA:20:21:BC:C5:6F:A9 Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft Manifest number: 09DD Signing time: Thu 08 Oct 2026 19:59:07 +0000 Manifest this update: Thu 08 Oct 2026 19:59:06 +0000 Manifest next update: Thu 15 Oct 2026 19:59:06 +0000 Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: G098dE16CScmTXJAKslYZJV6qxzq2FeA65D476g0S3o=) 2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: IPSlPyfz0+bJclfH4V522k6JGFoLnfNN2pg5rNIteNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Validity Not Before: Oct 8 19:59:06 2026 GMT Not After : Oct 15 19:59:06 2026 GMT Subject: CN=6ac7f60b-a88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:41:4b:3b:5f:ef:be:66:e8:26:07:9b:20:91: 9d:a1:26:52:55:76:a5:22:45:fb:c2:3f:d6:c4:fa: be:3f:76:87:b3:ae:df:34:4a:bb:6b:3d:7d:07:d0: a2:70:37:80:50:08:21:81:4e:9a:7c:1e:66:1f:42: 18:8d:cf:5b:da:2c:21:7f:17:60:8c:7b:7c:59:7a: c3:27:cf:4f:b6:71:88:93:70:37:b9:62:4a:37:74: 9a:b0:42:7b:ea:5d:9a:f5:ae:a3:07:31:c5:6d:e1: 13:e2:fa:11:d9:0c:0e:b6:00:2b:0b:c0:95:09:45: b3:67:34:c7:22:79:eb:ef:6c:5a:0a:bb:d8:9a:fd: ab:1d:3d:cf:09:33:5f:79:ef:15:94:e9:95:78:88: b8:f3:f9:98:d6:6e:f3:33:1f:95:4f:ad:29:ab:c0: c2:6d:4c:45:a7:e2:c5:37:c1:71:f8:ed:3e:32:b1: c2:9f:ab:d5:2b:b2:02:dc:6b:64:18:72:5d:95:eb: fe:6a:fe:86:f4:85:42:02:76:d9:e2:98:7d:c4:fd: 2d:51:91:09:f4:38:f1:f2:98:77:9d:bc:86:12:48: fe:5b:95:a2:f0:50:26:ef:5a:9e:29:30:85:b6:de: e3:79:d4:1b:7c:1d:1c:3d:3a:72:fa:dc:66:6e:b0: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:82:A2:3B:F6:DC:74:7F:18:39:61:3D:BA:20:21:BC:C5:6F:A9 X509v3 Authority Key Identifier: keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:80:14:dc:35:ed:cc:8d:1a:9a:d4:fc:df:87:56:ae:6e:3f: f5:c1:2a:b3:9c:22:ed:32:39:b4:6b:c3:65:3e:49:3f:ff:c6: fe:15:2e:bf:6c:8f:8e:ae:b0:59:0a:47:37:00:ba:a2:7a:5e: 3d:6c:25:68:52:73:11:3a:b9:17:be:56:2c:3f:b5:78:05:6f: c7:f7:00:4f:63:29:51:9c:d0:b0:34:d0:9a:ea:82:3e:85:7b: cb:f9:e0:b8:65:e3:b1:1f:a0:76:e5:4b:53:c9:c8:a2:44:73: a7:7a:3d:ef:06:30:5f:c0:79:0b:04:a8:44:12:f8:f4:1b:92: c1:2e:7c:67:c5:03:92:f6:e7:bc:b2:b0:83:ad:59:fc:4b:06: 13:2b:39:71:59:8b:15:fe:d7:5c:48:a7:d6:28:84:54:18:f4: b4:12:1a:27:cc:26:5e:7c:53:bd:65:0e:a0:4c:b4:3e:09:5c: c7:6c:7f:53:8a:a0:41:67:b8:aa:92:21:e2:ea:af:d7:25:de: fc:f1:81:93:10:9c:3c:a1:e1:29:ac:00:ac:ce:99:62:2b:3b: 4c:ee:53:3d:bd:7a:57:4c:2d:31:ff:94:fe:6b:98:c5:4a:f5: c6:94:e2:6f:ac:c3:9f:31:31:ed:83:74:49:90:be:4d:a6:f6: df:1b:c6:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4 MzRDQUJDMTMwHhcNMjYxMDA4MTk1OTA2WhcNMjYxMDE1MTk1OTA2WjAYMRYwFAYD VQQDEw02YWM3ZjYwYi1hODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UFLO1/vvmboJgebIJGdoSZSVXalIkX7wj/WxPq+P3aHs67fNEq7az19B9Ci cDeAUAghgU6afB5mH0IYjc9b2iwhfxdgjHt8WXrDJ89PtnGIk3A3uWJKN3SasEJ7 6l2a9a6jBzHFbeET4voR2QwOtgArC8CVCUWzZzTHInnr72xaCrvYmv2rHT3PCTNf ee8VlOmVeIi48/mY1m7zMx+VT60pq8DCbUxFp+LFN8Fx+O0+MrHCn6vVK7IC3Gtk GHJdlev+av6G9IVCAnbZ4ph9xP0tUZEJ9Djx8ph3nbyGEkj+W5Wi8FAm71qeKTCF tt7jedQbfB0cPTpy+txmbrASvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiwgqI7 9tx0fxg5YT26ICG8xW+pMB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2 Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wMzExNjMxMkFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1y eVBTbURJYVV5Ui1EVEt2Qk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlIAU3DXtzI0amtT834dWrm4/9cEqs5wi7TI5tGvDZT5JP//G/hUuv2yPjq6w WQpHNwC6onpePWwlaFJzETq5F75WLD+1eAVvx/cAT2MpUZzQsDTQmuqCPoV7y/ng uGXjsR+gduVLU8nIokRzp3o97wYwX8B5CwSoRBL49BuSwS58Z8UDkvbnvLKwg61Z /EsGEys5cVmLFf7XXEin1iiEVBj0tBIaJ8wmXnxTvWUOoEy0Pglcx2x/U4qgQWe4 qpIh4uqv1yXe/PGBkxCcPKHhKawArM6ZYis7TO5TPb16V0wtMf+U/muYxUr1xpTi b6zDnzEx7YN0SZC+Tab23xvGnw== -----END CERTIFICATE-----Generated at Sat Oct 10 10:37:23 2026 by rpki-client