$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: pjg8mIr5EdI/sZTSa8JN0h8QE6yCBgcCQhDQtPcnkPk= Subject key identifier: 33:58:9D:2F:B5:BD:DA:8A:CA:EF:C0:CE:3C:86:D3:23:79:E0:B2:60 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 01D2 Signing time: Wed 07 Oct 2026 04:11:49 +0000 Manifest this update: Wed 07 Oct 2026 04:11:48 +0000 Manifest next update: Wed 14 Oct 2026 04:11:48 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: XdA8reLJLW/cIFlpv6IquzOTXpOvSAlWVHw4RtGRy1g=) 2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: xILVq3Pl1ryIoRueMpMu286AyVmWUfGzcv0mFdI+Wv0=) 3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: BYKkFXMozWzhv1SFqTrB4VKA3O1SFw8hm1zrdVgqCeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 04:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Oct 7 04:11:48 2026 GMT Not After : Oct 14 04:11:48 2026 GMT Subject: CN=6ac5c685-9e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:c3:15:14:05:d3:17:a5:c0:14:4c:b4:43: 66:6b:1c:e9:13:b3:13:57:71:98:95:ef:07:69:f3: 4b:00:01:1f:bf:df:17:a7:ac:9d:30:d3:48:e3:b0: da:3f:9e:50:db:a2:fa:95:0b:ac:34:cd:55:c6:43: 98:af:31:ff:a3:9c:07:6f:de:9e:d2:d4:67:94:3d: 43:59:38:a1:47:81:38:66:ef:2f:c4:58:78:95:2e: 22:aa:59:90:6a:04:a4:2c:d5:de:4b:39:6e:a9:1a: 4d:fc:d9:af:02:d2:41:a0:43:41:28:de:ac:49:e9: cc:7d:78:f8:e8:ad:6d:78:7c:2b:ae:d5:df:4e:66: 2b:b8:fb:4a:53:3a:aa:0a:28:9d:30:04:27:26:11: eb:e4:a1:d0:b8:a6:eb:8d:36:2d:1c:f3:16:4f:9e: 75:b7:fd:e3:4c:0f:f1:d0:53:4e:e9:1d:48:f6:e6: dc:8a:54:62:bf:a9:71:ff:ef:64:bb:64:e4:34:ae: b3:51:59:2c:15:e2:40:bb:32:9e:08:0e:72:5d:5c: 23:bf:40:cc:06:60:83:e3:94:4d:71:24:ee:6b:5c: a8:fe:e2:38:c5:87:55:86:f3:b9:5c:65:1f:35:f5: df:a2:b6:bb:2c:c5:a5:53:e5:9e:d2:63:54:f9:bd: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:58:9D:2F:B5:BD:DA:8A:CA:EF:C0:CE:3C:86:D3:23:79:E0:B2:60 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:7a:5d:0f:de:48:5e:d9:f3:ec:3a:ef:18:c1:cc:28:20: cb:a0:f1:a0:cd:25:5d:52:32:4c:b4:fc:2a:78:c3:bc:97:4e: 7f:a5:b3:90:ed:fe:7c:58:d3:c0:b7:32:f2:f5:32:00:d8:cd: ec:a6:20:88:5c:f6:02:7a:9f:4d:1e:00:5e:a9:df:be:3b:4c: 7b:aa:06:a6:63:ee:6a:92:4e:60:0a:dc:35:f3:d3:d0:b7:3b: 86:a9:73:51:e9:50:77:e3:88:ab:17:46:c3:c2:96:d4:f0:6e: 57:81:f8:9f:3a:f4:df:65:61:85:e9:db:03:3a:1c:a6:cf:f7: 38:6f:a9:ae:1e:b2:9f:6b:9e:28:bc:a9:0e:7e:39:17:4f:4e: a3:c2:2c:70:4e:5f:06:de:d4:8f:a0:4c:ea:4f:53:43:76:8a: 61:29:98:40:ef:8b:d0:91:ea:05:ad:e0:f3:92:23:fd:e5:27: 25:cb:44:6b:ac:db:b8:ad:51:0e:67:d7:2b:4d:4c:c6:11:78: 08:aa:13:1b:a1:ce:71:f0:b7:f9:dd:e2:78:4a:51:fe:db:f5: 63:e1:9a:f7:ff:be:5b:39:a2:c3:f6:79:57:8c:94:b0:7a:53: 05:a5:5f:77:e4:d4:e5:a9:25:38:77:44:3e:1a:91:0d:84:45: 5b:e5:5d:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYxMDA3MDQxMTQ4WhcNMjYxMDE0MDQxMTQ4WjAYMRYwFAYD VQQDEw02YWM1YzY4NS05ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvrDFRQF0xelwBRMtENmaxzpE7MTV3GYle8HafNLAAEfv98Xp6ydMNNI47Da P55Q26L6lQusNM1VxkOYrzH/o5wHb96e0tRnlD1DWTihR4E4Zu8vxFh4lS4iqlmQ agSkLNXeSzluqRpN/NmvAtJBoENBKN6sSenMfXj46K1teHwrrtXfTmYruPtKUzqq CiidMAQnJhHr5KHQuKbrjTYtHPMWT551t/3jTA/x0FNO6R1I9ubcilRiv6lx/+9k u2TkNK6zUVksFeJAuzKeCA5yXVwjv0DMBmCD45RNcSTua1yo/uI4xYdVhvO5XGUf NfXfora7LMWlU+We0mNU+b1ZDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNYnS+1 vdqKyu/AzjyG0yN54LJgMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnAF6XQ/eSF7Z8+w67xjBzCggy6DxoM0lXVIyTLT8KnjDvJdOf6WzkO3+fFjT wLcy8vUyANjN7KYgiFz2AnqfTR4AXqnfvjtMe6oGpmPuapJOYArcNfPT0Lc7hqlz UelQd+OIqxdGw8KW1PBuV4H4nzr032VhhenbAzocps/3OG+prh6yn2ueKLypDn45 F09Oo8IscE5fBt7Uj6BM6k9TQ3aKYSmYQO+L0JHqBa3g85Ij/eUnJctEa6zbuK1R DmfXK01MxhF4CKoTG6HOcfC3+d3ieEpR/tv1Y+Ga9/++Wzmiw/Z5V4yUsHpTBaVf d+TU5aklOHdEPhqRDYRFW+VduA== -----END CERTIFICATE-----Generated at Thu Oct 8 08:50:34 2026 by rpki-client