$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: 7ZErQr+o/V4Noqdk+tHhJmsfaPzjcHtoChekZqEANvQ= Subject key identifier: 01:12:1C:67:42:0C:E8:6C:06:E9:05:27:08:C0:74:C3:F9:11:7B:F9 Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 059D Signing time: Fri 04 Sep 2026 22:58:21 +0000 Manifest this update: Fri 04 Sep 2026 22:58:21 +0000 Manifest next update: Fri 11 Sep 2026 22:58:21 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: er6wQ7AcqOoEvunbY/Oi2L1oWjcyyldz83R1potFSVM=) 2: FE0D78046DE911F18A77D2D25CA30FBC.roa (hash: XiBXgFzUAWL1pwnYSYxy1I5MTxdL8wu1faYe0BCjxYY=) 3: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Sep 4 22:58:21 2026 GMT Not After : Sep 11 22:58:21 2026 GMT Subject: CN=6a9b4d0d-d8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:55:c4:a5:cf:36:c4:38:26:47:08:94:53: 1f:a9:38:c5:df:48:7e:b1:ff:9c:69:9a:92:bb:54: fa:1f:36:9c:40:32:12:64:b4:9e:dc:16:89:e2:60: 11:fb:a2:04:a2:43:3d:98:60:a7:7a:f2:35:55:9d: a4:a4:73:13:c0:54:52:f6:12:5a:30:d4:4e:3a:46: 93:9d:2c:dc:81:7a:d3:ba:9a:24:b0:dc:ea:02:11: d5:c8:27:1b:8a:33:cd:b2:bc:e3:e3:ef:ef:39:2f: 13:b8:b1:3a:1a:fc:e3:79:64:23:98:ca:47:2a:78: 20:b4:5d:12:97:a5:54:ca:31:25:7a:b7:46:6f:12: 8a:98:46:06:62:10:a5:73:fa:6b:e8:af:30:73:bc: 19:f9:9c:0d:fc:fd:ed:84:99:06:fc:1c:19:75:03: 71:78:c8:13:fe:83:ea:56:ac:6f:cb:35:58:a8:b5: 17:c4:b8:cc:36:a3:0c:68:9f:7a:e8:41:e0:2a:cb: 4b:f3:a6:cc:18:fc:12:bc:0d:e8:7d:cb:75:30:de: 19:7e:f5:72:26:ab:8e:01:fe:4a:16:22:e2:95:b3: 31:9b:64:2b:b1:c1:24:e9:01:78:0c:68:18:7a:de: 4f:70:e5:73:14:bb:b3:b5:e9:ad:c9:46:4b:07:e2: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:1C:67:42:0C:E8:6C:06:E9:05:27:08:C0:74:C3:F9:11:7B:F9 X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4b:f1:c2:78:32:1c:ff:10:e4:d7:e3:53:f6:5f:42:2c:6b: 00:83:65:b0:25:f5:a1:bb:e8:5c:79:9a:53:55:2a:5f:52:ad: 89:43:cd:92:b3:b0:c5:eb:5e:ee:4d:fe:b0:69:67:c2:2d:00: 0a:2f:18:64:44:f6:ac:c4:57:aa:62:36:76:36:ef:8e:cf:7e: c2:94:94:81:60:32:57:94:16:ff:34:ff:f9:ab:af:d7:ba:ba: c6:8d:65:a5:0e:e7:fd:09:3c:7f:51:89:04:f1:3b:d9:27:ad: e7:45:36:9c:4a:96:05:16:dc:79:18:4c:2c:92:a1:be:ca:d7: a6:63:07:21:e3:70:87:92:93:8d:71:f4:07:14:07:2c:e9:f0: c1:d1:17:15:21:72:8d:f1:27:c8:ac:f1:9d:a3:42:c2:36:e6: 87:2d:83:d6:9c:0d:fb:9d:29:54:d3:ea:e4:23:e8:3c:a5:0b: cf:f9:0b:35:ae:c2:07:51:ed:e5:ac:ca:77:73:e2:85:e8:cb: bc:ea:1d:37:66:8e:55:23:fc:67:90:f1:d7:90:1e:2b:51:75: 7b:27:77:05:54:cb:e8:2c:15:9a:b6:2d:4b:4c:9b:eb:bf:ec: 2a:7c:e9:a8:df:db:18:4a:7a:c8:46:ff:2c:0d:7a:d4:d9:dd: e9:86:88:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjYwOTA0MjI1ODIxWhcNMjYwOTExMjI1ODIxWjAYMRYwFAYD VQQDEw02YTliNGQwZC1kOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xRVxKXPNsQ4JkcIlFMfqTjF30h+sf+caZqSu1T6HzacQDISZLSe3BaJ4mAR +6IEokM9mGCnevI1VZ2kpHMTwFRS9hJaMNROOkaTnSzcgXrTupoksNzqAhHVyCcb ijPNsrzj4+/vOS8TuLE6GvzjeWQjmMpHKnggtF0Sl6VUyjElerdGbxKKmEYGYhCl c/pr6K8wc7wZ+ZwN/P3thJkG/BwZdQNxeMgT/oPqVqxvyzVYqLUXxLjMNqMMaJ96 6EHgKstL86bMGPwSvA3ofct1MN4ZfvVyJquOAf5KFiLilbMxm2QrscEk6QF4DGgY et5PcOVzFLuztemtyUZLB+LLqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAESHGdC DOhsBukFJwjAdMP5EXv5MB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAckvxwngyHP8Q5NfjU/ZfQixrAINlsCX1obvoXHmaU1UqX1KtiUPNkrOwxete 7k3+sGlnwi0ACi8YZET2rMRXqmI2djbvjs9+wpSUgWAyV5QW/zT/+auv17q6xo1l pQ7n/Qk8f1GJBPE72Set50U2nEqWBRbceRhMLJKhvsrXpmMHIeNwh5KTjXH0BxQH LOnwwdEXFSFyjfEnyKzxnaNCwjbmhy2D1pwN+50pVNPq5CPoPKULz/kLNa7CB1Ht 5azKd3PihejLvOodN2aOVSP8Z5Dx15AeK1F1eyd3BVTL6CwVmrYtS0yb67/sKnzp qN/bGEp6yEb/LA161Nnd6YaI/g== -----END CERTIFICATE-----Generated at Sat Sep 5 03:29:06 2026 by rpki-client