$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: 0rW8cSvSFoBiCQSTfr23A/LoHoLuRu41mrwCRle+9e4= Subject key identifier: D7:DF:2E:C3:0B:7A:35:13:0B:29:06:B5:04:8E:7F:5B:B6:D1:2C:F4 Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 09EF Signing time: Tue 06 Oct 2026 19:56:37 +0000 Manifest this update: Tue 06 Oct 2026 19:56:37 +0000 Manifest next update: Tue 13 Oct 2026 19:56:37 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: bH+ShtLZp7L6qjprC8zBe6fOHKZ16PZ2Gofoaq2gQZs=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Oct 6 19:56:37 2026 GMT Not After : Oct 13 19:56:37 2026 GMT Subject: CN=6ac55275-df36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:22:4a:5a:61:46:1c:24:b1:ae:0b:d3:82: ba:22:1d:60:88:4a:cc:07:b2:e5:73:b1:01:da:ad: 89:0d:35:a4:e9:c7:be:3b:aa:e5:29:e4:a1:ae:91: 1c:c3:18:f9:c6:d1:3f:ad:4f:14:9f:72:7f:0a:92: 70:6e:25:9f:fa:63:8f:27:8c:c5:40:26:43:30:ca: cb:2c:29:66:ee:a4:d4:4a:63:cc:e8:4a:3d:4f:be: 6f:b2:c3:a4:83:53:15:a4:24:6c:1c:0e:b9:9e:f2: f5:2e:b5:12:e8:30:ad:e9:7a:2b:c1:be:01:b9:6b: 44:d4:96:4d:61:a8:75:e8:5e:8e:c9:7e:69:3d:43: c2:d2:d7:f0:e7:e1:26:91:0b:a8:93:60:45:1c:18: aa:1f:3a:f5:d2:8b:40:84:0c:a0:64:d1:12:99:fb: 6c:42:4c:56:52:71:01:e1:c6:9a:bd:5c:c1:bc:fa: c3:95:f8:37:e0:7f:38:ca:28:e4:11:6c:cf:37:a3: f4:cd:93:0a:8a:2e:f8:6a:2d:83:66:71:58:2e:3b: 6d:02:4d:91:bb:ed:2c:83:83:06:7c:dd:60:42:cf: 4d:73:90:0a:b4:f0:bb:a7:03:1c:1f:32:6e:e3:8b: ea:db:d9:3e:1c:5e:ce:7b:93:a4:be:3c:ec:f8:b9: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DF:2E:C3:0B:7A:35:13:0B:29:06:B5:04:8E:7F:5B:B6:D1:2C:F4 X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:78:7c:38:20:0f:58:6c:41:e7:c6:4d:c4:d6:ba:fe:66:c6: c8:61:c6:cb:ac:00:48:4e:47:17:67:94:02:ba:d0:3a:73:07: 33:ed:70:a9:db:95:1e:15:5b:5d:17:37:0f:37:11:d2:b2:da: 73:11:f3:fa:0a:ef:0e:c3:7b:12:0f:03:97:92:4f:70:77:6a: 84:23:4a:b4:3c:ec:65:a0:5c:fa:23:f7:86:01:04:d1:20:d2: 12:df:d2:96:c6:4b:38:5e:37:9d:6c:0b:9f:8e:a2:3c:6f:87: f1:60:f8:49:87:e8:d9:8a:e5:59:a0:4b:50:62:0b:d4:0b:b7: 75:72:ee:de:b6:ba:31:e6:2e:61:87:36:ba:ea:f3:00:3c:02: d0:b6:8d:28:26:1e:7d:92:f1:d5:13:25:a6:b3:a9:cb:c5:cb: 4a:25:99:b5:da:f7:66:2f:30:03:62:8b:1d:13:16:a6:4b:76: cc:99:7c:46:7f:fa:7e:93:f8:cf:99:3e:c5:a8:a8:18:a2:7d: f1:6c:a3:6d:b0:1a:bb:da:44:65:eb:94:81:1c:54:f2:84:f8: 19:e6:52:4e:8a:09:82:f5:33:3e:ef:dc:22:6c:83:57:62:48: 9d:56:d4:eb:b8:c4:a9:40:c1:43:8a:28:6b:40:a6:46:a7:54: 86:7d:43:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjYxMDA2MTk1NjM3WhcNMjYxMDEzMTk1NjM3WjAYMRYwFAYD VQQDEw02YWM1NTI3NS1kZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbgiSlphRhwksa4L04K6Ih1giErMB7Llc7EB2q2JDTWk6ce+O6rlKeShrpEc wxj5xtE/rU8Un3J/CpJwbiWf+mOPJ4zFQCZDMMrLLClm7qTUSmPM6Eo9T75vssOk g1MVpCRsHA65nvL1LrUS6DCt6Xorwb4BuWtE1JZNYah16F6OyX5pPUPC0tfw5+Em kQuok2BFHBiqHzr10otAhAygZNESmftsQkxWUnEB4caavVzBvPrDlfg34H84yijk EWzPN6P0zZMKii74ai2DZnFYLjttAk2Ru+0sg4MGfN1gQs9Nc5AKtPC7pwMcHzJu 44vq29k+HF7Oe5Okvjzs+LkfzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNffLsML ejUTCykGtQSOf1u20Sz0MB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKnh8OCAPWGxB58ZNxNa6/mbGyGHGy6wASE5HF2eUArrQOnMHM+1wqduVHhVb XRc3DzcR0rLacxHz+grvDsN7Eg8Dl5JPcHdqhCNKtDzsZaBc+iP3hgEE0SDSEt/S lsZLOF43nWwLn46iPG+H8WD4SYfo2YrlWaBLUGIL1Au3dXLu3ra6MeYuYYc2uurz ADwC0LaNKCYefZLx1RMlprOpy8XLSiWZtdr3Zi8wA2KLHRMWpkt2zJl8Rn/6fpP4 z5k+xaioGKJ98WyjbbAau9pEZeuUgRxU8oT4GeZSTooJgvUzPu/cImyDV2JInVbU 67jEqUDBQ4ooa0CmRqdUhn1Dxw== -----END CERTIFICATE-----Generated at Wed Oct 7 17:37:14 2026 by rpki-client