$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json) Hash identifier: rkNWAwOoqffKnuLr4QIcP54lXwQAUU64XtpaIKB+qgA= Subject key identifier: EE:ED:F2:61:0A:F8:6F:6A:5F:6E:0A:7D:9C:4F:64:C8:EE:5A:11:99 Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft Manifest number: 094D Signing time: Tue 06 Oct 2026 20:15:33 +0000 Manifest this update: Tue 06 Oct 2026 20:15:33 +0000 Manifest next update: Tue 13 Oct 2026 20:15:33 +0000 Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: v+3DpkvcZssB3awGiWe4lalfqKRcVaHQJYgYHno41AY=) 2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: DnarnMUtuY2dzqecITNkqpdGiG9N5Q5Cf2m+lbFecbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: Oct 6 20:15:33 2026 GMT Not After : Oct 13 20:15:33 2026 GMT Subject: CN=6ac556e5-82d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:e7:4e:7b:d0:1b:d5:37:99:9b:c7:53:29: da:5a:d8:c6:0c:c6:80:40:02:b0:52:b4:3c:47:ef: df:6a:40:1e:d0:1c:ee:64:a6:f1:31:b3:56:48:b8: 24:f5:28:af:2e:7c:8e:25:ac:b5:21:77:1c:57:41: 4b:ab:07:8e:31:7b:18:3e:84:22:1b:8a:47:ff:95: 78:53:48:8a:e9:c7:83:1c:e6:76:f4:51:34:38:f1: 86:89:e3:69:c0:45:f3:5c:18:cb:3a:97:2d:91:c8: 11:fd:46:e1:7e:4f:db:67:3a:4b:cf:eb:bf:96:e5: 94:cf:fe:95:95:f5:59:7b:6b:c5:89:29:24:9f:67: 7f:a0:6b:27:cd:8e:03:b2:6d:c6:d3:79:d2:35:a1: 02:14:5f:e5:76:50:37:a0:9b:c4:7a:33:55:99:df: f3:d5:64:f0:e7:71:82:63:80:59:11:b2:72:ce:d1: d0:dc:ce:0b:db:cd:ae:20:41:7a:84:4f:f7:4b:13: 7f:05:cf:37:21:a2:72:fc:47:e9:b1:09:72:bd:8d: 33:27:bf:8a:f6:a1:3a:89:15:b6:c8:7c:89:42:07: f5:1d:da:1e:5c:8d:47:f1:ce:6a:b2:d2:87:46:a8: b1:6a:35:28:b1:8d:e7:5d:18:bd:61:f8:5a:29:ea: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:ED:F2:61:0A:F8:6F:6A:5F:6E:0A:7D:9C:4F:64:C8:EE:5A:11:99 X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:46:08:0f:e4:a4:9f:5c:c1:a8:4f:37:3c:39:02:46:5a: eb:9b:a8:d7:cd:97:7f:e1:b6:12:c8:93:b0:ea:ea:ac:fe:f8: b9:6d:25:45:a1:f1:bb:0e:47:89:f9:b3:28:4a:e7:6e:c1:f7: a6:f1:e6:ef:a2:42:76:b2:f6:77:fb:37:a7:90:27:bc:b3:74: a0:82:6a:7d:db:ae:d3:2f:9f:e2:21:a5:ca:3c:ad:28:bf:33: 4e:e6:8f:63:09:5a:97:45:2f:b4:13:ed:16:35:19:29:43:6b: b9:ec:8a:32:00:b2:ff:16:9f:3b:3b:77:e4:1d:00:68:e1:99: 26:cf:9e:ca:cc:21:b3:9a:f0:98:11:49:cb:5e:8b:85:b2:26: ae:06:5d:77:84:7d:06:ba:1b:42:68:f9:3a:aa:05:c3:d4:fb: a9:7b:a8:91:1a:64:28:be:c5:4f:c2:0f:fb:ff:ab:03:2b:20: 80:f3:2b:71:ef:6b:d5:f6:db:d7:07:53:38:68:e1:0f:9c:50: e4:c0:27:35:7c:32:3e:93:8b:a0:01:86:41:34:d0:2f:07:d6: c8:f0:07:5c:db:69:1b:dc:6d:79:04:9a:2d:3b:8c:a4:0f:8d: 09:e9:ca:9e:97:81:5f:a6:a3:b4:56:5e:98:13:be:3e:dc:c4: 64:26:d2:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjYxMDA2MjAxNTMzWhcNMjYxMDEzMjAxNTMzWjAYMRYwFAYD VQQDEw02YWM1NTZlNS04MmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6jnTnvQG9U3mZvHUynaWtjGDMaAQAKwUrQ8R+/fakAe0BzuZKbxMbNWSLgk 9SivLnyOJay1IXccV0FLqweOMXsYPoQiG4pH/5V4U0iK6ceDHOZ29FE0OPGGieNp wEXzXBjLOpctkcgR/Ubhfk/bZzpLz+u/luWUz/6VlfVZe2vFiSkkn2d/oGsnzY4D sm3G03nSNaECFF/ldlA3oJvEejNVmd/z1WTw53GCY4BZEbJyztHQ3M4L282uIEF6 hE/3SxN/Bc83IaJy/EfpsQlyvY0zJ7+K9qE6iRW2yHyJQgf1HdoeXI1H8c5qstKH RqixajUosY3nXRi9YfhaKeqHnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7t8mEK +G9qX24KfZxPZMjuWhGZMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO QjFTd1BwaHlyVGlBeFU1TDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfJGCA/kpJ9cwahPNzw5AkZa65uo182Xf+G2EsiTsOrqrP74uW0lRaHxuw5H ifmzKErnbsH3pvHm76JCdrL2d/s3p5AnvLN0oIJqfduu0y+f4iGlyjytKL8zTuaP Ywlal0UvtBPtFjUZKUNrueyKMgCy/xafOzt35B0AaOGZJs+eyswhs5rwmBFJy16L hbImrgZdd4R9BrobQmj5OqoFw9T7qXuokRpkKL7FT8IP+/+rAysggPMrce9r1fbb 1wdTOGjhD5xQ5MAnNXwyPpOLoAGGQTTQLwfWyPAHXNtpG9xteQSaLTuMpA+NCenK npeBX6ajtFZemBO+PtzEZCbSaw== -----END CERTIFICATE-----Generated at Wed Oct 7 07:52:12 2026 by rpki-client