$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft File: HLlfP3vebhmbdAuSgqxyKk7amZs.mft (raw, json) Hash identifier: qV5rt/pyofISdVOkbMYL68sZbnmfHdPBy5UHOj1LewU= Subject key identifier: BA:92:E5:2D:9B:C7:1A:B1:C7:8D:18:56:54:80:73:25:21:BD:16:06 Authority key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B Certificate issuer: /CN=A91E4EEF/serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft Manifest number: 94 Signing time: Thu 03 Sep 2026 07:51:49 +0000 Manifest this update: Thu 03 Sep 2026 07:51:49 +0000 Manifest next update: Thu 10 Sep 2026 07:51:49 +0000 Files and hashes: 1: HLlfP3vebhmbdAuSgqxyKk7amZs.crl (hash: +IssV2fmGw+5anmGT2Ug9FtXBpyasqLfBp7LN1Pa7C4=) 2: 0C1F9D8CF13A11F08789470C566F56BC.roa (hash: sgoDIUBe0jr7XN1MyW0ONqjTLm6kK+bIbhy55Li2/S8=) 3: 304D9EDEF13A11F0A5B04E41566F56BC.roa (hash: AC/jIeXBOHw70y2QOJSmCZ+NDE9I0e7M9WpwuYpLz9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 07:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Validity Not Before: Sep 3 07:51:49 2026 GMT Not After : Sep 10 07:51:49 2026 GMT Subject: CN=6a992715-886d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:85:e5:75:4a:ec:65:97:21:6d:a9:4d:e4: 4e:bf:98:0c:ab:1a:99:b9:5a:6d:1b:70:4e:f8:55: aa:45:2e:fb:e9:3c:dd:1c:f7:b3:ab:66:40:ee:ba: 85:36:51:a8:54:b7:92:f4:36:c6:04:dd:ec:38:98: a0:ff:77:df:ce:66:0a:fb:0d:da:79:28:e6:db:f6: 34:e4:e3:12:92:87:e5:41:33:73:b4:b7:94:63:e3: 7b:31:b5:22:a5:1b:49:35:6e:69:24:9e:c5:6a:bc: cc:a7:fc:69:a2:d2:75:80:09:64:0c:0a:7b:b9:0a: a9:97:c7:f7:e6:15:26:ac:98:5a:5b:b1:5e:1c:77: ee:7d:68:cb:85:26:98:ec:1d:b3:7a:f8:3c:b7:8d: 95:f2:71:de:44:3d:5a:7a:e7:15:ad:03:a8:3f:43: 75:ef:59:b8:08:7d:e2:70:6b:a8:12:4d:65:f2:7c: 3f:c9:32:a9:59:91:33:55:a4:3a:30:57:7f:bd:33: a9:c0:ca:93:57:3e:64:ec:c2:16:ef:74:49:e5:48: 1f:07:b7:49:ba:b6:46:47:36:4c:54:91:21:aa:9f: 45:5d:3c:09:fb:a9:c1:df:7a:d2:a6:9d:a6:19:f2: 91:a5:0b:67:39:22:1c:45:cd:48:ca:75:50:eb:87: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:92:E5:2D:9B:C7:1A:B1:C7:8D:18:56:54:80:73:25:21:BD:16:06 X509v3 Authority Key Identifier: keyid:1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:db:44:c3:0f:f7:1b:d8:82:f0:98:e7:b8:88:ea:ed:3f:a2: 22:c6:63:4f:43:4a:8b:40:03:bc:ee:fa:26:c1:95:32:fb:25: 41:8a:48:7c:92:1a:35:07:6b:f2:bf:d1:c4:1c:a6:73:d6:62: f5:40:53:94:13:51:72:6a:49:47:e9:fa:c2:41:14:64:3b:30: dc:27:88:b2:93:45:fb:1a:84:ef:98:b1:c7:68:4c:6c:69:78: 28:03:2a:c6:c1:86:74:ec:9a:bc:40:42:8a:ad:35:8a:0d:37: d3:ec:c8:4f:36:bb:9a:c6:ef:b8:0e:ef:34:1f:96:15:c8:c6: 80:80:0f:4e:0e:c6:46:48:c5:3c:5a:05:a6:dc:a1:36:08:13: b9:7a:92:5b:b1:0a:bf:6c:7f:b6:80:50:9f:9c:c4:d0:07:dd: 95:94:94:ec:af:36:b9:48:1a:c7:94:cf:0b:b5:01:c2:2c:71: 26:25:cd:32:52:14:11:2b:90:fd:7c:68:be:4f:97:90:3b:72: f9:2f:cb:86:ed:d5:c2:a8:97:7e:ee:1d:c8:16:d2:a8:e3:17: 5a:76:99:41:f8:dd:69:7b:0d:a9:1d:fd:aa:7b:6c:17:e0:87: b7:ec:23:46:f8:c1:d8:25:8c:e4:ef:ee:21:1d:f1:e1:48:af: ea:b7:01:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRUYxMTAvBgNVBAUTKDFDQjk1RjNGN0JERTZFMTk5Qjc0MEI5MjgyQUM3MjJB NEVEQTk5OUIwHhcNMjYwOTAzMDc1MTQ5WhcNMjYwOTEwMDc1MTQ5WjAYMRYwFAYD VQQDEw02YTk5MjcxNS04ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iOF5XVK7GWXIW2pTeROv5gMqxqZuVptG3BO+FWqRS776TzdHPezq2ZA7rqF NlGoVLeS9DbGBN3sOJig/3ffzmYK+w3aeSjm2/Y05OMSkoflQTNztLeUY+N7MbUi pRtJNW5pJJ7FarzMp/xpotJ1gAlkDAp7uQqpl8f35hUmrJhaW7FeHHfufWjLhSaY 7B2zevg8t42V8nHeRD1aeucVrQOoP0N171m4CH3icGuoEk1l8nw/yTKpWZEzVaQ6 MFd/vTOpwMqTVz5k7MIW73RJ5UgfB7dJurZGRzZMVJEhqp9FXTwJ+6nB33rSpp2m GfKRpQtnOSIcRc1IynVQ64d+4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqS5S2b xxqxx40YVlSAcyUhvRYGMB8GA1UdIwQYMBaAFBy5Xz973m4Zm3QLkoKscipO2pmb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVFRi9DRUE4MzZCQURF RjMxMUYwOUVENDEyOTY1NzZGNTZCQy9ITGxmUDN2ZWJobWJkQXVTZ3F4eUtrN2Ft WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMbGZQM3ZlYmhtYmRBdVNncXh5S2s3YW1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVFRi9DRUE4MzZCQURFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy9ITGxmUDN2ZWJo bWJkQXVTZ3F4eUtrN2FtWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtttEww/3G9iC8JjnuIjq7T+iIsZjT0NKi0ADvO76JsGVMvslQYpIfJIaNQdr 8r/RxBymc9Zi9UBTlBNRcmpJR+n6wkEUZDsw3CeIspNF+xqE75ixx2hMbGl4KAMq xsGGdOyavEBCiq01ig030+zITza7msbvuA7vNB+WFcjGgIAPTg7GRkjFPFoFptyh NggTuXqSW7EKv2x/toBQn5zE0AfdlZSU7K82uUgax5TPC7UBwixxJiXNMlIUESuQ /Xxovk+XkDty+S/Lhu3VwqiXfu4dyBbSqOMXWnaZQfjdaXsNqR39qntsF+CHt+wj RvjB2CWM5O/uIR3x4Uiv6rcB6g== -----END CERTIFICATE-----Generated at Sat Sep 5 05:12:44 2026 by rpki-client