$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: PcwWXXG+uWY1wyv4c2tewzMgtE+OoUjzkrK9rtVTHyw= Subject key identifier: 10:C3:9D:59:9F:CA:C8:42:0B:04:24:2F:34:64:99:89:67:A5:7F:EE Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 07C7 Signing time: Sun 04 Oct 2026 21:31:42 +0000 Manifest this update: Sun 04 Oct 2026 21:31:41 +0000 Manifest next update: Sun 11 Oct 2026 21:31:41 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: ptqJzCnLXUHTceGagWYYjXQxUIRjCNv7jqqCYCjMGZM=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Oct 4 21:31:41 2026 GMT Not After : Oct 11 21:31:41 2026 GMT Subject: CN=6ac2c5bd-0b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:9c:d0:51:33:52:84:7c:9a:d6:a2:ae:48: de:81:be:8d:05:11:86:35:9d:71:91:af:a7:41:e6: 08:a3:fe:a1:fb:c4:18:71:dc:a6:7c:59:97:4b:fc: 01:a2:e1:6c:c6:28:27:25:07:3d:2c:8f:c6:0c:25: 3f:9b:0a:c0:ce:cc:4e:2f:11:e6:70:c4:af:18:ea: 7f:49:89:93:eb:38:29:86:76:01:f1:06:e1:f3:c9: ac:4d:1f:18:cb:eb:60:06:f0:5a:cd:2f:55:52:5c: 49:ce:ca:00:98:9b:8b:f2:56:09:8e:8f:0d:87:d1: 8d:b4:81:b1:82:1f:af:e1:98:78:5e:43:14:f8:00: 92:07:a1:e9:c6:d9:91:84:87:09:71:d6:73:51:0a: 61:69:e1:ea:8e:2c:23:32:9a:4c:5a:8e:83:1f:08: a1:ba:0d:56:12:20:3f:7a:07:ee:6b:60:67:25:f5: 8e:ab:0d:66:9c:70:22:f7:fd:27:a3:85:2f:c3:43: ec:b2:d7:77:6a:c7:d7:b0:f2:47:fa:e9:4e:27:8f: cb:68:cb:18:5a:a9:a6:a3:c5:3d:e3:1a:c0:78:6d: 74:17:11:89:c2:bc:a8:0a:36:ee:f8:cf:7c:9f:94: 7d:4b:1d:9d:cd:ab:29:25:e5:85:aa:1e:c1:91:eb: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C3:9D:59:9F:CA:C8:42:0B:04:24:2F:34:64:99:89:67:A5:7F:EE X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:16:f5:86:09:f0:3d:cc:10:e5:f0:29:64:9b:9a:15:c9:40: 80:2a:6d:46:18:c1:e8:1c:9f:b9:05:eb:4c:cc:92:01:25:3b: 1b:f8:2a:9f:98:55:03:84:1a:a9:e3:2f:e2:c2:91:f6:fd:98: 9b:b8:86:93:aa:e7:a3:1d:5d:df:9c:0f:a8:99:49:e7:a0:b6: fb:d4:c6:d1:2e:0e:b6:76:d8:38:64:b4:7c:ca:50:d1:f1:e9: df:43:9a:92:74:54:b5:6f:c5:59:be:35:51:32:94:9b:db:00: 41:5f:03:dd:bd:f5:83:cb:70:90:45:b0:e0:80:25:21:a9:0b: 71:b6:41:da:6a:ea:a4:6c:8a:1e:8d:98:f6:2d:ee:ac:3a:99: cf:ba:17:4d:0c:03:50:74:c9:4b:73:76:dd:71:a3:6f:95:09: 0b:6a:1e:51:80:4a:72:f7:08:8f:6a:f2:74:53:55:1b:45:1c: 32:31:c2:79:0b:40:64:20:88:bf:ab:0b:56:dc:e4:42:61:5d: ea:c4:16:d2:81:d6:89:d6:8b:6e:8c:d4:5b:34:c3:b7:e9:ed: cf:08:0a:d7:9a:6d:5c:eb:fa:e2:24:97:da:c3:79:18:88:ca: 23:07:e5:e5:82:b9:1c:ac:9f:af:aa:01:e7:d9:54:7d:7c:1e: 3a:e6:cf:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYxMDA0MjEzMTQxWhcNMjYxMDExMjEzMTQxWjAYMRYwFAYD VQQDEw02YWMyYzViZC0wYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOuc0FEzUoR8mtairkjegb6NBRGGNZ1xka+nQeYIo/6h+8QYcdymfFmXS/wB ouFsxignJQc9LI/GDCU/mwrAzsxOLxHmcMSvGOp/SYmT6zgphnYB8Qbh88msTR8Y y+tgBvBazS9VUlxJzsoAmJuL8lYJjo8Nh9GNtIGxgh+v4Zh4XkMU+ACSB6HpxtmR hIcJcdZzUQphaeHqjiwjMppMWo6DHwihug1WEiA/egfua2BnJfWOqw1mnHAi9/0n o4Uvw0Psstd3asfXsPJH+ulOJ4/LaMsYWqmmo8U94xrAeG10FxGJwryoCjbu+M98 n5R9Sx2dzaspJeWFqh7BketwBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDDnVmf yshCCwQkLzRkmYlnpX/uMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzBb1hgnwPcwQ5fApZJuaFclAgCptRhjB6ByfuQXrTMySASU7G/gqn5hVA4Qa qeMv4sKR9v2Ym7iGk6rnox1d35wPqJlJ56C2+9TG0S4OtnbYOGS0fMpQ0fHp30Oa knRUtW/FWb41UTKUm9sAQV8D3b31g8twkEWw4IAlIakLcbZB2mrqpGyKHo2Y9i3u rDqZz7oXTQwDUHTJS3N23XGjb5UJC2oeUYBKcvcIj2rydFNVG0UcMjHCeQtAZCCI v6sLVtzkQmFd6sQW0oHWidaLbozUWzTDt+ntzwgK15ptXOv64iSX2sN5GIjKIwfl 5YK5HKyfr6oB59lUfXweOubP1g== -----END CERTIFICATE-----Generated at Mon Oct 5 13:03:47 2026 by rpki-client