$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: hUj0e0BHcvL+GsWR1iRpXQLpCEGVa5fqOw99GrUlXEs= Subject key identifier: 14:32:CB:68:FB:D2:84:6F:56:C5:A3:77:98:48:B7:E3:A1:C1:D9:8F Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: AD Signing time: Wed 21 Oct 2026 07:47:53 +0000 Manifest this update: Wed 21 Oct 2026 07:47:52 +0000 Manifest next update: Wed 28 Oct 2026 07:47:52 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: SsBslhRCoqRfUK/QC8z7goq2Zrvx3BFs8HKvran5jlQ=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: C6n4CKTLus0le6GvOuMAOqp7CZSB754RPW+BsJBKvDo=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: msyCQ/czlxVP4EfnOfA3beQPUOxdvP8PZzB1UIGuVjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Oct 21 07:47:52 2026 GMT Not After : Oct 28 07:47:52 2026 GMT Subject: CN=6ad86e28-8781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:f5:a3:34:fc:72:f5:e7:78:8d:0b:40:79: fd:3f:80:5c:94:dd:b8:6a:ab:da:68:94:0d:4a:69: 68:0a:99:56:7d:7a:46:9c:be:74:be:36:f3:36:19: df:87:5e:b3:37:d1:4c:5e:b8:57:c4:38:f3:e2:ce: ca:13:40:91:fa:d4:c8:d3:5d:bf:02:28:79:17:05: db:72:b0:81:83:a0:1f:5c:7d:a5:0c:66:54:fd:ed: 2e:fd:58:01:56:69:c6:1b:f0:e8:29:c7:59:4e:ea: f6:8d:2d:c0:15:13:a7:bb:b1:17:3b:e0:08:12:fc: ec:4f:ad:9e:38:b1:be:8c:81:c4:5d:0f:b0:6b:53: b8:d5:ce:9f:5b:b3:8b:13:4a:d4:24:d5:ba:9d:d7: ee:bb:d9:ff:9d:ee:f7:45:13:4f:4c:89:c6:0d:9a: bf:91:e4:6c:5a:55:66:d6:a3:de:53:4c:df:67:f9: 4e:a7:fa:d8:f2:ef:63:5e:8e:63:7d:3a:b4:87:c8: eb:46:eb:23:91:eb:02:60:b8:54:82:1d:84:93:cd: ca:31:b9:c1:24:48:a2:31:09:c5:25:96:74:fe:3c: 79:90:3b:1b:02:74:19:d1:4d:e5:2e:94:0b:97:16: 12:35:9e:48:c9:4d:5d:df:cc:a1:89:a8:b9:c9:e1: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:32:CB:68:FB:D2:84:6F:56:C5:A3:77:98:48:B7:E3:A1:C1:D9:8F X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:72:0b:9e:c8:bc:84:6f:c0:08:82:5b:e2:71:81:b8:e8:e5: bb:ae:f6:2d:9f:91:07:d0:fb:63:01:76:9b:fb:99:2b:b2:71: f0:b7:ca:86:92:7f:35:8e:43:3f:28:24:e2:f8:e3:1e:44:1c: a8:3d:e3:e9:82:9a:27:51:06:dd:1f:e9:ca:39:57:d2:9e:dc: e3:ab:8d:84:f6:bc:13:be:20:57:ba:85:f7:7b:15:bd:12:0e: cd:f4:29:c5:57:f5:13:6a:4b:6b:06:46:7a:c0:b4:10:5c:13: 11:61:23:1d:ba:40:65:9d:c4:a1:18:9d:b0:c8:67:a6:72:61: cf:3e:8b:b5:66:67:34:e5:17:9e:c5:8e:37:10:e1:57:9c:f1: 4d:27:b1:3f:6c:5f:7e:b6:56:e4:a0:a6:f7:0e:59:c4:fc:df: c9:2d:8b:a6:23:2e:87:16:09:7d:63:9f:4a:d0:0e:64:92:02: 79:cf:7d:ab:00:fc:1d:1c:3f:32:17:c0:34:d4:84:c7:77:2c: 37:ed:bb:b8:32:09:15:23:4d:ce:77:b5:fe:de:e1:10:da:75: 12:37:5d:f7:eb:46:e7:be:80:7b:6f:2d:99:31:76:5f:58:07: ff:3e:11:9e:f2:50:b8:41:57:81:dd:81:14:17:bb:2d:91:23: f3:cf:3a:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDUxMTAvBgNVBAUTKDFFNTMwRkE5RjY2MEE4REMxNzM4QzdBQTBDOEFGQzc3 RjRGMEJCQjMwHhcNMjYxMDIxMDc0NzUyWhcNMjYxMDI4MDc0NzUyWjAYMRYwFAYD VQQDEw02YWQ4NmUyOC04NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMn1ozT8cvXneI0LQHn9P4BclN24aqvaaJQNSmloCplWfXpGnL50vjbzNhnf h16zN9FMXrhXxDjz4s7KE0CR+tTI012/Aih5FwXbcrCBg6AfXH2lDGZU/e0u/VgB VmnGG/DoKcdZTur2jS3AFROnu7EXO+AIEvzsT62eOLG+jIHEXQ+wa1O41c6fW7OL E0rUJNW6ndfuu9n/ne73RRNPTInGDZq/keRsWlVm1qPeU0zfZ/lOp/rY8u9jXo5j fTq0h8jrRusjkesCYLhUgh2Ek83KMbnBJEiiMQnFJZZ0/jx5kDsbAnQZ0U3lLpQL lxYSNZ5IyU1d38yhiai5yeH8VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQyy2j7 0oRvVsWjd5hIt+OhwdmPMB8GA1UdIwQYMBaAFB5TD6n2YKjcFzjHqgyK/Hf08Luz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNS80MDBDNURFQ0Qw MTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FOd1hPTWVxRElyOGRfVHd1 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FO d1hPTWVxRElyOGRfVHd1N00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYHILnsi8hG/ACIJb4nGBuOjlu672LZ+RB9D7YwF2m/uZK7Jx8LfKhpJ/NY5D Pygk4vjjHkQcqD3j6YKaJ1EG3R/pyjlX0p7c46uNhPa8E74gV7qF93sVvRIOzfQp xVf1E2pLawZGesC0EFwTEWEjHbpAZZ3EoRidsMhnpnJhzz6LtWZnNOUXnsWONxDh V5zxTSexP2xffrZW5KCm9w5ZxPzfyS2LpiMuhxYJfWOfStAOZJICec99qwD8HRw/ MhfANNSEx3csN+27uDIJFSNNzne1/t7hENp1Ejdd9+tG576Ae28tmTF2X1gH/z4R nvJQuEFXgd2BFBe7LZEj88865Q== -----END CERTIFICATE-----Generated at Thu Oct 22 03:15:40 2026 by rpki-client