$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: inJFSHOkzn8h1pgebJQZdw4vDsN8tMS4tqGy4uLozuw= Subject key identifier: C9:E8:0E:60:52:E5:FF:F9:C5:10:BD:33:1D:63:F5:88:A5:B2:78:9F Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0AF1 Signing time: Thu 08 Oct 2026 19:29:58 +0000 Manifest this update: Thu 08 Oct 2026 19:29:58 +0000 Manifest next update: Thu 15 Oct 2026 19:29:58 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: SEA67ylTMdc+lRLuZUCNPPkBHJ9bT6YU7pMsS1YASbw=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: MObLxHg+0HyslwCyt5x1ibD8HWNnbjOCAqyl5AXJDCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Oct 8 19:29:58 2026 GMT Not After : Oct 15 19:29:58 2026 GMT Subject: CN=6ac7ef36-b0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:ec:12:e1:d3:b8:5c:78:79:7c:79:3d:90: 3c:08:db:c1:6d:a4:25:9d:c1:7a:d4:bc:18:c3:48: a8:c4:da:46:25:dd:52:02:62:c6:ae:1f:8c:8c:b7: 5d:5d:a8:75:c7:e6:bc:98:e2:2d:f7:00:76:f8:08: c2:67:cf:8e:33:3f:ea:98:e2:87:b2:42:40:69:7f: fe:24:47:05:7d:e9:59:fa:a0:3f:7e:96:c6:e1:2b: 72:b7:e2:f8:f4:b0:2b:f0:94:de:60:88:bc:cf:b7: d7:68:44:c0:cd:e4:52:b8:97:03:cb:78:65:96:9a: ed:43:43:f7:bc:fa:d3:e8:a9:c8:f0:3c:6b:12:32: a8:29:85:b2:c2:b1:4b:f0:a5:a9:f7:dc:df:e8:70: e4:2f:3a:92:86:0a:40:30:02:f1:59:ce:85:19:7e: c5:33:26:27:59:f7:9d:cc:44:4d:68:84:91:75:54: 74:16:ad:67:fe:5a:3a:56:39:a5:c1:88:98:67:6a: e4:c0:17:3d:d0:f7:bb:b5:a7:c3:4c:e7:ee:40:0b: a5:da:e0:fa:ce:52:90:5d:d6:c9:0b:42:76:25:b3: d3:66:ac:f8:fe:db:9a:d1:e2:cb:a1:d3:29:73:ca: 64:7b:36:22:db:5d:3a:92:39:4f:a9:93:63:42:f2: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E8:0E:60:52:E5:FF:F9:C5:10:BD:33:1D:63:F5:88:A5:B2:78:9F X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:cc:64:14:c8:de:3d:c7:94:22:12:64:b6:1c:7a:d8:d4:d8: a7:8e:4e:08:28:74:78:0a:32:3a:61:7d:38:1c:da:a8:e3:b2: 07:4c:b7:91:1b:e2:01:3b:30:95:6f:fd:a6:7c:2a:31:9c:4d: 2e:f3:62:6b:98:a8:99:d0:5e:fa:99:14:ba:bf:d7:7b:e6:04: 9d:3c:c9:b6:a4:9a:66:5c:ba:ff:c8:09:81:3b:81:67:46:5b: 91:05:11:76:da:b9:12:53:45:e2:fc:5b:ee:a7:08:52:fa:80: 0a:79:61:75:9f:f7:7a:8f:05:c6:70:48:00:c4:bf:da:eb:4c: 88:be:6e:23:28:31:c0:62:cb:66:42:60:d1:29:c5:1c:8b:d1: 4b:50:66:15:d7:67:f2:f0:69:1c:cd:51:a9:5f:53:d9:a3:f2: de:fd:94:8e:3c:9d:49:22:08:a5:eb:fa:e2:db:1b:0a:da:8a: d9:0d:20:63:a2:f5:f9:c2:05:fc:54:7f:0f:a7:4d:a6:fd:8c: 59:f7:85:cb:fd:1c:85:d7:9e:1a:7d:24:8d:45:18:1d:bc:9e: f3:ff:be:38:e1:3c:62:ab:2c:59:93:4b:6b:97:d7:b6:0b:80: 86:89:34:9d:b7:b2:4f:5e:36:bc:d1:f3:22:57:90:7f:89:c8: 26:67:fa:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjYxMDA4MTkyOTU4WhcNMjYxMDE1MTkyOTU4WjAYMRYwFAYD VQQDEw02YWM3ZWYzNi1iMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQzsEuHTuFx4eXx5PZA8CNvBbaQlncF61LwYw0ioxNpGJd1SAmLGrh+MjLdd Xah1x+a8mOIt9wB2+AjCZ8+OMz/qmOKHskJAaX/+JEcFfelZ+qA/fpbG4Styt+L4 9LAr8JTeYIi8z7fXaETAzeRSuJcDy3hllprtQ0P3vPrT6KnI8DxrEjKoKYWywrFL 8KWp99zf6HDkLzqShgpAMALxWc6FGX7FMyYnWfedzERNaISRdVR0Fq1n/lo6Vjml wYiYZ2rkwBc90Pe7tafDTOfuQAul2uD6zlKQXdbJC0J2JbPTZqz4/tua0eLLodMp c8pkezYi2106kjlPqZNjQvLb3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnoDmBS 5f/5xRC9Mx1j9YilsnifMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGcxkFMjePceUIhJkthx62NTYp45OCCh0eAoyOmF9OBzaqOOyB0y3kRviATsw lW/9pnwqMZxNLvNia5iomdBe+pkUur/Xe+YEnTzJtqSaZly6/8gJgTuBZ0ZbkQUR dtq5ElNF4vxb7qcIUvqACnlhdZ/3eo8FxnBIAMS/2utMiL5uIygxwGLLZkJg0SnF HIvRS1BmFddn8vBpHM1RqV9T2aPy3v2UjjydSSIIpev64tsbCtqK2Q0gY6L1+cIF /FR/D6dNpv2MWfeFy/0chdeeGn0kjUUYHbye8/++OOE8YqssWZNLa5fXtguAhok0 nbeyT142vNHzIleQf4nIJmf6Rw== -----END CERTIFICATE-----Generated at Fri Oct 9 23:37:49 2026 by rpki-client