$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json) Hash identifier: eGaYXiYeUpF+MLxEmGfm453dr8VMoEB8/Ixe+SiW9Wg= Subject key identifier: 5D:7E:F7:68:E6:5D:67:9F:B0:40:B0:E5:EE:5C:DF:B5:C2:3D:6F:EB Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft Manifest number: 010B Signing time: Tue 27 Oct 2026 06:23:03 +0000 Manifest this update: Tue 27 Oct 2026 06:23:03 +0000 Manifest next update: Tue 03 Nov 2026 06:23:03 +0000 Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: 3BVmPbtF+UQkGH9g69lDGBNMedmImHF792+D2EQLIX4=) 2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Validity Not Before: Oct 27 06:23:03 2026 GMT Not After : Nov 3 06:23:03 2026 GMT Subject: CN=6ae04347-d05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:3e:08:41:41:6e:99:24:3a:e6:11:fb:90: 3b:73:27:74:f1:58:db:0b:24:1c:81:93:ac:c4:11: ee:7a:90:84:ae:7f:be:18:3d:d1:10:70:a8:49:e4: a3:87:4f:22:aa:0d:82:16:13:98:21:b3:77:1f:16: 36:7e:d2:8a:47:5f:5b:63:91:a1:7a:b6:b3:86:f4: 17:ce:51:87:64:ef:f4:66:4f:1f:5b:f0:c4:02:d3: 51:eb:b5:6a:b2:d6:dc:37:09:80:71:57:bf:5a:7c: 57:1c:9c:d6:de:cd:cb:d9:26:2b:6a:eb:3c:cb:74: da:05:8a:eb:ae:e8:c3:32:89:f1:55:05:eb:9a:f8: 98:46:91:7c:84:79:99:c9:81:ee:74:cd:ee:9c:b7: 52:4c:0d:80:4f:5f:61:44:61:21:82:30:e1:2e:53: c3:07:4a:f5:dc:d0:85:f2:d5:11:16:49:32:b0:75: 1c:64:8d:eb:d4:9c:9e:06:26:d3:c8:41:b6:81:95: d1:37:c8:24:a5:97:ce:5f:0d:74:3c:cc:44:38:70: 48:31:16:74:1e:59:91:fe:c5:3a:48:ae:d9:23:01: b1:dc:b8:3b:01:df:83:01:44:58:46:57:d3:74:89: 37:fe:f1:7f:5b:aa:85:e5:9e:34:c1:e0:e9:ca:15: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7E:F7:68:E6:5D:67:9F:B0:40:B0:E5:EE:5C:DF:B5:C2:3D:6F:EB X509v3 Authority Key Identifier: keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c2:0b:55:f9:50:b5:be:2e:e6:3a:63:70:c5:91:01:db:22: e2:d0:92:ef:3c:12:04:94:c5:26:61:e5:f6:0d:05:12:2e:d4: 51:d2:27:6b:b7:6f:18:f0:ce:e3:cb:a0:83:e8:e8:15:a7:8f: 63:8f:e7:d5:51:bf:d0:98:fc:7a:1d:e7:bd:08:ee:88:31:45: 4c:d3:e7:10:03:9b:45:ae:38:eb:d8:93:76:e3:45:af:0f:09: ee:a0:3c:eb:07:99:b3:11:df:12:8b:98:b1:10:cf:35:1c:24: c3:5a:0c:e4:54:3b:3d:e9:84:d0:ef:3e:73:8b:6a:93:e9:0c: d9:47:d6:1a:a5:42:a2:89:de:a0:f9:2d:09:6e:45:c9:c2:ec: 5c:bb:62:28:21:bc:7a:b2:5a:8b:c7:db:bb:8d:c5:c4:2e:8d: da:6c:d4:47:af:27:34:50:38:cc:a9:6c:49:39:f9:58:de:63: eb:fe:35:e4:64:45:3b:02:9d:d8:b4:38:c1:57:b6:4b:38:df: 40:96:e0:4d:06:de:20:0c:45:96:34:46:bf:99:f4:e6:ed:76: 2f:85:3f:9d:49:e8:d3:8c:ed:9d:10:96:24:2e:1f:ed:81:5c: ba:de:76:9a:e4:85:a1:31:03:ef:ce:eb:fb:a9:54:c9:8a:a9: cf:39:47:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxNzcxMTAvBgNVBAUTKDFDRDJENEYzMjZBMTg0QTQ4N0JGMjJBQ0Q3OEFENUMw NjhGNDY2NjEwHhcNMjYxMDI3MDYyMzAzWhcNMjYxMTAzMDYyMzAzWjAYMRYwFAYD VQQDEw02YWUwNDM0Ny1kMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n4+CEFBbpkkOuYR+5A7cyd08VjbCyQcgZOsxBHuepCErn++GD3REHCoSeSj h08iqg2CFhOYIbN3HxY2ftKKR19bY5GherazhvQXzlGHZO/0Zk8fW/DEAtNR67Vq stbcNwmAcVe/WnxXHJzW3s3L2SYraus8y3TaBYrrrujDMonxVQXrmviYRpF8hHmZ yYHudM3unLdSTA2AT19hRGEhgjDhLlPDB0r13NCF8tURFkkysHUcZI3r1JyeBibT yEG2gZXRN8gkpZfOXw10PMxEOHBIMRZ0HlmR/sU6SK7ZIwGx3Lg7Ad+DAURYRlfT dIk3/vF/W6qF5Z40weDpyhXSDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1+92jm XWefsECw5e5c37XCPW/rMB8GA1UdIwQYMBaAFBzS1PMmoYSkh78irNeK1cBo9GZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODE3Ny84QkEzRDhDNDNE REIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhLU0h2eUtzMTRyVndHajBa bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOTFU4eWFoaEtTSHZ5S3MxNHJWd0dqMFptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODE3Ny84QkEzRDhDNDNEREIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhL U0h2eUtzMTRyVndHajBabUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAncILVflQtb4u5jpjcMWRAdsi4tCS7zwSBJTFJmHl9g0FEi7UUdIna7dvGPDO 48ugg+joFaePY4/n1VG/0Jj8eh3nvQjuiDFFTNPnEAObRa4469iTduNFrw8J7qA8 6weZsxHfEouYsRDPNRwkw1oM5FQ7PemE0O8+c4tqk+kM2UfWGqVCooneoPktCW5F ycLsXLtiKCG8erJai8fbu43FxC6N2mzUR68nNFA4zKlsSTn5WN5j6/415GRFOwKd 2LQ4wVe2SzjfQJbgTQbeIAxFljRGv5n05u12L4U/nUno04ztnRCWJC4f7YFcut52 muSFoTED787r+6lUyYqpzzlHdg== -----END CERTIFICATE-----Generated at Tue Oct 27 09:23:17 2026 by rpki-client