$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft File: HWndGf85hYAXzNTWJChu2UUIdl4.mft (raw, json) Hash identifier: qICrx4QlxB7fmJN+cuEE38f9waeSo0thspsXcqwY/s4= Subject key identifier: 99:C0:0F:5A:89:11:CF:EB:17:1D:57:C0:76:25:C4:6E:E3:F3:27:C7 Authority key identifier: 1D:69:DD:19:FF:39:85:80:17:CC:D4:D6:24:28:6E:D9:45:08:76:5E Certificate issuer: /CN=A91FDCA0/serialNumber=1D69DD19FF39858017CCD4D624286ED94508765E Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft Manifest number: 0D Signing time: Thu 01 Oct 2026 10:37:39 +0000 Manifest this update: Thu 01 Oct 2026 10:37:38 +0000 Manifest next update: Thu 08 Oct 2026 10:37:38 +0000 Files and hashes: 1: HWndGf85hYAXzNTWJChu2UUIdl4.crl (hash: DzJ9duYzD7R0NkABQtDNGZ1uP4VUX+Tsb01FK1HGEAM=) 2: DD4CA7C6B02D11F194FC8FE23A11F970.roa (hash: vbdU2q1m5He7gWpqkceFYruOg0Qt8/kbSUYbNIuqG94=) 3: WmMM-KD6RiDvI2A1D04hHOOwlDc.asa (hash: esSsw+qecb87rsRu4HEkTi2pPjm8WTnGLsqaIKbWMck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.crl rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCA0, serialNumber=1D69DD19FF39858017CCD4D624286ED94508765E Validity Not Before: Oct 1 10:37:38 2026 GMT Not After : Oct 8 10:37:38 2026 GMT Subject: CN=6abe37f2-a5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:b2:a6:38:c4:7a:1b:9f:2b:de:19:d3:c9: a3:78:8f:a3:3d:7b:c8:94:97:02:38:91:dd:13:92: b3:19:ea:4e:ee:61:68:2b:32:f2:b7:a5:16:3a:a8: 77:5d:73:ce:e3:45:b0:ce:bb:3d:04:0f:b9:80:e9: ff:d5:4b:61:78:77:67:e9:df:09:2c:18:32:c6:b9: 75:f6:a3:06:86:66:ae:25:c0:18:7a:5f:69:c6:94: fa:f0:7e:32:38:7a:a1:06:35:68:ac:3f:d5:c6:fa: ce:fc:6a:e1:2b:80:7b:51:6e:1e:8b:4e:68:67:f5: cf:c3:40:63:5b:cd:11:5e:2b:bb:83:7d:24:42:36: 78:95:67:45:e1:4a:63:8b:a5:1b:48:03:d5:52:a7: c1:84:7e:6f:64:60:77:8c:07:0c:52:94:e1:fa:e4: a0:87:71:61:5b:bd:f2:cb:29:03:0c:fb:50:5e:80: 9e:9f:36:89:1d:7b:af:bc:ee:be:29:89:fd:0f:88: 2f:54:eb:9e:28:a0:d7:8a:81:39:5b:a4:20:e8:35: c1:ec:9f:cc:f9:48:a7:1f:0f:da:07:e8:19:b7:7d: 0d:99:fd:c5:5d:7c:d8:cb:df:aa:3e:db:ad:66:de: 28:66:ba:48:a1:f5:11:0b:2c:4e:d4:60:5a:a5:2f: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C0:0F:5A:89:11:CF:EB:17:1D:57:C0:76:25:C4:6E:E3:F3:27:C7 X509v3 Authority Key Identifier: keyid:1D:69:DD:19:FF:39:85:80:17:CC:D4:D6:24:28:6E:D9:45:08:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWndGf85hYAXzNTWJChu2UUIdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA0/355E9FEAB01B11F1BF15D4053411F970/HWndGf85hYAXzNTWJChu2UUIdl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8e:37:2f:c4:46:9a:7f:ed:61:2c:82:d3:6a:07:3e:1c:12: 7a:5d:d5:50:06:e3:f9:41:24:5b:71:d1:96:34:f9:e2:d6:4c: 80:c2:d2:f4:e1:57:bd:bd:42:5a:ac:c6:1a:27:96:b4:73:95: 46:ed:bd:d2:77:a3:3c:c8:9d:c5:3a:a1:da:3e:f4:00:53:73: ce:89:45:78:d2:6d:bb:86:4a:13:13:39:db:07:6a:01:7d:f8: 32:82:4e:2d:02:a0:ef:94:a9:e0:1c:d0:af:fe:45:b8:1c:af: 09:be:b1:c5:7e:78:a2:49:85:19:5e:6b:6c:27:0c:20:27:62: d8:ce:b0:c6:38:9e:1e:99:d5:ea:e9:bd:0e:52:69:d1:45:73: 16:9b:c2:24:40:84:30:20:15:78:10:5a:e1:30:79:9c:3b:2c: ff:95:c0:93:96:f7:c5:32:a4:be:26:a2:a9:53:0d:0b:b3:99: f3:12:9c:70:a0:09:1e:a8:3b:f1:7e:df:d1:0d:1f:cf:6a:6c: e8:46:c5:4f:69:1a:a8:94:72:68:98:0a:a9:06:53:db:2d:8c: 24:68:ab:ce:e0:ee:a6:61:63:d8:92:8a:2c:3b:d6:da:11:1a: 56:95:a9:53:35:88:dd:c9:0d:b4:eb:57:74:56:a9:6c:ca:3d: 36:12:27:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RENBMDExMC8GA1UEBRMoMUQ2OUREMTlGRjM5ODU4MDE3Q0NENEQ2MjQyODZFRDk0 NTA4NzY1RTAeFw0yNjEwMDExMDM3MzhaFw0yNjEwMDgxMDM3MzhaMBgxFjAUBgNV BAMTDTZhYmUzN2YyLWE1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmvLKmOMR6G58r3hnTyaN4j6M9e8iUlwI4kd0TkrMZ6k7uYWgrMvK3pRY6qHdd c87jRbDOuz0ED7mA6f/VS2F4d2fp3wksGDLGuXX2owaGZq4lwBh6X2nGlPrwfjI4 eqEGNWisP9XG+s78auErgHtRbh6LTmhn9c/DQGNbzRFeK7uDfSRCNniVZ0XhSmOL pRtIA9VSp8GEfm9kYHeMBwxSlOH65KCHcWFbvfLLKQMM+1BegJ6fNokde6+87r4p if0PiC9U654ooNeKgTlbpCDoNcHsn8z5SKcfD9oH6Bm3fQ2Z/cVdfNjL36o+261m 3ihmukih9RELLE7UYFqlL2k5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmcAPWokR z+sXHVfAdiXEbuPzJ8cwHwYDVR0jBBgwFoAUHWndGf85hYAXzNTWJChu2UUIdl4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQ0EwLzM1NUU5RkVBQjAx QjExRjFCRjE1RDQwNTM0MTFGOTcwL0hXbmRHZjg1aFlBWHpOVFdKQ2h1MlVVSWRs NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFduZEdmODVoWUFYek5UV0pDaHUyVVVJZGw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Q0EwLzM1NUU5RkVBQjAxQjExRjFCRjE1RDQwNTM0MTFGOTcwL0hXbmRHZjg1aFlB WHpOVFdKQ2h1MlVVSWRsNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVjjcvxEaaf+1hLILTagc+HBJ6XdVQBuP5QSRbcdGWNPni1kyAwtL04Ve9vUJa rMYaJ5a0c5VG7b3Sd6M8yJ3FOqHaPvQAU3POiUV40m27hkoTEznbB2oBffgygk4t AqDvlKngHNCv/kW4HK8JvrHFfniiSYUZXmtsJwwgJ2LYzrDGOJ4emdXq6b0OUmnR RXMWm8IkQIQwIBV4EFrhMHmcOyz/lcCTlvfFMqS+JqKpUw0Ls5nzEpxwoAkeqDvx ft/RDR/PamzoRsVPaRqolHJomAqpBlPbLYwkaKvO4O6mYWPYkoosO9baERpWlalT NYjdyQ2061d0Vqlsyj02EieM -----END CERTIFICATE-----Generated at Sat Oct 3 06:13:48 2026 by rpki-client