$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: b8vaeL0z7jpcx8sVmrtNE+WuFPBTqdHNy8DCzEM9Rfs= Subject key identifier: 40:5F:B3:5A:F8:0F:D5:46:42:8A:38:50:D5:C6:AE:D7:29:2D:2A:D2 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 0856 Signing time: Sun 04 Oct 2026 21:03:00 +0000 Manifest this update: Sun 04 Oct 2026 21:02:59 +0000 Manifest next update: Sun 11 Oct 2026 21:02:59 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: vHka0PQP3oO7vGO67htP9CUx5uLCDYLJDIWBzG/hyR0=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: 4sy5bo4x5IejnxnpTcgGrJIpJDDeVrJ7W1QqzKsRoZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Oct 4 21:02:59 2026 GMT Not After : Oct 11 21:02:59 2026 GMT Subject: CN=6ac2bf04-6245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:64:78:c6:89:23:07:31:30:e8:a5:55:c4: 4f:1e:77:08:c6:07:8f:7a:16:d7:73:3a:77:89:8e: 66:ee:6c:c8:72:b4:fd:fc:39:57:3c:18:1b:19:ae: 36:64:9c:de:6d:df:79:3c:68:2f:3e:27:62:d6:29: 70:a0:9a:3a:1b:93:d3:7f:15:e1:b7:13:e7:1e:ea: 43:3d:b2:c8:b4:f3:4e:28:f1:4f:40:7a:e2:0d:30: 86:8e:ff:1f:df:38:9d:d1:62:65:e8:7f:59:4e:5c: b6:88:03:27:48:7e:65:cf:7f:0d:83:95:bf:71:2e: 8b:7c:82:be:1e:bc:48:c5:0c:44:87:b5:5e:47:8d: 04:1b:66:ee:96:3c:d1:7b:d5:6d:40:b6:6f:56:21: 4e:19:5a:76:50:aa:45:b8:37:8e:52:80:f7:dc:45: cb:8d:8f:21:5d:97:75:c9:0d:39:9d:90:78:e2:ac: 40:34:07:9d:7d:57:c7:b4:97:5f:65:0f:e7:5d:91: 15:f7:0d:be:e9:f5:9d:76:57:f8:01:d6:81:9a:db: c5:e4:06:f9:fb:c5:d5:53:62:22:03:44:b3:37:17: 9f:6f:12:84:c6:fb:20:97:93:a0:ac:1c:d8:a2:75: ff:d5:e8:3f:e1:75:fc:ab:ba:88:67:0a:06:77:49: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5F:B3:5A:F8:0F:D5:46:42:8A:38:50:D5:C6:AE:D7:29:2D:2A:D2 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:57:e2:a7:91:01:43:0d:72:5d:26:3e:f0:8e:53:1c:e4:b8: f4:00:69:93:d0:95:74:e5:39:0b:bb:8a:2f:6c:13:1b:09:e7: 22:0c:c6:f0:b2:9e:22:c2:70:dd:17:15:9b:a1:40:ce:07:d6: fc:1f:a6:63:19:23:bb:d9:91:36:b1:af:bf:74:70:3b:fe:a1: e9:7c:66:32:42:ea:c7:fc:9a:bf:38:f9:a7:80:a3:d9:b7:58: 60:90:67:98:2f:1d:46:83:5b:6e:c1:28:64:72:be:4e:50:37: 5d:03:e6:34:6c:de:70:94:98:12:48:f4:1f:20:82:0a:86:5b: 9c:22:f1:b2:08:79:81:1a:0f:a0:a9:df:2e:17:1e:96:98:a1: 4a:1e:6b:b9:0b:17:5f:61:df:97:0e:2b:f7:ec:69:4f:f9:ad: 5e:0b:3c:5f:f5:8f:d4:9b:cc:07:9c:8b:d6:f9:52:ca:5d:cc: 9e:ad:e9:5e:9e:07:62:b9:a3:50:d8:37:8c:0b:60:23:5b:6a: 01:32:4a:3e:22:30:d6:14:7a:3c:d8:78:97:a6:e8:2b:c0:e2: 2b:95:15:39:28:8f:c9:68:df:2e:de:a6:a2:37:29:d5:13:39: 40:b1:e1:9d:21:ae:66:b5:eb:18:35:ec:45:6f:cf:47:1c:d9: f4:f3:9d:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjYxMDA0MjEwMjU5WhcNMjYxMDExMjEwMjU5WjAYMRYwFAYD VQQDEw02YWMyYmYwNC02MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjdkeMaJIwcxMOilVcRPHncIxgePehbXczp3iY5m7mzIcrT9/DlXPBgbGa42 ZJzebd95PGgvPidi1ilwoJo6G5PTfxXhtxPnHupDPbLItPNOKPFPQHriDTCGjv8f 3zid0WJl6H9ZTly2iAMnSH5lz38Ng5W/cS6LfIK+HrxIxQxEh7VeR40EG2buljzR e9VtQLZvViFOGVp2UKpFuDeOUoD33EXLjY8hXZd1yQ05nZB44qxANAedfVfHtJdf ZQ/nXZEV9w2+6fWddlf4AdaBmtvF5Ab5+8XVU2IiA0SzNxefbxKExvsgl5OgrBzY onX/1eg/4XX8q7qIZwoGd0nalQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBfs1r4 D9VGQoo4UNXGrtcpLSrSMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFfip5EBQw1yXSY+8I5THOS49ABpk9CVdOU5C7uKL2wTGwnnIgzG8LKeIsJw 3RcVm6FAzgfW/B+mYxkju9mRNrGvv3RwO/6h6XxmMkLqx/yavzj5p4Cj2bdYYJBn mC8dRoNbbsEoZHK+TlA3XQPmNGzecJSYEkj0HyCCCoZbnCLxsgh5gRoPoKnfLhce lpihSh5ruQsXX2Hflw4r9+xpT/mtXgs8X/WP1JvMB5yL1vlSyl3Mnq3pXp4HYrmj UNg3jAtgI1tqATJKPiIw1hR6PNh4l6boK8DiK5UVOSiPyWjfLt6mojcp1RM5QLHh nSGuZrXrGDXsRW/PRxzZ9POdcg== -----END CERTIFICATE-----Generated at Mon Oct 5 16:15:42 2026 by rpki-client