$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: y/w88cXL5MfQqDzRmQ5ez/1TBBHGvYeBYNGZOs8CK+A= Subject key identifier: DD:E4:13:8C:70:76:9C:41:07:EF:4A:08:80:FA:29:A5:29:2A:DE:EE Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 0676 Signing time: Fri 02 Oct 2026 22:54:02 +0000 Manifest this update: Fri 02 Oct 2026 22:54:01 +0000 Manifest next update: Fri 09 Oct 2026 22:54:01 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: 7lQeJDSf1GaD7H4m60jz593UcnHSqr0n52JDorKnCzE=) 2: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=) 3: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=) 4: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=) 5: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Oct 2 22:54:01 2026 GMT Not After : Oct 9 22:54:01 2026 GMT Subject: CN=6ac0360a-234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:83:e4:bd:5c:af:76:23:9e:d0:c4:c8:a0: 01:7c:da:83:52:77:25:17:7c:2c:f8:e9:3e:58:43: 56:ab:df:ee:35:27:a7:51:62:65:d5:32:42:c4:1a: 87:b0:d2:1f:e6:cd:0b:ca:c2:56:79:3b:b0:b4:59: cc:5f:1e:63:b9:ce:11:eb:8a:6d:03:ec:7f:28:d4: 0a:a1:f4:36:6a:5b:01:7f:a0:dc:28:8a:2d:55:db: aa:7d:37:1c:3f:6e:9e:67:5c:b3:33:da:0a:f6:d7: 5f:98:ec:05:f9:2c:af:b0:c9:c2:0c:b3:92:94:ef: 77:de:ca:13:5a:53:a5:4d:b6:8e:a5:4f:b1:87:35: fc:2f:ac:5c:49:df:67:6b:18:fb:3f:a0:35:85:a7: a0:bc:fd:fb:23:b7:59:25:84:0b:50:13:a5:25:5e: dc:a9:77:88:83:41:91:b9:1b:cf:c3:50:bb:9e:9b: fb:e5:3c:3b:23:f6:b7:63:37:fa:1b:c7:19:7d:b7: 95:b9:03:c5:d1:7a:d8:01:01:ff:f2:a1:08:8b:50: 0f:e8:f9:fe:88:e5:a0:57:90:5f:1b:c5:25:3f:08: c8:87:14:1d:18:b1:2d:e0:9d:c3:eb:8b:2e:39:81: 8c:44:4b:60:31:d1:02:97:27:14:60:63:37:d4:f3: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:13:8C:70:76:9C:41:07:EF:4A:08:80:FA:29:A5:29:2A:DE:EE X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:22:40:52:6d:52:fb:5f:c8:9a:61:c5:4a:17:bb:e3:a4:05: 49:47:e3:e8:da:af:b8:de:d8:73:a4:ab:d5:b3:aa:79:58:5d: 25:97:10:e4:5c:b2:d2:13:fd:7b:27:c3:0b:79:65:d3:94:35: 4d:a6:a8:10:5d:93:42:28:71:05:fc:08:8d:ed:9c:61:10:ea: 68:50:c5:f6:37:30:2c:47:48:69:93:21:bd:a5:2b:97:cd:f2: 16:c9:aa:a7:b0:3f:bf:5c:94:91:21:a2:4c:96:56:8b:31:7b: 49:b5:30:a4:62:6f:a3:d2:94:29:d7:41:f6:f8:fb:fd:08:c5: df:79:4f:04:53:fe:84:05:2e:63:94:6d:10:69:72:d8:f1:87: 5f:3e:cf:3c:7a:4c:59:a6:44:69:f9:5c:b0:bf:57:09:f9:6b: bb:32:84:77:bd:0b:1a:26:fc:24:64:cf:7c:eb:f0:ce:f5:5d: 4d:5a:ce:e3:38:54:69:d3:8b:e9:52:e2:57:59:f6:bd:2d:6c: 6b:77:0c:e2:3d:34:66:a7:49:43:85:15:76:02:b9:03:75:52: d9:f5:de:af:28:32:2f:3c:4c:58:f1:57:98:87:05:41:55:de: be:64:66:ca:34:7d:b7:5f:03:12:16:bb:c1:2e:33:6c:30:5d: e2:e9:32:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjYxMDAyMjI1NDAxWhcNMjYxMDA5MjI1NDAxWjAYMRYwFAYD VQQDEw02YWMwMzYwYS0yMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZeD5L1cr3YjntDEyKABfNqDUnclF3ws+Ok+WENWq9/uNSenUWJl1TJCxBqH sNIf5s0LysJWeTuwtFnMXx5juc4R64ptA+x/KNQKofQ2alsBf6DcKIotVduqfTcc P26eZ1yzM9oK9tdfmOwF+SyvsMnCDLOSlO933soTWlOlTbaOpU+xhzX8L6xcSd9n axj7P6A1haegvP37I7dZJYQLUBOlJV7cqXeIg0GRuRvPw1C7npv75Tw7I/a3Yzf6 G8cZfbeVuQPF0XrYAQH/8qEIi1AP6Pn+iOWgV5BfG8UlPwjIhxQdGLEt4J3D64su OYGMREtgMdEClycUYGM31PP5KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3kE4xw dpxBB+9KCID6KaUpKt7uMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsiJAUm1S+1/ImmHFShe746QFSUfj6NqvuN7Yc6Sr1bOqeVhdJZcQ5Fyy0hP9 eyfDC3ll05Q1TaaoEF2TQihxBfwIje2cYRDqaFDF9jcwLEdIaZMhvaUrl83yFsmq p7A/v1yUkSGiTJZWizF7SbUwpGJvo9KUKddB9vj7/QjF33lPBFP+hAUuY5RtEGly 2PGHXz7PPHpMWaZEaflcsL9XCflruzKEd70LGib8JGTPfOvwzvVdTVrO4zhUadOL 6VLiV1n2vS1sa3cM4j00ZqdJQ4UVdgK5A3VS2fXerygyLzxMWPFXmIcFQVXevmRm yjR9t18DEha7wS4zbDBd4uky0Q== -----END CERTIFICATE-----Generated at Sun Oct 4 21:12:32 2026 by rpki-client