$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: i1KB/M0lWgHuwE+0c6ne5FOmw94CBedemWKVs+s/THM= Subject key identifier: 8D:45:DB:C0:65:62:39:4D:6F:D7:EB:20:55:0E:88:9B:EF:BD:24:6B Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 028B Signing time: Wed 23 Sep 2026 01:38:54 +0000 Manifest this update: Wed 23 Sep 2026 01:38:53 +0000 Manifest next update: Wed 30 Sep 2026 01:38:53 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: DDLFMnsGAG67eXAsnKOrfoPWgUhG0KVDX7WByvD7tbs=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Sep 23 01:38:53 2026 GMT Not After : Sep 30 01:38:53 2026 GMT Subject: CN=6ab32dae-a7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:0c:14:8f:dd:78:b5:62:bf:f0:f9:6c:8a: ea:90:f1:a3:97:1d:d4:05:29:41:43:3b:2d:c7:4d: 21:42:75:46:eb:53:03:b9:96:3f:35:65:c2:69:1f: 60:02:90:5c:ad:2c:7d:d0:e7:b5:01:e5:de:b4:3c: a2:7c:b5:d3:c7:d1:ec:98:9e:33:d1:77:4b:e4:a0: 23:7a:4c:db:14:f4:18:f0:12:bb:a1:4c:25:86:81: e6:93:0f:13:a8:7e:06:7a:41:e4:e4:a7:86:4f:4f: a4:cc:75:50:94:83:ca:a1:d2:3b:bb:2f:b7:3b:4d: ee:13:ff:5b:1e:a2:69:a7:5f:d1:60:ce:91:d3:1a: 58:80:7e:be:44:ca:31:4d:dd:0f:99:8c:ba:1b:90: c9:29:93:8a:60:6c:23:2f:f6:28:55:32:0e:12:b9: 79:ef:94:15:c6:8d:44:a6:c6:05:37:74:29:ac:c0: 80:df:8f:7f:ce:da:8a:e6:b0:be:1f:f1:b6:70:75: fd:75:0b:02:5f:80:d7:81:7a:6b:c1:66:71:59:c4: b3:e6:ba:b5:c1:3b:59:19:0e:82:20:7d:58:ea:75: 9a:d3:71:62:50:c9:2d:a8:c1:30:d3:ef:51:ad:51: c5:82:d7:23:46:16:72:60:70:12:cd:3d:fa:d5:9f: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:45:DB:C0:65:62:39:4D:6F:D7:EB:20:55:0E:88:9B:EF:BD:24:6B X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:f1:31:ff:4f:9b:33:7d:d3:24:51:ce:df:18:47:46:81:00: 1e:13:03:fc:ac:69:0f:99:a5:37:49:18:5d:d1:29:61:4a:20: ff:9c:01:bd:7f:df:91:8c:e1:0b:23:d1:a8:46:d5:59:5e:3a: c5:ea:f7:d5:f4:58:2e:82:a7:1b:7e:ef:f0:48:0b:76:74:f1: 2e:2c:fd:2f:1d:38:ef:8d:de:7d:40:74:63:33:42:de:8b:17: 48:29:c1:d1:58:3d:44:3e:72:4c:e1:c1:f0:fc:dd:33:52:09: b1:15:5d:9b:e5:91:3e:f5:4c:6a:e4:98:0d:04:46:32:a3:54: 3b:e2:9f:ae:70:68:60:cc:c4:1a:85:b0:08:45:72:86:88:2c: 6a:2f:a5:56:7a:77:3d:1d:c2:70:50:0e:a4:eb:b2:3a:75:27: 10:b6:57:e9:9b:28:be:63:5c:69:c6:cf:e1:6f:25:31:62:b6: fa:25:f0:6b:9c:6a:0e:4d:fc:ab:f7:3f:88:a3:fa:bd:31:1b: af:d8:5f:8f:f9:dc:ff:bb:b0:43:1d:64:1f:08:40:8c:03:cd: 32:99:10:a9:22:60:9a:0a:73:a6:e7:67:1f:91:c6:a2:fb:b3: 77:e2:b7:ef:81:5a:31:97:14:6b:e1:d4:f4:82:6a:7b:b6:fb: 5d:d1:78:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjYwOTIzMDEzODUzWhcNMjYwOTMwMDEzODUzWjAYMRYwFAYD VQQDEw02YWIzMmRhZS1hN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVcMFI/deLViv/D5bIrqkPGjlx3UBSlBQzstx00hQnVG61MDuZY/NWXCaR9g ApBcrSx90Oe1AeXetDyifLXTx9HsmJ4z0XdL5KAjekzbFPQY8BK7oUwlhoHmkw8T qH4GekHk5KeGT0+kzHVQlIPKodI7uy+3O03uE/9bHqJpp1/RYM6R0xpYgH6+RMox Td0PmYy6G5DJKZOKYGwjL/YoVTIOErl575QVxo1EpsYFN3QprMCA349/ztqK5rC+ H/G2cHX9dQsCX4DXgXprwWZxWcSz5rq1wTtZGQ6CIH1Y6nWa03FiUMktqMEw0+9R rVHFgtcjRhZyYHASzT361Z99rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1F28Bl YjlNb9frIFUOiJvvvSRrMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwPEx/0+bM33TJFHO3xhHRoEAHhMD/KxpD5mlN0kYXdEpYUog/5wBvX/fkYzh CyPRqEbVWV46xer31fRYLoKnG37v8EgLdnTxLiz9Lx04743efUB0YzNC3osXSCnB 0Vg9RD5yTOHB8PzdM1IJsRVdm+WRPvVMauSYDQRGMqNUO+KfrnBoYMzEGoWwCEVy hogsai+lVnp3PR3CcFAOpOuyOnUnELZX6ZsovmNcacbP4W8lMWK2+iXwa5xqDk38 q/c/iKP6vTEbr9hfj/nc/7uwQx1kHwhAjAPNMpkQqSJgmgpzpudnH5HGovuzd+K3 74FaMZcUa+HU9IJqe7b7XdF4fQ== -----END CERTIFICATE-----Generated at Thu Sep 24 03:44:06 2026 by rpki-client