$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: DMXGQ0WkEWi/8w9HYb8A+DZchdebCD84bJd6kNmsJDA= Subject key identifier: D5:3E:56:14:F0:F3:5C:C4:DD:F0:2C:DB:2D:65:75:DC:2C:17:D3:77 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 35F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 35C2 Signing time: Tue 22 Sep 2026 14:26:38 +0000 Manifest this update: Tue 22 Sep 2026 14:26:38 +0000 Manifest next update: Tue 29 Sep 2026 14:26:38 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: PwSpqM+PjORCEcJnK2V56tm1Lh/CPE2Dxr5c9pIo9H4=) 2: 44D3107874E311F1BDAFA91462A30FBC.roa (hash: nO0sPh4JGWaNR5PMX5uQrEkWh5OVkXvuUScoPnxVXDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13813 (0x35f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Sep 22 14:26:38 2026 GMT Not After : Sep 29 14:26:38 2026 GMT Subject: CN=6ab2901e-48c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:d3:98:96:f4:58:9d:15:20:46:f4:b5:fd: 7c:ec:2c:18:f7:5c:81:e5:a9:e6:ce:c9:e8:c3:cf: e8:01:1f:ba:89:36:0d:fa:4d:6e:40:f6:1b:a3:ca: 4c:9f:c5:cc:76:b3:62:1d:c4:0f:b5:fd:3f:2b:3a: cc:56:ba:b7:f6:ce:97:0a:6a:10:a0:61:72:55:1f: 4b:2f:84:6b:23:8b:9d:b4:45:d0:90:03:e6:c4:ea: 2b:84:f3:f5:7e:5a:82:2a:53:07:1c:6f:04:1e:59: dd:62:14:7b:a7:f6:5f:a1:c7:3d:e0:77:ea:75:ed: f6:37:4d:ec:09:fe:c7:c1:61:2b:90:d4:7e:cd:50: c8:04:01:f3:16:97:8a:83:ed:1c:82:5b:93:70:cd: 4f:f6:34:35:91:5c:f2:ea:89:a3:57:d7:86:40:49: 1d:eb:98:83:16:ec:4a:bb:38:72:d6:8d:90:54:ea: fb:c2:19:7c:e2:c2:fe:a6:1e:5d:a8:57:d1:a8:55: 98:77:d4:00:02:4f:6e:4b:9d:c2:ea:59:4f:21:34: 6c:89:2d:2c:30:c3:64:bd:94:4e:5e:85:9b:ae:c6: 84:6a:bd:a1:25:1e:ae:bf:8b:ae:dd:67:1c:bc:9d: ce:4f:b1:85:2c:02:2f:16:ab:5f:7e:da:3c:5d:85: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:56:14:F0:F3:5C:C4:DD:F0:2C:DB:2D:65:75:DC:2C:17:D3:77 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:4d:74:c2:cf:b3:95:61:9d:24:3f:68:df:d5:7c:dd:6d:76: 59:00:d8:5f:fb:92:de:b9:42:b4:86:a0:49:c3:f3:6e:25:04: 09:59:bc:78:ea:73:05:b4:59:6e:1d:39:aa:ae:33:38:1f:63: 82:87:c1:65:6d:7a:8b:f9:c6:b1:7c:71:33:98:5a:3e:bd:89: 2e:56:d7:d9:4d:20:f9:bd:90:5f:c5:7b:c0:fe:50:86:5f:be: 31:28:1f:fb:49:b8:2a:6b:20:e7:01:35:2b:8a:a8:61:bd:9f: fe:74:55:31:34:0c:83:dd:65:e5:83:17:3a:4a:9b:34:9c:30: 93:06:84:16:64:f6:38:a7:ed:42:fe:e0:b1:fd:18:54:0f:26: 23:d2:39:a9:c4:44:8a:1e:03:a6:c3:75:f7:78:3e:8f:b9:04: 6a:c2:2c:6d:89:f6:21:63:b8:25:35:f1:63:32:31:d8:22:56: 73:f7:e8:98:3f:14:77:c7:e0:d1:a6:95:1e:9d:0e:c0:66:9f: b6:fd:39:74:ad:ff:b9:54:74:b8:f6:b2:4a:40:49:1f:5e:27: aa:54:86:81:6d:60:ce:cd:9f:7f:73:a4:37:35:91:92:6e:fa: 6e:a3:07:fd:28:0f:bb:a6:d2:6e:db:90:5e:a4:1e:c5:f1:40: 60:99:a5:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjYwOTIyMTQyNjM4WhcNMjYwOTI5MTQyNjM4WjAYMRYwFAYD VQQDEw02YWIyOTAxZS00OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXDTmJb0WJ0VIEb0tf187CwY91yB5anmzsnow8/oAR+6iTYN+k1uQPYbo8pM n8XMdrNiHcQPtf0/KzrMVrq39s6XCmoQoGFyVR9LL4RrI4udtEXQkAPmxOorhPP1 flqCKlMHHG8EHlndYhR7p/Zfocc94Hfqde32N03sCf7HwWErkNR+zVDIBAHzFpeK g+0cgluTcM1P9jQ1kVzy6omjV9eGQEkd65iDFuxKuzhy1o2QVOr7whl84sL+ph5d qFfRqFWYd9QAAk9uS53C6llPITRsiS0sMMNkvZROXoWbrsaEar2hJR6uv4uu3Wcc vJ3OT7GFLAIvFqtffto8XYU+XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNU+VhTw 81zE3fAs2y1lddwsF9N3MB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd010ws+zlWGdJD9o39V83W12WQDYX/uS3rlCtIagScPzbiUECVm8eOpzBbRZ bh05qq4zOB9jgofBZW16i/nGsXxxM5haPr2JLlbX2U0g+b2QX8V7wP5Qhl++MSgf +0m4Kmsg5wE1K4qoYb2f/nRVMTQMg91l5YMXOkqbNJwwkwaEFmT2OKftQv7gsf0Y VA8mI9I5qcREih4DpsN193g+j7kEasIsbYn2IWO4JTXxYzIx2CJWc/fomD8Ud8fg 0aaVHp0OwGaftv05dK3/uVR0uPaySkBJH14nqlSGgW1gzs2ff3OkNzWRkm76bqMH /SgPu6bSbtuQXqQexfFAYJmlWA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:37:53 2026 by rpki-client