$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: UEn9W/WC9QPSeq7fXB9TWYdUtR8LJFyzdbQ0rafXaKg= Subject key identifier: 90:CE:C9:93:47:64:3D:9D:0F:D8:A1:88:E7:B5:21:94:4F:1A:3F:DB Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0162 Signing time: Thu 24 Sep 2026 19:06:44 +0000 Manifest this update: Thu 24 Sep 2026 19:06:44 +0000 Manifest next update: Thu 01 Oct 2026 19:06:44 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: sXl820j5yF9dG8ngy+YamriSLx6dDtqQsXIFMlCjHBA=) 2: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) 3: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 4: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Sep 24 19:06:44 2026 GMT Not After : Oct 1 19:06:44 2026 GMT Subject: CN=6ab574c4-6680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:2f:63:42:5e:22:07:19:fb:8f:ae:2e:ac: 92:dd:dc:70:9d:99:03:ac:7d:70:9b:d7:ca:4e:70: 26:ec:a7:1e:2d:5f:b7:62:75:4f:91:c4:c8:3b:09: c1:40:97:54:21:3d:c9:61:44:80:ab:8b:5a:f1:d0: 2f:c8:42:07:fd:9f:d8:97:d4:26:46:7a:fc:7f:eb: c3:d6:c2:cb:f8:50:a3:1c:83:26:24:a9:8a:d5:75: 99:d7:fc:7e:c1:fa:35:77:f1:68:17:3d:53:07:89: 75:e6:44:92:50:b5:c5:25:4d:37:52:47:2c:b2:1f: 6c:f7:1d:3d:a2:bc:06:fc:db:9a:8f:2e:0e:91:87: d3:f3:e4:a9:ef:90:71:1c:02:89:06:4d:61:c1:14: 18:0d:70:9c:c1:c0:8f:85:a1:48:40:fc:4a:78:c3: cb:8b:19:2a:b4:fe:36:7b:94:63:a8:68:7c:df:6e: c4:0d:68:6c:58:aa:95:9a:fd:ce:80:3d:b2:b4:62: 2d:fe:d1:4f:be:21:f6:74:8d:70:37:99:80:62:95: 37:55:92:82:93:06:22:b0:d7:64:a4:06:ff:a2:86: aa:55:bf:c3:fa:2c:3d:c3:33:df:d7:eb:0c:12:9f: 48:90:1c:4b:86:a5:3d:3a:2f:96:04:51:0b:1a:0c: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CE:C9:93:47:64:3D:9D:0F:D8:A1:88:E7:B5:21:94:4F:1A:3F:DB X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:eb:4c:8d:78:19:82:cf:54:1e:f4:b2:3d:da:96:42:51:05: 1e:76:9f:ff:26:ce:a5:ff:d3:f9:b1:e3:c2:c4:dd:58:c0:f7: 84:fa:d3:37:a9:41:d8:f2:1d:c3:eb:27:4a:6c:82:6b:01:e2: ce:ee:b5:13:2f:44:87:e9:a7:76:4f:93:10:13:a3:6b:79:86: ab:6b:8a:cc:ae:e3:b2:4f:6d:0f:25:55:1f:2b:f1:e5:59:3c: 86:66:85:a2:fa:c1:72:ba:57:2a:24:97:24:29:19:b8:fc:68: 92:0a:70:c7:28:e7:cf:dd:ad:16:ae:3e:96:4b:8d:cb:38:d5: 59:47:d4:24:fa:ec:b1:22:b2:de:2d:5d:b8:09:76:ba:97:48: 9c:24:12:f0:a3:22:fb:e3:06:91:43:80:c1:82:60:c5:d0:44: 81:85:c3:64:1d:55:cf:fc:10:a1:f9:c0:64:c0:81:d2:0d:98: a1:dc:a1:4d:7f:f3:da:31:68:ac:d3:77:76:5d:93:8e:01:57: f0:69:6c:95:cc:cc:fa:0a:84:fa:ef:0d:21:f4:18:14:41:ff: bc:25:f4:d9:36:ee:18:f7:3d:c8:2f:49:93:f2:3d:d5:df:b4: dc:2c:f5:de:8f:0b:5e:c1:c4:ac:26:8e:d7:d9:f2:6a:23:27: e8:13:23:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwOTI0MTkwNjQ0WhcNMjYxMDAxMTkwNjQ0WjAYMRYwFAYD VQQDEw02YWI1NzRjNC02NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk8vY0JeIgcZ+4+uLqyS3dxwnZkDrH1wm9fKTnAm7KceLV+3YnVPkcTIOwnB QJdUIT3JYUSAq4ta8dAvyEIH/Z/Yl9QmRnr8f+vD1sLL+FCjHIMmJKmK1XWZ1/x+ wfo1d/FoFz1TB4l15kSSULXFJU03Ukcssh9s9x09orwG/Nuajy4OkYfT8+Sp75Bx HAKJBk1hwRQYDXCcwcCPhaFIQPxKeMPLixkqtP42e5RjqGh8327EDWhsWKqVmv3O gD2ytGIt/tFPviH2dI1wN5mAYpU3VZKCkwYisNdkpAb/ooaqVb/D+iw9wzPf1+sM Ep9IkBxLhqU9Oi+WBFELGgyK+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDOyZNH ZD2dD9ihiOe1IZRPGj/bMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWetMjXgZgs9UHvSyPdqWQlEFHnaf/ybOpf/T+bHjwsTdWMD3hPrTN6lB2PId w+snSmyCawHizu61Ey9Eh+mndk+TEBOja3mGq2uKzK7jsk9tDyVVHyvx5Vk8hmaF ovrBcrpXKiSXJCkZuPxokgpwxyjnz92tFq4+lkuNyzjVWUfUJPrssSKy3i1duAl2 updInCQS8KMi++MGkUOAwYJgxdBEgYXDZB1Vz/wQofnAZMCB0g2YodyhTX/z2jFo rNN3dl2TjgFX8GlslczM+gqE+u8NIfQYFEH/vCX02TbuGPc9yC9Jk/I91d+03Cz1 3o8LXsHErCaO19nyaiMn6BMjIA== -----END CERTIFICATE-----Generated at Sat Sep 26 05:39:03 2026 by rpki-client