$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: vqvb6Jh4N/xYQeBFS9wjU2jYP/hOM3BvKPjjXWl0/Ik= Subject key identifier: 40:9C:5E:41:94:38:72:CA:C8:EB:D5:2F:D7:B1:EC:38:F1:BC:68:F3 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 0443 Signing time: Sun 27 Sep 2026 00:18:29 +0000 Manifest this update: Sun 27 Sep 2026 00:18:28 +0000 Manifest next update: Sun 04 Oct 2026 00:18:28 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: B+xpb4u4f3bHPScY/QZlrKnjAUARy3R90m/LBVcgq/4=) 2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=) 3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=) 4: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Sep 27 00:18:28 2026 GMT Not After : Oct 4 00:18:28 2026 GMT Subject: CN=6ab860d5-e745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:8e:61:a3:f9:d6:b4:25:12:91:0e:a7:9c: c3:38:9a:5b:56:65:27:0a:81:b8:d5:3c:d1:2f:54: a9:0d:0a:c4:a0:1f:e4:17:92:62:25:bb:19:06:44: 3b:78:99:1b:b0:b3:2b:68:5d:4e:48:4d:c2:14:15: aa:6f:8c:47:b9:90:be:cf:a8:c9:29:e7:60:d9:05: af:fa:e2:5c:a6:71:a7:a1:8f:e4:6d:e7:5d:e4:ca: e8:44:cb:63:c8:ab:d0:04:78:29:4b:a6:c3:6e:70: af:c7:83:39:32:89:46:d1:a3:a2:f4:8c:74:f7:8b: 06:af:3f:be:8f:5d:29:84:0b:ce:09:71:50:84:bc: ef:ba:74:2e:e0:d3:e1:91:5b:e5:fa:aa:2e:f0:b0: e7:c8:e5:d4:42:64:64:d5:1c:a6:17:17:60:80:b8: 86:35:e5:09:b7:c4:34:e9:b4:ab:a4:e8:76:6d:19: 17:cb:2b:4c:d4:14:5e:29:94:01:fc:75:3b:96:4b: 1b:f5:1d:04:75:d8:2b:94:17:1b:d0:d8:da:c4:60: 38:ed:83:3e:32:91:ea:b7:3f:35:ab:1e:2c:c1:c8: 96:30:62:9f:21:4d:77:48:c1:55:27:23:68:57:ca: 3a:e5:39:64:da:56:1f:08:cf:3e:82:aa:0b:03:4c: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:5E:41:94:38:72:CA:C8:EB:D5:2F:D7:B1:EC:38:F1:BC:68:F3 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:38:1d:12:1e:98:33:7c:ed:b4:d0:cf:77:e9:3c:98:07:e8: 5d:b9:9d:e7:88:26:f0:13:85:9e:13:c4:a5:81:09:1c:2e:ec: 93:fa:c1:85:50:c8:98:cc:29:24:7e:54:13:16:eb:8b:3c:b4: bf:5b:76:69:2b:d5:3e:c6:a7:c0:b8:55:ab:50:f4:5d:08:aa: 68:8d:bf:2e:a4:3b:c0:84:7e:ea:cb:30:f7:1a:ca:31:e5:79: f0:76:7d:f5:73:4f:26:0f:28:3a:17:f7:29:a3:f4:1b:9b:ab: 4a:96:d5:eb:ad:6d:c2:17:77:aa:16:dc:d7:11:73:1a:46:b1: 44:9c:fd:77:08:fb:c6:9d:74:3c:94:44:1d:04:d7:04:b5:35: 85:28:d0:ad:29:19:7b:2e:a3:71:dd:bb:a4:b3:a8:7a:a4:5e: a9:ec:8e:d2:f7:6b:46:f3:4e:19:86:fe:25:72:82:94:bd:d5: e3:31:79:fe:5c:da:74:99:5d:58:5c:b2:99:18:93:ea:f7:77: 66:0b:97:f9:66:b4:3a:5c:81:f9:5c:8b:20:d4:a2:8b:dd:05: ba:02:05:e4:32:c3:1d:ea:f9:2b:d6:d5:d9:b5:6e:1e:77:05: 24:34:b1:f8:f4:26:09:6c:2c:81:95:a4:4f:f5:2e:6e:2f:1b: b3:06:6c:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYwOTI3MDAxODI4WhcNMjYxMDA0MDAxODI4WjAYMRYwFAYD VQQDEw02YWI4NjBkNS1lNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhMyOYaP51rQlEpEOp5zDOJpbVmUnCoG41TzRL1SpDQrEoB/kF5JiJbsZBkQ7 eJkbsLMraF1OSE3CFBWqb4xHuZC+z6jJKedg2QWv+uJcpnGnoY/kbedd5MroRMtj yKvQBHgpS6bDbnCvx4M5MolG0aOi9Ix094sGrz++j10phAvOCXFQhLzvunQu4NPh kVvl+qou8LDnyOXUQmRk1RymFxdggLiGNeUJt8Q06bSrpOh2bRkXyytM1BReKZQB /HU7lksb9R0EddgrlBcb0NjaxGA47YM+MpHqtz81qx4swciWMGKfIU13SMFVJyNo V8o65Tlk2lYfCM8+gqoLA0waewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECcXkGU OHLKyOvVL9ex7DjxvGjzMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARzgdEh6YM3zttNDPd+k8mAfoXbmd54gm8BOFnhPEpYEJHC7sk/rBhVDImMwp JH5UExbrizy0v1t2aSvVPsanwLhVq1D0XQiqaI2/LqQ7wIR+6ssw9xrKMeV58HZ9 9XNPJg8oOhf3KaP0G5urSpbV661twhd3qhbc1xFzGkaxRJz9dwj7xp10PJREHQTX BLU1hSjQrSkZey6jcd27pLOoeqReqeyO0vdrRvNOGYb+JXKClL3V4zF5/lzadJld WFyymRiT6vd3ZguX+Wa0OlyB+VyLINSii90FugIF5DLDHer5K9bV2bVuHncFJDSx +PQmCWwsgZWkT/Uubi8bswZs4A== -----END CERTIFICATE-----Generated at Mon Sep 28 20:43:26 2026 by rpki-client