$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: dq7zTFIULi+h3iZWafnqeA3SEdBG2R13PP1E71wJW8w= Subject key identifier: 03:FB:B1:F1:47:8E:2C:49:7C:AA:F5:59:34:FA:2D:8A:7F:90:C0:D1 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 04F0 Signing time: Thu 24 Sep 2026 23:33:24 +0000 Manifest this update: Thu 24 Sep 2026 23:33:23 +0000 Manifest next update: Thu 01 Oct 2026 23:33:23 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: 950EWVVDjSkHQIIYqXSo2IGDdAHAxa8CxGzQbC8dpGQ=) 2: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: W6dMaUqeZUZ5yl2vrB4kDnmuCp2AkA9688MbXMn1Iu0=) 3: 4B167396E74111EC80E35542C4F9AE02.roa (hash: s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=) 4: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: 3jewHBb77PCvairN2996ZvKaBpoln62DoJ8FtmWYmYo=) 5: 25C6FD9CAE0511F187A47F574B11F970.roa (hash: tPUksVd0vhsyj5oWFgysZ5c2itueSX3x7L98+NauflU=) 6: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: Jq67A+F4rIfzW8WwGVI/74n9tCcPV6PLGYDBFsxh/v4=) 7: 2DDD88A0A75911F1AF5343123411F970.roa (hash: 9EmOCnTu4Fq+Sx1iPpBHYJ6Pu50AYRK5Hfc3dx16G7Y=) 8: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Q/WW69HDFqBmPazKy9CWTwg7ADAfQr3xucgCfcoGH6o=) 9: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: woJiUlfh+5rrMBDG7PnsvNBeiKjiLhLTkpDWmy2sy4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Sep 24 23:33:23 2026 GMT Not After : Oct 1 23:33:23 2026 GMT Subject: CN=6ab5b343-75cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:48:0a:fb:ac:be:24:f0:1d:26:0f:3d:8e: d2:41:9c:43:27:2e:5d:0e:62:a1:6f:dd:a0:4e:8b: 9f:93:d2:80:db:f9:55:a8:35:e6:e7:95:1d:5b:90: 9a:c0:ed:e1:2c:7a:bb:48:5a:d9:8f:15:ee:0b:78: 4b:83:4a:46:0c:5e:52:e7:ba:37:ad:18:bb:1a:41: c3:46:21:35:33:e0:03:97:fc:55:4b:c0:ba:c2:c6: 41:a9:e9:53:29:6f:d4:43:b1:fd:da:da:6e:05:1a: 8d:d6:ee:9d:cd:ea:06:0c:7b:2b:13:b5:f6:c9:05: 6b:8a:c3:69:f3:48:48:5e:de:15:c2:03:55:a3:22: ce:4c:15:a1:d1:54:8e:bf:db:33:df:80:43:3f:50: 5e:d7:c2:f8:3d:39:e3:a1:cb:ed:87:0a:da:15:a8: 8d:27:63:65:b3:cd:29:57:c6:22:c1:85:03:16:20: 4d:3d:9b:0c:10:f8:a8:0d:02:77:51:b2:c8:69:3b: 84:66:0b:01:fc:1a:fd:ce:f1:a4:4b:5b:c5:fc:02: 67:4b:d4:c1:17:57:ff:c4:cc:17:9a:c3:01:1d:4b: c0:54:74:35:17:22:5f:27:75:4d:00:3f:83:85:8c: d1:b5:11:e8:cc:25:82:78:eb:d5:98:4e:57:e4:08: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:B1:F1:47:8E:2C:49:7C:AA:F5:59:34:FA:2D:8A:7F:90:C0:D1 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d2:80:dc:9f:1f:0b:28:cd:8e:02:14:2b:6d:7e:a2:a6:ec: af:54:4d:a5:06:7f:71:5b:0f:1a:f3:89:38:03:50:60:4b:00: 56:57:99:80:8d:3d:f1:62:84:3e:0c:eb:e0:ab:c7:71:7a:b9: 3e:68:24:13:5e:7b:d1:0a:fb:8a:24:c7:9a:5f:e7:ec:5f:5f: 86:16:8d:5d:10:42:8e:db:55:9d:32:bb:48:4c:9d:fd:f8:58: b8:e1:5b:55:1e:a5:6b:c6:e6:4b:e2:f1:a8:90:a0:4c:33:b0: bb:a7:22:b2:29:f1:e6:d1:c9:66:b9:25:4b:78:2b:73:b4:72: fb:13:80:db:78:69:1f:4f:5e:4d:a6:ee:2b:3e:c3:35:35:90: ba:68:f2:48:26:ce:b7:bc:6a:88:7a:ab:67:0d:47:83:a7:11: e1:a9:c8:e7:d9:eb:5a:50:f2:89:39:77:ed:dc:7a:97:84:57: 98:77:eb:4a:2f:69:c0:a2:68:a9:96:ea:72:2f:9e:0b:0a:c2: 56:ec:3d:38:5c:3e:5b:1b:98:2f:98:7b:ba:db:39:0e:34:87: 81:19:96:c3:96:c6:03:47:bd:a7:12:be:cd:24:17:c6:08:6f: 87:52:0a:20:e9:c7:55:16:3b:22:80:b7:1d:51:15:cf:a4:69: 26:82:c6:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwOTI0MjMzMzIzWhcNMjYxMDAxMjMzMzIzWjAYMRYwFAYD VQQDEw02YWI1YjM0My03NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwRICvusviTwHSYPPY7SQZxDJy5dDmKhb92gToufk9KA2/lVqDXm55UdW5Ca wO3hLHq7SFrZjxXuC3hLg0pGDF5S57o3rRi7GkHDRiE1M+ADl/xVS8C6wsZBqelT KW/UQ7H92tpuBRqN1u6dzeoGDHsrE7X2yQVrisNp80hIXt4VwgNVoyLOTBWh0VSO v9sz34BDP1Be18L4PTnjocvthwraFaiNJ2Nls80pV8YiwYUDFiBNPZsMEPioDQJ3 UbLIaTuEZgsB/Br9zvGkS1vF/AJnS9TBF1f/xMwXmsMBHUvAVHQ1FyJfJ3VNAD+D hYzRtRHozCWCeOvVmE5X5Aj7xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAP7sfFH jixJfKr1WTT6LYp/kMDRMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAutKA3J8fCyjNjgIUK21+oqbsr1RNpQZ/cVsPGvOJOANQYEsAVleZgI098WKE Pgzr4KvHcXq5PmgkE1570Qr7iiTHml/n7F9fhhaNXRBCjttVnTK7SEyd/fhYuOFb VR6la8bmS+LxqJCgTDOwu6cisinx5tHJZrklS3grc7Ry+xOA23hpH09eTabuKz7D NTWQumjySCbOt7xqiHqrZw1Hg6cR4anI59nrWlDyiTl37dx6l4RXmHfrSi9pwKJo qZbqci+eCwrCVuw9OFw+WxuYL5h7uts5DjSHgRmWw5bGA0e9pxK+zSQXxghvh1IK IOnHVRY7IoC3HVEVz6RpJoLGnw== -----END CERTIFICATE-----Generated at Fri Sep 25 13:03:01 2026 by rpki-client