$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: 1FBGXSM5b4PMxOf4mzoySnBJX40JTpzCvP2B45JxWaI= Subject key identifier: 2C:76:9C:C9:6E:CD:73:D2:DC:A7:3F:5C:A8:4F:4E:D4:3A:09:A8:3D Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 036E Signing time: Wed 23 Sep 2026 00:27:17 +0000 Manifest this update: Wed 23 Sep 2026 00:27:16 +0000 Manifest next update: Wed 30 Sep 2026 00:27:16 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: JDkrk4c/970dnGm7emIzJRo/7Qw/srnuq2i0AcMFEY4=) 2: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: 6HsKuqL5S8uKAR1j1etyr6JU/lQn3ubk+2w56Dk0K+A=) 3: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: dfXE23weJbeF3Q0ekQ196ZT9XngXBchYp3WwEpVjFic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Sep 23 00:27:16 2026 GMT Not After : Sep 30 00:27:16 2026 GMT Subject: CN=6ab31ce4-edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:3d:85:f6:19:0b:e3:14:f0:d0:4d:56:d9: cb:b0:45:30:e5:45:dc:9e:ea:ea:90:38:07:3a:fa: 0c:a2:84:d6:8d:46:63:d2:c3:66:6c:ec:fe:58:f1: 56:ce:c5:10:8b:c5:69:b5:1a:b0:5c:6a:95:4b:92: ad:63:e6:69:95:24:ee:a3:0e:5c:cf:9f:92:9e:2d: 77:be:f7:93:b1:2c:07:3f:22:6f:04:34:c1:c2:b1: fc:5e:d6:47:8a:f6:3a:8a:8c:6b:05:9f:de:af:ae: 11:c7:b2:15:ce:1f:4f:4e:03:7d:5c:79:1b:01:b5: b6:37:d7:0f:ab:b7:d9:4c:36:d1:5c:83:c9:ae:c2: 27:d5:64:38:50:d6:55:a6:50:1e:fb:f3:84:17:b0: 22:d2:34:91:d4:6b:28:a8:1b:5d:fb:46:11:f6:c8: a7:a2:9c:42:54:22:84:25:bf:92:73:9d:f8:03:95: b9:4b:c5:48:77:44:0b:ee:e4:bd:be:86:58:21:2a: 92:38:6a:10:28:e5:95:8a:17:25:93:85:13:42:7d: 03:6c:7e:28:d0:09:93:cb:d4:5e:bc:85:4f:b0:c2: cd:aa:90:de:38:27:fe:48:4a:20:91:b1:cc:ef:d1: f7:e8:25:5d:d2:9c:b2:32:45:84:f7:eb:b8:65:dc: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:9C:C9:6E:CD:73:D2:DC:A7:3F:5C:A8:4F:4E:D4:3A:09:A8:3D X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b0:4a:df:33:f6:e1:71:06:6e:3f:7d:5b:10:22:10:9c:32: 6d:f3:a6:96:31:c2:aa:43:a5:b7:10:41:87:fd:df:7d:39:a1: 33:bf:4d:da:a5:fc:89:8b:91:b2:1f:5a:75:0a:b0:da:41:3d: fc:cd:3d:79:74:0a:3c:ee:4a:b0:f9:5d:e3:e0:1b:3b:6c:a1: 4d:41:7d:54:06:54:2d:1f:d8:16:8f:f9:2c:ed:7f:ef:14:7e: c5:f2:6e:28:7b:f4:41:97:fd:75:a6:6f:aa:8f:35:c3:ca:2e: 26:4e:6a:3e:5e:1a:67:fd:6e:9e:2e:74:8d:c3:6f:01:a4:69: 8a:8e:85:fc:0e:ba:23:a2:fd:34:cd:bd:be:21:fd:60:9f:65: 20:d6:eb:d9:92:0c:8a:20:e1:d0:db:fb:51:a8:61:e5:01:d8: 19:d4:86:fe:f7:2c:1a:8e:04:cf:51:12:14:5d:20:1a:c7:f8: d6:13:17:17:4a:21:01:67:2a:12:3d:75:7a:f3:6e:3d:b9:01: 50:92:db:02:3d:eb:6a:c3:0e:e7:3d:bf:0b:5a:a4:d2:57:7f: ae:f8:4c:fc:a4:a9:fb:28:da:13:0f:55:76:27:40:92:83:17: 91:9d:48:82:37:26:6b:37:89:b0:2c:91:fd:cc:52:fc:13:14: f3:35:56:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjYwOTIzMDAyNzE2WhcNMjYwOTMwMDAyNzE2WjAYMRYwFAYD VQQDEw02YWIzMWNlNC1lZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8h49hfYZC+MU8NBNVtnLsEUw5UXcnurqkDgHOvoMooTWjUZj0sNmbOz+WPFW zsUQi8VptRqwXGqVS5KtY+ZplSTuow5cz5+Sni13vveTsSwHPyJvBDTBwrH8XtZH ivY6ioxrBZ/er64Rx7IVzh9PTgN9XHkbAbW2N9cPq7fZTDbRXIPJrsIn1WQ4UNZV plAe+/OEF7Ai0jSR1GsoqBtd+0YR9sinopxCVCKEJb+Sc534A5W5S8VId0QL7uS9 voZYISqSOGoQKOWVihclk4UTQn0DbH4o0AmTy9RevIVPsMLNqpDeOCf+SEogkbHM 79H36CVd0pyyMkWE9+u4Zdw2jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx2nMlu zXPS3Kc/XKhPTtQ6Cag9MB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLBK3zP24XEGbj99WxAiEJwybfOmljHCqkOltxBBh/3ffTmhM79N2qX8iYuR sh9adQqw2kE9/M09eXQKPO5KsPld4+AbO2yhTUF9VAZULR/YFo/5LO1/7xR+xfJu KHv0QZf9daZvqo81w8ouJk5qPl4aZ/1uni50jcNvAaRpio6F/A66I6L9NM29viH9 YJ9lINbr2ZIMiiDh0Nv7Uahh5QHYGdSG/vcsGo4Ez1ESFF0gGsf41hMXF0ohAWcq Ej11evNuPbkBUJLbAj3rasMO5z2/C1qk0ld/rvhM/KSp+yjaEw9VdidAkoMXkZ1I gjcmazeJsCyR/cxS/BMU8zVW1A== -----END CERTIFICATE-----Generated at Thu Sep 24 01:06:26 2026 by rpki-client