$ rpki-client -vvvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: 438faCsbcEY9fnMa65VBu0PZciag9UUhRVDpqB4ecGU= Subject key identifier: 97:56:65:27:E2:84:FF:5D:03:E0:44:11:76:14:3D:90:E5:77:5F:89 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 0292 Signing time: Wed 23 Sep 2026 01:36:17 +0000 Manifest this update: Wed 23 Sep 2026 01:36:16 +0000 Manifest next update: Wed 30 Sep 2026 01:36:16 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: Xzp3ZqxINKlg5u8XFaUYGLYl2+OLjo+ZsJ/uU09n07o=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Sep 23 01:36:16 2026 GMT Not After : Sep 30 01:36:16 2026 GMT Subject: CN=6ab32d11-0b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:00:65:eb:aa:37:74:54:f4:b5:20:8e:aa: f5:f2:c5:fd:3e:78:be:0f:37:03:97:bf:09:60:d5: ba:fe:4a:91:ac:62:66:2c:83:2d:fd:ea:42:10:71: 5b:ff:49:38:fc:03:a8:52:e6:23:ea:58:0c:58:ea: 7f:62:69:8f:58:e4:fe:a7:38:a3:ee:81:da:88:92: db:2f:f0:8a:5d:14:82:f6:55:12:45:ed:85:2c:0b: 8d:0e:c7:1e:11:a8:32:b2:10:21:51:27:a4:03:17: 12:c6:86:a9:f2:07:71:f8:2d:cb:e0:72:8a:cd:c5: 22:57:d3:d2:0e:c2:60:0a:95:6b:ee:cd:60:82:d6: a1:8e:fe:d1:41:f1:0d:7e:df:c2:ea:9b:6b:4b:a8: 06:e8:f5:c6:76:f1:b0:03:e3:a8:3f:51:f5:87:50: 2b:6b:f1:0a:94:ac:72:5c:64:72:e9:0c:4b:7c:18: 56:60:54:5b:8b:4f:7a:2e:76:91:44:9e:17:27:28: c3:bb:97:7c:15:8f:38:f7:75:05:10:96:bb:4a:fe: 70:dc:cf:d2:b2:36:63:c3:cb:f7:e1:bb:7b:c4:49: 0a:0d:9b:d4:24:67:8c:8d:95:77:a0:6a:d6:d8:34: 59:be:dc:47:fc:a3:1e:7d:f8:9f:57:4d:71:65:bd: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:56:65:27:E2:84:FF:5D:03:E0:44:11:76:14:3D:90:E5:77:5F:89 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:52:d1:48:f9:a9:ae:6a:71:cd:e9:f0:2e:42:18:18:17:b1: fb:fd:79:2a:73:ff:2f:b7:c3:86:e0:b1:e3:db:b4:36:e5:b1: e6:86:3a:4a:64:63:ba:75:59:06:01:01:62:26:1a:2a:fd:28: 27:9d:cc:07:43:09:cc:e5:25:b5:53:ac:55:f8:fd:e7:d2:49: 07:f1:cb:97:76:f9:ed:88:83:f7:b4:54:53:17:c7:d5:4e:77: 34:72:1d:30:73:8c:57:43:fc:9f:58:8c:c5:3d:b7:a4:86:8b: 60:d1:49:85:84:ba:43:a5:3b:07:5c:eb:1a:16:9a:57:de:75: 54:90:60:4a:af:94:36:83:cb:0e:13:93:71:b7:c2:e2:89:a2: 80:7f:f8:c4:c3:4d:19:f8:73:f9:ce:3c:c4:61:07:bb:24:2d: a0:39:73:bc:96:3b:f9:ee:21:c5:f2:9f:d6:66:91:c7:22:8a: 63:f2:39:2a:52:db:1f:c8:74:6c:5d:7d:81:bd:25:5d:01:17: eb:8c:e5:89:2c:7d:a1:53:c9:6a:70:ba:7e:87:e7:cc:2c:25: e8:b4:d3:ed:4e:ce:91:bd:39:59:d3:af:fa:a1:7c:bb:14:24: b5:9a:65:d2:27:c9:d7:76:93:44:87:3d:df:9f:81:44:e2:be: 90:e5:3c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjYwOTIzMDEzNjE2WhcNMjYwOTMwMDEzNjE2WjAYMRYwFAYD VQQDEw02YWIzMmQxMS0wYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/oAZeuqN3RU9LUgjqr18sX9Pni+DzcDl78JYNW6/kqRrGJmLIMt/epCEHFb /0k4/AOoUuYj6lgMWOp/YmmPWOT+pzij7oHaiJLbL/CKXRSC9lUSRe2FLAuNDsce EagyshAhUSekAxcSxoap8gdx+C3L4HKKzcUiV9PSDsJgCpVr7s1ggtahjv7RQfEN ft/C6ptrS6gG6PXGdvGwA+OoP1H1h1Ara/EKlKxyXGRy6QxLfBhWYFRbi096LnaR RJ4XJyjDu5d8FY8493UFEJa7Sv5w3M/SsjZjw8v34bt7xEkKDZvUJGeMjZV3oGrW 2DRZvtxH/KMeffifV01xZb0OUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdWZSfi hP9dA+BEEXYUPZDld1+JMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN1LRSPmprmpxzenwLkIYGBex+/15KnP/L7fDhuCx49u0NuWx5oY6SmRjunVZ BgEBYiYaKv0oJ53MB0MJzOUltVOsVfj959JJB/HLl3b57YiD97RUUxfH1U53NHId MHOMV0P8n1iMxT23pIaLYNFJhYS6Q6U7B1zrGhaaV951VJBgSq+UNoPLDhOTcbfC 4omigH/4xMNNGfhz+c48xGEHuyQtoDlzvJY7+e4hxfKf1maRxyKKY/I5KlLbH8h0 bF19gb0lXQEX64zliSx9oVPJanC6fofnzCwl6LTT7U7Okb05WdOv+qF8uxQktZpl 0ifJ13aTRIc935+BROK+kOU8sA== -----END CERTIFICATE-----Generated at Wed Sep 23 23:34:41 2026 by rpki-client