$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft File: hXUH8dizkVyVENUEcA7OiQsGaF8.mft (raw, json) Hash identifier: FBgtHpZL60MHrERPm7/8KiIJu62iTEjLMcXIEma3YJ0= Subject key identifier: F2:7B:AC:A0:8C:0D:A2:E5:0B:58:AF:37:B9:52:9C:F9:75:4D:A4:53 Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F Certificate issuer: /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft Manifest number: 0121 Signing time: Wed 23 Sep 2026 05:39:47 +0000 Manifest this update: Wed 23 Sep 2026 05:39:46 +0000 Manifest next update: Wed 30 Sep 2026 05:39:46 +0000 Files and hashes: 1: hXUH8dizkVyVENUEcA7OiQsGaF8.crl (hash: E6Amr3GuThsH9gzhg0FFQ0Vp0ZlaAQx/qT3MI+Om/tY=) 2: B49957AA134B11F0AE18CB2BC4F9AE02.roa (hash: JXFvADq4YTaqaen/tnBh56vOg+t9TdkXrX7ZuGzAnPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F Validity Not Before: Sep 23 05:39:46 2026 GMT Not After : Sep 30 05:39:46 2026 GMT Subject: CN=6ab36623-2971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:0b:01:fb:df:46:f4:59:3c:88:cf:da:00: e9:b5:14:35:18:09:d7:63:2a:3c:14:bd:58:b4:e0: aa:d1:e1:21:a7:fc:26:43:80:db:62:80:e2:a6:1e: 99:4c:9c:a7:67:37:f3:42:c0:c9:95:4f:89:70:07: a7:5a:17:20:0d:2d:6a:aa:04:4c:4b:00:2f:dc:25: 05:36:23:98:8d:77:a1:a9:80:7f:ff:aa:2b:43:7e: 5c:fb:cd:68:b6:98:d0:14:81:6a:86:3e:36:3a:2c: 0a:82:63:ce:1d:22:28:66:56:3e:ad:e6:5b:e8:ad: 62:49:42:8b:c9:f4:fe:b0:99:85:90:cf:ab:20:08: 59:33:5b:86:08:a0:62:63:05:77:0a:0a:78:77:63: c6:02:a4:be:19:30:5e:d7:10:36:24:3a:74:98:9b: c4:4f:08:ed:26:e9:27:0e:dc:c1:cf:ad:6a:a4:5f: 19:c1:fc:ea:af:f0:09:28:26:46:0d:e2:17:28:15: 8e:b9:21:54:5f:60:45:7a:e0:27:7c:4a:b6:79:43: 4f:0f:2d:98:bb:32:9c:7b:74:17:a4:55:d7:b5:63: 41:80:a1:cf:c3:90:ae:ee:27:68:eb:0a:d9:af:33: 73:97:ef:92:f6:51:1c:20:bc:55:aa:d3:08:fe:d7: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:AC:A0:8C:0D:A2:E5:0B:58:AF:37:B9:52:9C:F9:75:4D:A4:53 X509v3 Authority Key Identifier: keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:55:1a:79:67:b4:f6:64:2d:7f:a9:d4:ed:9c:0f:ab:a9: 63:1c:72:88:26:91:e2:04:07:d9:ed:62:14:0e:61:b6:9b:13: 2b:2d:ad:74:71:14:90:71:df:ba:0a:ba:c9:b0:08:98:0c:ed: de:8f:01:c9:5a:29:0b:1c:fc:5c:f0:5a:38:3a:27:0e:53:c5: 5a:dc:74:9f:e4:51:d2:59:72:9e:e5:92:f0:03:10:4b:33:7e: 11:9a:cd:36:61:95:2e:05:3e:72:f5:6e:07:67:f6:f1:1c:e7: d4:55:05:34:79:a1:e5:cd:52:10:74:9d:e6:61:dc:e7:d1:20: d8:22:e6:0d:35:a2:71:1c:1c:83:a7:97:9f:c1:06:06:45:dd: e1:16:03:f9:81:fb:58:71:06:46:08:7f:50:23:e8:e2:e3:c3: dd:75:b7:62:39:ec:55:23:8f:14:23:eb:a4:ab:26:09:48:27: 83:1e:bd:82:01:1b:63:0e:90:b1:d6:31:ee:90:1f:03:0e:95: ad:2e:c6:ef:bc:6f:46:0d:52:5b:79:9d:50:a8:59:74:1b:9a: a5:02:ab:86:69:27:20:0f:86:1a:da:a6:66:2e:51:3f:75:ae: c6:83:90:4f:2b:76:4a:87:61:7e:da:e1:f4:43:0f:01:e5:9b: de:63:33:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3RkMxMTAvBgNVBAUTKDg1NzUwN0YxRDhCMzkxNUM5NTEwRDUwNDcwMEVDRTg5 MEIwNjY4NUYwHhcNMjYwOTIzMDUzOTQ2WhcNMjYwOTMwMDUzOTQ2WjAYMRYwFAYD VQQDEw02YWIzNjYyMy0yOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1esLAfvfRvRZPIjP2gDptRQ1GAnXYyo8FL1YtOCq0eEhp/wmQ4DbYoDiph6Z TJynZzfzQsDJlU+JcAenWhcgDS1qqgRMSwAv3CUFNiOYjXehqYB//6orQ35c+81o tpjQFIFqhj42OiwKgmPOHSIoZlY+reZb6K1iSUKLyfT+sJmFkM+rIAhZM1uGCKBi YwV3Cgp4d2PGAqS+GTBe1xA2JDp0mJvETwjtJuknDtzBz61qpF8Zwfzqr/AJKCZG DeIXKBWOuSFUX2BFeuAnfEq2eUNPDy2YuzKce3QXpFXXtWNBgKHPw5Cu7ido6wrZ rzNzl++S9lEcILxVqtMI/tfxbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJ7rKCM DaLlC1ivN7lSnPl1TaRTMB8GA1UdIwQYMBaAFIV1B/HYs5FclRDVBHAOzokLBmhf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdGQy9DNzNCQTE2NDAz QTcxMUYwQTdGRjlDODdDNEY5QUUwMi9oWFVIOGRpemtWeVZFTlVFY0E3T2lRc0dh RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hYVUg4ZGl6a1Z5VkVOVUVjQTdPaVFzR2FGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdGQy9DNzNCQTE2NDAzQTcxMUYwQTdGRjlDODdDNEY5QUUwMi9oWFVIOGRpemtW eVZFTlVFY0E3T2lRc0dhRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIbBVGnlntPZkLX+p1O2cD6upYxxyiCaR4gQH2e1iFA5htpsTKy2tdHEUkHHf ugq6ybAImAzt3o8ByVopCxz8XPBaODonDlPFWtx0n+RR0llynuWS8AMQSzN+EZrN NmGVLgU+cvVuB2f28Rzn1FUFNHmh5c1SEHSd5mHc59Eg2CLmDTWicRwcg6eXn8EG BkXd4RYD+YH7WHEGRgh/UCPo4uPD3XW3YjnsVSOPFCPrpKsmCUgngx69ggEbYw6Q sdYx7pAfAw6VrS7G77xvRg1SW3mdUKhZdBuapQKrhmknIA+GGtqmZi5RP3WuxoOQ Tyt2Sodhftrh9EMPAeWb3mMzDA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:48:08 2026 by rpki-client