$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json) Hash identifier: k7WotDLSiPFObY9kU5Jjkf7wuwa+CFNg2j86E3iHku8= Subject key identifier: 30:63:54:37:D9:BB:8A:45:4B:8D:51:5A:08:21:F2:08:0F:5E:E4:73 Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft Manifest number: EA Signing time: Wed 23 Sep 2026 06:13:57 +0000 Manifest this update: Wed 23 Sep 2026 06:13:57 +0000 Manifest next update: Wed 30 Sep 2026 06:13:57 +0000 Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: F3IfnOGT4Zv6KyXuXwniOOLc/527Y0YfcZqf8H2mqZ0=) 2: 730C503A56C611F096620043C4F9AE02.roa (hash: 0O+T5p2u9RjCzYCInOpadN0gyJxBbnecFtZNvwYOPBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Validity Not Before: Sep 23 06:13:57 2026 GMT Not After : Sep 30 06:13:57 2026 GMT Subject: CN=6ab36e25-0b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:90:4d:6f:5e:bd:74:ac:55:e2:e8:c9:f7: c6:d7:48:9d:00:34:88:c1:8b:a0:3c:43:ae:93:82: ac:f5:cd:23:ed:8b:f5:19:3c:bd:f9:b1:cb:7a:39: 33:68:c9:8b:d4:95:b0:66:fc:dc:c3:9e:c2:31:ca: c4:86:33:a6:0f:bb:a7:cf:6e:3e:98:f0:41:ce:22: e7:67:a5:22:b1:df:5f:75:31:c8:74:fd:22:01:af: 75:d9:79:ae:03:e0:b8:4e:43:a5:01:03:74:b7:94: a6:f5:7d:b9:81:57:41:21:ac:26:a3:9d:3e:e7:0d: 64:a8:04:26:87:1b:55:e3:ea:ba:d3:a0:82:8b:23: 90:2d:58:99:1c:5e:1c:17:10:2e:4f:65:10:bd:9d: cf:3c:10:fd:eb:37:ce:84:5b:4e:77:60:de:42:12: a2:43:0d:63:96:8f:fb:33:e2:df:a2:ac:72:7e:2a: 6e:3e:f8:9f:1e:7c:c6:86:d0:50:e0:57:3d:d9:97: 49:d9:26:4a:85:99:ec:9e:e4:66:44:77:5b:46:fa: 06:65:88:bc:82:be:76:99:26:3d:30:eb:40:b2:c5: f7:66:01:e1:ff:3f:76:9c:e2:c1:10:16:37:fc:99: 50:0c:1e:07:a9:5b:a5:c6:ac:cd:61:af:d4:cd:a9: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:54:37:D9:BB:8A:45:4B:8D:51:5A:08:21:F2:08:0F:5E:E4:73 X509v3 Authority Key Identifier: keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:67:c7:eb:40:d9:5a:de:dc:f9:cf:7a:ec:59:10:15:33:e9: ea:d8:f3:bd:d6:9a:0c:55:16:88:d3:5d:74:73:f5:b7:31:48: d6:77:8c:a0:6b:0c:05:0f:89:ca:59:22:8d:b2:bf:0b:ed:1d: 4f:3e:f1:a2:75:77:9b:53:e4:09:3a:8d:4d:1b:31:45:5f:40: a3:77:47:4c:1f:a0:ff:7d:34:1e:2d:ec:da:31:ad:a6:a3:91: 5d:0b:85:99:ce:a3:d4:11:02:7b:bd:46:e7:4f:ff:79:c3:65: 6e:e1:83:c3:49:49:7d:58:d0:1f:3e:01:6e:9f:fd:cd:cf:8a: d0:fa:70:af:60:6a:32:f4:1b:fb:75:41:39:6f:65:4b:0e:39: 3e:79:74:36:b3:aa:15:fa:9c:7c:95:c6:b3:49:da:bb:48:b3: 64:44:22:3b:f4:4d:8f:48:d3:5f:df:94:a4:bd:76:29:9a:77: 51:cb:47:9e:84:d5:26:2a:2f:ed:8a:91:50:52:d8:32:e8:64: 2d:33:5f:72:3b:2a:b0:c3:ef:22:2d:ed:ae:39:60:dd:72:75: f4:32:7c:fa:86:58:2f:4f:0e:0d:88:c0:9d:9a:3c:e1:d8:4b: 65:67:75:34:d7:77:92:3c:7f:30:c6:96:2d:dd:35:6a:88:9c: af:43:81:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RjIxMTAvBgNVBAUTKEUzN0RDNEQ4MjQ3NjAzRTg0OEMwMDY2QzQ0NUI5Q0Q4 REE3MzUwRDYwHhcNMjYwOTIzMDYxMzU3WhcNMjYwOTMwMDYxMzU3WjAYMRYwFAYD VQQDEw02YWIzNmUyNS0wYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/2QTW9evXSsVeLoyffG10idADSIwYugPEOuk4Ks9c0j7Yv1GTy9+bHLejkz aMmL1JWwZvzcw57CMcrEhjOmD7unz24+mPBBziLnZ6Uisd9fdTHIdP0iAa912Xmu A+C4TkOlAQN0t5Sm9X25gVdBIawmo50+5w1kqAQmhxtV4+q606CCiyOQLViZHF4c FxAuT2UQvZ3PPBD96zfOhFtOd2DeQhKiQw1jlo/7M+LfoqxyfipuPvifHnzGhtBQ 4Fc92ZdJ2SZKhZnsnuRmRHdbRvoGZYi8gr52mSY9MOtAssX3ZgHh/z92nOLBEBY3 /JlQDB4HqVulxqzNYa/UzamD2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBjVDfZ u4pFS41RWggh8ggPXuRzMB8GA1UdIwQYMBaAFON9xNgkdgPoSMAGbERbnNjac1DW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhGMi8yODdERTczNjU2 QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEtaEl3QVpzUkZ1YzJOcHpV TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzM0UyQ1IyQS1oSXdBWnNSRnVjMk5welVOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhGMi8yODdERTczNjU2QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEt aEl3QVpzUkZ1YzJOcHpVTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz2fH60DZWt7c+c967FkQFTPp6tjzvdaaDFUWiNNddHP1tzFI1neMoGsMBQ+J ylkijbK/C+0dTz7xonV3m1PkCTqNTRsxRV9Ao3dHTB+g/300Hi3s2jGtpqORXQuF mc6j1BECe71G50//ecNlbuGDw0lJfVjQHz4Bbp/9zc+K0Ppwr2BqMvQb+3VBOW9l Sw45Pnl0NrOqFfqcfJXGs0nau0izZEQiO/RNj0jTX9+UpL12KZp3UctHnoTVJiov 7YqRUFLYMuhkLTNfcjsqsMPvIi3trjlg3XJ19DJ8+oZYL08ODYjAnZo84dhLZWd1 NNd3kjx/MMaWLd01aoicr0OB0A== -----END CERTIFICATE-----Generated at Wed Sep 23 19:09:36 2026 by rpki-client