$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: w/Um+Hc/wZ544DpYX858aX7SpqjIOFKX/p55Lsphwd8= Subject key identifier: 8A:4B:16:CA:EB:36:19:21:D7:DC:96:E2:F6:7D:38:4E:04:6D:B5:B3 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0D2D Signing time: Wed 30 Sep 2026 18:28:21 +0000 Manifest this update: Wed 30 Sep 2026 18:28:21 +0000 Manifest next update: Wed 07 Oct 2026 18:28:21 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: kBS8+COkiGWz7TTQVKZdXcremUHbW1XX3vBK3j3tjJk=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: S8UR8Pn5oelpMcuQkBy3qp9Od6g69KBr7LuxEQT5fp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 18:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Sep 30 18:28:21 2026 GMT Not After : Oct 7 18:28:21 2026 GMT Subject: CN=6abd54c5-f703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:28:cc:28:4f:dd:b7:11:ac:de:09:26:5b: df:5d:d3:c6:d1:48:fb:0f:05:59:12:79:5e:91:58: f8:b0:3c:b2:63:69:bb:b4:4c:9f:ff:f7:13:ff:a8: 1b:bd:2a:e9:d5:a2:e2:7b:bd:f7:d5:11:ac:67:e1: 53:99:f2:89:48:86:f3:ea:d6:2b:ae:68:b3:74:e1: 6f:85:a9:6e:cf:9b:e6:a7:86:2f:57:40:e2:d9:52: fd:b2:3a:2f:63:bf:7c:68:af:b5:e5:0a:10:ef:e7: e2:8a:d5:92:7d:1c:52:04:85:ab:93:1c:9f:35:57: f4:82:b9:c7:7a:9a:29:59:72:dc:d0:f9:bd:ab:6e: a2:3b:71:d2:88:66:7d:69:c9:1a:30:7a:a4:6a:aa: 75:c5:7a:ee:8e:37:32:c2:ef:b8:a3:9a:8a:63:7e: d4:cd:12:c2:df:09:65:9f:41:cf:fb:cb:d2:83:a7: 49:b4:a8:2e:53:c2:96:f0:5d:a8:e9:49:f9:56:a4: 35:cc:57:da:aa:5b:52:79:77:d7:ef:6c:8e:d1:9d: 0f:55:d3:4f:eb:21:21:ae:4e:44:11:64:6b:1d:19: df:f1:8c:29:de:52:e7:cf:6d:f0:2b:30:3e:eb:db: 26:96:b2:97:d0:9e:f2:ec:1d:27:15:ae:6c:d8:31: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4B:16:CA:EB:36:19:21:D7:DC:96:E2:F6:7D:38:4E:04:6D:B5:B3 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:27:0b:a4:35:9b:3f:5e:5a:6c:da:5f:75:c3:b5:7e:ff:46: 0e:22:89:4f:7a:99:6c:32:f7:38:11:20:08:33:82:23:cc:37: 9e:03:d9:37:f0:40:5b:b6:88:5e:9f:44:ec:23:22:6a:41:56: a1:f9:9f:cc:80:69:d5:87:84:60:cd:6c:22:67:94:ee:88:1d: c9:25:61:92:94:65:0f:e7:33:3a:0e:2b:fa:6d:f8:3b:b3:b4: 35:2e:f6:6c:5a:84:14:8c:18:5a:b5:c1:e5:f1:8b:46:7d:55: 74:d9:d8:62:ff:e2:e4:6b:c8:35:a4:33:a5:1e:56:80:6e:a3: ef:5c:85:d7:09:4e:f4:b4:d7:d6:09:ec:bd:ef:2d:6f:58:27: 79:0b:60:59:cf:60:40:a0:79:b8:d6:c9:96:4c:45:ab:af:c4: 31:e2:8f:92:1d:b1:67:15:65:71:5f:65:87:6a:42:a7:ff:05: c0:9b:0b:81:35:b6:b0:aa:43:74:2d:ec:d0:d7:50:bc:2e:59: e7:31:40:62:35:41:41:77:0d:aa:a4:1e:8b:24:2f:f9:f7:99: 93:a4:be:b3:b9:46:c7:e7:a9:84:26:14:36:d6:91:3e:6f:4a: 4b:ad:30:81:8f:fc:13:07:d8:c3:5d:a8:d7:cc:87:c9:7d:85: cc:ca:a9:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjYwOTMwMTgyODIxWhcNMjYxMDA3MTgyODIxWjAYMRYwFAYD VQQDEw02YWJkNTRjNS1mNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+oozChP3bcRrN4JJlvfXdPG0Uj7DwVZEnlekVj4sDyyY2m7tEyf//cT/6gb vSrp1aLie7331RGsZ+FTmfKJSIbz6tYrrmizdOFvhaluz5vmp4YvV0Di2VL9sjov Y798aK+15QoQ7+fiitWSfRxSBIWrkxyfNVf0grnHepopWXLc0Pm9q26iO3HSiGZ9 ackaMHqkaqp1xXrujjcywu+4o5qKY37UzRLC3wlln0HP+8vSg6dJtKguU8KW8F2o 6Un5VqQ1zFfaqltSeXfX72yO0Z0PVdNP6yEhrk5EEWRrHRnf8Ywp3lLnz23wKzA+ 69smlrKX0J7y7B0nFa5s2DHHzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpLFsrr Nhkh19yW4vZ9OE4EbbWzMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYScLpDWbP15abNpfdcO1fv9GDiKJT3qZbDL3OBEgCDOCI8w3ngPZN/BAW7aI Xp9E7CMiakFWofmfzIBp1YeEYM1sImeU7ogdySVhkpRlD+czOg4r+m34O7O0NS72 bFqEFIwYWrXB5fGLRn1VdNnYYv/i5GvINaQzpR5WgG6j71yF1wlO9LTX1gnsve8t b1gneQtgWc9gQKB5uNbJlkxFq6/EMeKPkh2xZxVlcV9lh2pCp/8FwJsLgTW2sKpD dC3s0NdQvC5Z5zFAYjVBQXcNqqQeiyQv+feZk6S+s7lGx+ephCYUNtaRPm9KS60w gY/8EwfYw12o18yHyX2FzMqpDA== -----END CERTIFICATE-----Generated at Thu Oct 1 08:16:59 2026 by rpki-client