$ rpki-client -vvvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: 708iU/YNldeb9nwKK8MEyGk4zOJgSEuvQ46M6hZu9Q8= Subject key identifier: 54:60:4A:D0:B1:3B:58:91:BA:A4:E2:49:01:4E:7E:99:45:E1:58:70 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 0436 Signing time: Wed 07 Oct 2026 00:21:29 +0000 Manifest this update: Wed 07 Oct 2026 00:21:29 +0000 Manifest next update: Wed 14 Oct 2026 00:21:29 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: Nw67T44N6DWhFEgJ7aiTlYb5DGDL0nC/kwTxZK+iPkI=) 2: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: lA+CaygcBrj0YtEqp60seW0ZCX6+tWFwXRqNraQ10Ek=) 3: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: Q8R/e0WkRoUvhV/duXOH10RMzYjCZjcCedO7vhrkXRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Oct 7 00:21:29 2026 GMT Not After : Oct 14 00:21:29 2026 GMT Subject: CN=6ac59089-0fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:28:a3:52:fd:bf:d9:cb:72:7a:47:c2:e0: d0:69:99:52:33:e8:54:33:36:0e:ca:97:f2:c7:fd: 97:05:5f:cd:2d:5a:95:4b:9a:67:15:d6:14:2c:a5: 89:ee:e2:37:ae:66:f3:f9:f0:5b:62:58:5b:8d:e1: 46:b8:95:dd:97:ca:2b:ec:4c:c2:06:46:35:77:80: ae:2f:f8:ce:10:78:be:d9:8f:39:d5:2c:99:32:e7: c1:c0:18:60:e3:de:69:63:08:28:4b:af:fa:7f:03: b9:80:01:1b:d0:b6:5a:40:e2:46:15:4b:48:80:0e: 09:73:62:de:f3:7d:c2:e5:c6:b4:f3:82:1e:60:11: 2d:64:c5:93:a5:22:3f:62:bf:8e:6c:10:8d:35:d1: e6:1d:67:4f:5f:53:d5:22:31:d9:8d:70:81:d3:e7: e6:55:fa:ba:bf:59:b1:f9:39:b3:cc:fe:b6:da:48: c4:ad:90:2e:76:cd:90:4d:fd:03:76:73:d2:1c:01: a0:97:b1:09:d2:f5:5e:d7:26:3a:3b:29:af:33:0a: 9e:92:35:65:66:20:5e:58:3c:e8:4d:78:4f:c8:f3: 79:e6:7f:51:16:09:2e:f6:43:61:c7:e3:5c:d3:81: 72:e5:51:0e:63:6e:a6:c0:e4:b2:5c:cd:2b:e0:e2: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:60:4A:D0:B1:3B:58:91:BA:A4:E2:49:01:4E:7E:99:45:E1:58:70 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:08:d4:f4:03:3b:3e:57:88:b5:92:af:f2:f3:80:37:10:00: 8f:f8:7c:1c:e3:1c:10:2a:3c:6f:51:68:0e:f9:41:a9:8b:38: a1:7d:e0:59:3f:1e:c4:36:13:ec:c7:b5:0b:01:15:72:17:2b: 5b:d4:ad:ea:48:5a:e9:bc:fe:5d:ea:ca:a5:ec:af:3f:24:fe: 87:e3:89:c2:65:0e:43:2f:cd:c0:97:40:62:84:44:cb:af:a3: cb:aa:fe:d5:11:9a:0b:f0:7d:f9:72:7d:ea:62:fb:df:cb:64: 0c:84:82:c3:3e:07:66:88:06:51:d2:d9:d1:9d:3d:cf:97:0a: a7:4a:88:b3:75:de:4f:82:81:e0:56:fb:4e:bc:b2:65:b7:d9: 45:75:c6:a5:0f:6c:85:60:1c:64:18:66:ca:df:02:be:96:ce: a9:f1:ab:1a:94:a7:12:3d:77:f6:c2:68:6c:8b:2c:6e:9c:4c: 18:7d:77:92:4e:63:c1:0d:f6:93:5f:f2:64:ad:e6:30:3c:00: dc:a8:fa:01:34:a3:f5:f0:c2:e5:f8:15:81:69:d0:19:1e:69: d0:1f:37:a9:91:dc:d9:3a:f8:a0:ff:e2:28:5c:16:89:6a:b9: 7a:cd:8d:1f:aa:8e:e3:8d:ee:13:c4:fb:53:62:4d:9d:d8:c8: e0:c5:3f:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjYxMDA3MDAyMTI5WhcNMjYxMDE0MDAyMTI5WjAYMRYwFAYD VQQDEw02YWM1OTA4OS0wZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV8oo1L9v9nLcnpHwuDQaZlSM+hUMzYOypfyx/2XBV/NLVqVS5pnFdYULKWJ 7uI3rmbz+fBbYlhbjeFGuJXdl8or7EzCBkY1d4CuL/jOEHi+2Y851SyZMufBwBhg 495pYwgoS6/6fwO5gAEb0LZaQOJGFUtIgA4Jc2Le833C5ca084IeYBEtZMWTpSI/ Yr+ObBCNNdHmHWdPX1PVIjHZjXCB0+fmVfq6v1mx+TmzzP622kjErZAuds2QTf0D dnPSHAGgl7EJ0vVe1yY6OymvMwqekjVlZiBeWDzoTXhPyPN55n9RFgku9kNhx+Nc 04Fy5VEOY26mwOSyXM0r4OKimQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRgStCx O1iRuqTiSQFOfplF4VhwMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAigjU9AM7PleItZKv8vOANxAAj/h8HOMcECo8b1FoDvlBqYs4oX3gWT8exDYT 7Me1CwEVchcrW9St6kha6bz+XerKpeyvPyT+h+OJwmUOQy/NwJdAYoREy6+jy6r+ 1RGaC/B9+XJ96mL738tkDISCwz4HZogGUdLZ0Z09z5cKp0qIs3XeT4KB4Fb7Tryy ZbfZRXXGpQ9shWAcZBhmyt8CvpbOqfGrGpSnEj139sJobIssbpxMGH13kk5jwQ32 k1/yZK3mMDwA3Kj6ATSj9fDC5fgVgWnQGR5p0B83qZHc2Tr4oP/iKFwWiWq5es2N H6qO443uE8T7U2JNndjI4MU/XQ== -----END CERTIFICATE-----Generated at Thu Oct 8 15:42:30 2026 by rpki-client