$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: urhwBuU60CyOFrJllPY1hUPUCk6RyGRm0Uus77Bf6Rg= Subject key identifier: B3:47:1D:AC:2A:7E:20:B8:A8:36:7E:83:AB:D7:EB:99:A5:98:71:3D Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 122A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 121F Signing time: Thu 24 Sep 2026 17:05:41 +0000 Manifest this update: Thu 24 Sep 2026 17:05:41 +0000 Manifest next update: Thu 01 Oct 2026 17:05:41 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: Tmtf5nxnYP6ZwYLTbv4WLmaXPFQCGsoMKIPRKUX+jeg=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4650 (0x122a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Sep 24 17:05:41 2026 GMT Not After : Oct 1 17:05:41 2026 GMT Subject: CN=6ab55865-db68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:7b:e0:ae:45:44:c4:93:d7:a9:51:df:c5: 2d:44:f6:db:db:01:df:18:72:bf:d5:e7:5e:76:db: 6d:5b:44:ae:a2:c8:f8:61:25:3f:65:ac:15:15:81: 0c:ab:f3:c2:f5:76:b7:f3:59:50:31:91:46:c4:dd: 2e:92:68:74:55:0a:0f:90:3e:a2:64:e9:68:3b:12: c6:76:ab:ce:c8:e4:cc:01:b3:fb:ee:cf:eb:ad:9e: 1b:50:d2:6b:d2:e9:fb:4e:7f:39:8f:4b:a1:a4:33: a2:33:69:5d:56:74:dc:eb:52:57:0b:49:57:0e:6f: 86:00:8e:e6:94:3a:6e:80:12:17:92:85:b0:59:5c: 0c:b5:b9:06:73:8a:5d:fe:4a:a5:83:68:02:50:9b: f6:a3:8d:55:6c:bc:c8:99:25:5a:37:a1:8f:b5:8e: 45:2a:85:30:6b:d4:32:da:70:9b:0a:13:39:77:b4: 87:b3:9d:bb:03:e6:8c:ea:a4:bf:d8:61:47:19:5c: 2a:9c:e0:8c:4e:f8:09:de:ca:c5:3a:ce:6e:88:7e: 51:90:32:7d:4c:e0:23:53:5b:a7:63:14:4a:c7:aa: f5:bd:ed:3f:40:e4:8e:83:de:99:d6:87:be:54:be: d4:9a:6c:35:77:02:86:e0:a2:aa:06:a5:d6:33:f9: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:47:1D:AC:2A:7E:20:B8:A8:36:7E:83:AB:D7:EB:99:A5:98:71:3D X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b0:98:65:b7:f7:d0:f5:f4:16:c5:d7:0e:17:aa:18:07:68: 12:27:91:31:bc:ed:6d:65:ce:66:e7:5f:6c:d2:1c:29:43:0c: 76:05:4a:8b:e2:6a:6c:a1:cd:c6:d2:db:fb:df:59:cb:0a:ef: 4e:a6:c6:73:2e:90:55:3d:d5:54:3a:48:43:e4:a9:72:69:8e: a0:e3:cd:f7:f9:ce:a2:ec:22:28:cf:84:b8:69:72:08:0e:3a: 1a:8a:eb:d1:68:bb:22:1b:dc:20:04:46:6a:cc:07:eb:6c:02: cb:29:5b:a1:a0:25:05:8f:31:ef:1c:ad:c9:d2:de:bb:65:29: 60:34:db:00:e9:db:76:8a:d0:60:54:fb:fc:1c:cd:72:16:8e: 5e:16:39:b5:0e:f9:e2:d6:47:1a:99:b2:72:d7:52:11:c5:a8: 88:d9:e1:54:8f:94:b4:42:f9:77:ff:d1:fd:62:79:91:7e:7f: b1:1c:69:e2:b4:69:62:45:e2:ed:8d:f8:69:2a:dc:3e:79:f1: 25:05:4d:a5:86:19:93:1c:6c:7a:47:1d:41:f3:8d:fd:7a:3c: f1:f8:36:87:a6:82:f7:47:d8:f1:c2:db:62:60:50:ad:ed:48: 6b:b5:3e:01:61:5c:0e:26:da:1e:c5:eb:6d:47:4f:49:59:ee: c2:ae:2f:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjYwOTI0MTcwNTQxWhcNMjYxMDAxMTcwNTQxWjAYMRYwFAYD VQQDEw02YWI1NTg2NS1kYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZZ74K5FRMST16lR38UtRPbb2wHfGHK/1ededtttW0Suosj4YSU/ZawVFYEM q/PC9Xa381lQMZFGxN0ukmh0VQoPkD6iZOloOxLGdqvOyOTMAbP77s/rrZ4bUNJr 0un7Tn85j0uhpDOiM2ldVnTc61JXC0lXDm+GAI7mlDpugBIXkoWwWVwMtbkGc4pd /kqlg2gCUJv2o41VbLzImSVaN6GPtY5FKoUwa9Qy2nCbChM5d7SHs527A+aM6qS/ 2GFHGVwqnOCMTvgJ3srFOs5uiH5RkDJ9TOAjU1unYxRKx6r1ve0/QOSOg96Z1oe+ VL7Ummw1dwKG4KKqBqXWM/ltoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNHHawq fiC4qDZ+g6vX65mlmHE9MB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsLCYZbf30PX0FsXXDheqGAdoEieRMbztbWXOZudfbNIcKUMMdgVKi+JqbKHN xtLb+99ZywrvTqbGcy6QVT3VVDpIQ+SpcmmOoOPN9/nOouwiKM+EuGlyCA46Gorr 0Wi7IhvcIARGaswH62wCyylboaAlBY8x7xytydLeu2UpYDTbAOnbdorQYFT7/BzN chaOXhY5tQ754tZHGpmyctdSEcWoiNnhVI+UtEL5d//R/WJ5kX5/sRxp4rRpYkXi 7Y34aSrcPnnxJQVNpYYZkxxsekcdQfON/Xo88fg2h6aC90fY8cLbYmBQre1Ia7U+ AWFcDibaHsXrbUdPSVnuwq4vEw== -----END CERTIFICATE-----Generated at Fri Sep 25 16:45:35 2026 by rpki-client