$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json) Hash identifier: GoJtmZiTCKYfZi0cpj2+sravgMC/+oUa6t58wtEobdk= Subject key identifier: 9E:54:6E:8D:8B:26:3A:16:08:21:8E:68:B5:27:A7:CF:12:6C:CE:6E Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Certificate serial: 08E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft Manifest number: 08C5 Signing time: Tue 22 Sep 2026 20:17:38 +0000 Manifest this update: Tue 22 Sep 2026 20:17:37 +0000 Manifest next update: Tue 29 Sep 2026 20:17:37 +0000 Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: rw+u2D2exI/WsAeA0LnZZ0bmVo3AE0U3zB+rcOMOZ28=) 2: 816A256CF57311EA86849119C4F9AE02.roa (hash: 0r9XfnUOK88lrdHrVj5W9qn3Uab5Rf0RHHQdbv15M8Q=) 3: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: o4pPobBwjt8OFkaZBIgV8zZzFKBhPJBPQIzcgJ7nHNM=) 4: 81E94F18F57311EA86849119C4F9AE02.roa (hash: o7hslMVigOY231eahjNEQ0NYOJaFI9mq6NC5ziX7dQc=) 5: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: HC1HlngI6XYoexa+iP3Lsv/hSItkWBl0CdvwYSY1Yh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2275 (0x8e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Validity Not Before: Sep 22 20:17:37 2026 GMT Not After : Sep 29 20:17:37 2026 GMT Subject: CN=6ab2e261-0c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:3d:91:35:65:70:76:dc:10:b8:81:24:ed: 19:4c:7d:a6:0b:93:dc:d2:5a:a2:d1:60:15:35:10: 3d:23:4d:87:90:2b:be:76:6a:1f:fb:b2:99:45:48: 95:0e:ed:85:5e:3f:a8:9c:22:bd:f7:18:75:53:97: ab:7e:d1:12:6e:58:be:22:96:1b:51:47:3d:7d:5d: 91:a1:ea:53:a5:08:8e:7e:fa:c5:10:47:d1:d4:c8: 7d:05:e5:13:ff:4c:fc:ec:6b:12:50:88:8b:3b:3b: e2:98:bc:a7:39:51:4c:df:85:0c:6a:69:bd:58:3b: ba:7d:02:2e:f8:f0:dc:6e:05:72:bc:fc:a7:95:05: d6:7f:f2:e3:eb:f2:08:42:77:20:de:77:f4:ce:67: 87:1c:46:d9:e3:c5:39:7f:f7:69:b3:41:7b:0f:e0: 04:2b:5e:76:ad:09:2b:2f:7a:f4:02:2c:56:2d:3a: 62:66:2a:10:ba:04:5c:30:4c:e3:37:6a:b7:28:0d: c7:7c:ec:63:56:96:ce:40:0f:62:bd:e7:56:77:49: f2:33:28:da:95:51:89:02:44:70:08:57:18:86:e4: 74:db:bf:60:eb:ff:c8:42:57:54:76:dc:2c:b1:69: a1:51:98:ee:48:98:89:a5:47:b0:03:d4:ab:ff:4e: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:54:6E:8D:8B:26:3A:16:08:21:8E:68:B5:27:A7:CF:12:6C:CE:6E X509v3 Authority Key Identifier: keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b6:49:df:7b:ab:3b:96:a0:c2:a1:e2:84:fe:c4:01:5d:43: ff:81:db:d4:c2:83:88:09:1e:9e:ec:a8:a7:02:0e:42:9d:3d: a2:25:77:56:8d:d0:0a:d3:36:ed:46:bb:9e:cc:1b:37:7f:b6: 91:58:36:4c:a8:a4:8b:63:c5:5e:4b:5f:ea:c7:14:56:a8:fd: 68:19:e5:e1:04:5b:a5:18:63:c1:ba:84:c2:45:f5:d3:41:aa: 51:38:cc:16:f9:41:34:51:4b:19:4e:ac:6d:0c:0b:0a:1f:94: 92:87:17:bd:2e:42:84:17:c1:3e:4b:50:d5:7d:21:44:9c:82: b8:35:47:3e:a1:22:5d:58:ad:ee:d3:4c:f5:ff:1a:de:31:9d: c7:1a:67:82:48:c5:75:3d:78:a0:1a:da:c1:d1:04:df:9c:ee: aa:5a:9a:01:01:a4:c6:08:ef:56:56:6e:b2:4e:1b:13:2c:95: a0:0a:c9:80:c6:44:bd:a1:3a:53:34:6f:6b:db:1f:29:dc:59: 3b:df:54:af:f7:a5:cd:74:40:bd:21:aa:15:1f:7a:17:2f:6a: 3b:e6:d1:f0:09:eb:81:6f:2f:82:0d:2d:be:3e:ba:89:e6:c6: e7:64:70:4e:fb:51:bb:81:14:a9:b2:10:78:33:53:fd:a0:d5: 4d:fc:0a:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5NDAzMTkzOTdF RTRGQ0E2RkQwHhcNMjYwOTIyMjAxNzM3WhcNMjYwOTI5MjAxNzM3WjAYMRYwFAYD VQQDEw02YWIyZTI2MS0wYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qw9kTVlcHbcELiBJO0ZTH2mC5Pc0lqi0WAVNRA9I02HkCu+dmof+7KZRUiV Du2FXj+onCK99xh1U5erftESbli+IpYbUUc9fV2RoepTpQiOfvrFEEfR1Mh9BeUT /0z87GsSUIiLOzvimLynOVFM34UMamm9WDu6fQIu+PDcbgVyvPynlQXWf/Lj6/II Qncg3nf0zmeHHEbZ48U5f/dps0F7D+AEK152rQkrL3r0AixWLTpiZioQugRcMEzj N2q3KA3HfOxjVpbOQA9ivedWd0nyMyjalVGJAkRwCFcYhuR0279g6//IQldUdtws sWmhUZjuSJiJpUewA9Sr/049hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5Ubo2L JjoWCCGOaLUnp88SbM5uMB8GA1UdIwQYMBaAFIIYUk96FrWMDZtzlAMZOX7k/Kb9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVFMi8wMkIyNzM4OEY1 NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZd05tM09VQXhrNWZ1VDhw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doaFNUM29XdFl3Tm0zT1VBeGs1ZnVUOHB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVFMi8wMkIyNzM4OEY1NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZ d05tM09VQXhrNWZ1VDhwdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbLZJ33urO5agwqHihP7EAV1D/4Hb1MKDiAkenuyopwIOQp09oiV3Vo3QCtM2 7Ua7nswbN3+2kVg2TKiki2PFXktf6scUVqj9aBnl4QRbpRhjwbqEwkX100GqUTjM FvlBNFFLGU6sbQwLCh+UkocXvS5ChBfBPktQ1X0hRJyCuDVHPqEiXVit7tNM9f8a 3jGdxxpngkjFdT14oBrawdEE35zuqlqaAQGkxgjvVlZusk4bEyyVoArJgMZEvaE6 UzRva9sfKdxZO99Ur/elzXRAvSGqFR96Fy9qO+bR8AnrgW8vgg0tvj66iebG52Rw TvtRu4EUqbIQeDNT/aDVTfwKZQ== -----END CERTIFICATE-----Generated at Thu Sep 24 15:44:58 2026 by rpki-client