$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json) Hash identifier: FaPRe+4f2hQdXOcLwMeeFx+e49WXhS3kIEh01b0aEag= Subject key identifier: 91:37:E5:F1:F1:A0:D2:FA:5D:0C:6F:A0:BA:59:82:80:9D:9A:77:65 Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft Manifest number: 08C0 Signing time: Tue 22 Sep 2026 20:18:53 +0000 Manifest this update: Tue 22 Sep 2026 20:18:52 +0000 Manifest next update: Tue 29 Sep 2026 20:18:52 +0000 Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: 9ZJhHZl7ET8f6yxbkJAH3p+htsdPeRyLtPnqHUbBsn8=) 2: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: IxYVxX1BoFCHdIOrjAwAEmnCO+dNiZSE2wEYWsIxYD4=) 3: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: /xCNBqLNz0L8cDqpYEQMnHLgfzVahak+S8dk9Uan5oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Sep 22 20:18:52 2026 GMT Not After : Sep 29 20:18:52 2026 GMT Subject: CN=6ab2e2ac-2d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:c3:30:fd:50:00:04:49:ad:5a:e1:3b:c8: c2:88:bd:b2:33:49:cc:44:a2:47:e2:1e:f1:b2:fa: 94:a9:fa:e7:9d:4b:e4:a2:c9:94:19:4d:85:e8:02: 4f:1a:5e:dd:c9:90:d1:2b:75:1b:d5:42:9f:7c:91: a7:7d:3c:87:41:ff:ef:86:e4:6a:c7:5a:dd:94:2f: 3c:6d:bd:50:86:50:92:82:35:21:1d:e2:3f:28:a8: 3d:c7:62:f0:39:73:39:fe:a1:79:6c:f7:16:9f:4a: c3:94:ee:ad:5a:17:86:56:83:a2:d9:d4:c3:4d:ce: c9:bc:42:81:cc:54:39:bd:55:15:99:1b:5e:b0:8c: fd:2f:8d:14:0b:0e:7d:d9:4f:6f:ff:82:a6:b4:e1: 52:65:6f:2a:63:57:80:d9:f2:a5:bd:c7:70:c2:ae: f5:70:41:4d:97:4c:68:09:17:ca:82:5e:bb:97:93: e5:71:d9:b3:f5:fc:73:ee:68:ee:42:5d:4e:52:cb: b7:c0:c3:87:28:30:d8:29:65:fe:90:aa:ba:c8:00: f0:85:eb:46:34:39:c8:2a:8a:42:c1:89:ea:54:ed: e0:4f:b9:26:5e:29:70:3f:e6:42:a5:6e:26:29:1c: a2:8b:ce:02:a0:bb:0e:f3:80:cd:98:b3:db:20:17: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:37:E5:F1:F1:A0:D2:FA:5D:0C:6F:A0:BA:59:82:80:9D:9A:77:65 X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e2:d6:ef:4d:92:a4:71:0e:54:b4:2b:18:f4:0f:e6:c1:f5: 00:e4:db:81:12:76:73:99:6d:10:bc:cc:36:47:94:df:03:e0: 8b:f0:26:4b:10:54:a9:19:f0:bd:cb:4e:8b:f1:fb:34:08:2c: 99:b5:bc:c9:2e:25:b7:38:4f:47:f1:12:c3:73:28:54:3e:46: 11:ba:1c:ae:0e:00:22:64:16:cd:6b:70:c1:33:1f:0e:7e:62: 3e:ab:54:88:d6:d0:7a:e7:c5:62:62:28:d8:01:a1:44:78:7a: df:31:02:62:c8:1c:94:db:de:05:6b:40:21:17:68:ae:ce:8a: 86:65:39:1a:6e:7f:d7:fd:96:0b:73:89:79:e7:a8:9f:a3:f0: 22:6a:5f:71:30:98:53:33:b5:49:6e:83:5e:84:c3:a4:fb:00: 8b:d1:19:28:e7:1d:de:e5:a7:75:29:05:4f:43:da:0d:79:5c: c9:6c:ee:aa:45:11:6e:5a:ed:97:e7:14:71:38:6e:61:b4:8d: 74:cb:37:f1:4a:75:aa:c6:94:5c:90:17:ed:1a:38:01:51:25: 9d:6a:88:ad:0f:fd:f8:8a:54:40:22:4d:f4:c3:ab:8a:2d:ed: 26:3e:c6:91:08:30:7c:e0:26:fc:d7:55:de:4d:36:9a:35:38: 67:41:ed:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjYwOTIyMjAxODUyWhcNMjYwOTI5MjAxODUyWjAYMRYwFAYD VQQDEw02YWIyZTJhYy0yZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ/DMP1QAARJrVrhO8jCiL2yM0nMRKJH4h7xsvqUqfrnnUvkosmUGU2F6AJP Gl7dyZDRK3Ub1UKffJGnfTyHQf/vhuRqx1rdlC88bb1QhlCSgjUhHeI/KKg9x2Lw OXM5/qF5bPcWn0rDlO6tWheGVoOi2dTDTc7JvEKBzFQ5vVUVmRtesIz9L40UCw59 2U9v/4KmtOFSZW8qY1eA2fKlvcdwwq71cEFNl0xoCRfKgl67l5Plcdmz9fxz7mju Ql1OUsu3wMOHKDDYKWX+kKq6yADwhetGNDnIKopCwYnqVO3gT7kmXilwP+ZCpW4m KRyii84CoLsO84DNmLPbIBcu1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJE35fHx oNL6XQxvoLpZgoCdmndlMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf ZDFkU0JYM0lhQ0pac3huSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+LW702SpHEOVLQrGPQP5sH1AOTbgRJ2c5ltELzMNkeU3wPgi/AmSxBUqRnw vctOi/H7NAgsmbW8yS4ltzhPR/ESw3MoVD5GEbocrg4AImQWzWtwwTMfDn5iPqtU iNbQeufFYmIo2AGhRHh63zECYsgclNveBWtAIRdors6KhmU5Gm5/1/2WC3OJeeeo n6PwImpfcTCYUzO1SW6DXoTDpPsAi9EZKOcd3uWndSkFT0PaDXlcyWzuqkURblrt l+cUcThuYbSNdMs38Up1qsaUXJAX7Ro4AVElnWqIrQ/9+IpUQCJN9MOrii3tJj7G kQgwfOAm/NdV3k02mjU4Z0HtFA== -----END CERTIFICATE-----Generated at Thu Sep 24 13:49:17 2026 by rpki-client