$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: +DR8OKqaHqEbUKpVzNJcBuZOaoUL36rQR6ll18wHfoo= Subject key identifier: D7:5C:3A:C4:49:E7:22:7E:3E:32:DB:E9:7D:80:D8:6E:36:25:62:FA Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: D3 Signing time: Wed 23 Sep 2026 01:44:39 +0000 Manifest this update: Wed 23 Sep 2026 01:44:38 +0000 Manifest next update: Wed 30 Sep 2026 01:44:38 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: 9NtjEu2hP8HYmbfOLaehiSmhLeXH9Ue6vKnso1NUt5U=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Sep 23 01:44:38 2026 GMT Not After : Sep 30 01:44:38 2026 GMT Subject: CN=6ab32f07-48fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:3f:2d:5c:ae:99:3a:94:0c:08:ae:6f:86: b7:d6:a8:05:ef:84:33:bc:41:6d:ef:a1:4e:47:a9: 49:38:39:d4:bc:ed:ea:08:e2:58:80:8c:93:26:56: 98:cf:99:08:c4:25:dd:d6:8e:36:82:34:c0:19:db: 19:30:d1:2b:4f:60:ef:cb:e1:e0:3c:79:98:6b:bd: 3f:08:00:ee:8b:22:54:6e:a4:cd:c6:b0:2d:43:94: 46:25:e1:39:17:14:b2:c5:2e:20:30:98:2e:ff:b5: cc:13:d2:5f:46:61:c8:dd:d9:86:96:a9:d7:17:5c: a8:bd:42:32:9c:61:3f:b1:06:8b:b9:ec:49:1c:c5: 9a:09:4c:60:b7:b4:03:9f:6b:cc:dd:46:15:b6:3f: 51:7a:6c:7d:4b:db:64:b7:97:32:a2:82:85:62:90: 7e:ff:c5:e7:7c:fe:a6:61:f1:9d:13:9c:a1:0a:bb: 5e:2f:eb:5f:09:74:42:73:a6:3c:66:b5:15:e5:b0: da:05:62:da:46:41:4c:fa:5c:d0:b3:68:e1:7f:58: 49:e5:49:be:85:81:c6:c4:b7:43:29:b3:b1:4d:ee: a9:df:be:f1:0e:de:22:78:8a:d2:be:11:ee:39:5b: 32:40:af:b7:3b:2d:ed:6d:be:4a:c9:bb:21:7d:52: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5C:3A:C4:49:E7:22:7E:3E:32:DB:E9:7D:80:D8:6E:36:25:62:FA X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:50:6d:2c:80:4a:ab:f0:0f:35:c2:4e:71:48:b0:66:ff:6f: 54:f7:af:43:af:eb:2a:ba:2d:67:22:b2:52:7d:42:3c:7b:bb: c1:8f:2d:bb:a6:e4:1c:64:a6:f3:8a:be:9c:08:27:c2:18:eb: bf:55:a6:db:76:41:fb:51:73:d2:e3:39:43:a8:d1:69:ed:a8: da:e7:eb:94:6b:f4:4c:01:73:f6:93:1f:4b:e1:f0:bf:ee:24: de:dc:55:cf:cc:93:3a:ca:70:db:b5:16:65:4e:e0:ca:49:51: 26:86:ca:6e:b4:aa:cf:99:9f:77:4b:7d:7f:f3:19:d6:bf:90: 68:11:a0:bd:f2:f6:5d:15:89:4d:64:0d:af:51:0a:7b:5b:a5: 76:60:3f:3b:cd:c4:c0:87:61:29:d2:d6:91:54:70:53:08:79: 43:0e:69:59:63:ed:35:ab:a9:f2:d2:a5:64:3c:5e:f0:5d:13: c1:57:c5:4d:ca:b1:43:28:72:f2:8e:26:95:49:37:5d:eb:68: 25:db:fe:88:33:b7:2d:88:f9:0e:14:7a:9a:5f:68:c6:62:4d: d9:c1:86:e2:a5:6d:f5:cf:70:96:31:d7:8c:38:fd:5e:92:7b: eb:db:68:88:49:83:fa:f8:14:34:8d:05:a0:e9:ee:1d:16:54: 5e:56:03:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDAyNEQ4RjE1QUEzOTc3MjE3NTg4M0EyRURDMTY1MDE0 RTE5MjhBMUEwHhcNMjYwOTIzMDE0NDM4WhcNMjYwOTMwMDE0NDM4WjAYMRYwFAYD VQQDEw02YWIzMmYwNy00OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/0/LVyumTqUDAiub4a31qgF74QzvEFt76FOR6lJODnUvO3qCOJYgIyTJlaY z5kIxCXd1o42gjTAGdsZMNErT2Dvy+HgPHmYa70/CADuiyJUbqTNxrAtQ5RGJeE5 FxSyxS4gMJgu/7XME9JfRmHI3dmGlqnXF1yovUIynGE/sQaLuexJHMWaCUxgt7QD n2vM3UYVtj9Remx9S9tkt5cyooKFYpB+/8XnfP6mYfGdE5yhCrteL+tfCXRCc6Y8 ZrUV5bDaBWLaRkFM+lzQs2jhf1hJ5Um+hYHGxLdDKbOxTe6p377xDt4ieIrSvhHu OVsyQK+3Oy3tbb5KybshfVLH0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdcOsRJ 5yJ+PjLb6X2A2G42JWL6MB8GA1UdIwQYMBaAFAJNjxWqOXchdYg6LtwWUBThkooa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80QTEyQTMzQzgy RjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5RjFpRG91M0JaUUZPR1Np aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2loby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80QTEyQTMzQzgyRjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5 RjFpRG91M0JaUUZPR1NpaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj1BtLIBKq/APNcJOcUiwZv9vVPevQ6/rKrotZyKyUn1CPHu7wY8tu6bkHGSm 84q+nAgnwhjrv1Wm23ZB+1Fz0uM5Q6jRae2o2ufrlGv0TAFz9pMfS+Hwv+4k3txV z8yTOspw27UWZU7gyklRJobKbrSqz5mfd0t9f/MZ1r+QaBGgvfL2XRWJTWQNr1EK e1uldmA/O83EwIdhKdLWkVRwUwh5Qw5pWWPtNaup8tKlZDxe8F0TwVfFTcqxQyhy 8o4mlUk3XetoJdv+iDO3LYj5DhR6ml9oxmJN2cGG4qVt9c9wljHXjDj9XpJ769to iEmD+vgUNI0FoOnuHRZUXlYDzg== -----END CERTIFICATE-----Generated at Thu Sep 24 17:42:01 2026 by rpki-client