$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: u5PFcp41Myv0E0uJjbBHnvDBb2HsVTgusa/aKPRH9hA= Subject key identifier: 9F:F6:2E:50:20:65:23:37:15:0B:B3:15:A0:A4:70:4D:9B:15:D1:D9 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 027B Signing time: Fri 25 Sep 2026 02:02:19 +0000 Manifest this update: Fri 25 Sep 2026 02:02:18 +0000 Manifest next update: Fri 02 Oct 2026 02:02:18 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: CvPqh5RdU/gwVAs0uu1oAcEC5AtMdctDH/xg7E3edG4=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: 2qm8xc9Dh6l4WZzdxSvQg3OKbuj7hzzJ5qxge8M4c/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Sep 25 02:02:18 2026 GMT Not After : Oct 2 02:02:18 2026 GMT Subject: CN=6ab5d62b-8da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:df:4b:29:10:4e:94:e1:60:b8:c9:a7:e8: 6c:21:31:6c:8c:a8:be:2a:c3:8c:51:5c:9f:4d:2e: 3c:dd:43:06:28:d2:29:4c:e0:03:0b:d3:5e:37:86: 36:f8:66:03:9d:6f:f4:6e:20:de:7c:98:dc:b7:43: 3b:f2:8b:5c:c2:e6:f1:22:9c:ef:4f:f0:d0:5e:8d: 80:06:1d:00:e3:a3:f1:a0:eb:ad:8e:0e:fc:1e:64: 79:6e:4a:bf:82:38:6d:d8:bf:36:6f:b1:b1:fc:f5: d7:b7:8f:13:95:5e:81:e9:ab:f0:67:de:eb:4a:b1: 3c:5b:0b:51:18:b4:99:66:75:10:eb:ca:94:35:f5: 91:9f:a3:f0:fa:dc:27:6a:77:f4:5f:b1:04:d8:13: 1f:15:0f:78:db:2b:32:09:fc:54:6c:6a:37:4c:03: 24:5a:b7:de:9e:c0:15:8a:c6:d2:7c:cc:cd:de:b7: 6a:57:1c:ae:7b:3d:0d:9d:59:01:30:78:6e:34:09: 1b:47:66:45:1c:9e:e9:57:3c:d9:00:e6:b1:1a:6b: 7b:7b:7d:77:fd:aa:bb:3c:93:b3:bc:6e:1c:68:c1: c8:af:dd:99:24:47:8c:b2:b7:0f:6a:d8:63:a3:68: 86:54:76:ab:53:f7:89:b6:41:9d:56:80:92:b2:d8: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:2E:50:20:65:23:37:15:0B:B3:15:A0:A4:70:4D:9B:15:D1:D9 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:af:fa:4d:30:a7:f5:25:55:05:61:b5:52:6b:c0:7e:26:08: 48:8b:90:9a:bf:be:f5:ee:b4:5c:95:ea:74:3b:45:78:ff:79: d5:6f:b8:fe:0d:64:94:07:93:bf:2a:84:e4:13:ce:79:a9:e6: 8d:d4:c3:1c:e6:93:c1:f7:84:1f:32:cd:4d:43:82:7b:5f:f8: f1:f0:7f:ff:10:7a:35:2f:c7:3b:9e:65:06:17:28:3b:b9:fd: 75:0b:62:32:b9:07:6d:e0:a5:94:c8:43:be:e3:64:92:ec:91: d2:0e:8c:a9:75:66:d3:e3:f6:74:ed:09:1c:7f:64:b9:e4:e7: 16:a1:f0:06:f5:ca:32:e7:bf:e4:15:c2:02:c8:5c:5a:f6:dd: 9a:0a:9e:53:0b:1b:d2:bc:01:1b:8d:e9:7a:b9:6b:e7:66:c4: c6:d6:fd:43:29:cb:5d:c0:e0:45:ba:c6:d8:25:20:a0:4e:ad: 90:4a:05:4e:c3:1e:af:e6:c0:a3:a9:40:34:ae:2b:17:b4:ad: 2a:94:c4:22:a3:50:53:21:d0:de:90:57:38:2f:fc:e7:9c:a1: 7b:62:15:9b:d7:70:0b:89:05:d7:66:44:45:0b:0f:c1:ea:61: 9f:05:6d:b5:46:e2:4e:9f:3c:0d:ce:62:97:6a:24:6f:c7:db: 17:9b:ac:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwOTI1MDIwMjE4WhcNMjYxMDAyMDIwMjE4WjAYMRYwFAYD VQQDEw02YWI1ZDYyYi04ZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypnfSykQTpThYLjJp+hsITFsjKi+KsOMUVyfTS483UMGKNIpTOADC9NeN4Y2 +GYDnW/0biDefJjct0M78otcwubxIpzvT/DQXo2ABh0A46PxoOutjg78HmR5bkq/ gjht2L82b7Gx/PXXt48TlV6B6avwZ97rSrE8WwtRGLSZZnUQ68qUNfWRn6Pw+twn anf0X7EE2BMfFQ942ysyCfxUbGo3TAMkWrfensAVisbSfMzN3rdqVxyuez0NnVkB MHhuNAkbR2ZFHJ7pVzzZAOaxGmt7e313/aq7PJOzvG4caMHIr92ZJEeMsrcPathj o2iGVHarU/eJtkGdVoCSstjpVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/2LlAg ZSM3FQuzFaCkcE2bFdHZMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACK/6TTCn9SVVBWG1UmvAfiYISIuQmr++9e60XJXqdDtFeP951W+4/g1klAeT vyqE5BPOeanmjdTDHOaTwfeEHzLNTUOCe1/48fB//xB6NS/HO55lBhcoO7n9dQti MrkHbeCllMhDvuNkkuyR0g6MqXVm0+P2dO0JHH9kueTnFqHwBvXKMue/5BXCAshc WvbdmgqeUwsb0rwBG43perlr52bExtb9QynLXcDgRbrG2CUgoE6tkEoFTsMer+bA o6lANK4rF7StKpTEIqNQUyHQ3pBXOC/855yhe2IVm9dwC4kF12ZERQsPwephnwVt tUbiTp88Dc5il2okb8fbF5ushw== -----END CERTIFICATE-----Generated at Sat Sep 26 03:48:56 2026 by rpki-client