$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json) Hash identifier: zR3VHGlCfea/sWGAu8AIjBl3f8E++/yvwNOQ+/R/wFs= Subject key identifier: 2B:06:F1:79:94:01:58:2F:F8:21:D9:3E:32:41:92:2E:4C:82:1E:CD Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft Manifest number: 0626 Signing time: Sun 27 Sep 2026 00:56:48 +0000 Manifest this update: Sun 27 Sep 2026 00:56:48 +0000 Manifest next update: Sun 04 Oct 2026 00:56:48 +0000 Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: qef2u8EaOvSRegllfwrBCxR7RsTws3YuZObadKSCulk=) 2: C762BA72A69111F19896220A7111F970.roa (hash: jAFER+09ZO9+0eFOglysIeuzJxzcYqoIfF5SHmhknQs=) 3: 68FB34D0A53511F194359E934411F970.roa (hash: g1sw3UXmHEKqKS0qgWrZWBCos6PkQ3MTe8W3hqlBy3g=) 4: yI9EnZ3fZIzG4LXNJFAzwiR2T1c.asa (hash: RWr2o+Fuq8BXHT24M7lWL2/tQ4WeLi7HiQyqBYF1xFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Validity Not Before: Sep 27 00:56:48 2026 GMT Not After : Oct 4 00:56:48 2026 GMT Subject: CN=6ab869d0-8697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:cd:0d:6e:39:b7:02:6c:1f:d0:c8:39:0d: 5d:cc:19:5b:c1:01:ff:ed:24:8f:01:5d:a1:58:ba: 37:4d:00:50:8f:53:6e:6b:88:be:f6:ca:f3:36:ba: 68:29:cd:08:e4:15:96:e0:83:33:42:08:17:af:8d: a6:fe:a1:cc:14:f3:47:77:b9:92:7b:c7:54:e2:11: c1:7d:8e:10:37:0d:c3:e6:cf:95:09:99:83:ce:7f: 19:b8:90:7e:f9:63:bc:58:13:13:51:bf:d8:1a:c3: 0d:16:0c:12:2a:6e:ed:52:86:1e:26:17:51:10:eb: 91:af:21:79:59:15:fa:d3:01:2a:a1:66:e9:cd:6b: 8d:93:2e:f2:79:23:f2:ee:01:33:5a:a8:09:58:99: 89:41:4e:41:17:99:e7:6b:9f:91:41:da:22:e2:69: 7f:f0:bf:17:06:a7:55:8b:96:c6:98:59:1f:84:e7: 5f:59:52:67:26:8c:d9:6a:11:75:ee:69:1e:bd:d8: ce:7e:ae:0a:a4:18:57:87:54:c6:72:4d:ac:49:22: 32:da:0f:af:f4:c8:a1:4d:d0:c3:59:c7:e8:ec:67: 6e:28:62:e2:35:f2:25:11:e0:b3:5b:28:54:2b:05: bd:3d:09:80:d6:3f:4f:97:b6:f9:e3:24:ed:80:f1: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:F1:79:94:01:58:2F:F8:21:D9:3E:32:41:92:2E:4C:82:1E:CD X509v3 Authority Key Identifier: keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bb:c4:a5:84:de:9a:5b:bb:e8:13:e0:46:00:cb:0e:c9:4f: 5f:4d:2e:53:0b:b7:ad:38:cf:77:44:c6:65:d8:39:75:da:23: 02:7b:8c:50:71:df:a2:58:44:b2:9f:57:5c:9c:84:7b:7d:ea: d5:78:c3:1a:b2:49:47:43:6f:c2:96:4d:08:d7:fb:04:1e:e9: 70:1f:7b:55:bb:da:d9:ce:f0:90:55:e3:1e:cc:da:c4:23:0f: 34:15:66:7f:a9:2a:19:6c:1d:d2:6f:ef:7b:d6:e7:ca:32:fd: f7:5f:56:f7:72:9b:a7:5c:1a:3d:5a:16:0c:72:f0:5f:b9:87: 06:a6:5f:fb:e4:a4:a0:7b:48:d2:ef:9d:33:78:1e:9b:46:23: 13:48:35:e4:fa:4f:ab:10:25:03:5e:a9:c1:04:a4:8a:92:de: 02:04:30:8f:15:40:a0:00:04:cd:30:36:6e:b7:d9:91:59:c1: c3:5c:53:0e:47:32:20:d0:90:b8:55:cc:6a:3d:98:74:ca:85: 3f:7e:a5:b6:43:ff:68:60:50:e8:24:99:23:e0:f8:62:6f:6f: 6d:0c:fc:e3:a6:76:c1:13:9b:7f:9b:d6:10:60:65:e0:01:30: 40:1e:e6:bc:fa:c7:46:65:dd:8b:37:0a:5f:e9:21:b8:77:38: 6e:02:55:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDg3NUVDNzJFNDZGMkNEMTYzRjA2QjgyMkU3MDQxMjlB RUZFMzE5MTAwHhcNMjYwOTI3MDA1NjQ4WhcNMjYxMDA0MDA1NjQ4WjAYMRYwFAYD VQQDEw02YWI4NjlkMC04Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsrNDW45twJsH9DIOQ1dzBlbwQH/7SSPAV2hWLo3TQBQj1Nua4i+9srzNrpo Kc0I5BWW4IMzQggXr42m/qHMFPNHd7mSe8dU4hHBfY4QNw3D5s+VCZmDzn8ZuJB+ +WO8WBMTUb/YGsMNFgwSKm7tUoYeJhdREOuRryF5WRX60wEqoWbpzWuNky7yeSPy 7gEzWqgJWJmJQU5BF5nna5+RQdoi4ml/8L8XBqdVi5bGmFkfhOdfWVJnJozZahF1 7mkevdjOfq4KpBhXh1TGck2sSSIy2g+v9MihTdDDWcfo7GduKGLiNfIlEeCzWyhU KwW9PQmA1j9Pl7b54yTtgPGTCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsG8XmU AVgv+CHZPjJBki5Mgh7NMB8GA1UdIwQYMBaAFIdexy5G8s0WPwa4IucEEprv4xkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGtieXpSWV9CcmdpNXdRU211X2pH UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxN0hMa2J5elJZX0JyZ2k1d1FTbXVfakdSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGtieXpS WV9CcmdpNXdRU211X2pHUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATbvEpYTemlu76BPgRgDLDslPX00uUwu3rTjPd0TGZdg5ddojAnuMUHHfolhE sp9XXJyEe33q1XjDGrJJR0NvwpZNCNf7BB7pcB97Vbva2c7wkFXjHszaxCMPNBVm f6kqGWwd0m/ve9bnyjL9919W93Kbp1waPVoWDHLwX7mHBqZf++SkoHtI0u+dM3ge m0YjE0g15PpPqxAlA16pwQSkipLeAgQwjxVAoAAEzTA2brfZkVnBw1xTDkcyINCQ uFXMaj2YdMqFP36ltkP/aGBQ6CSZI+D4Ym9vbQz846Z2wRObf5vWEGBl4AEwQB7m vPrHRmXdizcKX+khuHc4bgJV9g== -----END CERTIFICATE-----Generated at Mon Sep 28 19:19:53 2026 by rpki-client