$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: 3rxnUA4X4BC2nHgNqIn2LeKJz7oJ0oZSjpw1VRBD3xw= Subject key identifier: BA:AB:08:10:BF:80:6A:C9:BE:7B:74:A0:BF:B9:4E:57:81:BE:0D:17 Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 361C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35D7 Signing time: Tue 22 Sep 2026 14:27:19 +0000 Manifest this update: Tue 22 Sep 2026 14:27:18 +0000 Manifest next update: Tue 29 Sep 2026 14:27:18 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: +01OXJUXufPQ1Ntk4POseBvj7SU0RxqtC8m3HIF2qPc=) 2: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 3: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) 4: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) 5: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13852 (0x361c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Sep 22 14:27:18 2026 GMT Not After : Sep 29 14:27:18 2026 GMT Subject: CN=6ab29046-8752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:0b:d7:61:0f:08:f2:1e:8c:34:99:6d:e3: df:02:f5:62:f8:1f:c6:81:fc:d7:20:f0:5a:43:37: 03:da:5a:48:31:c9:2b:a6:cf:1a:ec:34:43:f1:db: d0:52:1e:bb:54:af:70:05:70:41:1e:0a:2d:c3:19: 04:3a:b3:65:90:c2:20:21:fc:f6:b7:4a:cd:d1:14: 68:15:82:13:20:3e:ec:73:80:32:43:94:cb:a4:c4: 55:10:b8:b5:3c:e0:e7:a1:2c:e3:92:26:ad:30:1a: 66:ad:c4:81:e8:ff:9f:73:46:55:e4:70:26:73:b1: 3d:66:68:3b:f0:79:3e:f9:c2:73:c2:d2:26:e0:68: 3b:f0:2c:23:b7:81:30:8a:33:86:99:cf:85:7f:f4: 89:08:fb:be:b7:eb:69:a2:28:e8:83:8a:5b:fe:85: fd:9b:31:14:c4:3d:86:9b:95:a4:aa:96:b5:e4:3f: d0:8c:5e:0d:29:4d:5d:71:75:3a:15:87:66:b1:fd: cf:fe:f3:cc:34:fc:be:eb:e8:40:06:3e:91:be:4b: 67:71:63:bd:83:50:f0:e3:94:2a:c1:73:5e:13:d0: d6:fe:cd:6e:a9:ff:e7:d5:72:74:6e:3e:c4:ed:4b: 2d:ac:62:23:08:4f:ae:99:37:a2:0c:79:de:7f:4d: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:08:10:BF:80:6A:C9:BE:7B:74:A0:BF:B9:4E:57:81:BE:0D:17 X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b7:a6:12:32:87:ce:dd:0e:af:6f:92:e3:7b:aa:7b:62:6f: bd:92:b9:0d:38:41:09:cb:b3:83:05:2b:3f:2c:e7:a9:dd:59: 5d:f1:a0:7f:dc:d0:a4:7e:b5:a0:bc:f7:2f:94:af:af:ca:91: cf:d8:d0:e4:7c:50:d7:99:7e:51:2a:25:b6:aa:5a:a8:cd:8f: 7a:1a:48:7c:c3:9b:be:38:24:05:f0:c0:53:e4:40:47:95:02: c5:9d:c5:a0:ee:a5:7b:fa:58:4e:f7:b0:8a:5b:83:ee:22:b5: 60:41:a4:11:a4:1e:a2:8b:79:9a:30:60:4e:eb:f9:bb:c9:e7: b0:27:8f:b1:c3:f4:0a:0f:5e:2f:78:f7:68:37:27:c4:43:5d: a7:3b:07:25:b1:9d:0e:cb:7e:8b:f8:4e:c6:c7:7a:f4:cd:ee: 46:68:fd:59:72:54:71:6c:4a:4b:05:b4:23:b6:a9:bb:17:a1: 0d:f9:a1:56:40:22:72:75:4e:59:a6:3c:cf:0f:12:09:8a:cc: 52:c1:fe:cc:31:1e:48:90:ed:a9:c3:f2:0e:54:8f:00:77:4b: 6c:f7:4f:a2:33:28:e8:85:b8:d5:ed:b7:c0:76:85:53:36:51: 4f:51:a0:6e:6e:4d:68:86:9a:37:ef:c4:a7:5b:5c:73:df:8a: d3:d7:1e:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYwOTIyMTQyNzE4WhcNMjYwOTI5MTQyNzE4WjAYMRYwFAYD VQQDEw02YWIyOTA0Ni04NzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDIL12EPCPIejDSZbePfAvVi+B/GgfzXIPBaQzcD2lpIMckrps8a7DRD8dvQ Uh67VK9wBXBBHgotwxkEOrNlkMIgIfz2t0rN0RRoFYITID7sc4AyQ5TLpMRVELi1 PODnoSzjkiatMBpmrcSB6P+fc0ZV5HAmc7E9Zmg78Hk++cJzwtIm4Gg78Cwjt4Ew ijOGmc+Ff/SJCPu+t+tpoijog4pb/oX9mzEUxD2Gm5Wkqpa15D/QjF4NKU1dcXU6 FYdmsf3P/vPMNPy+6+hABj6RvktncWO9g1Dw45QqwXNeE9DW/s1uqf/n1XJ0bj7E 7UstrGIjCE+umTeiDHnef01fOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqrCBC/ gGrJvnt0oL+5TleBvg0XMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKremEjKHzt0Or2+S43uqe2JvvZK5DThBCcuzgwUrPyznqd1ZXfGgf9zQpH61 oLz3L5Svr8qRz9jQ5HxQ15l+USoltqpaqM2PehpIfMObvjgkBfDAU+RAR5UCxZ3F oO6le/pYTvewiluD7iK1YEGkEaQeoot5mjBgTuv5u8nnsCePscP0Cg9eL3j3aDcn xENdpzsHJbGdDst+i/hOxsd69M3uRmj9WXJUcWxKSwW0I7apuxehDfmhVkAicnVO WaY8zw8SCYrMUsH+zDEeSJDtqcPyDlSPAHdLbPdPojMo6IW41e23wHaFUzZRT1Gg bm5NaIaaN+/Ep1tcc9+K09cedw== -----END CERTIFICATE-----Generated at Thu Sep 24 05:54:38 2026 by rpki-client