$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json) Hash identifier: 2Fnxg8LfapuvPz0ACIZmG52PSI2ldHvaaSlQ5IxY/U4= Subject key identifier: 83:3A:0C:B2:4A:36:B3:4C:2E:FE:5F:8C:99:A7:D3:94:8C:85:DA:77 Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft Manifest number: 066F Signing time: Thu 24 Sep 2026 22:27:52 +0000 Manifest this update: Thu 24 Sep 2026 22:27:52 +0000 Manifest next update: Thu 01 Oct 2026 22:27:52 +0000 Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: s7oSRE7V2LNyVzf8Q9cSN3yohuRgUxrhgaHZLdyRIKg=) 2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: CMPczLui+l93sBtgTu8rd32rZ3/z96G+Pg0qcS/LMRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Validity Not Before: Sep 24 22:27:52 2026 GMT Not After : Oct 1 22:27:52 2026 GMT Subject: CN=6ab5a3e8-2a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:af:1e:1f:77:ec:65:ef:54:7b:ca:da:f2: e4:49:5b:31:34:ab:c0:f6:a1:78:c0:fb:2d:6b:aa: 71:d8:a0:63:51:7e:30:ef:97:52:ca:b5:7f:34:1d: 33:8d:0b:b2:da:74:4f:c2:90:37:f4:5a:d5:f2:f2: 92:0d:7b:84:32:17:ea:81:a2:5c:54:87:fb:4a:5b: 43:f4:3a:00:4c:29:14:db:69:b0:97:e9:c2:91:63: f7:9c:03:55:46:7c:38:c6:e0:b3:c7:45:ff:52:5c: fd:6f:ed:58:2d:ba:7c:bf:08:c5:34:a3:e1:50:64: 3d:20:0b:2b:1b:e3:f2:25:98:90:f7:92:85:31:f6: 5e:55:a8:ef:65:65:c6:2b:33:ef:3a:63:f7:0e:5c: e9:d8:8c:8d:bf:42:29:f7:c0:db:54:22:8e:6f:2d: 8f:5a:88:93:8d:6e:1d:20:c5:34:09:12:92:be:71: cf:f8:09:fd:ec:bb:a0:10:17:db:bd:a5:0b:25:ac: 11:ae:6a:bd:d2:8a:8a:8c:07:b7:32:84:bf:43:98: c4:4c:98:07:b2:b3:c8:05:79:70:d1:58:aa:52:57: 23:2f:ce:9c:46:1a:6e:e6:90:bd:39:cf:93:98:61: aa:cb:a2:91:f1:d4:4f:42:29:47:ac:8e:09:ad:36: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3A:0C:B2:4A:36:B3:4C:2E:FE:5F:8C:99:A7:D3:94:8C:85:DA:77 X509v3 Authority Key Identifier: keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9e:b2:c9:8e:44:58:e8:63:5b:44:6e:50:23:30:fe:e4:4d: 8b:ad:41:3e:28:63:e9:c8:99:70:f3:6f:63:1e:84:07:46:a7: d3:25:d9:8e:c2:fc:c8:aa:b8:c0:19:3d:e9:02:50:c9:06:fa: 0b:4f:78:de:bd:1b:87:43:fe:b7:cc:e2:f5:5c:ca:57:d8:e8: 07:25:b0:5b:54:10:91:84:17:1a:3e:95:26:6f:c6:72:57:52: d2:3f:63:be:22:0f:be:25:47:1a:d4:0f:93:97:85:ab:16:d3: 54:31:e9:20:44:a8:e0:65:86:e5:dc:93:62:6f:98:15:6f:a3: a1:8f:84:38:9a:4d:de:72:3f:ea:39:95:b6:78:2e:b5:8b:b6: 66:5d:57:58:1c:c6:57:a3:66:81:b4:ea:6a:b2:7b:71:3c:83: 22:10:52:1e:9f:b6:04:d0:a3:eb:22:85:aa:43:1d:d7:c6:c8: 27:ff:c1:cf:ce:20:10:e7:a7:02:d5:3a:b6:24:9f:85:ed:57: 5d:c2:37:31:95:cf:32:0a:53:b1:25:d7:c9:c0:24:e7:22:7b: 1d:ca:5c:d2:49:21:d8:82:af:46:5b:a3:ab:08:de:2b:dd:04: 89:51:eb:2f:59:a4:82:02:5f:9e:cb:10:24:53:5a:98:54:99: b1:c3:11:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyMTgxMTAvBgNVBAUTKDg1RUY0RjUyQkU2QzBEMDkzNzM4NjlBOTAwMjIzODYy ODIzM0VCRUYwHhcNMjYwOTI0MjIyNzUyWhcNMjYxMDAxMjIyNzUyWjAYMRYwFAYD VQQDEw02YWI1YTNlOC0yYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHKvHh937GXvVHvK2vLkSVsxNKvA9qF4wPsta6px2KBjUX4w75dSyrV/NB0z jQuy2nRPwpA39FrV8vKSDXuEMhfqgaJcVIf7SltD9DoATCkU22mwl+nCkWP3nANV Rnw4xuCzx0X/Ulz9b+1YLbp8vwjFNKPhUGQ9IAsrG+PyJZiQ95KFMfZeVajvZWXG KzPvOmP3Dlzp2IyNv0Ip98DbVCKOby2PWoiTjW4dIMU0CRKSvnHP+An97LugEBfb vaULJawRrmq90oqKjAe3MoS/Q5jETJgHsrPIBXlw0ViqUlcjL86cRhpu5pC9Oc+T mGGqy6KR8dRPQilHrI4JrTZ5XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM6DLJK NrNMLv5fjJmn05SMhdp3MB8GA1UdIwQYMBaAFIXvT1K+bA0JNzhpqQAiOGKCM+vv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTIxOC9EODU3QTEzRURF QkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RRazNPR21wQUNJNFlvSXo2 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlOVBVcjVzRFFrM09HbXBBQ0k0WW9JejYtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTIxOC9EODU3QTEzRURFQkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RR azNPR21wQUNJNFlvSXo2LTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJ6yyY5EWOhjW0RuUCMw/uRNi61BPihj6ciZcPNvYx6EB0an0yXZjsL8yKq4 wBk96QJQyQb6C0943r0bh0P+t8zi9VzKV9joByWwW1QQkYQXGj6VJm/GcldS0j9j viIPviVHGtQPk5eFqxbTVDHpIESo4GWG5dyTYm+YFW+joY+EOJpN3nI/6jmVtngu tYu2Zl1XWBzGV6NmgbTqarJ7cTyDIhBSHp+2BNCj6yKFqkMd18bIJ//Bz84gEOen AtU6tiSfhe1XXcI3MZXPMgpTsSXXycAk5yJ7Hcpc0kkh2IKvRlujqwjeK90EiVHr L1mkggJfnssQJFNamFSZscMRcw== -----END CERTIFICATE-----Generated at Fri Sep 25 13:09:41 2026 by rpki-client