$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: 5Xt54mj7a4Ncyy4RKSmfQdrpkb6mu/5c9OKgzVjbBIY= Subject key identifier: 59:C6:45:64:DC:0C:5B:C3:E7:04:01:AB:09:B2:DC:1D:89:8C:10:53 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0C9D Signing time: Fri 02 Oct 2026 18:51:31 +0000 Manifest this update: Fri 02 Oct 2026 18:51:31 +0000 Manifest next update: Fri 09 Oct 2026 18:51:31 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: ho48OTFCCFa1jSx2gbRdzzAMGOeHuf9EyOl38AV+H64=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: ahBHdBU7RHmaEg5k9uPLc0EPvyCfJjb3xG2kQztcg90=) 3: BEB7C0D0BB1C11F181CCCE6E6711F970.roa (hash: 0urKms0wScUkjrUtJaQtzJZoMAc1TfYCz7DrN/a8kv8=) 4: nytxr8dLMBbQr3j3UMGJgg_oDaI.asa (hash: sjj1Gj+oQ0s2eEHokHRUnJxX5k8FMrCUQHw4lScq1SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Oct 2 18:51:31 2026 GMT Not After : Oct 9 18:51:31 2026 GMT Subject: CN=6abffd33-1e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:b2:7a:05:9e:85:f0:14:4f:d6:54:98:77: a1:6c:16:82:81:09:26:45:66:08:bc:a8:50:51:97: f1:b8:d9:ab:17:80:be:fb:69:9e:52:df:a1:1f:10: 13:c1:39:b4:99:7a:df:1e:ca:5c:6f:98:fa:a3:15: 68:f5:00:76:82:31:10:27:eb:9e:54:37:78:82:8f: 31:e3:30:2f:58:0c:70:da:19:7d:7f:a4:ea:7b:15: 4d:83:7f:de:24:c8:ae:be:39:f4:49:1c:8d:12:3f: 7a:c9:44:59:b7:70:c0:20:62:1c:30:6d:4d:7e:36: 6b:40:7a:d4:cb:3f:bd:85:4b:00:58:d8:a4:e4:c6: 93:98:5b:8d:fc:0e:d1:38:82:dd:2d:ad:7e:1a:0f: ab:37:b8:67:cd:d1:e5:53:c7:90:bc:14:4d:d9:52: bb:a5:69:77:12:68:c4:a1:3e:33:cc:81:e6:bd:e1: 73:63:30:96:c7:d6:98:46:a4:fa:a2:41:62:fa:d0: de:5a:f9:b4:24:6b:f2:14:64:25:1a:98:19:f8:0b: 70:0c:f7:1d:3e:c1:81:f6:fd:62:33:4c:55:0a:de: b1:a3:6c:74:e5:63:65:cc:94:19:ef:0d:fd:53:63: 84:66:d9:78:4e:fd:28:d5:e7:d1:47:f4:89:01:0d: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:45:64:DC:0C:5B:C3:E7:04:01:AB:09:B2:DC:1D:89:8C:10:53 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3f:31:e9:12:5a:1c:36:e3:46:29:da:c8:23:df:df:81:d0: 68:e3:fe:49:62:13:a5:69:c3:05:1b:93:10:a2:66:d9:e2:74: 2e:f0:ce:9e:aa:32:2e:ed:e6:1a:a6:fc:39:1e:25:eb:6e:c8: 61:82:c8:d8:6a:eb:3c:7a:d0:c9:4e:58:49:6d:52:8c:13:bc: 9d:d1:28:e3:d5:1e:34:7b:6d:d6:15:0e:3f:c4:16:7d:98:13: aa:d9:ac:d6:73:36:be:56:dc:46:9b:cd:1d:ef:8c:78:56:6d: d0:41:f0:28:46:97:54:d1:28:fe:1f:73:ca:5d:a8:e9:ff:76: ad:61:dc:38:59:9e:4c:54:6b:2a:a3:b0:64:e9:13:27:33:ae: ff:73:11:26:0a:a3:8a:2c:8e:57:a4:7a:27:02:bb:35:02:60: cc:91:55:17:01:ac:f1:c2:10:47:be:aa:84:ab:57:b5:63:16: 00:4a:e4:fa:80:47:8d:0e:18:62:f7:e4:ba:ef:60:2e:4b:fe: 23:b1:af:f8:a4:cf:ce:01:d7:35:ef:56:4b:05:d3:f1:89:40: 18:0c:39:63:fe:99:4d:5f:9c:bf:44:67:90:5a:b2:c1:a0:01: 8d:50:58:b5:5f:0b:e1:74:66:37:78:ad:64:60:40:19:6c:e5: 50:c1:f9:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjYxMDAyMTg1MTMxWhcNMjYxMDA5MTg1MTMxWjAYMRYwFAYD VQQDEw02YWJmZmQzMy0xZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtomyegWehfAUT9ZUmHehbBaCgQkmRWYIvKhQUZfxuNmrF4C++2meUt+hHxAT wTm0mXrfHspcb5j6oxVo9QB2gjEQJ+ueVDd4go8x4zAvWAxw2hl9f6TqexVNg3/e JMiuvjn0SRyNEj96yURZt3DAIGIcMG1NfjZrQHrUyz+9hUsAWNik5MaTmFuN/A7R OILdLa1+Gg+rN7hnzdHlU8eQvBRN2VK7pWl3EmjEoT4zzIHmveFzYzCWx9aYRqT6 okFi+tDeWvm0JGvyFGQlGpgZ+AtwDPcdPsGB9v1iM0xVCt6xo2x05WNlzJQZ7w39 U2OEZtl4Tv0o1efRR/SJAQ3EaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnGRWTc DFvD5wQBqwmy3B2JjBBTMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADD8x6RJaHDbjRinayCPf34HQaOP+SWITpWnDBRuTEKJm2eJ0LvDOnqoyLu3m Gqb8OR4l627IYYLI2GrrPHrQyU5YSW1SjBO8ndEo49UeNHtt1hUOP8QWfZgTqtms 1nM2vlbcRpvNHe+MeFZt0EHwKEaXVNEo/h9zyl2o6f92rWHcOFmeTFRrKqOwZOkT JzOu/3MRJgqjiiyOV6R6JwK7NQJgzJFVFwGs8cIQR76qhKtXtWMWAErk+oBHjQ4Y Yvfkuu9gLkv+I7Gv+KTPzgHXNe9WSwXT8YlAGAw5Y/6ZTV+cv0RnkFqywaABjVBY tV8L4XRmN3itZGBAGWzlUMH5/w== -----END CERTIFICATE-----Generated at Sat Oct 3 14:47:53 2026 by rpki-client