$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: a6eezEyjl/ifasmSJvzp8V+GV/Zsohx2tuHd4bxX/Kw= Subject key identifier: D5:55:47:70:38:80:72:98:EC:0A:0D:1C:9A:0C:0D:F0:AB:D6:EC:6D Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 045C Signing time: Thu 24 Sep 2026 23:59:25 +0000 Manifest this update: Thu 24 Sep 2026 23:59:25 +0000 Manifest next update: Thu 01 Oct 2026 23:59:25 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: TFViHgLnkEEzMgTstMJDzul2UzcecpkqAr7bh6OmTDg=) 2: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=) 3: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Sep 24 23:59:25 2026 GMT Not After : Oct 1 23:59:25 2026 GMT Subject: CN=6ab5b95d-dfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5f:e6:e0:3a:26:43:b6:32:5f:0c:91:cd:ff: d1:a5:d2:f9:15:95:66:c5:db:55:a1:bd:fa:bf:f7: 9a:24:06:82:25:b5:a5:7f:4b:8b:cf:ca:bf:f6:57: e4:e4:75:19:b4:aa:c4:3b:8e:88:a4:03:62:27:d1: a1:c4:f0:2b:71:5b:86:6d:93:95:e2:29:17:4c:84: de:c5:dc:96:43:f8:4e:33:17:d3:f7:5e:15:3a:51: 87:22:c7:ee:9a:a4:16:9b:b7:87:9d:b4:2e:4e:70: c2:15:27:fe:78:4c:9f:e8:30:6f:84:8f:be:84:23: 4e:21:d7:e0:f2:d1:ab:df:f0:ff:5e:c3:f5:0c:3f: 18:e9:33:0e:be:87:e3:c9:bd:83:0e:3b:5d:7e:f5: 6e:a6:2a:5e:23:ba:97:e2:4e:e3:6c:8d:ed:1e:00: 67:65:da:f0:ac:73:bb:4a:7d:4d:6e:fd:38:c7:e2: 43:3f:5e:3f:75:a7:70:c6:1f:09:5d:45:4d:ff:a2: e0:23:5c:7f:20:2b:2a:eb:44:ca:fa:81:b7:9c:da: 7b:ad:44:f3:37:37:1a:92:f1:c8:ea:14:72:46:26: 29:df:ea:e3:77:6c:a4:81:71:f8:37:b2:b9:9b:ee: ca:ba:29:ec:c5:78:37:91:89:d6:4c:1a:8f:b6:51: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:55:47:70:38:80:72:98:EC:0A:0D:1C:9A:0C:0D:F0:AB:D6:EC:6D X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:75:a5:fd:ec:21:ee:b3:18:d1:c7:54:9d:4a:12:ac:e9:1e: 32:9b:86:ef:0f:0b:58:d4:8a:15:df:c9:92:c4:91:11:f0:a8: bf:4c:95:4c:f3:c5:2f:83:5a:17:a8:da:76:9b:85:29:82:94: b6:c9:0c:59:61:a8:34:2c:e1:8e:a5:12:59:45:92:c3:b7:2a: 61:68:fa:0f:c2:6e:b9:ca:02:1a:52:ca:f2:37:ae:5e:45:6a: 9c:20:01:b8:d5:88:c8:c2:33:eb:f1:b9:24:1e:8d:99:c9:19: 3c:fc:77:4c:45:67:c4:60:6f:ca:70:5c:3c:60:c2:04:f5:67: d4:38:34:5b:d9:cd:c7:5d:a9:76:1f:d1:66:27:4a:69:64:f6: 30:e7:b1:58:8b:94:35:7b:c8:63:d8:83:df:65:96:06:bd:50: 23:ef:3c:2a:eb:93:69:9f:97:62:3d:b7:a0:62:b4:60:bf:85: 5b:99:80:de:4a:ca:1f:c1:6a:b9:92:9e:76:4b:5c:e7:cb:74: f6:05:77:cc:d1:3f:f3:91:6e:82:52:23:2b:2a:55:30:ad:44: dc:e8:71:e1:6a:4c:94:41:8c:a5:1a:0f:82:d8:a9:58:b6:44: dc:84:f5:20:03:ae:ff:8b:d7:a4:2d:a2:c4:a6:82:79:61:03: 74:6c:2e:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwOTI0MjM1OTI1WhcNMjYxMDAxMjM1OTI1WjAYMRYwFAYD VQQDEw02YWI1Yjk1ZC1kZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31/m4DomQ7YyXwyRzf/RpdL5FZVmxdtVob36v/eaJAaCJbWlf0uLz8q/9lfk 5HUZtKrEO46IpANiJ9GhxPArcVuGbZOV4ikXTITexdyWQ/hOMxfT914VOlGHIsfu mqQWm7eHnbQuTnDCFSf+eEyf6DBvhI++hCNOIdfg8tGr3/D/XsP1DD8Y6TMOvofj yb2DDjtdfvVupipeI7qX4k7jbI3tHgBnZdrwrHO7Sn1Nbv04x+JDP14/dadwxh8J XUVN/6LgI1x/ICsq60TK+oG3nNp7rUTzNzcakvHI6hRyRiYp3+rjd2ykgXH4N7K5 m+7KuinsxXg3kYnWTBqPtlGSCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVVR3A4 gHKY7AoNHJoMDfCr1uxtMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJnWl/ewh7rMY0cdUnUoSrOkeMpuG7w8LWNSKFd/JksSREfCov0yVTPPFL4Na F6jadpuFKYKUtskMWWGoNCzhjqUSWUWSw7cqYWj6D8JuucoCGlLK8jeuXkVqnCAB uNWIyMIz6/G5JB6NmckZPPx3TEVnxGBvynBcPGDCBPVn1Dg0W9nNx12pdh/RZidK aWT2MOexWIuUNXvIY9iD32WWBr1QI+88KuuTaZ+XYj23oGK0YL+FW5mA3krKH8Fq uZKedktc58t09gV3zNE/85FuglIjKypVMK1E3Ohx4WpMlEGMpRoPgtipWLZE3IT1 IAOu/4vXpC2ixKaCeWEDdGwuQA== -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:23 2026 by rpki-client