$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: gjiu/f5qLxXJJV8uBbfC1YgTpf5jqdVG6TwLq+l8jlk= Subject key identifier: 7F:37:07:1F:D5:92:BB:11:56:F6:09:C8:88:EB:A2:D5:05:02:C9:FA Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01EB Signing time: Sun 27 Sep 2026 04:02:20 +0000 Manifest this update: Sun 27 Sep 2026 04:02:20 +0000 Manifest next update: Sun 04 Oct 2026 04:02:20 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: EUAArXLl8UuiwgDf4eNy3JAd4HXKSTCRny9i4rYvofA=) 2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=) 3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Sep 27 04:02:20 2026 GMT Not After : Oct 4 04:02:20 2026 GMT Subject: CN=6ab8954c-4bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:b1:f0:ef:b9:30:11:32:83:c6:e0:e2:0f: 21:a0:e3:df:dd:d1:17:fd:99:e7:8b:7f:cb:a5:03: 36:7e:89:70:19:ed:00:cc:f5:bf:b2:3f:78:33:e4: 32:94:e7:79:8d:b1:7d:eb:64:56:37:ed:bf:3d:43: a8:eb:42:ac:71:c0:e8:a5:3b:01:6d:ad:f9:f8:7d: 2e:9e:6a:75:5a:37:bf:df:f3:d5:0c:a4:0a:cd:7c: 66:f4:9b:ee:53:3b:3c:54:ad:7e:a5:b1:d5:dc:94: a4:4a:88:56:85:30:36:0a:8d:c0:78:19:8f:ca:18: 38:9d:bd:6a:7d:50:75:30:2e:1d:00:52:12:0b:6d: 2c:93:ad:da:d8:8d:95:aa:d2:88:ee:aa:f3:e4:78: dd:c9:75:cc:af:70:c1:78:ab:40:0b:d0:7b:45:d7: e0:17:f8:14:e6:2a:87:c8:33:52:11:16:55:55:22: 37:2e:bc:f2:b0:2f:75:d4:7c:56:e8:a3:77:32:10: 38:fa:0e:74:bf:d6:9e:54:58:84:14:47:c7:9c:e7: 22:28:22:fc:f1:7c:b3:90:52:f2:24:3f:64:cf:d0: 1c:4e:55:43:23:ef:b1:0d:4d:65:f9:d9:a4:23:82: fd:36:be:a7:7f:aa:da:1a:bb:bc:76:06:25:9c:90: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:37:07:1F:D5:92:BB:11:56:F6:09:C8:88:EB:A2:D5:05:02:C9:FA X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f7:42:ed:62:87:83:a6:50:20:93:8b:52:fb:fe:f8:46:80: cb:cf:11:89:ea:a8:33:99:f7:b6:71:2c:e0:59:49:34:63:b0: 11:27:a5:f9:d8:7f:e5:14:a9:c4:bc:7d:4a:52:4f:a7:04:db: 95:45:27:34:0a:d4:4f:ce:14:26:92:58:bf:ea:50:78:55:a3: b5:58:37:3b:99:37:24:ff:a6:1c:bd:37:98:0b:f7:d4:f2:50: 18:a1:08:57:c0:e0:1d:ba:0a:0b:c6:70:53:cd:3b:94:ff:5a: c3:f4:f1:81:d8:4f:bf:17:39:be:a9:bc:6c:d4:6e:f8:07:0a: c5:78:b5:01:12:c1:fb:77:d9:d7:ed:23:1e:97:a7:db:be:fb: 48:35:8b:69:9a:2a:1f:3f:a0:90:a5:fb:8c:ab:52:ad:95:e6: 27:d4:6b:4d:9a:fd:62:38:89:36:78:ca:b7:ae:8e:25:4e:71: 8e:c7:69:fc:65:58:c5:d3:8f:5c:d5:81:82:01:f8:21:0a:cc: cd:bb:da:89:00:91:e7:35:c2:b8:be:3c:47:08:96:f8:68:1a: f7:d8:3f:07:df:4b:b0:e0:fc:6e:45:24:fc:08:2b:3b:11:7a: 37:b4:13:7e:aa:b4:59:34:23:6d:51:76:1e:37:c5:5e:f3:45: eb:e2:f1:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwOTI3MDQwMjIwWhcNMjYxMDA0MDQwMjIwWjAYMRYwFAYD VQQDEw02YWI4OTU0Yy00YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHKx8O+5MBEyg8bg4g8hoOPf3dEX/Znni3/LpQM2folwGe0AzPW/sj94M+Qy lOd5jbF962RWN+2/PUOo60KsccDopTsBba35+H0unmp1Wje/3/PVDKQKzXxm9Jvu Uzs8VK1+pbHV3JSkSohWhTA2Co3AeBmPyhg4nb1qfVB1MC4dAFISC20sk63a2I2V qtKI7qrz5HjdyXXMr3DBeKtAC9B7RdfgF/gU5iqHyDNSERZVVSI3LrzysC911HxW 6KN3MhA4+g50v9aeVFiEFEfHnOciKCL88XyzkFLyJD9kz9AcTlVDI++xDU1l+dmk I4L9Nr6nf6raGru8dgYlnJCInQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH83Bx/V krsRVvYJyIjrotUFAsn6MB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo/dC7WKHg6ZQIJOLUvv++EaAy88RieqoM5n3tnEs4FlJNGOwESel+dh/5RSp xLx9SlJPpwTblUUnNArUT84UJpJYv+pQeFWjtVg3O5k3JP+mHL03mAv31PJQGKEI V8DgHboKC8ZwU807lP9aw/TxgdhPvxc5vqm8bNRu+AcKxXi1ARLB+3fZ1+0jHpen 2777SDWLaZoqHz+gkKX7jKtSrZXmJ9RrTZr9YjiJNnjKt66OJU5xjsdp/GVYxdOP XNWBggH4IQrMzbvaiQCR5zXCuL48RwiW+Gga99g/B99LsOD8bkUk/AgrOxF6N7QT fqq0WTQjbVF2HjfFXvNF6+Lx+g== -----END CERTIFICATE-----Generated at Mon Sep 28 20:44:08 2026 by rpki-client