$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: WcfsPdJwh5Wu3SUG8lDixzxhs5b/a/PMlQYl5AJB7mA= Subject key identifier: AB:F6:64:5C:2C:FB:BB:3A:7F:54:71:4C:72:C8:C7:94:23:EF:9E:49 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 0253 Signing time: Thu 03 Sep 2026 02:45:57 +0000 Manifest this update: Thu 03 Sep 2026 02:45:56 +0000 Manifest next update: Thu 10 Sep 2026 02:45:56 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: fCnBnR7k49VOs0pm5Th9nvEIjS+L6FVAFOefuuRhHJk=) 2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=) 3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=) 4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: GDl5mVu/aHI+hBuO6VNjgfJXS25xVSRkSRDDKqvvcrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Sep 3 02:45:56 2026 GMT Not After : Sep 10 02:45:56 2026 GMT Subject: CN=6a98df65-326d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:34:b6:f1:73:5f:93:8f:8f:7b:fd:a7:fb: e8:dc:6c:2f:3f:5b:72:ee:3d:e2:53:e5:2a:bd:4c: 74:d7:ae:e1:13:41:03:ea:38:5f:3a:9e:61:0d:f7: 4d:50:27:f1:29:34:4a:34:2f:92:2f:72:15:b6:cc: ad:6d:49:08:3a:01:23:94:8b:af:48:48:07:95:7c: 5f:56:cf:13:af:c0:ac:27:8b:19:71:55:48:49:29: f3:5a:99:ee:c9:1e:7f:9a:72:8c:0b:e8:52:12:99: fc:e1:d9:fb:57:d7:09:34:65:52:1b:3f:17:77:0d: ad:d8:9f:42:53:c5:47:25:71:ec:e6:f7:b6:55:4b: e0:1c:8a:99:09:e7:75:90:74:e3:ea:5f:8f:99:a9: a6:3c:f3:8b:ab:47:52:c7:2f:23:ed:1d:dd:e0:cc: 8d:54:21:47:7f:16:f0:f4:bf:35:1a:07:25:a7:f9: 8f:77:06:7a:81:aa:f8:0c:b9:e0:b2:e5:e1:82:ea: 05:8a:25:45:e4:bc:07:d3:8f:0f:0c:31:7c:9e:7e: 35:31:de:10:be:1b:90:ce:1f:c2:b8:34:43:2e:94: 03:bd:20:95:34:54:9a:73:8c:e1:c2:d7:a4:b6:e8: bf:b0:0d:53:cc:cb:88:86:26:de:97:eb:a4:e0:f5: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F6:64:5C:2C:FB:BB:3A:7F:54:71:4C:72:C8:C7:94:23:EF:9E:49 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f4:14:4c:a4:1a:d6:3a:22:2c:d0:f0:b7:64:69:c3:ed:8a: 6a:7e:e2:ba:c4:f8:04:80:49:29:7c:9a:76:c3:f9:04:48:ae: 98:42:3a:38:bd:7d:fb:c9:48:4f:a5:6e:27:85:da:81:e3:5d: f4:02:69:f2:72:aa:ee:84:c1:45:38:18:bb:c7:bd:48:97:8c: 2a:b6:2d:cd:c2:6b:97:27:b9:19:dc:76:8f:c4:d4:2a:26:51: 9f:cc:ad:61:81:8f:68:a1:b4:c4:64:ba:ab:7b:d0:9e:cd:61: f7:71:5b:4f:c1:00:47:db:93:63:44:67:9c:4f:0b:ff:92:5b: 4b:5b:7d:f9:a9:09:c2:c1:68:84:e6:7a:83:67:91:d7:5f:39: ee:f9:21:9f:9c:5a:37:b1:eb:e3:03:f3:9d:7b:7a:a2:1f:5e: 2d:09:46:ef:4d:0a:75:1c:58:e2:ce:78:0d:a8:d3:83:93:5a: 73:6d:7a:15:df:2c:0a:a1:af:e4:5f:69:a5:56:3a:37:99:bf: 83:7d:6a:64:f1:ee:8a:92:dd:90:3a:f3:ed:10:74:50:dd:0e: 68:dc:18:a5:84:e7:49:96:99:7d:22:ec:57:88:29:16:05:34: e5:b3:f9:33:3c:ff:87:da:da:39:e6:2f:ae:96:fa:13:b2:ca: af:cc:65:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjYwOTAzMDI0NTU2WhcNMjYwOTEwMDI0NTU2WjAYMRYwFAYD VQQDEw02YTk4ZGY2NS0zMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs80tvFzX5OPj3v9p/vo3GwvP1ty7j3iU+UqvUx0167hE0ED6jhfOp5hDfdN UCfxKTRKNC+SL3IVtsytbUkIOgEjlIuvSEgHlXxfVs8Tr8CsJ4sZcVVISSnzWpnu yR5/mnKMC+hSEpn84dn7V9cJNGVSGz8Xdw2t2J9CU8VHJXHs5ve2VUvgHIqZCed1 kHTj6l+PmammPPOLq0dSxy8j7R3d4MyNVCFHfxbw9L81Ggclp/mPdwZ6gar4DLng suXhguoFiiVF5LwH048PDDF8nn41Md4QvhuQzh/CuDRDLpQDvSCVNFSac4zhwtek tui/sA1TzMuIhibel+uk4PUxfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv2ZFws +7s6f1RxTHLIx5Qj755JMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArPQUTKQa1joiLNDwt2Rpw+2Kan7iusT4BIBJKXyadsP5BEiumEI6OL19+8lI T6VuJ4XageNd9AJp8nKq7oTBRTgYu8e9SJeMKrYtzcJrlye5Gdx2j8TUKiZRn8yt YYGPaKG0xGS6q3vQns1h93FbT8EAR9uTY0RnnE8L/5JbS1t9+akJwsFohOZ6g2eR 11857vkhn5xaN7Hr4wPznXt6oh9eLQlG700KdRxY4s54DajTg5Nac216Fd8sCqGv 5F9ppVY6N5m/g31qZPHuipLdkDrz7RB0UN0OaNwYpYTnSZaZfSLsV4gpFgU05bP5 Mzz/h9raOeYvrpb6E7LKr8xlIg== -----END CERTIFICATE-----Generated at Thu Sep 3 08:25:33 2026 by rpki-client