$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: 1Cf8N3sOJMZfKhGYB1Kp+F5IP1fldcr9NaL/XJBrx9s= Subject key identifier: EE:7E:FE:F6:3F:33:85:72:BC:AD:67:FB:B9:28:B7:9C:CA:51:77:83 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0158 Signing time: Fri 04 Sep 2026 19:05:06 +0000 Manifest this update: Fri 04 Sep 2026 19:05:06 +0000 Manifest next update: Fri 11 Sep 2026 19:05:06 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: yXl+hfmOxC0KSNfRu7qG2qGZ5/SIS8EHRgrog5lFEvQ=) 2: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 3: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) 4: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Sep 4 19:05:06 2026 GMT Not After : Sep 11 19:05:06 2026 GMT Subject: CN=6a9b1662-0d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:2a:c1:c8:d4:c2:9e:bc:83:45:f2:af:57: a5:a6:df:2d:f4:2f:b4:6d:87:54:8e:cb:1f:e5:64: 62:ee:83:66:85:e6:74:7d:d0:35:8e:45:a3:45:37: a8:2e:45:6c:68:f2:f9:b4:5b:d6:df:fc:81:43:c6: a3:ad:b3:02:1f:4d:56:b9:9b:39:b5:08:53:7d:81: fb:2d:90:4c:ad:1a:e5:59:4c:4f:d4:3c:1a:73:58: bc:b0:ea:2e:5a:73:a5:4c:23:04:df:c3:4d:00:00: 96:54:d2:79:b2:92:e9:c2:a4:29:b5:7d:be:25:67: 10:9c:3d:24:7c:74:86:b3:50:12:78:f3:3d:de:66: f0:35:ba:96:c0:5d:7a:c3:9a:c7:f7:b4:7c:d2:22: 90:d6:4a:a6:61:a2:71:c8:5b:45:7b:2f:08:66:5e: 43:77:5a:4c:4e:25:d0:a6:a2:c0:8d:b4:2e:44:37: 71:1d:a8:2f:9b:44:c1:60:19:3e:59:5c:cb:fd:e4: d1:88:33:38:77:28:7b:35:a7:d6:3e:b4:44:df:34: 0d:a4:b8:ef:cf:fb:b6:41:e0:79:88:14:9f:11:84: 8a:b4:4b:6f:a9:31:a9:29:bc:ad:83:13:21:7f:70: 25:05:d1:bf:78:5d:cb:1b:ff:8d:37:f7:ff:bd:d1: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:FE:F6:3F:33:85:72:BC:AD:67:FB:B9:28:B7:9C:CA:51:77:83 X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a7:f1:5e:86:53:bf:73:1f:2f:7f:3f:ed:a7:07:e6:ee:05: 40:67:ad:93:b7:28:be:21:8c:c4:b3:58:1e:27:87:9a:05:11: 51:4d:61:2d:50:20:21:63:b2:87:38:02:05:58:72:67:2f:d7: 29:0c:8f:1b:97:08:af:bc:85:20:a0:d1:3f:01:3c:06:ad:74: 44:31:82:9e:28:67:d8:18:00:e0:90:72:7e:ec:b6:bc:e7:47: cd:f9:1e:8a:86:99:88:af:23:df:22:bc:63:47:c9:35:15:49: ba:d3:81:e1:f1:f2:f3:fe:54:37:5f:aa:36:c8:fe:d2:cd:05: e5:12:8e:1b:78:61:4b:1b:bc:f5:3d:cb:f6:ba:d4:07:a6:5f: a6:14:64:75:ca:bc:bc:63:39:b9:31:b7:f0:6a:f2:7c:c3:f7: be:78:ef:09:0b:69:96:0d:75:b7:ae:79:15:c6:ad:0f:b2:92: d0:a0:2b:10:5a:ce:91:0f:96:9e:d7:47:0b:e9:3e:9c:31:4e: f7:99:a6:54:83:16:14:dc:f6:5a:12:76:77:5c:2e:53:e3:5a: 43:c2:c2:16:39:3c:1b:36:65:f1:83:6c:51:68:4f:80:07:98: 87:e9:17:c7:e7:81:0e:fc:a4:32:bf:85:31:ba:7a:18:cb:fc: c9:b2:67:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwOTA0MTkwNTA2WhcNMjYwOTExMTkwNTA2WjAYMRYwFAYD VQQDEw02YTliMTY2Mi0wZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/UqwcjUwp68g0Xyr1elpt8t9C+0bYdUjssf5WRi7oNmheZ0fdA1jkWjRTeo LkVsaPL5tFvW3/yBQ8ajrbMCH01WuZs5tQhTfYH7LZBMrRrlWUxP1Dwac1i8sOou WnOlTCME38NNAACWVNJ5spLpwqQptX2+JWcQnD0kfHSGs1ASePM93mbwNbqWwF16 w5rH97R80iKQ1kqmYaJxyFtFey8IZl5Dd1pMTiXQpqLAjbQuRDdxHagvm0TBYBk+ WVzL/eTRiDM4dyh7NafWPrRE3zQNpLjvz/u2QeB5iBSfEYSKtEtvqTGpKbytgxMh f3AlBdG/eF3LG/+NN/f/vdH4zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5+/vY/ M4VyvK1n+7kot5zKUXeDMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVKfxXoZTv3MfL38/7acH5u4FQGetk7coviGMxLNYHieHmgURUU1hLVAgIWOy hzgCBVhyZy/XKQyPG5cIr7yFIKDRPwE8Bq10RDGCnihn2BgA4JByfuy2vOdHzfke ioaZiK8j3yK8Y0fJNRVJutOB4fHy8/5UN1+qNsj+0s0F5RKOG3hhSxu89T3L9rrU B6ZfphRkdcq8vGM5uTG38GryfMP3vnjvCQtplg11t655FcatD7KS0KArEFrOkQ+W ntdHC+k+nDFO95mmVIMWFNz2WhJ2d1wuU+NaQ8LCFjk8GzZl8YNsUWhPgAeYh+kX x+eBDvykMr+FMbp6GMv8ybJnUw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:35:27 2026 by rpki-client