$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: 3ZRgZ1DFaUpWSrdKm8HwnDdbeXI/LSg+zWG5UEt8xOI= Subject key identifier: E2:76:04:95:A4:AE:3E:D9:C9:B3:BD:6D:1C:74:D3:C4:6B:F6:33:92 Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 3613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35CE Signing time: Fri 04 Sep 2026 14:26:59 +0000 Manifest this update: Fri 04 Sep 2026 14:26:59 +0000 Manifest next update: Fri 11 Sep 2026 14:26:59 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: PXBrqjPOERsZqQ8zKFXCuJwbnZtqUTeFwPxX+cFMlGQ=) 2: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 3: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) 4: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) 5: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13843 (0x3613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Sep 4 14:26:59 2026 GMT Not After : Sep 11 14:26:59 2026 GMT Subject: CN=6a9ad533-4d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:58:da:54:ee:53:76:34:de:7c:77:cf:f2:6f: 33:55:25:f1:22:d8:6d:89:46:0e:6c:f4:7f:7d:d9: 17:8d:f9:c4:10:7c:6e:5e:6f:5d:78:69:42:cb:f9: c8:11:42:a6:2b:48:17:89:67:29:f0:36:cf:2a:e6: 65:77:b0:ae:b0:3d:30:1d:cf:7a:70:3b:fd:30:d9: 9e:84:2e:df:1e:e3:a6:37:eb:15:9a:0e:01:47:3b: ef:a1:b8:ae:23:90:cc:a4:7d:42:2c:4a:8e:93:a9: ea:86:a4:39:64:7f:bd:36:52:3a:06:38:f4:39:94: a6:17:59:be:73:0c:c2:8d:c1:69:3c:e8:12:7f:4a: 1a:cd:6e:73:f7:39:1f:a5:20:67:f3:7f:74:6f:27: 58:b9:fa:8a:b1:c9:a8:f3:56:1c:51:b6:b3:39:d2: af:92:7c:71:fb:3e:28:8f:3a:78:c8:1c:96:e1:05: c2:c7:3e:4f:d3:29:15:4d:c6:46:f7:00:5c:37:15: 56:e2:79:1d:be:c9:d7:2c:1d:2b:ec:f2:85:4e:ad: fd:8f:c8:31:f7:9a:f5:55:1f:6b:d9:00:91:c4:78: db:50:d0:a3:5e:3c:9f:b0:33:a6:9d:bb:87:f4:6a: 14:6c:49:82:bf:55:70:b8:a2:6f:66:ea:5e:8b:0d: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:04:95:A4:AE:3E:D9:C9:B3:BD:6D:1C:74:D3:C4:6B:F6:33:92 X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:36:8f:4e:7b:40:fa:fb:6c:a9:82:c6:bd:4d:8c:41:ad:f4: 9b:06:1a:70:e5:60:bd:59:a1:77:da:19:0e:8a:49:64:2a:36: a6:55:ee:80:0e:96:16:99:62:cd:76:33:fe:84:95:e5:53:ea: a0:8c:ac:28:fe:f8:99:74:5f:85:0c:50:8c:4f:92:e1:b4:8e: 55:ac:e5:de:2b:67:bf:e5:9b:c0:9d:b4:36:e8:82:a1:56:59: 81:da:b9:c4:2c:60:40:7d:b6:66:92:4b:e6:76:0a:ac:b7:0c: 24:77:6e:d1:19:3d:70:33:d4:15:1b:4f:a3:be:f9:c2:20:6f: af:df:cf:8e:d4:d8:85:df:c8:84:8a:45:a1:63:0a:c0:6c:43: 84:cd:78:f1:c3:7d:2b:65:ee:c5:01:aa:f2:63:04:8b:64:f8: 56:d0:5c:90:2d:d1:b0:c2:b1:9c:e9:98:4a:10:de:a4:35:de: d7:c8:5f:69:a6:90:05:11:9b:44:4a:75:34:1f:f1:38:26:f7: 9c:8f:fc:5c:97:2e:89:6f:12:25:41:0c:ba:95:b9:81:1e:c4: e4:fa:1c:e9:11:77:1b:02:9f:ae:dc:97:08:65:ea:fe:86:ea: 94:0e:4e:b1:8b:9f:13:65:6b:90:6b:96:f5:6f:eb:51:c4:41: 4f:4d:55:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYwOTA0MTQyNjU5WhcNMjYwOTExMTQyNjU5WjAYMRYwFAYD VQQDEw02YTlhZDUzMy00ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkljaVO5TdjTefHfP8m8zVSXxIthtiUYObPR/fdkXjfnEEHxuXm9deGlCy/nI EUKmK0gXiWcp8DbPKuZld7CusD0wHc96cDv9MNmehC7fHuOmN+sVmg4BRzvvobiu I5DMpH1CLEqOk6nqhqQ5ZH+9NlI6Bjj0OZSmF1m+cwzCjcFpPOgSf0oazW5z9zkf pSBn8390bydYufqKscmo81YcUbazOdKvknxx+z4ojzp4yByW4QXCxz5P0ykVTcZG 9wBcNxVW4nkdvsnXLB0r7PKFTq39j8gx95r1VR9r2QCRxHjbUNCjXjyfsDOmnbuH 9GoUbEmCv1VwuKJvZupeiw17ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJ2BJWk rj7ZybO9bRx008Rr9jOSMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAejaPTntA+vtsqYLGvU2MQa30mwYacOVgvVmhd9oZDopJZCo2plXugA6WFpli zXYz/oSV5VPqoIysKP74mXRfhQxQjE+S4bSOVazl3itnv+WbwJ20NuiCoVZZgdq5 xCxgQH22ZpJL5nYKrLcMJHdu0Rk9cDPUFRtPo775wiBvr9/PjtTYhd/IhIpFoWMK wGxDhM148cN9K2XuxQGq8mMEi2T4VtBckC3RsMKxnOmYShDepDXe18hfaaaQBRGb REp1NB/xOCb3nI/8XJcuiW8SJUEMupW5gR7E5Poc6RF3GwKfrtyXCGXq/obqlA5O sYufE2VrkGuW9W/rUcRBT01Vag== -----END CERTIFICATE-----Generated at Sat Sep 5 02:54:16 2026 by rpki-client