$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: gUgzJCyi8K3XueZsxemUKX8szd/VGRXq7hTXotM0GAs= Subject key identifier: 63:53:0F:55:7D:C8:54:C7:A0:40:52:53:8A:E4:95:F6:F9:20:9D:82 Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: 0221 Signing time: Sat 03 Oct 2026 03:32:32 +0000 Manifest this update: Sat 03 Oct 2026 03:32:32 +0000 Manifest next update: Sat 10 Oct 2026 03:32:32 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: wfy5ApauMlgBdHIhkojwWgztl9Lm4UvDpRvIEi3qLmA=) 2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: bPTiYTxBxLwgfGF9jUdmUbDxjsKoq1F4YRnN4H89Q34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: Oct 3 03:32:32 2026 GMT Not After : Oct 10 03:32:32 2026 GMT Subject: CN=6ac07750-6c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:64:ec:ec:b3:cb:15:ac:bf:ac:d5:48:9f: a7:36:74:f7:91:fd:46:af:e5:c6:4e:e9:50:1b:14: bd:de:20:12:70:89:4c:81:43:50:06:2e:21:7a:70: ca:ff:46:13:5a:59:6a:dc:ab:1d:1e:61:fd:c4:ae: e8:fd:02:e9:29:21:c8:55:01:4f:04:88:bd:45:d0: 57:9f:9f:1e:a2:da:85:fa:f5:82:8a:2e:13:d8:3d: 1a:04:b4:44:34:1e:84:c3:58:e0:f5:82:68:79:97: 22:99:e7:ee:a3:de:6e:6f:e2:87:28:62:5a:2b:32: 29:9c:54:c1:cd:23:18:cb:c2:9f:f7:27:ae:7f:fa: 9e:56:0c:3f:c4:17:39:e8:ce:a0:4a:6c:e7:72:67: 98:3b:f8:89:f2:d2:d6:c1:63:72:d4:7b:68:b7:c2: c9:66:e5:da:d9:61:17:d6:dc:98:bc:ee:b8:70:02: be:3f:40:bd:da:e0:4f:a7:14:05:3c:3b:58:bc:ae: 66:71:d2:77:0d:15:67:b6:81:6d:5f:32:b0:67:17: fd:bb:ea:9e:87:d4:aa:c9:04:f5:f4:22:ce:ce:ae: 8b:41:39:9a:ef:0c:82:a5:66:29:ca:07:87:b6:78: 3e:79:e8:2f:c2:eb:41:39:7e:c7:dc:14:01:84:67: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:0F:55:7D:C8:54:C7:A0:40:52:53:8A:E4:95:F6:F9:20:9D:82 X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:97:07:d3:ae:1e:35:dc:32:0f:20:bc:93:d5:08:de:44: 13:20:51:c6:1c:98:eb:44:93:92:a7:0b:0d:5f:44:48:28:d9: c5:f3:81:be:68:d5:c3:cd:cb:16:eb:d2:91:62:a1:37:df:a1: 87:10:ef:d0:04:7a:f5:1e:55:75:a5:f2:09:ab:20:24:09:29: 1a:07:a2:8c:07:9a:2f:41:3a:42:c2:ee:73:70:ed:c3:2a:8a: 06:8d:78:81:06:85:16:b8:83:87:17:66:7a:99:45:6f:41:20: ad:fb:70:e3:56:2e:6b:6d:b1:0e:ec:20:85:65:69:57:35:7d: 25:75:e9:fd:9e:13:81:16:c8:6d:f8:26:8c:6f:14:39:c1:9c: 66:fb:d1:3e:3e:77:99:23:0e:48:cc:03:b3:e3:03:a8:a0:3a: 40:47:32:92:e3:c4:b1:07:58:d8:69:a5:32:64:33:47:05:1c: e5:08:cc:07:ae:d7:c5:27:12:66:af:6f:e8:57:2b:02:ae:7e: de:91:d5:35:50:5f:b6:37:85:9e:bb:79:36:f3:2d:a8:14:de: 8e:97:a7:1f:8a:a1:52:45:d7:cf:00:e7:11:54:2f:8a:78:19: 2b:e4:0f:56:f7:20:9b:ba:12:52:a2:bb:3e:b1:ee:45:1f:5c: b9:ae:30:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz NTE5M0Y3NzIwHhcNMjYxMDAzMDMzMjMyWhcNMjYxMDEwMDMzMjMyWjAYMRYwFAYD VQQDEw02YWMwNzc1MC02YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ1k7OyzyxWsv6zVSJ+nNnT3kf1Gr+XGTulQGxS93iAScIlMgUNQBi4henDK /0YTWllq3KsdHmH9xK7o/QLpKSHIVQFPBIi9RdBXn58eotqF+vWCii4T2D0aBLRE NB6Ew1jg9YJoeZcimefuo95ub+KHKGJaKzIpnFTBzSMYy8Kf9yeuf/qeVgw/xBc5 6M6gSmzncmeYO/iJ8tLWwWNy1Htot8LJZuXa2WEX1tyYvO64cAK+P0C92uBPpxQF PDtYvK5mcdJ3DRVntoFtXzKwZxf9u+qeh9SqyQT19CLOzq6LQTma7wyCpWYpygeH tng+eegvwutBOX7H3BQBhGeD+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNTD1V9 yFTHoEBSU4rklfb5IJ2CMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5 QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5mXB9OuHjXcMg8gvJPVCN5EEyBRxhyY60STkqcLDV9ESCjZxfOBvmjVw83L FuvSkWKhN9+hhxDv0AR69R5VdaXyCasgJAkpGgeijAeaL0E6QsLuc3DtwyqKBo14 gQaFFriDhxdmeplFb0Egrftw41Yua22xDuwghWVpVzV9JXXp/Z4TgRbIbfgmjG8U OcGcZvvRPj53mSMOSMwDs+MDqKA6QEcykuPEsQdY2GmlMmQzRwUc5QjMB67XxScS Zq9v6FcrAq5+3pHVNVBftjeFnrt5NvMtqBTejpenH4qhUkXXzwDnEVQvingZK+QP Vvcgm7oSUqK7PrHuRR9cua4w8w== -----END CERTIFICATE-----Generated at Sun Oct 4 08:19:07 2026 by rpki-client