$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json) Hash identifier: +3Pg0IAlWXFF42g+XIi8U72iRzj4RfBh7hlNZiGn3gY= Subject key identifier: B7:76:A6:B6:49:2A:E6:ED:BD:27:6C:15:26:E7:A1:87:A8:D2:1D:9C Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft Manifest number: 0113 Signing time: Sat 03 Oct 2026 06:40:36 +0000 Manifest this update: Sat 03 Oct 2026 06:40:36 +0000 Manifest next update: Sat 10 Oct 2026 06:40:36 +0000 Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: WQm/L8yyWgrn+c3Fa5Xa4IkN5zIsA2/js5m6VXyia38=) 2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A Validity Not Before: Oct 3 06:40:36 2026 GMT Not After : Oct 10 06:40:36 2026 GMT Subject: CN=6ac0a364-cce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:98:31:b9:ce:c4:3d:14:bc:9a:1d:8b:55: 66:73:56:40:91:56:07:7d:ad:4a:14:2d:3f:cc:5c: 60:3f:9f:f0:78:9c:6b:02:9a:92:33:a9:66:1c:1f: 0e:e1:e9:5f:3f:0d:0f:c6:2e:44:f9:25:2e:a9:bb: 43:4c:a8:e6:70:90:c6:6f:ea:5f:94:25:4e:dd:3b: b6:80:0f:a4:53:32:3d:05:4e:63:51:5d:7a:b5:89: 12:51:cd:4f:b3:8f:66:45:ec:c5:45:21:70:13:2e: 6c:f5:34:30:e8:66:86:e7:95:12:9c:06:91:ed:7d: 68:6d:66:ca:07:27:82:35:82:ee:50:2d:f9:8e:53: f5:9c:fd:b6:8e:ae:31:dc:1d:9b:75:55:a7:97:4a: 24:fd:c5:86:7b:3b:ae:6b:fa:86:cb:1d:6c:24:67: 69:d0:4d:b6:d2:b2:af:07:fb:12:d3:2d:f9:fb:49: e7:f9:8c:6d:10:d0:b7:c8:60:12:6c:fa:b3:a2:eb: c6:1f:97:16:59:2f:95:13:26:9f:c5:46:67:c2:c2: 32:fd:b0:0d:7c:ed:a6:f3:d0:06:67:85:91:cd:99: 86:48:7c:f6:9a:8a:98:bb:e1:f4:35:25:01:d3:a5: 81:1e:63:d3:e9:a4:15:61:e2:0b:db:b9:de:f5:ee: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:76:A6:B6:49:2A:E6:ED:BD:27:6C:15:26:E7:A1:87:A8:D2:1D:9C X509v3 Authority Key Identifier: keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:bf:d1:aa:e5:77:40:69:86:57:02:c3:a9:25:0f:7f:89:28: 40:a0:99:75:27:8d:94:88:b4:d9:94:5f:1d:52:17:4e:12:21: fc:04:1a:d7:a5:b5:3a:68:17:6c:a2:d3:d8:8c:98:1c:06:5c: d6:d5:70:54:9b:e8:19:17:2f:2e:b2:0f:f9:17:d6:f2:04:ff: fe:fb:2b:de:95:9c:54:31:fb:be:07:9a:aa:5c:50:37:85:af: b7:a1:3b:2a:02:e1:d6:77:aa:7e:c9:86:fb:9b:ba:ef:f0:35: 44:57:9b:55:9c:34:a5:05:26:3f:d9:b4:d1:e9:91:88:7c:5f: 15:ed:da:c0:a8:71:64:2b:06:dd:6d:7f:29:da:90:a4:bf:84: dd:2f:21:97:93:94:41:09:d7:35:4e:c6:50:6b:07:16:81:94: f9:3d:c4:c8:48:a8:a8:83:c7:f7:5a:10:1f:f0:2a:21:e3:05: 2e:a6:66:b9:f6:de:60:d8:eb:5f:a4:40:fc:0c:9a:da:63:57: 93:47:8d:45:b3:e5:d3:52:ab:c9:c0:a8:d4:fa:26:b3:73:74: bf:63:59:be:6d:c1:69:c8:5d:47:c7:cd:b9:ac:e1:24:06:5f: 9e:c5:f6:9a:1c:61:9d:bb:7e:b3:e4:04:b3:be:c6:a1:1a:14: 5c:bb:bb:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4NTIxMTAvBgNVBAUTKDg3NUI2MTc0MENEMzcwQkQ0QjRBNEY2QUVBMEE4NjA4 Mzg4REJBOEEwHhcNMjYxMDAzMDY0MDM2WhcNMjYxMDEwMDY0MDM2WjAYMRYwFAYD VQQDEw02YWMwYTM2NC1jY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rmYMbnOxD0UvJodi1Vmc1ZAkVYHfa1KFC0/zFxgP5/weJxrApqSM6lmHB8O 4elfPw0Pxi5E+SUuqbtDTKjmcJDGb+pflCVO3Tu2gA+kUzI9BU5jUV16tYkSUc1P s49mRezFRSFwEy5s9TQw6GaG55USnAaR7X1obWbKByeCNYLuUC35jlP1nP22jq4x 3B2bdVWnl0ok/cWGezuua/qGyx1sJGdp0E220rKvB/sS0y35+0nn+YxtENC3yGAS bPqzouvGH5cWWS+VEyafxUZnwsIy/bANfO2m89AGZ4WRzZmGSHz2moqYu+H0NSUB 06WBHmPT6aQVYeIL27ne9e6sYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLd2prZJ KubtvSdsFSbnoYeo0h2cMB8GA1UdIwQYMBaAFIdbYXQM03C9S0pPauoKhgg4jbqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTg1Mi9FOTU0RkQ3ODFC QTIxMUYwOEIyOUU5MkNDNEY5QUUwMi9oMXRoZEF6VGNMMUxTazlxNmdxR0NEaU51 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdGhkQXpUY0wxTFNrOXE2Z3FHQ0RpTnVvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTg1Mi9FOTU0RkQ3ODFCQTIxMUYwOEIyOUU5MkNDNEY5QUUwMi9oMXRoZEF6VGNM MUxTazlxNmdxR0NEaU51b28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAr/RquV3QGmGVwLDqSUPf4koQKCZdSeNlIi02ZRfHVIXThIh/AQa16W1OmgX bKLT2IyYHAZc1tVwVJvoGRcvLrIP+RfW8gT//vsr3pWcVDH7vgeaqlxQN4Wvt6E7 KgLh1neqfsmG+5u67/A1RFebVZw0pQUmP9m00emRiHxfFe3awKhxZCsG3W1/KdqQ pL+E3S8hl5OUQQnXNU7GUGsHFoGU+T3EyEioqIPH91oQH/AqIeMFLqZmufbeYNjr X6RA/Aya2mNXk0eNRbPl01KrycCo1Poms3N0v2NZvm3BachdR8fNuazhJAZfnsX2 mhxhnbt+s+QEs77GoRoUXLu7Wg== -----END CERTIFICATE-----Generated at Mon Oct 5 06:58:06 2026 by rpki-client