$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: 8ZerZkwvXwQjxzJE4F5OfjYOzoMVTByVF0tdsQ+wuDQ= Subject key identifier: F1:F5:08:74:A7:DB:16:50:DD:E3:1A:85:FF:DB:E0:05:11:11:CD:C6 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0172 Signing time: Mon 26 Oct 2026 19:08:19 +0000 Manifest this update: Mon 26 Oct 2026 19:08:19 +0000 Manifest next update: Mon 02 Nov 2026 19:08:19 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: jVfrzni/iNPiUlD4ut3xr0Var8ILU7vgOIXmp8EtEwM=) 2: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 3: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) 4: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Oct 26 19:08:19 2026 GMT Not After : Nov 2 19:08:19 2026 GMT Subject: CN=6adfa523-ba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:87:c7:43:e7:46:22:3b:a9:4d:f2:ed:78: 58:1a:f7:af:5d:62:0d:8d:d2:a1:55:ca:06:6f:9d: 7a:7f:5c:d9:4c:94:73:a2:d2:96:bc:7d:3e:29:29: 44:5b:3b:69:96:01:64:71:70:d8:d9:26:24:c8:39: 8f:55:78:00:db:f7:f0:d7:e2:46:78:80:30:1b:62: 62:54:46:01:11:8e:99:b3:4c:86:ab:50:41:c5:70: 68:32:b9:39:1b:ad:c4:f2:ef:83:11:72:97:bf:a0: f4:94:0b:55:f4:05:1a:de:0a:02:58:10:55:7a:bd: bc:a4:4d:2f:3e:34:9a:58:33:0a:77:6f:38:53:07: fe:29:af:89:4c:0b:ac:fc:b2:34:18:19:57:04:4d: a5:44:35:e5:04:4e:24:5b:ec:0a:df:72:d9:0e:55: 1c:99:81:55:23:b1:1f:a5:59:43:96:3f:31:97:02: c5:60:ca:c6:c8:eb:c7:5d:81:d2:23:3f:5a:85:28: 9e:81:3b:c8:cc:97:83:d5:4c:7f:4c:d1:e6:31:6d: be:fc:04:fa:66:24:14:b7:9e:53:0c:ab:6e:32:20: 8c:ad:19:56:57:5f:bd:1d:9b:9a:a1:34:f3:6f:e1: 2d:86:18:b0:8d:c0:e1:22:85:4e:72:d5:c2:92:74: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F5:08:74:A7:DB:16:50:DD:E3:1A:85:FF:DB:E0:05:11:11:CD:C6 X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0b:09:6d:9d:55:a7:66:5d:70:b6:93:80:17:2c:7e:21:70: c6:b2:a5:8b:c0:72:3f:79:cd:77:b9:78:1c:32:48:d9:f8:cd: 70:09:9d:4a:a2:c7:5e:e0:8b:9f:85:56:62:b4:67:45:d0:0a: d6:00:51:f7:63:7f:ca:8a:95:ef:61:97:61:9f:eb:80:1a:c5: 58:c3:34:cc:42:5b:4c:d0:63:bb:c4:c1:dd:46:28:15:68:ac: 38:20:8b:36:31:4f:6c:75:2a:0a:94:cd:b2:71:f1:28:3c:06: a5:52:bc:1a:56:dc:66:0b:f1:59:0c:3d:6d:d3:36:f5:0e:5b: 76:c6:c6:2c:bb:19:b1:e6:07:2a:6b:2b:c1:19:da:66:64:db: d3:64:5b:bc:f1:cf:32:05:94:03:d0:ba:65:cb:d2:b6:08:5c: aa:55:66:0a:e1:38:ed:2e:9d:2b:27:c3:1e:f7:10:bc:1b:88: 4b:73:19:b6:cf:5a:2e:99:88:a0:6c:89:7a:c6:4c:f8:32:54: 84:1f:06:15:61:2b:26:3b:8a:f7:4d:f3:df:34:22:20:fc:76: 19:00:6a:18:ac:5e:00:3e:1a:aa:95:ff:68:65:29:48:a4:8c: 18:1c:b9:b2:82:0b:0e:a2:82:c0:41:cd:07:5c:89:da:b2:d3: 49:d3:21:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYxMDI2MTkwODE5WhcNMjYxMTAyMTkwODE5WjAYMRYwFAYD VQQDEw02YWRmYTUyMy1iYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOuHx0PnRiI7qU3y7XhYGvevXWINjdKhVcoGb516f1zZTJRzotKWvH0+KSlE WztplgFkcXDY2SYkyDmPVXgA2/fw1+JGeIAwG2JiVEYBEY6Zs0yGq1BBxXBoMrk5 G63E8u+DEXKXv6D0lAtV9AUa3goCWBBVer28pE0vPjSaWDMKd284Uwf+Ka+JTAus /LI0GBlXBE2lRDXlBE4kW+wK33LZDlUcmYFVI7EfpVlDlj8xlwLFYMrGyOvHXYHS Iz9ahSiegTvIzJeD1Ux/TNHmMW2+/AT6ZiQUt55TDKtuMiCMrRlWV1+9HZuaoTTz b+EthhiwjcDhIoVOctXCknRp4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPH1CHSn 2xZQ3eMahf/b4AUREc3GMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASwsJbZ1Vp2ZdcLaTgBcsfiFwxrKli8ByP3nNd7l4HDJI2fjNcAmdSqLHXuCL n4VWYrRnRdAK1gBR92N/yoqV72GXYZ/rgBrFWMM0zEJbTNBju8TB3UYoFWisOCCL NjFPbHUqCpTNsnHxKDwGpVK8GlbcZgvxWQw9bdM29Q5bdsbGLLsZseYHKmsrwRna ZmTb02RbvPHPMgWUA9C6ZcvStghcqlVmCuE47S6dKyfDHvcQvBuIS3MZts9aLpmI oGyJesZM+DJUhB8GFWErJjuK903z3zQiIPx2GQBqGKxeAD4aqpX/aGUpSKSMGBy5 soILDqKCwEHNB1yJ2rLTSdMhOw== -----END CERTIFICATE-----Generated at Tue Oct 27 04:43:14 2026 by rpki-client