$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json) Hash identifier: Vxcj3wFp2uY4jDT3Y5B74TRmsRnDkx2crn67BtrN8ig= Subject key identifier: C0:09:40:61:E4:3B:0C:3C:6A:DF:9B:7C:EC:5A:1A:86:56:1C:B0:26 Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft Manifest number: 0D63 Signing time: Tue 06 Oct 2026 18:10:29 +0000 Manifest this update: Tue 06 Oct 2026 18:10:28 +0000 Manifest next update: Tue 13 Oct 2026 18:10:28 +0000 Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: RZYZ56v6c705b51bKHU8vu1iPXS3Vfgld0tPZFnbUK0=) 2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Oct 6 18:10:28 2026 GMT Not After : Oct 13 18:10:28 2026 GMT Subject: CN=6ac53994-05f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:ed:57:6d:34:c1:ef:a5:9b:36:bd:b4:bf: e0:b2:41:4c:5f:ac:e8:3e:3b:51:24:a1:77:c1:bb: c1:cc:0c:71:7e:99:1a:00:cf:3c:98:6a:63:19:ba: 5a:4a:8d:0d:b3:74:e4:6f:83:ae:bb:f8:8f:0f:a9: 20:9c:c2:6c:b8:bc:3e:fc:9c:6b:55:ed:e9:ca:9f: a9:23:0c:1f:aa:78:1b:73:06:ba:c3:d1:f3:17:77: 91:90:99:5d:14:12:49:36:9c:a4:5f:2e:0a:81:e5: 25:1c:c0:60:20:ee:7f:ad:69:8e:d4:7d:75:94:f7: bb:92:ec:94:cf:e5:cb:0c:bc:48:6a:a1:c2:04:be: 7a:1d:78:e1:bf:b1:2c:e1:ea:b0:02:65:7f:7b:4c: 06:f8:df:17:47:b2:43:36:74:8c:e5:2a:7e:e6:8a: 2d:63:f0:09:95:32:cd:bc:f4:fb:a6:54:16:5c:30: f2:ab:a9:ba:99:7c:26:52:52:08:45:86:f9:32:e5: 50:05:96:a3:81:7c:8f:d3:0a:5b:56:c9:7a:6e:45: b7:6a:6c:77:6d:e8:b4:4c:99:9d:fd:8d:b3:4f:c5: d0:44:74:22:ae:c1:17:13:01:2d:b3:37:3a:a3:7f: 9a:e0:4b:5c:44:c5:dd:69:67:ae:54:1f:ea:07:77: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:40:61:E4:3B:0C:3C:6A:DF:9B:7C:EC:5A:1A:86:56:1C:B0:26 X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:32:75:2b:15:e8:e6:45:2b:5f:b1:b3:f5:ec:c0:77:e6:65: bf:57:3d:43:16:64:ff:15:6b:e7:31:3d:9d:4b:20:91:e3:95: ff:9e:8d:e0:c8:a1:71:fb:86:32:c3:4f:e7:2e:33:a2:ed:61: 6a:27:ff:6e:cf:d6:54:36:72:69:cd:eb:9f:7d:36:33:5b:12: 67:84:0b:0f:07:5f:72:30:a9:64:5b:b8:b6:9d:ef:b0:0b:d9: f6:a7:21:88:56:71:58:32:04:85:e5:b7:de:c5:f5:c5:22:66: b5:dd:ef:f8:e9:71:85:fb:9a:5a:dd:45:de:2b:3e:be:65:88: dd:cb:66:f2:17:7b:c1:8f:7c:08:6d:25:9a:01:bc:9e:da:e6: ec:9a:fb:86:3f:c0:81:92:2e:3d:88:a0:7a:1b:d0:34:da:00: 24:62:04:c0:3f:6a:06:2b:a9:4d:9a:30:e2:b8:cf:9d:c3:da: 91:f6:7e:3f:e1:e0:a9:79:0b:f1:fb:5c:10:33:2b:56:ac:0e: 6d:f6:67:19:c6:42:ec:7e:62:87:f7:3f:35:bc:24:7b:fb:76: d2:3c:0a:a9:4d:34:e1:e5:b6:28:e8:f4:27:b7:8e:df:3a:5b: 3d:c9:f3:70:d6:d2:8e:83:91:4e:e3:14:4f:26:25:b0:14:e9: 74:f7:93:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjYxMDA2MTgxMDI4WhcNMjYxMDEzMTgxMDI4WjAYMRYwFAYD VQQDEw02YWM1Mzk5NC0wNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi9ntV200we+lmza9tL/gskFMX6zoPjtRJKF3wbvBzAxxfpkaAM88mGpjGbpa So0Ns3Tkb4Ouu/iPD6kgnMJsuLw+/JxrVe3pyp+pIwwfqngbcwa6w9HzF3eRkJld FBJJNpykXy4KgeUlHMBgIO5/rWmO1H11lPe7kuyUz+XLDLxIaqHCBL56HXjhv7Es 4eqwAmV/e0wG+N8XR7JDNnSM5Sp+5ootY/AJlTLNvPT7plQWXDDyq6m6mXwmUlII RYb5MuVQBZajgXyP0wpbVsl6bkW3amx3bei0TJmd/Y2zT8XQRHQirsEXEwEtszc6 o3+a4EtcRMXdaWeuVB/qB3dpJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAJQGHk Oww8at+bfOxaGoZWHLAmMB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDJDRS8yQjBFNzI0MDAxMzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJz UGM4UzhIbGNyWERrd0oyV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAozJ1KxXo5kUrX7Gz9ezAd+Zlv1c9QxZk/xVr5zE9nUsgkeOV/56N4MihcfuG MsNP5y4zou1haif/bs/WVDZyac3rn302M1sSZ4QLDwdfcjCpZFu4tp3vsAvZ9qch iFZxWDIEheW33sX1xSJmtd3v+OlxhfuaWt1F3is+vmWI3ctm8hd7wY98CG0lmgG8 ntrm7Jr7hj/AgZIuPYigehvQNNoAJGIEwD9qBiupTZow4rjPncPakfZ+P+HgqXkL 8ftcEDMrVqwObfZnGcZC7H5ih/c/Nbwke/t20jwKqU004eW2KOj0J7eO3zpbPcnz cNbSjoORTuMUTyYlsBTpdPeT5Q== -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:31 2026 by rpki-client