$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: 1z3xdWIPF/E7Btsfkf+V1xtwSfBzB0jFSKYjWPLMnvI= Subject key identifier: 8F:6F:B3:FC:A8:A7:A4:1D:54:B9:FC:49:E3:86:8B:E0:82:DD:CE:93 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 0438 Signing time: Sat 05 Sep 2026 00:01:02 +0000 Manifest this update: Sat 05 Sep 2026 00:01:01 +0000 Manifest next update: Sat 12 Sep 2026 00:01:01 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: lXhV4AGF1BV3uU3zfN4yu9vuI72UmszNuDjdfZxiaO8=) 2: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=) 3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=) 4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Sep 5 00:01:01 2026 GMT Not After : Sep 12 00:01:01 2026 GMT Subject: CN=6a9b5bbe-f3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:0f:6b:9d:4c:bb:d5:20:46:9a:d2:04:0b: 29:08:48:af:52:9f:8c:e3:83:ad:5f:1a:a3:fa:7d: 31:39:30:28:a9:ae:05:a0:ea:5c:3d:99:04:63:02: 0d:7b:5f:d0:db:e9:01:48:b6:36:fc:91:40:d9:d0: 66:89:74:d2:01:0d:66:02:4d:7c:b3:ed:8b:a0:53: 6f:c1:c7:4d:34:48:ad:f4:8c:a7:2b:b5:e0:f5:c3: c0:66:8b:95:86:42:4e:4e:b0:c3:47:b0:e6:38:c9: af:5f:bd:da:79:15:7e:d6:c1:b9:5b:f2:fa:15:03: 73:3c:7e:f0:ec:aa:7f:f6:22:5c:4f:55:91:f2:de: 6a:d6:80:5d:2a:ff:c1:67:10:18:0b:cd:f5:84:9e: 0c:2e:aa:8d:62:f4:b2:7c:82:f5:35:0a:b2:d7:d0: 80:1d:bc:ee:ec:15:23:53:a2:44:cf:a5:f2:0e:98: a3:02:fb:7c:64:18:2a:63:84:25:67:e5:6e:f0:93: dc:98:08:3e:98:7c:89:08:33:07:7d:1c:b6:dd:f6: 96:6a:28:39:ee:f7:8a:2e:88:06:02:a8:e9:a0:2d: 96:c3:fe:1e:71:d3:be:86:a0:61:58:af:51:94:6e: a6:c3:0d:72:97:a3:63:63:a9:5b:47:cd:81:01:86: 3b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:B3:FC:A8:A7:A4:1D:54:B9:FC:49:E3:86:8B:E0:82:DD:CE:93 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:81:f2:1a:32:3e:65:ef:25:6a:bf:c1:1c:29:3b:0c:f4:07: 8f:74:25:47:4e:6b:24:aa:4a:e4:61:65:c8:c8:24:4c:a4:05: 4d:6a:8f:49:7e:55:27:cf:3c:34:43:d8:53:5f:d1:69:74:60: a1:bf:c7:ac:2e:e3:0b:7e:88:93:ae:b5:01:c7:53:1e:f8:31: b5:e0:a2:2e:20:a3:e7:61:a8:6f:4e:60:5a:9d:24:5b:20:bf: 8c:27:dd:19:10:3e:f3:5c:7f:28:7a:3a:ef:85:29:c6:48:d2: 24:f3:0b:84:42:66:47:15:47:a3:10:f4:bc:5f:f8:2f:9c:57: 3d:90:7a:ab:bf:97:19:5e:bc:f5:11:1c:91:0e:3f:91:e7:62: d9:cf:d0:3f:34:e9:88:c6:75:c3:7d:78:88:26:d9:f9:7b:a6: d5:98:25:9f:7f:a3:26:ce:c2:ec:75:a8:a2:71:c0:bc:71:0f: fe:12:b0:69:2e:7d:e8:d6:be:9b:da:0b:2d:0a:7b:f9:da:e0: 3c:48:56:93:b8:e2:51:ca:15:55:d6:c2:d0:62:9e:92:8e:52: b8:22:3d:df:8b:e5:af:d1:d8:97:77:79:0a:9f:b5:40:cf:e9: ac:30:69:0c:24:f2:f4:3b:fc:30:d1:e7:57:1b:5a:73:99:81: 5c:8a:24:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYwOTA1MDAwMTAxWhcNMjYwOTEyMDAwMTAxWjAYMRYwFAYD VQQDEw02YTliNWJiZS1mM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3IPa51Mu9UgRprSBAspCEivUp+M44OtXxqj+n0xOTAoqa4FoOpcPZkEYwIN e1/Q2+kBSLY2/JFA2dBmiXTSAQ1mAk18s+2LoFNvwcdNNEit9IynK7Xg9cPAZouV hkJOTrDDR7DmOMmvX73aeRV+1sG5W/L6FQNzPH7w7Kp/9iJcT1WR8t5q1oBdKv/B ZxAYC831hJ4MLqqNYvSyfIL1NQqy19CAHbzu7BUjU6JEz6XyDpijAvt8ZBgqY4Ql Z+Vu8JPcmAg+mHyJCDMHfRy23faWaig57veKLogGAqjpoC2Ww/4ecdO+hqBhWK9R lG6mww1yl6NjY6lbR82BAYY7+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9vs/yo p6QdVLn8SeOGi+CC3c6TMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEYHyGjI+Ze8lar/BHCk7DPQHj3QlR05rJKpK5GFlyMgkTKQFTWqPSX5VJ888 NEPYU1/RaXRgob/HrC7jC36Ik661AcdTHvgxteCiLiCj52Gob05gWp0kWyC/jCfd GRA+81x/KHo674UpxkjSJPMLhEJmRxVHoxD0vF/4L5xXPZB6q7+XGV689REckQ4/ kedi2c/QPzTpiMZ1w314iCbZ+Xum1Zgln3+jJs7C7HWoonHAvHEP/hKwaS596Na+ m9oLLQp7+drgPEhWk7jiUcoVVdbC0GKeko5SuCI934vlr9HYl3d5Cp+1QM/prDBp DCTy9Dv8MNHnVxtac5mBXIok1g== -----END CERTIFICATE-----Generated at Sat Sep 5 07:20:49 2026 by rpki-client