$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: nawJLAsMsC29T+CBlMfUpx9IxjIQx2DYddp30hHFdKk= Subject key identifier: 12:FC:E2:1F:4E:3D:91:CF:AE:BA:3F:BC:3C:B9:AD:91:91:48:D2:A1 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 04FF Signing time: Tue 20 Oct 2026 23:47:44 +0000 Manifest this update: Tue 20 Oct 2026 23:47:43 +0000 Manifest next update: Tue 27 Oct 2026 23:47:43 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: seAUYCKdR0wcTb6ZeXqdah3KQ+uaAA7Ykdr/ZLyk8H0=) 2: 2DDD88A0A75911F1AF5343123411F970.roa (hash: WSQsvZXfuBX3j5M4e7CasUZOIhXg7AV01LOzceFct5g=) 3: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Z0QtZMlmBIXI6vlQlvMDycSEHCvU1S1Ni8aOs0GFcPI=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: KoqKm1zXa7+E49cuBhLyDwtkJsGJoT5PgNYa3eMaBM0=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: PsNJCJU0uyXObp1+mZX8wbceohbhRoBCXf4GOaOdhzk=) 6: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: STToVDSycMQR8e0kpqKni2O/W2Vy+5J2p+xXTnuKGqE=) 7: 25C6FD9CAE0511F187A47F574B11F970.roa (hash: wjJhmmUUiWYFdBshacAhxjyibepzAQTbTNK9qOb1a0I=) 8: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: JBKJEbQZvFufbZiqIUnREyFPgHk3VFg2KxCxeGu9bJk=) 9: 4B167396E74111EC80E35542C4F9AE02.roa (hash: o3rH8lbT1yVcZ5ZClwYn7G44pShugDeVMaQqTOoN1mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 23:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Oct 20 23:47:43 2026 GMT Not After : Oct 27 23:47:43 2026 GMT Subject: CN=6ad7fda0-1b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:54:78:a2:62:24:ed:2c:69:11:ff:9f:e9: 6a:c7:e4:b0:c8:3d:7c:ec:13:7f:1a:11:b4:e1:5e: 52:81:07:d5:8f:c0:6f:0d:15:fc:6c:2d:4f:55:bd: 68:19:eb:79:6f:f2:e0:41:94:e4:76:d1:6d:3b:bb: 75:c9:74:af:31:0b:3b:73:55:db:43:f0:de:51:af: f4:ea:d4:e6:ed:08:a8:f1:26:2e:5b:93:33:45:cf: 97:00:24:74:87:4d:67:e6:3e:90:0b:47:b4:75:c7: 03:29:97:30:6b:d4:a8:5c:1d:59:53:37:44:c9:fc: 44:d3:5a:70:73:ca:df:a3:6d:b8:36:a1:59:8e:95: 3d:29:7f:f2:33:db:c7:e9:6b:db:26:84:25:df:9e: 9f:56:df:99:ee:dd:cb:69:ae:e7:f8:64:f1:94:89: d6:1b:f0:38:7e:34:e3:39:d9:9d:aa:9d:62:ce:0b: d1:e8:c9:a0:3a:d0:60:ec:df:90:da:c5:ad:cb:68: 4c:ae:05:7d:91:e9:b8:c7:77:71:6c:4a:07:cc:0b: 89:2d:e7:99:1e:8d:b6:fd:99:97:2d:48:5a:2b:03: 22:fa:23:90:37:57:ef:37:7a:73:74:b8:af:1d:08: 06:e4:be:9f:00:7d:5e:4a:76:73:04:8b:c0:b9:ac: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FC:E2:1F:4E:3D:91:CF:AE:BA:3F:BC:3C:B9:AD:91:91:48:D2:A1 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:28:0f:f4:a4:9f:e2:03:02:4f:0f:84:cb:9a:78:23:d7:ea: 55:4e:72:3c:d2:62:8e:ec:46:17:73:eb:06:36:5f:72:ab:de: aa:3b:31:fa:e9:30:f7:83:0d:4a:38:8b:98:02:b7:8a:ab:5a: be:2e:80:71:5b:6f:4a:e8:24:30:c9:07:41:ab:b4:26:4a:c7: 22:33:32:ee:83:5e:50:c4:9d:5f:2e:4c:4e:36:6f:79:23:f0: bf:02:11:94:77:4b:e1:7f:e8:63:c0:07:2e:ac:13:80:fd:06: 56:60:66:d5:20:5b:d2:e4:ec:49:9e:63:a7:0c:bf:b4:6e:ce: 53:13:f1:fb:ec:d7:83:db:74:1f:ab:aa:dd:60:6d:88:46:31: 3d:8b:f9:7c:e1:15:47:ca:93:03:a2:e2:88:6b:db:b2:c1:5e: d0:35:bc:21:28:d4:f0:72:ef:7c:6e:4f:de:34:67:95:19:b5: 5a:8c:a5:b9:4c:a7:f4:5d:45:e1:2d:0e:59:83:cc:aa:dd:3d: 12:d9:83:d3:3f:d1:b7:76:67:d7:8c:b5:52:ac:04:0b:e6:88: 40:26:4c:28:cb:36:95:3d:22:3b:b3:a5:6a:98:3d:18:0d:81: e3:be:49:11:59:a8:19:68:7a:b1:68:6c:c4:82:1f:43:f1:56: 42:ef:0e:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYxMDIwMjM0NzQzWhcNMjYxMDI3MjM0NzQzWjAYMRYwFAYD VQQDEw02YWQ3ZmRhMC0xYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkBUeKJiJO0saRH/n+lqx+SwyD187BN/GhG04V5SgQfVj8BvDRX8bC1PVb1o Get5b/LgQZTkdtFtO7t1yXSvMQs7c1XbQ/DeUa/06tTm7Qio8SYuW5MzRc+XACR0 h01n5j6QC0e0dccDKZcwa9SoXB1ZUzdEyfxE01pwc8rfo224NqFZjpU9KX/yM9vH 6WvbJoQl356fVt+Z7t3Laa7n+GTxlInWG/A4fjTjOdmdqp1izgvR6MmgOtBg7N+Q 2sWty2hMrgV9kem4x3dxbEoHzAuJLeeZHo22/ZmXLUhaKwMi+iOQN1fvN3pzdLiv HQgG5L6fAH1eSnZzBIvAuayGwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBL84h9O PZHPrro/vDy5rZGRSNKhMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApCgP9KSf4gMCTw+Ey5p4I9fqVU5yPNJijuxGF3PrBjZfcqveqjsx+ukw94MN SjiLmAK3iqtavi6AcVtvSugkMMkHQau0JkrHIjMy7oNeUMSdXy5MTjZveSPwvwIR lHdL4X/oY8AHLqwTgP0GVmBm1SBb0uTsSZ5jpwy/tG7OUxPx++zXg9t0H6uq3WBt iEYxPYv5fOEVR8qTA6LiiGvbssFe0DW8ISjU8HLvfG5P3jRnlRm1WoyluUyn9F1F 4S0OWYPMqt09EtmD0z/Rt3Zn14y1UqwEC+aIQCZMKMs2lT0iO7Olapg9GA2B475J EVmoGWh6sWhsxIIfQ/FWQu8OkQ== -----END CERTIFICATE-----Generated at Thu Oct 22 05:54:53 2026 by rpki-client