$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft File: hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json) Hash identifier: N7/g2N3+NrjW2HsCKnmzB0nmUj1I1uxnS2zNQAzdzwE= Subject key identifier: 8F:2D:59:02:F6:C4:3D:67:60:15:5E:E6:32:01:0C:4E:A3:71:B7:5F Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 Certificate issuer: /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft Manifest number: 4D Signing time: Fri 11 Sep 2026 08:27:08 +0000 Manifest this update: Fri 11 Sep 2026 08:27:07 +0000 Manifest next update: Fri 18 Sep 2026 08:27:07 +0000 Files and hashes: 1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: Lt4CkjutVndvPutiwWZ7AhS9h/tpjD8/TJhNVtNz/ek=) 2: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=) 3: yXbfSYbD29mEtJ_OVJA2nVuCtMk.asa (hash: z3ITVA5+vv3swb2erAhhZhDQWe0QlzjqbV+CNbmeheI=) 4: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Validity Not Before: Sep 11 08:27:07 2026 GMT Not After : Sep 18 08:27:07 2026 GMT Subject: CN=6aa3bb5b-b4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:03:f4:b2:41:97:cb:5b:09:f5:25:11:d2: 5d:4f:3c:9a:02:d0:9b:fa:07:9e:1c:a5:36:cf:38: f4:82:7e:26:2d:83:44:6b:02:88:5b:c6:01:bf:f5: a8:63:b3:08:75:51:4d:a7:81:e8:ef:9a:4a:bc:b4: 59:e9:95:cf:91:43:fe:e4:67:f6:16:ea:26:6a:cd: 5d:e8:ab:84:c6:91:22:5e:39:33:98:55:0a:14:39: c4:2e:b2:60:5b:f0:84:de:fb:1d:0e:c1:81:0c:54: 9e:2f:a2:0c:d9:38:3f:95:8a:d3:f9:2e:b4:7b:24: 5f:f1:5a:e2:31:3d:f6:c5:81:33:68:df:26:06:b5: 67:b8:73:d3:67:7b:52:35:36:f4:d3:b1:69:a5:76: 94:df:a8:45:da:0c:ee:c6:c8:00:3f:66:a3:17:c1: 38:20:ae:e8:d4:61:20:2d:80:b6:e3:08:0f:7a:22: 04:47:c2:64:63:b4:a0:7d:18:70:2b:16:c5:0b:ee: b0:b5:f2:ec:e4:55:d9:db:9e:fa:b3:7c:6e:e9:45: 05:d8:e1:af:9d:45:5d:c4:f9:08:96:d3:ff:a8:b9: 5f:b6:26:0c:5c:35:b2:bb:21:ef:65:54:be:fa:28: 3f:fc:c7:3f:a9:89:97:a7:1e:81:7f:cf:06:10:1e: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:59:02:F6:C4:3D:67:60:15:5E:E6:32:01:0C:4E:A3:71:B7:5F X509v3 Authority Key Identifier: keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a5:15:24:a6:8a:53:a5:33:0c:51:71:da:8b:fc:16:82:46: 84:62:af:99:b8:10:73:82:ae:0b:55:f6:91:ac:04:da:c7:f6: 30:6b:5c:89:8a:aa:43:3f:54:c8:cc:03:df:d8:58:f2:5c:d4: ea:ea:9d:57:61:30:f1:1a:5a:13:f0:b2:68:4f:ce:ca:28:0c: 2e:18:5b:15:1c:68:99:d2:33:49:70:d9:ba:18:a4:15:5d:18: 0c:64:49:f6:a9:a4:41:5d:e5:f1:60:ee:ac:26:c8:d1:74:41: f8:bf:c0:fe:79:09:2f:5f:53:27:78:1e:11:40:16:9f:ab:5d: 6b:28:d9:be:0d:84:ad:2a:50:ce:ed:53:fc:71:6d:e6:47:e6: 55:ac:c9:3d:f6:05:b8:72:ef:e6:d6:f9:73:4d:bf:fe:19:10: 1f:3b:b5:18:52:08:f3:58:b6:4c:04:71:6b:62:0b:d6:47:f2: d6:7c:a0:bd:08:3d:21:44:e2:64:d7:f0:cd:65:4f:29:43:62: 02:20:a7:4b:6a:f7:13:8d:c0:d0:12:7a:b6:73:ca:3d:1d:d8: c7:fb:78:fb:b7:ff:37:e6:62:6f:f6:ac:db:13:dd:72:29:ef: 77:1e:79:95:b7:de:e4:43:a2:c3:c4:d4:c0:b0:fe:c0:dc:f3: 63:c0:53:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoODUxMkU5Njk5NTZBQ0I3RDNFNzYwRUQ5ODZFMUJFRUEz RjhBQzBGODAeFw0yNjA5MTEwODI3MDdaFw0yNjA5MTgwODI3MDdaMBgxFjAUBgNV BAMTDTZhYTNiYjViLWI0ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChDwP0skGXy1sJ9SUR0l1PPJoC0Jv6B54cpTbPOPSCfiYtg0RrAohbxgG/9ahj swh1UU2ngejvmkq8tFnplc+RQ/7kZ/YW6iZqzV3oq4TGkSJeOTOYVQoUOcQusmBb 8ITe+x0OwYEMVJ4vogzZOD+VitP5LrR7JF/xWuIxPfbFgTNo3yYGtWe4c9Nne1I1 NvTTsWmldpTfqEXaDO7GyAA/ZqMXwTggrujUYSAtgLbjCA96IgRHwmRjtKB9GHAr FsUL7rC18uzkVdnbnvqzfG7pRQXY4a+dRV3E+QiW0/+ouV+2JgxcNbK7Ie9lVL76 KD/8xz+piZenHoF/zwYQHjw7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjy1ZAvbE PWdgFV7mMgEMTqNxt18wHwYDVR0jBBgwFoAUhRLpaZVqy30+dg7ZhuG+6j+KwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzkxQkUyQkMwM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMwLWRnN1podUctNmotS3dQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFJMcGFaVnF5MzAtZGc3Wmh1Ry02ai1Ld1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzkxQkUyQkMwM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMw LWRnN1podUctNmotS3dQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfpRUkpopTpTMMUXHai/wWgkaEYq+ZuBBzgq4LVfaRrATax/Ywa1yJiqpDP1TI zAPf2FjyXNTq6p1XYTDxGloT8LJoT87KKAwuGFsVHGiZ0jNJcNm6GKQVXRgMZEn2 qaRBXeXxYO6sJsjRdEH4v8D+eQkvX1MneB4RQBafq11rKNm+DYStKlDO7VP8cW3m R+ZVrMk99gW4cu/m1vlzTb/+GRAfO7UYUgjzWLZMBHFrYgvWR/LWfKC9CD0hROJk 1/DNZU8pQ2ICIKdLavcTjcDQEnq2c8o9HdjH+3j7t/835mJv9qzbE91yKe93HnmV t97kQ6LDxNTAsP7A3PNjwFN6 -----END CERTIFICATE-----Generated at Fri Sep 11 18:37:34 2026 by rpki-client