$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: OozCcT8qBhBbgTcXgF/XSRyQWbrSnqiN1Pdk62OLxWE= Subject key identifier: 8C:B4:F5:90:B3:30:15:BB:58:59:68:8E:D2:41:FD:E1:1B:79:24:FF Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 3597 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 3597 Signing time: Tue 20 Oct 2026 14:16:55 +0000 Manifest this update: Tue 20 Oct 2026 14:16:54 +0000 Manifest next update: Tue 27 Oct 2026 14:16:54 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: JCrK7AA1pWb9nuJWsHeCtfjusPtnWQSG+4ggvU0c3z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13719 (0x3597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Oct 20 14:16:54 2026 GMT Not After : Oct 27 14:16:54 2026 GMT Subject: CN=6ad777d6-8c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:ed:d8:37:6d:d5:ad:c9:66:d0:75:79:dd: 8a:f6:4d:27:32:a5:22:2a:f6:c0:a8:51:d5:60:13: 9e:11:7f:d7:4b:b2:10:dd:41:f2:db:de:aa:2c:52: aa:f4:3c:74:21:a0:79:6b:5f:5b:3f:0d:94:8e:16: 0e:4a:00:5f:d0:48:97:d7:17:e5:cd:52:e1:6f:6e: 60:e3:1c:0b:6a:c8:69:4a:22:24:04:29:46:18:07: b1:0f:06:76:b4:46:44:d8:bf:8c:0e:3e:7c:a0:92: 71:f0:69:a4:07:91:4d:c5:09:da:bd:ef:8d:61:9e: 1e:00:06:ae:d0:d4:fb:bf:fc:53:18:60:0e:4f:16: c5:b3:d7:ea:86:7c:50:43:66:e6:cc:b7:63:f4:bc: e9:34:a0:4a:02:5d:00:d0:96:21:0f:a4:df:30:fc: 58:a8:56:bc:f2:15:82:53:d2:9f:e9:5c:bc:9a:da: 6a:7e:19:04:14:9d:e1:4e:75:b8:e8:9b:7e:fc:6a: 91:ba:8a:e5:c3:df:7a:e7:de:20:cf:11:8a:9e:97: 56:9f:f7:8b:41:10:aa:0f:df:8b:aa:ef:93:2d:f6: e6:08:78:2e:96:b5:f8:56:1b:b2:ef:f4:c8:8b:9d: c4:6f:5f:74:ca:03:7c:f6:ab:93:6b:15:9a:6a:8d: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B4:F5:90:B3:30:15:BB:58:59:68:8E:D2:41:FD:E1:1B:79:24:FF X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:51:75:fc:1b:ff:96:0d:e1:2d:c9:0a:27:99:d7:19:6e:7d: b7:d2:87:c5:e4:e4:a1:a2:a1:20:25:c3:be:40:48:9c:64:a5: 8b:d4:5c:83:38:aa:78:31:ea:0b:b6:b0:4c:ff:5b:f7:2f:19: f2:75:c4:16:34:6b:8b:f1:2a:a7:49:e9:37:6c:40:80:de:cb: f7:20:e3:03:67:8b:a7:18:e3:1f:8e:4a:c3:72:29:80:2d:36: d3:e2:6a:30:c2:fb:ba:ce:7e:ee:ca:92:56:70:99:2f:52:bc: af:4a:21:52:06:4e:22:80:e5:59:07:cb:c7:8b:bb:8d:19:40: 9f:70:63:b7:84:fe:cf:9a:f8:d0:de:8e:b1:5d:f4:04:da:d0: 60:38:10:eb:19:ee:63:0e:54:1a:17:39:76:5a:58:c0:42:d4: a1:91:a6:49:ea:c7:52:26:f8:ba:c4:c8:88:89:1e:ea:cb:a2: ab:1f:f8:12:d4:cc:88:9a:c8:1c:48:1d:13:9e:43:a8:c8:90: 76:6d:58:25:32:df:f4:a7:77:a6:f5:51:18:47:2b:3d:80:79: f1:9c:32:6c:a7:c7:4f:8c:98:af:39:14:98:ed:ef:49:06:60: e3:9e:43:b7:8a:dc:16:94:a0:c7:10:d6:08:70:49:48:97:fa: 81:75:7e:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjYxMDIwMTQxNjU0WhcNMjYxMDI3MTQxNjU0WjAYMRYwFAYD VQQDEw02YWQ3NzdkNi04YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9Pt2Ddt1a3JZtB1ed2K9k0nMqUiKvbAqFHVYBOeEX/XS7IQ3UHy296qLFKq 9Dx0IaB5a19bPw2UjhYOSgBf0EiX1xflzVLhb25g4xwLashpSiIkBClGGAexDwZ2 tEZE2L+MDj58oJJx8GmkB5FNxQnave+NYZ4eAAau0NT7v/xTGGAOTxbFs9fqhnxQ Q2bmzLdj9LzpNKBKAl0A0JYhD6TfMPxYqFa88hWCU9Kf6Vy8mtpqfhkEFJ3hTnW4 6Jt+/GqRuorlw996594gzxGKnpdWn/eLQRCqD9+Lqu+TLfbmCHgulrX4Vhuy7/TI i53Eb190ygN89quTaxWaao3pkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIy09ZCz MBW7WFlojtJB/eEbeST/MB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1F1/Bv/lg3hLckKJ5nXGW59t9KHxeTkoaKhICXDvkBInGSli9RcgziqeDHq C7awTP9b9y8Z8nXEFjRri/Eqp0npN2xAgN7L9yDjA2eLpxjjH45Kw3IpgC020+Jq MML7us5+7sqSVnCZL1K8r0ohUgZOIoDlWQfLx4u7jRlAn3Bjt4T+z5r40N6OsV30 BNrQYDgQ6xnuYw5UGhc5dlpYwELUoZGmSerHUib4usTIiIke6suiqx/4EtTMiJrI HEgdE55DqMiQdm1YJTLf9Kd3pvVRGEcrPYB58ZwybKfHT4yYrzkUmO3vSQZg455D t4rcFpSgxxDWCHBJSJf6gXV+Ug== -----END CERTIFICATE-----Generated at Thu Oct 22 11:37:48 2026 by rpki-client