$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: Z8q1bmk9MbyhUfKMP2OQDDpFVsktvfwW9SFgwzfxKQ0= Subject key identifier: 14:14:07:BD:1F:11:12:44:BA:0A:93:57:77:6F:C0:40:BC:95:5E:5B Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 122E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1223 Signing time: Fri 02 Oct 2026 17:16:54 +0000 Manifest this update: Fri 02 Oct 2026 17:16:53 +0000 Manifest next update: Fri 09 Oct 2026 17:16:53 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: aPNshXCRXZ1OprJXDNG3Lk9JQqO77aKVZGWBW+cH3rQ=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4654 (0x122e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Oct 2 17:16:53 2026 GMT Not After : Oct 9 17:16:53 2026 GMT Subject: CN=6abfe706-e215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:21:9c:cb:cd:52:88:31:92:c7:15:9b:c3: 15:cf:69:86:6f:d1:f2:c8:d3:9c:d4:ed:24:5a:fd: 75:f1:48:65:c2:15:b2:4d:46:5c:f8:1a:70:83:80: 62:02:41:df:6b:62:3b:6f:fc:e6:21:44:74:9a:bd: 20:e2:8b:69:f9:75:7f:da:87:82:95:75:d3:3b:9a: 44:ed:f3:fc:88:b3:5d:33:5b:ed:2f:40:95:94:73: e3:7c:a3:9e:16:9d:26:b0:af:bb:e9:ea:c4:20:0b: fc:79:64:77:ea:69:b1:10:a0:76:89:aa:ea:a0:0b: e1:09:60:42:7b:67:c0:32:5f:ff:69:e1:23:57:2f: 03:fc:61:75:a4:0a:71:5f:31:35:02:fd:b4:ae:0a: c2:fc:83:13:a2:a9:81:1c:1e:2a:56:90:a3:85:3f: 42:93:1f:99:6b:4e:53:1d:ad:b0:4f:bd:97:e9:76: 6f:de:22:62:99:6b:89:fb:d2:c3:1d:1f:95:c0:64: be:1a:5a:0b:8a:2c:a5:34:ac:c4:26:cd:95:a3:75: e3:dd:45:1a:ff:75:5f:88:f6:9e:d1:12:3f:e6:1d: 40:1b:79:61:ab:9c:30:df:b6:af:04:f8:d8:45:7b: 28:46:1f:aa:c4:c0:48:47:14:ab:f0:a7:b1:7c:bb: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:14:07:BD:1F:11:12:44:BA:0A:93:57:77:6F:C0:40:BC:95:5E:5B X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e2:0b:97:e0:27:ad:87:86:a9:48:75:2d:33:fc:ba:5a:7c: f8:25:1c:6d:e9:c3:eb:c8:5c:e4:55:bc:37:fb:e0:eb:ce:87: a2:81:36:8d:ec:f9:f3:3d:2f:28:77:28:21:07:91:7f:31:49: a2:b8:13:40:64:20:ee:6c:05:cb:08:49:8f:b2:ee:06:e0:d4: 9d:b2:09:4f:83:c9:0d:a3:4e:6b:2f:58:af:f0:cb:18:0b:9f: 4f:85:88:a8:67:47:81:f8:46:2b:cf:b2:4b:84:89:9f:31:cb: e0:d0:e3:fa:03:0f:24:3f:48:ee:9c:65:83:f0:e8:07:f8:84: ad:e9:3b:0b:b6:e5:81:c5:1f:91:36:f6:36:d7:f6:51:45:4d: 47:87:42:d6:9a:76:40:7a:8c:71:75:8f:88:bc:b7:78:dd:b6: 35:ad:c4:25:d9:4a:aa:c2:5d:ec:4f:8f:76:1f:e4:90:51:7f: a5:eb:ae:93:93:6b:39:2b:3a:69:7b:c6:7e:2f:e5:9d:0f:08: f4:62:13:32:05:c3:45:7a:f7:88:d6:d3:02:88:fd:56:06:b2: fc:13:8b:76:27:02:79:9b:ae:ec:16:c2:5a:33:e6:a3:3e:87: a8:2a:25:99:16:b1:ec:0a:25:6f:19:b6:47:ed:4b:e4:2c:c1: 3f:c0:69:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjYxMDAyMTcxNjUzWhcNMjYxMDA5MTcxNjUzWjAYMRYwFAYD VQQDEw02YWJmZTcwNi1lMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutIhnMvNUogxkscVm8MVz2mGb9HyyNOc1O0kWv118UhlwhWyTUZc+Bpwg4Bi AkHfa2I7b/zmIUR0mr0g4otp+XV/2oeClXXTO5pE7fP8iLNdM1vtL0CVlHPjfKOe Fp0msK+76erEIAv8eWR36mmxEKB2iarqoAvhCWBCe2fAMl//aeEjVy8D/GF1pApx XzE1Av20rgrC/IMToqmBHB4qVpCjhT9Ckx+Za05THa2wT72X6XZv3iJimWuJ+9LD HR+VwGS+GloLiiylNKzEJs2Vo3Xj3UUa/3VfiPae0RI/5h1AG3lhq5ww37avBPjY RXsoRh+qxMBIRxSr8KexfLujjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQUB70f ERJEugqTV3dvwEC8lV5bMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPeILl+AnrYeGqUh1LTP8ulp8+CUcbenD68hc5FW8N/vg686HooE2jez58z0v KHcoIQeRfzFJorgTQGQg7mwFywhJj7LuBuDUnbIJT4PJDaNOay9Yr/DLGAufT4WI qGdHgfhGK8+yS4SJnzHL4NDj+gMPJD9I7pxlg/DoB/iErek7C7blgcUfkTb2Ntf2 UUVNR4dC1pp2QHqMcXWPiLy3eN22Na3EJdlKqsJd7E+Pdh/kkFF/peuuk5NrOSs6 aXvGfi/lnQ8I9GITMgXDRXr3iNbTAoj9Vgay/BOLdicCeZuu7BbCWjPmoz6HqCol mRax7Aolbxm2R+1L5CzBP8Bp3w== -----END CERTIFICATE-----Generated at Sun Oct 4 17:38:37 2026 by rpki-client