$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json) Hash identifier: 8NxwYJYg2HiWKLnJdb1pa/CbYTAOKgTDtfEu/SVQ1Vo= Subject key identifier: B2:38:C8:65:2D:5A:00:ED:DE:1E:F0:3F:98:39:00:3C:4E:76:78:D9 Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft Manifest number: 08C5 Signing time: Fri 02 Oct 2026 20:47:14 +0000 Manifest this update: Fri 02 Oct 2026 20:47:13 +0000 Manifest next update: Fri 09 Oct 2026 20:47:13 +0000 Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: 8i2vjsw75AiYfFwh7OGL/vonl54vjovJEWInoKJlxdA=) 2: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: /xCNBqLNz0L8cDqpYEQMnHLgfzVahak+S8dk9Uan5oM=) 3: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: IxYVxX1BoFCHdIOrjAwAEmnCO+dNiZSE2wEYWsIxYD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Oct 2 20:47:13 2026 GMT Not After : Oct 9 20:47:13 2026 GMT Subject: CN=6ac01852-c479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:07:80:12:8b:48:89:1c:72:98:85:76:d2:13: 64:56:3a:54:25:c5:22:44:bd:50:d4:de:b5:6a:fa: 30:95:f5:bb:99:17:33:4e:bf:b8:5e:81:ae:66:4d: 0d:ab:21:da:33:83:75:5e:5a:27:07:79:37:7f:fa: 40:9a:6e:ce:86:1b:d9:28:c5:02:11:1a:fc:e5:98: 80:f2:ab:f3:a0:03:8c:6f:0f:69:a4:33:6b:9a:0f: 51:96:15:0f:b2:e8:db:5a:b4:c8:47:a9:b5:06:b5: c8:ee:b3:9e:70:52:77:c9:81:f9:42:7b:1a:52:e1: 93:33:97:c1:16:1f:b4:cd:40:bc:87:28:5a:7b:fa: f5:66:a2:3b:74:38:ce:6d:5f:c9:5f:4e:d4:27:50: 62:2e:92:f4:88:86:76:b8:38:0c:11:a8:c2:65:8a: 98:61:12:5c:1f:03:95:9b:a9:d6:ae:e8:3e:1c:51: 89:69:78:77:f1:dd:3a:4a:0f:19:bb:33:87:57:e5: 94:02:09:b8:70:c7:72:af:37:73:86:af:84:16:f9: e0:f8:0c:7d:b6:95:6e:c3:88:01:c9:d4:99:6c:98: b1:0f:c0:e8:dc:48:58:3b:21:39:a7:7d:a8:f5:f7: 77:84:14:46:ac:cb:81:49:8a:44:b3:89:11:65:bf: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:38:C8:65:2D:5A:00:ED:DE:1E:F0:3F:98:39:00:3C:4E:76:78:D9 X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0a:83:25:9c:d5:da:6c:a0:e5:de:a4:4c:22:de:dd:e9:cb: bb:ab:79:28:c1:71:52:0e:4a:cc:3c:65:ab:63:d8:b0:c6:d6: 2a:68:0a:ab:d4:ac:86:80:f1:ae:31:3d:f9:1c:17:2c:bd:4f: 21:07:f2:e8:db:29:a9:7f:06:3c:a0:81:71:fd:cd:5e:ac:da: 98:1b:00:71:52:ab:ca:13:b7:b7:98:0c:35:3b:71:76:22:26: a2:aa:46:4c:a0:ac:b4:ff:6c:b5:02:13:cf:9f:4e:29:e2:f0: 6f:bc:f1:5c:02:93:b4:74:53:d5:c6:0a:85:76:e4:af:75:f3: 1c:ac:fd:c9:57:47:aa:cb:27:ab:dc:59:76:01:ff:ef:3b:f5: 98:2d:59:ad:14:d8:74:84:c5:63:3c:8e:ec:53:01:ca:ed:4d: 7c:c5:80:5a:88:69:8c:fc:bb:67:f9:b9:fb:b9:a4:de:74:5c: be:b0:04:e7:c0:bb:7c:1a:d5:fc:5f:63:1e:3a:40:2c:20:6c: 89:a9:b6:61:65:01:45:54:8a:66:19:2f:ed:a7:4c:39:e4:6d: 37:dc:d2:33:30:6a:84:ea:f0:db:89:5a:45:a8:45:db:fa:8e: 65:ca:92:79:54:e4:3c:2b:13:e3:82:9c:14:ed:cb:5e:7f:44: fe:fc:1d:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjYxMDAyMjA0NzEzWhcNMjYxMDA5MjA0NzEzWjAYMRYwFAYD VQQDEw02YWMwMTg1Mi1jNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhweAEotIiRxymIV20hNkVjpUJcUiRL1Q1N61avowlfW7mRczTr+4XoGuZk0N qyHaM4N1XlonB3k3f/pAmm7OhhvZKMUCERr85ZiA8qvzoAOMbw9ppDNrmg9RlhUP sujbWrTIR6m1BrXI7rOecFJ3yYH5QnsaUuGTM5fBFh+0zUC8hyhae/r1ZqI7dDjO bV/JX07UJ1BiLpL0iIZ2uDgMEajCZYqYYRJcHwOVm6nWrug+HFGJaXh38d06Sg8Z uzOHV+WUAgm4cMdyrzdzhq+EFvng+Ax9tpVuw4gBydSZbJixD8Do3EhYOyE5p32o 9fd3hBRGrMuBSYpEs4kRZb/hcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLI4yGUt WgDt3h7wP5g5ADxOdnjZMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf ZDFkU0JYM0lhQ0pac3huSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkwqDJZzV2myg5d6kTCLe3enLu6t5KMFxUg5KzDxlq2PYsMbWKmgKq9SshoDx rjE9+RwXLL1PIQfy6NspqX8GPKCBcf3NXqzamBsAcVKryhO3t5gMNTtxdiImoqpG TKCstP9stQITz59OKeLwb7zxXAKTtHRT1cYKhXbkr3XzHKz9yVdHqssnq9xZdgH/ 7zv1mC1ZrRTYdITFYzyO7FMByu1NfMWAWohpjPy7Z/m5+7mk3nRcvrAE58C7fBrV /F9jHjpALCBsiam2YWUBRVSKZhkv7adMOeRtN9zSMzBqhOrw24laRahF2/qOZcqS eVTkPCsT44KcFO3LXn9E/vwdog== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:11 2026 by rpki-client