$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: SxG204MIQjET1TpzbZiAZgzbJp9SH8ciNDQVv2OnN6w= Subject key identifier: 3D:55:40:44:37:62:4C:AF:12:A8:E0:7D:74:43:D7:4A:80:15:7E:28 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 028B Signing time: Fri 23 Oct 2026 02:17:33 +0000 Manifest this update: Fri 23 Oct 2026 02:17:33 +0000 Manifest next update: Fri 30 Oct 2026 02:17:33 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: 3W/k7hQAOlvy1piZ/f2NHCzgwvRO1GyewpKC+UU1wAQ=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: 6v+GRbLMLP5EzHwC0x15LI44IwQYyKX6rA7/UegOgjo=) 3: U6vnSqRgssa3vSBZWv-B4qn21VE.asa (hash: wVJ+XnVvyHA62P86Lt+Yl5mmfgKK/mDXMkDlDhKCztE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Oct 23 02:17:33 2026 GMT Not After : Oct 30 02:17:33 2026 GMT Subject: CN=6adac3bd-8092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:15:d0:86:b5:7d:aa:72:b5:e0:65:9b:fe: 75:00:c3:28:6f:03:b0:54:65:0d:83:ee:95:99:15: 33:80:32:56:79:dd:17:6f:3c:21:8e:42:bf:97:8c: 6b:a4:1d:7f:b0:9d:1f:10:3b:5f:70:25:12:ed:45: 38:2b:b7:91:0b:51:08:41:e0:1f:31:02:06:34:b9: 03:76:f4:1e:78:24:c9:08:3b:e6:b8:07:e0:38:6d: a9:91:0a:32:dd:82:21:26:d6:4f:1a:01:e5:00:c3: 26:67:59:ce:26:81:01:49:f5:51:cc:2b:a2:37:ab: d8:d9:ec:e6:7f:87:35:bc:13:9d:0b:d0:d3:60:21: fd:cf:a1:75:32:c3:d2:2a:f6:81:3a:4d:2c:2d:cc: 21:d5:55:ff:76:d8:0e:f5:f1:a4:ea:e7:f3:90:04: 75:4b:58:3d:d6:1d:fc:ca:95:c2:74:96:59:b7:35: 9f:80:6b:84:20:74:13:7d:7a:b1:65:87:f8:5e:c3: a9:a6:71:03:e4:e7:03:ed:ea:c9:8f:e6:03:71:c7: c1:d4:5a:c3:ef:e3:d2:5e:6d:43:89:71:10:65:7f: 76:b9:20:52:10:c9:dc:1b:52:84:50:97:89:34:a3: dd:79:d2:46:61:2a:52:8e:09:ce:c7:28:9b:b4:44: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:55:40:44:37:62:4C:AF:12:A8:E0:7D:74:43:D7:4A:80:15:7E:28 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1b:75:3f:c4:ca:48:e9:c2:a8:ea:e1:e3:27:15:68:d7:4b: df:ae:3e:67:c9:88:77:99:18:00:e1:20:ec:45:ed:b1:a8:d4: 9b:8b:06:aa:f1:3d:c8:9e:bb:03:63:10:92:5c:a4:73:97:c8: 69:d3:22:e1:c1:80:d4:6b:2d:af:cd:d4:1b:c0:4e:9d:5b:d7: 68:3b:15:11:72:a4:e5:fa:dc:75:a6:9e:61:cc:09:ac:95:94: 44:6b:14:61:7e:42:62:07:c9:82:7e:13:4b:fc:6d:ff:00:a5: 38:67:36:64:d2:15:5d:e2:a6:28:6b:43:3b:65:d4:5b:9a:02: 22:88:e4:1a:1e:51:97:5c:1b:68:9a:07:0a:b2:a2:b2:c7:ac: 86:b0:ff:42:3c:c2:92:b0:d4:93:a0:08:e7:09:7e:65:4e:e1: fe:5b:8d:39:ab:78:19:ba:8f:9a:3a:b4:bf:76:19:cd:c8:5d: e5:bb:b6:27:be:df:fd:08:8f:d1:ad:e1:14:33:ba:1f:d8:33: a7:3d:00:32:36:ca:c5:85:12:84:14:1e:66:53:53:34:48:64: f9:dc:d1:4b:6d:a5:90:88:cb:7e:ad:2a:b7:0c:51:da:86:f8: 36:97:a7:1b:85:25:6e:f6:5f:a0:80:15:cb:8c:09:6f:15:45: 5f:60:4f:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYxMDIzMDIxNzMzWhcNMjYxMDMwMDIxNzMzWjAYMRYwFAYD VQQDEw02YWRhYzNiZC04MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv0V0Ia1fapyteBlm/51AMMobwOwVGUNg+6VmRUzgDJWed0XbzwhjkK/l4xr pB1/sJ0fEDtfcCUS7UU4K7eRC1EIQeAfMQIGNLkDdvQeeCTJCDvmuAfgOG2pkQoy 3YIhJtZPGgHlAMMmZ1nOJoEBSfVRzCuiN6vY2ezmf4c1vBOdC9DTYCH9z6F1MsPS KvaBOk0sLcwh1VX/dtgO9fGk6ufzkAR1S1g91h38ypXCdJZZtzWfgGuEIHQTfXqx ZYf4XsOppnED5OcD7erJj+YDccfB1FrD7+PSXm1DiXEQZX92uSBSEMncG1KEUJeJ NKPdedJGYSpSjgnOxyibtETU7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1VQEQ3 YkyvEqjgfXRD10qAFX4oMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsxt1P8TKSOnCqOrh4ycVaNdL364+Z8mId5kYAOEg7EXtsajUm4sGqvE9yJ67 A2MQklykc5fIadMi4cGA1Gstr83UG8BOnVvXaDsVEXKk5frcdaaeYcwJrJWURGsU YX5CYgfJgn4TS/xt/wClOGc2ZNIVXeKmKGtDO2XUW5oCIojkGh5Rl1wbaJoHCrKi sseshrD/QjzCkrDUk6AI5wl+ZU7h/luNOat4GbqPmjq0v3YZzchd5bu2J77f/QiP 0a3hFDO6H9gzpz0AMjbKxYUShBQeZlNTNEhk+dzRS22lkIjLfq0qtwxR2ob4Npen G4UlbvZfoIAVy4wJbxVFX2BPYg== -----END CERTIFICATE-----Generated at Fri Oct 23 20:48:10 2026 by rpki-client