$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json) Hash identifier: nGoX2wfHMogBnshCuJa1sEiJuAZeXE2tjxDRJuNDt1A= Subject key identifier: 0C:04:97:74:80:80:78:68:62:7F:ED:75:D6:94:5B:80:D7:0C:70:59 Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft Manifest number: 0632 Signing time: Mon 05 Oct 2026 00:53:22 +0000 Manifest this update: Mon 05 Oct 2026 00:53:22 +0000 Manifest next update: Mon 12 Oct 2026 00:53:22 +0000 Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: llNa/FkL1TcbJVdY5jyJT9jO7OBLbbdzfvPtsMu+8RI=) 2: 68FB34D0A53511F194359E934411F970.roa (hash: g1sw3UXmHEKqKS0qgWrZWBCos6PkQ3MTe8W3hqlBy3g=) 3: yI9EnZ3fZIzG4LXNJFAzwiR2T1c.asa (hash: RWr2o+Fuq8BXHT24M7lWL2/tQ4WeLi7HiQyqBYF1xFE=) 4: C762BA72A69111F19896220A7111F970.roa (hash: jAFER+09ZO9+0eFOglysIeuzJxzcYqoIfF5SHmhknQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Validity Not Before: Oct 5 00:53:22 2026 GMT Not After : Oct 12 00:53:22 2026 GMT Subject: CN=6ac2f502-7493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:54:b4:45:f9:b0:92:fe:61:de:87:0b:f3: de:ff:93:8b:fb:54:a4:09:a6:cf:da:eb:f1:10:18: 1c:5e:fa:9c:22:4c:d5:8b:9f:3d:63:41:fd:07:4d: bc:47:79:a8:18:0d:13:3a:cf:2b:ad:76:71:fe:37: fb:02:00:cf:1a:64:51:74:9d:5e:46:d3:67:cd:0c: 40:97:9c:ad:da:dc:b4:f3:5c:01:2b:c4:e1:e6:15: 04:2c:03:71:57:69:a0:cc:e5:d4:29:73:f5:f9:6d: b5:42:65:40:2d:66:44:6f:1c:71:c3:6f:cb:c1:64: 57:fe:2c:af:39:be:27:c1:65:37:32:b4:81:0f:5c: 04:19:96:ae:00:00:71:18:14:75:3c:4d:8e:76:ae: c8:d8:ad:7b:c1:b5:84:03:4f:da:4c:40:1a:f1:1b: fd:fc:7e:72:f2:b0:a8:fa:9e:d4:33:13:f7:e0:01: 05:4b:31:99:f0:67:8a:f0:7e:e2:ac:d0:7d:63:78: f2:91:8e:6b:31:56:4a:66:70:60:3e:09:f3:ae:49: 69:b6:bd:3c:85:0f:3f:8a:a5:67:07:8f:9e:38:46: 6e:13:52:2b:7d:39:25:65:8b:59:62:66:0a:4a:5c: 22:63:18:d1:1c:d9:be:df:5a:cc:b4:c9:e2:73:b5: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:97:74:80:80:78:68:62:7F:ED:75:D6:94:5B:80:D7:0C:70:59 X509v3 Authority Key Identifier: keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c9:89:a8:26:e8:57:c4:06:49:b0:5d:21:1b:c3:7d:37:fc: 72:64:a4:cb:77:d6:b2:df:68:17:6d:1c:08:8a:d0:91:00:61: 81:9d:57:08:e2:59:c9:5b:c4:6d:7a:81:30:65:1e:b5:0a:8a: ba:9f:ad:40:9c:e6:36:48:12:3f:f1:38:2e:0c:76:a4:f8:10: 29:db:62:60:38:94:1d:7a:85:bc:ea:fb:93:c3:45:ab:90:6e: 7c:ec:3d:0f:8e:c1:c6:a9:2d:f6:c2:ed:fc:1a:9c:4f:1c:b5: a5:24:71:1e:db:69:28:e4:da:9e:29:f1:80:96:0f:ce:ec:ba: 98:19:47:74:c5:34:c4:09:47:8d:03:e4:8f:33:94:4e:46:bc: c6:d5:57:e8:fc:a9:20:76:f6:ba:b8:4b:89:d9:ba:5f:d4:42: 0b:25:5a:9f:47:ce:bd:47:ec:56:07:99:f5:6b:8f:4e:0f:c7: f5:e6:10:e6:35:de:f8:c0:98:19:0f:55:e1:fc:fc:35:5c:36: 5a:73:60:47:7f:3c:16:79:ce:7c:5d:29:c4:33:cd:3b:f0:6f: c7:9a:d1:62:e7:4f:6c:01:a3:4d:80:e8:55:c2:ad:35:ac:eb: b1:74:cb:a8:8a:03:d1:68:0c:15:61:57:55:38:a0:8a:f2:a2: af:94:f2:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDg3NUVDNzJFNDZGMkNEMTYzRjA2QjgyMkU3MDQxMjlB RUZFMzE5MTAwHhcNMjYxMDA1MDA1MzIyWhcNMjYxMDEyMDA1MzIyWjAYMRYwFAYD VQQDEw02YWMyZjUwMi03NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmk5UtEX5sJL+Yd6HC/Pe/5OL+1SkCabP2uvxEBgcXvqcIkzVi589Y0H9B028 R3moGA0TOs8rrXZx/jf7AgDPGmRRdJ1eRtNnzQxAl5yt2ty081wBK8Th5hUELANx V2mgzOXUKXP1+W21QmVALWZEbxxxw2/LwWRX/iyvOb4nwWU3MrSBD1wEGZauAABx GBR1PE2Odq7I2K17wbWEA0/aTEAa8Rv9/H5y8rCo+p7UMxP34AEFSzGZ8GeK8H7i rNB9Y3jykY5rMVZKZnBgPgnzrklptr08hQ8/iqVnB4+eOEZuE1IrfTklZYtZYmYK SlwiYxjRHNm+31rMtMnic7UVBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwEl3SA gHhoYn/tddaUW4DXDHBZMB8GA1UdIwQYMBaAFIdexy5G8s0WPwa4IucEEprv4xkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGtieXpSWV9CcmdpNXdRU211X2pH UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxN0hMa2J5elJZX0JyZ2k1d1FTbXVfakdSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGtieXpS WV9CcmdpNXdRU211X2pHUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIMmJqCboV8QGSbBdIRvDfTf8cmSky3fWst9oF20cCIrQkQBhgZ1XCOJZyVvE bXqBMGUetQqKup+tQJzmNkgSP/E4Lgx2pPgQKdtiYDiUHXqFvOr7k8NFq5BufOw9 D47Bxqkt9sLt/BqcTxy1pSRxHttpKOTaninxgJYPzuy6mBlHdMU0xAlHjQPkjzOU Tka8xtVX6PypIHb2urhLidm6X9RCCyVan0fOvUfsVgeZ9WuPTg/H9eYQ5jXe+MCY GQ9V4fz8NVw2WnNgR388FnnOfF0pxDPNO/Bvx5rRYudPbAGjTYDoVcKtNazrsXTL qIoD0WgMFWFXVTigivKir5TyzA== -----END CERTIFICATE-----Generated at Tue Oct 6 20:13:40 2026 by rpki-client