$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json) Hash identifier: Wy/5+QITcwRZuuBU8lS0iYohRzYJHePlr+hzls2Qvo4= Subject key identifier: 40:44:F5:61:72:14:2E:DD:53:65:80:EA:EC:A8:59:17:43:C1:E8:8F Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft Manifest number: 057C Signing time: Fri 04 Sep 2026 16:25:34 +0000 Manifest this update: Fri 04 Sep 2026 16:25:34 +0000 Manifest next update: Fri 11 Sep 2026 16:25:34 +0000 Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: AH+9OjcjjfGHPakEKy5d5Xwi45iTaCcC2LZUuWGas2U=) 2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Sep 4 16:25:34 2026 GMT Not After : Sep 11 16:25:34 2026 GMT Subject: CN=6a9af0fe-8a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:8b:17:0b:a2:39:44:84:a3:3c:23:57:f8: 03:a3:ff:d5:dc:20:dd:df:7f:fc:b3:67:64:41:89: 08:2b:52:fe:bd:d2:81:a9:a9:99:3f:cc:f8:16:5f: 5a:79:c7:62:14:59:49:f9:db:49:72:f7:bb:35:10: 85:e0:98:8b:63:99:a5:93:62:34:07:de:fe:22:17: 82:a3:df:78:3a:e6:01:72:ae:7c:18:b3:8f:30:54: ad:a3:92:ae:5e:7a:73:c3:46:49:c6:cd:fd:3b:7d: 75:37:33:8c:bf:af:88:ce:06:e9:82:3e:9d:9e:73: 66:ee:e0:7c:6c:82:c5:8f:6e:98:5e:70:74:0a:d3: 4e:ee:a4:e4:cf:f9:ac:a2:cc:0c:0f:d1:61:96:f8: f8:7d:a2:01:22:fe:0f:7e:f6:9a:0c:6f:ea:ff:58: de:f6:da:20:68:21:9c:a8:74:e2:67:c8:ee:2a:82: 17:d5:7e:6e:41:be:94:f9:6f:71:67:47:27:e9:ed: 5e:18:2c:8d:c8:53:20:de:56:93:94:0d:5e:84:64: cf:c1:43:5c:88:f3:01:67:8c:73:49:c0:fe:47:ec: 5d:ce:f5:d8:81:80:8b:28:82:b6:26:88:41:b8:5b: f4:72:42:23:c9:a5:f7:3e:53:1c:2c:27:dd:6e:95: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:F5:61:72:14:2E:DD:53:65:80:EA:EC:A8:59:17:43:C1:E8:8F X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5f:ae:fb:04:df:d7:c3:ba:2a:78:35:ba:98:2f:cc:36:43: 7c:1a:f9:da:8b:9a:95:0e:2e:eb:77:a0:e3:4b:c8:0a:31:b6: c5:5e:02:db:52:7b:1d:fe:36:66:6b:b5:25:d3:17:c9:eb:2d: be:b9:9a:21:30:f1:5a:db:81:51:51:69:28:bb:fb:33:d4:e5: 1f:ce:32:ad:3d:0e:79:30:e4:25:95:8b:48:b9:43:ef:31:2c: 23:1d:ea:4f:07:10:98:0b:4c:e1:a7:01:fd:bd:bd:18:7a:25: 44:91:4d:38:45:90:68:bc:51:a8:f8:02:32:00:47:cd:1e:bc: 07:29:29:2c:7b:f8:bb:a0:41:35:38:36:ab:90:02:e3:86:d9: 49:5c:4e:41:8f:21:91:60:a4:fe:d9:ef:ea:b3:e5:42:46:df: c2:2c:99:64:09:bd:fb:fe:22:09:8c:50:3e:a4:cf:ef:06:13: 19:3f:37:68:22:f2:6e:66:c4:33:d8:2d:e8:a7:6a:3f:1a:91: dd:5e:6c:a9:cc:ab:c4:cb:1e:0e:cf:ed:ff:b6:22:3a:78:15: 10:70:60:0b:0c:15:46:8d:55:41:1b:dc:e3:c9:b3:1c:5c:b1: bd:e4:06:3c:0b:2b:7f:07:8f:f3:f6:76:6b:2f:66:74:76:2b: dd:90:c7:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjYwOTA0MTYyNTM0WhcNMjYwOTExMTYyNTM0WjAYMRYwFAYD VQQDEw02YTlhZjBmZS04YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNqLFwuiOUSEozwjV/gDo//V3CDd33/8s2dkQYkIK1L+vdKBqamZP8z4Fl9a ecdiFFlJ+dtJcve7NRCF4JiLY5mlk2I0B97+IheCo994OuYBcq58GLOPMFSto5Ku Xnpzw0ZJxs39O311NzOMv6+Izgbpgj6dnnNm7uB8bILFj26YXnB0CtNO7qTkz/ms oswMD9Fhlvj4faIBIv4PfvaaDG/q/1je9togaCGcqHTiZ8juKoIX1X5uQb6U+W9x Z0cn6e1eGCyNyFMg3laTlA1ehGTPwUNciPMBZ4xzScD+R+xdzvXYgYCLKIK2JohB uFv0ckIjyaX3PlMcLCfdbpVBCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBE9WFy FC7dU2WA6uyoWRdDweiPMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1 c0pnNTZvdmJqTnhabk9aWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPl+u+wTf18O6Kng1upgvzDZDfBr52oualQ4u63eg40vICjG2xV4C21J7Hf42 Zmu1JdMXyestvrmaITDxWtuBUVFpKLv7M9TlH84yrT0OeTDkJZWLSLlD7zEsIx3q TwcQmAtM4acB/b29GHolRJFNOEWQaLxRqPgCMgBHzR68BykpLHv4u6BBNTg2q5AC 44bZSVxOQY8hkWCk/tnv6rPlQkbfwiyZZAm9+/4iCYxQPqTP7wYTGT83aCLybmbE M9gt6KdqPxqR3V5sqcyrxMseDs/t/7YiOngVEHBgCwwVRo1VQRvc48mzHFyxveQG PAsrfweP8/Z2ay9mdHYr3ZDHuA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:57:06 2026 by rpki-client