$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft File: _whTCVKXG6BlIktSH1ZWO20hJO0.mft (raw, json) Hash identifier: jvCMRPmDUnTMH/TpTGI8URAS8sMNmDIc2U1AwrST8PQ= Subject key identifier: 31:61:92:BB:FF:1E:86:BF:8C:53:E8:AC:54:D0:08:A1:A8:DB:31:E3 Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft Manifest number: 0DE8 Signing time: Sun 04 Oct 2026 17:54:37 +0000 Manifest this update: Sun 04 Oct 2026 17:54:37 +0000 Manifest next update: Sun 11 Oct 2026 17:54:37 +0000 Files and hashes: 1: _whTCVKXG6BlIktSH1ZWO20hJO0.crl (hash: H3Io07ynJJXjzGME7ZVJNF7PXxwt2dlynsjSUWQEIKQ=) 2: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (hash: n4Sr8XQlMSqL6gzDWm/TDckqQSOFH1CNlIw47oAhdDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED Validity Not Before: Oct 4 17:54:37 2026 GMT Not After : Oct 11 17:54:37 2026 GMT Subject: CN=6ac292dd-a69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:f8:70:06:94:18:20:4e:d8:65:47:d8:ff: 50:2a:bb:e4:d7:69:e4:90:da:c9:07:8f:d2:a2:a7: 46:66:e3:c9:60:fd:a0:77:12:b5:d0:62:7b:6b:58: bc:fb:c1:9b:ef:d6:6b:41:e9:cf:f9:48:01:e3:d2: 5c:c0:19:1a:c3:45:6b:64:b1:a2:1a:ba:d7:74:32: 23:65:97:4b:a5:26:8d:17:ee:e8:e5:20:77:5d:6a: 61:9f:f1:76:00:8c:ba:bb:7c:b3:df:28:63:99:96: 72:8e:e8:c1:cb:de:45:1f:6d:c0:6f:3f:7d:c5:2e: 4d:ae:7e:bb:0d:8e:3e:b9:55:9a:99:bb:03:11:40: 32:2b:6f:8c:51:ec:ba:15:70:83:96:89:c5:15:e6: ef:a5:1d:17:cb:22:71:b4:b5:47:55:f5:b8:57:f3: 6e:60:7b:ba:8e:b8:78:7c:60:64:9f:39:97:ef:d2: a7:e6:f3:fd:bd:8e:c5:b7:15:4c:83:89:db:f9:b9: 0f:fe:bd:f8:0d:95:e3:0a:f6:58:39:b9:87:61:c4: 41:c3:c9:aa:11:38:ab:3f:cf:f9:34:6c:ba:df:fa: 6c:82:d0:c0:04:73:c4:26:fd:9d:2f:68:61:21:16: b5:f0:67:8d:ae:7c:1a:26:10:af:6a:58:d0:18:9e: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:61:92:BB:FF:1E:86:BF:8C:53:E8:AC:54:D0:08:A1:A8:DB:31:E3 X509v3 Authority Key Identifier: keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3b:a8:98:d4:06:14:3f:12:47:e5:67:93:23:37:66:d6:68: 70:da:ac:91:82:b8:8f:5c:76:b2:1a:15:f3:a3:b1:4d:e9:2b: 43:18:47:a6:63:f5:ee:47:47:33:15:da:da:67:3e:db:b0:8a: 1a:6d:04:22:b4:d4:29:b2:6e:f3:d7:96:ff:d7:6f:47:a9:0b: 97:92:c2:0f:e8:81:af:22:f7:22:f4:d0:fb:42:af:0c:3a:54: 07:a7:e1:e8:72:6c:2b:1b:d9:72:29:7c:51:38:73:5d:1c:82: 47:27:29:f3:4e:05:a0:a6:c7:c0:e9:ab:a7:b7:9b:20:50:8d: 1f:b0:1b:eb:f1:a8:2d:ad:47:86:9f:1c:31:87:c4:57:39:c8: ca:c7:fd:df:ad:64:1c:8a:ea:d7:53:14:2d:04:c2:e1:af:59: 00:68:73:ef:91:19:16:de:ad:db:13:dd:f3:a6:10:ef:f1:60: 40:1d:2a:ac:eb:ac:2c:5f:88:47:5f:98:9b:61:0d:61:19:13: f1:a1:25:f1:39:19:db:48:45:44:9a:7e:05:bb:d4:ca:e5:8a: cf:c8:76:74:51:70:0a:a3:a9:4e:ad:aa:72:85:b2:b8:7a:5c: 32:73:9a:a9:2e:21:5b:b8:46:ce:ec:79:68:f8:d8:b7:0b:ba: 30:07:4a:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0NzUxMTAvBgNVBAUTKEZGMDg1MzA5NTI5NzFCQTA2NTIyNEI1MjFGNTY1NjNC NkQyMTI0RUQwHhcNMjYxMDA0MTc1NDM3WhcNMjYxMDExMTc1NDM3WjAYMRYwFAYD VQQDEw02YWMyOTJkZC1hNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cD4cAaUGCBO2GVH2P9QKrvk12nkkNrJB4/SoqdGZuPJYP2gdxK10GJ7a1i8 +8Gb79ZrQenP+UgB49JcwBkaw0VrZLGiGrrXdDIjZZdLpSaNF+7o5SB3XWphn/F2 AIy6u3yz3yhjmZZyjujBy95FH23Abz99xS5Nrn67DY4+uVWambsDEUAyK2+MUey6 FXCDlonFFebvpR0XyyJxtLVHVfW4V/NuYHu6jrh4fGBknzmX79Kn5vP9vY7FtxVM g4nb+bkP/r34DZXjCvZYObmHYcRBw8mqETirP8/5NGy63/psgtDABHPEJv2dL2hh IRa18GeNrnwaJhCvaljQGJ73bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFhkrv/ Hoa/jFPorFTQCKGo2zHjMB8GA1UdIwQYMBaAFP8IUwlSlxugZSJLUh9WVjttISTt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ3NS9EQkZCM0VCNEU0 MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2QmxJa3RTSDFaV08yMGhK TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193aFRDVktYRzZCbElrdFNIMVpXTzIwaEpPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQ3NS9EQkZCM0VCNEU0MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2 QmxJa3RTSDFaV08yMGhKTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYjuomNQGFD8SR+VnkyM3ZtZocNqskYK4j1x2shoV86OxTekrQxhHpmP17kdH MxXa2mc+27CKGm0EIrTUKbJu89eW/9dvR6kLl5LCD+iBryL3IvTQ+0KvDDpUB6fh 6HJsKxvZcil8UThzXRyCRycp804FoKbHwOmrp7ebIFCNH7Ab6/GoLa1Hhp8cMYfE VznIysf9361kHIrq11MULQTC4a9ZAGhz75EZFt6t2xPd86YQ7/FgQB0qrOusLF+I R1+Ym2ENYRkT8aEl8TkZ20hFRJp+BbvUyuWKz8h2dFFwCqOpTq2qcoWyuHpcMnOa qS4hW7hGzux5aPjYtwu6MAdK7w== -----END CERTIFICATE-----Generated at Sun Oct 4 20:12:36 2026 by rpki-client