$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json) Hash identifier: JQA+KIE5AhTw9wOJEea0LNFdGQdk4FM6uq50u+lq4IA= Subject key identifier: 5A:3C:3B:8F:00:91:7D:78:38:B3:56:4D:59:82:37:67:45:23:E0:86 Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10 Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10 Certificate serial: 168B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft Manifest number: 1625 Signing time: Tue 08 Sep 2026 16:50:47 +0000 Manifest this update: Tue 08 Sep 2026 16:50:46 +0000 Manifest next update: Tue 15 Sep 2026 16:50:46 +0000 Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: cmEdYaF16wDckvP54quQMBJ+Jgng1uP3qmXLufIgBh0=) 2: C9203DF43D5E11F19F1D0B4EAB833773.roa (hash: DX4eexE4YC+Zii7wTi3ae+5wNhCUW2YRgzcsXgrn4Gc=) 3: 0BFFC86E3FC211F18966A53AC7833773.roa (hash: 1bRai1yKxod8Ng4Dkl4xffVS1smeGTtBYsweb+835T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 16:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5771 (0x168b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10 Validity Not Before: Sep 8 16:50:46 2026 GMT Not After : Sep 15 16:50:46 2026 GMT Subject: CN=6aa03ce7-6176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:2d:30:5c:e1:4b:29:fc:ec:0c:20:f4:31: 16:f2:fa:21:c4:3f:04:f0:f5:9a:b5:55:c5:6d:f5: 65:eb:99:4d:fd:19:8f:b1:ab:39:b3:8b:0d:83:c0: 7e:7a:a1:bf:44:fb:75:c4:ba:53:be:66:f5:15:8a: ce:80:94:39:94:46:47:46:82:b5:17:92:dc:97:a2: 8d:3b:39:1c:d1:e9:65:79:bf:ff:e0:6c:4c:08:71: 3e:57:ac:dd:c5:dc:0c:7b:a2:0d:f5:9d:37:02:8f: 55:8a:38:14:7e:82:ca:8d:f0:14:41:93:1a:8c:fd: 34:62:4a:5e:1c:f9:6d:ff:e1:09:f7:53:80:20:c5: a9:0b:cd:e4:e0:bb:b7:9e:0d:b9:bb:22:ee:04:40: 62:0b:0b:c8:8f:6f:e5:5d:d2:70:1f:cc:66:e8:98: fc:88:e0:5c:39:a1:32:bc:42:f2:79:e9:04:00:a8: e1:be:20:92:5e:ea:02:61:56:37:8f:50:95:85:79: 91:42:64:91:84:78:90:d1:37:17:03:4f:49:30:7c: 26:73:a2:a5:4c:11:f5:74:89:4a:51:c6:da:c7:bf: 6f:d0:ca:a7:e0:d9:d4:8c:eb:43:c6:f9:8c:cc:df: 13:33:54:f4:57:89:a6:41:0a:9d:c5:45:b0:86:28: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:3B:8F:00:91:7D:78:38:B3:56:4D:59:82:37:67:45:23:E0:86 X509v3 Authority Key Identifier: keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f8:30:fc:50:fa:a0:49:a7:92:06:e5:07:da:a0:b6:15:f1: c8:cd:14:88:d6:93:9b:f4:e5:ff:1f:f5:71:40:40:f2:0b:07: 03:1c:f7:5c:5b:1f:b8:21:3d:10:43:2f:c4:89:5c:f9:72:9a: 16:f6:21:e3:bf:8b:89:60:ce:02:d6:ab:52:43:7e:7e:5b:20: a3:af:2f:58:7a:34:19:08:ec:03:67:df:8a:df:7e:5c:f3:3a: 89:87:1a:6b:af:ed:f7:ea:eb:72:5b:9e:d8:6f:7d:79:4e:fb: 40:39:7c:f5:e0:82:8c:92:57:31:8a:1c:b4:2c:32:34:66:18: 3f:cd:a8:0f:76:13:38:d0:0a:5f:13:b7:bd:68:82:b4:a2:54: 93:04:3f:65:9f:1d:a1:5f:1c:ae:08:88:4f:03:3f:22:dc:40: aa:6c:eb:36:b0:97:2e:a9:db:01:80:c4:16:cf:a0:9d:1b:ce: 08:33:ec:7d:8f:10:ac:f4:c3:3c:02:b2:b4:44:26:20:70:80: 0d:0b:6e:bb:c3:77:52:6f:97:6c:4d:29:29:fb:3d:64:c2:53: 41:5a:84:ef:56:6c:c0:48:0a:5a:cf:cb:3b:99:06:f8:e4:de: bd:44:09:b2:63:f8:4d:1c:ce:02:d6:2e:d7:05:4d:fd:35:35: 83:2b:03:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDFFMTIzODQ1NjM3MUU3NDQ4OTQ2MjJFOThBQzFFRTU1 QjQxNDVFMTAwHhcNMjYwOTA4MTY1MDQ2WhcNMjYwOTE1MTY1MDQ2WjAYMRYwFAYD VQQDEw02YWEwM2NlNy02MTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso4tMFzhSyn87Awg9DEW8vohxD8E8PWatVXFbfVl65lN/RmPsas5s4sNg8B+ eqG/RPt1xLpTvmb1FYrOgJQ5lEZHRoK1F5Lcl6KNOzkc0elleb//4GxMCHE+V6zd xdwMe6IN9Z03Ao9VijgUfoLKjfAUQZMajP00YkpeHPlt/+EJ91OAIMWpC83k4Lu3 ng25uyLuBEBiCwvIj2/lXdJwH8xm6Jj8iOBcOaEyvELyeekEAKjhviCSXuoCYVY3 j1CVhXmRQmSRhHiQ0TcXA09JMHwmc6KlTBH1dIlKUcbax79v0Mqn4NnUjOtDxvmM zN8TM1T0V4mmQQqdxUWwhijhyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFo8O48A kX14OLNWTVmCN2dFI+CGMB8GA1UdIwQYMBaAFB4SOEVjcedEiUYi6YrB7lW0FF4Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC82OTdFMzU2QTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUwU0pSaUxwaXNIdVZiUVVY aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hoSTRSV054NTBTSlJpTHBpc0h1VmJRVVhoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC82OTdFMzU2QTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUw U0pSaUxwaXNIdVZiUVVYaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUvgw/FD6oEmnkgblB9qgthXxyM0UiNaTm/Tl/x/1cUBA8gsHAxz3XFsfuCE9 EEMvxIlc+XKaFvYh47+LiWDOAtarUkN+flsgo68vWHo0GQjsA2ffit9+XPM6iYca a6/t9+rrclue2G99eU77QDl89eCCjJJXMYoctCwyNGYYP82oD3YTONAKXxO3vWiC tKJUkwQ/ZZ8doV8crgiITwM/ItxAqmzrNrCXLqnbAYDEFs+gnRvOCDPsfY8QrPTD PAKytEQmIHCADQtuu8N3Um+XbE0pKfs9ZMJTQVqE71ZswEgKWs/LO5kG+OTevUQJ smP4TRzOAtYu1wVN/TU1gysD3Q== -----END CERTIFICATE-----Generated at Thu Sep 10 18:09:44 2026 by rpki-client