$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json) Hash identifier: ZNY6czcwgxlNeDc31bl0S/UHAlg48TBuiURPLoUN2YM= Subject key identifier: 00:11:98:AB:93:8B:C5:55:B7:41:A8:65:36:8C:F4:D1:1C:E1:01:7A Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft Manifest number: 0404 Signing time: Wed 07 Oct 2026 00:32:23 +0000 Manifest this update: Wed 07 Oct 2026 00:32:23 +0000 Manifest next update: Wed 14 Oct 2026 00:32:23 +0000 Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: vNyA8ZLqY4kuYmNCtcFmjM7BVtcCBVoPMTa4569ykQk=) 2: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: VgHpUmv5XapUWkoHMwq6CHIEaAxNeoc/taSmWAxGkC4=) 3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: PpySkmXHDFAMdn8q7qJMbkbAjwFyZ6Dte8VkGbnBdUI=) 4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: elymg/oKLo36bQB76f3/BjLy1dUOOeqORBslgCNGm4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Oct 7 00:32:23 2026 GMT Not After : Oct 14 00:32:23 2026 GMT Subject: CN=6ac59317-b5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:52:ab:d3:04:ce:d2:e1:a0:31:0a:8a:ce: 46:e3:0e:9b:e1:ad:44:16:d4:3d:8a:27:39:74:37: 85:73:01:a5:e6:e3:97:51:2b:ac:4a:65:e0:4e:15: 86:01:e5:8d:6a:bd:1f:20:4a:3a:03:bd:93:e6:42: cd:92:58:0d:1a:46:9c:45:58:d9:91:9b:e6:6f:0e: d5:66:5d:d2:ca:82:32:cc:5d:45:5e:35:4a:c9:6c: df:a4:ac:a1:89:f1:6d:bd:fc:71:63:80:ab:c3:1a: 00:db:e0:78:68:49:03:a2:fe:2c:3a:ba:7f:96:4b: 4a:96:7a:99:6a:8f:90:d7:8d:43:8a:33:59:b9:5c: 3f:17:b7:d7:d5:43:3b:46:4e:7d:0d:63:de:5d:9a: a3:18:bf:11:75:6a:ff:cf:6f:42:40:ca:0d:ca:4f: 2a:4d:9f:cb:2d:48:b6:0a:c0:82:57:b7:0b:52:8e: 56:ed:ea:25:ba:0f:d0:53:7b:6b:55:2d:55:85:15: 1c:9d:34:03:09:e6:43:1a:41:91:33:b0:b4:4a:7b: 4b:ca:6d:6d:58:06:34:a7:16:aa:93:af:18:6e:2c: 76:b3:9c:01:dd:fd:b8:70:af:d2:13:f8:aa:d4:03: 07:cc:84:c3:e3:f8:c1:3f:1f:74:e6:ed:8f:97:06: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:98:AB:93:8B:C5:55:B7:41:A8:65:36:8C:F4:D1:1C:E1:01:7A X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:74:cf:c5:d5:51:48:59:a8:65:c8:4d:f4:84:00:39:c0:82: 4e:ae:a2:73:ce:4e:9f:a8:9d:62:58:3d:37:64:4c:13:ed:06: 38:c8:5c:93:5b:4c:23:de:61:e0:80:cc:d2:e9:9d:c2:d8:39: 3e:95:ba:9b:ad:f9:2d:fe:19:f0:73:c7:48:13:fa:83:17:fb: 81:99:e2:41:91:90:64:d8:4b:6d:94:fd:5a:1e:8e:ca:cb:ee: 8d:77:30:6f:8b:41:d0:92:ea:2e:16:04:49:1e:c4:9b:b1:d9: d2:e3:9a:ed:61:64:6f:82:74:e4:14:17:8c:0b:9b:0c:cb:be: 70:3c:ae:ec:8b:23:6d:4b:89:18:25:aa:b2:8a:b6:0f:4a:cc: 21:6a:56:b4:3e:75:7b:61:b2:ab:2d:53:4c:90:61:43:23:4b: 45:06:67:11:18:bf:ff:53:db:9d:44:14:bf:41:60:9b:ab:2a: 80:86:c9:18:e4:a5:5c:f4:8e:aa:67:29:b3:39:1f:fe:99:7e: 47:93:fa:36:0f:f5:03:19:50:6a:f0:06:c3:7d:e2:3f:be:c3: ae:78:5c:41:44:dd:1f:e5:95:8f:cb:ae:03:5f:57:86:3e:6e: 01:9a:69:16:d6:da:aa:e8:7d:ef:0e:05:79:32:4d:1d:e5:55: 10:17:f8:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjYxMDA3MDAzMjIzWhcNMjYxMDE0MDAzMjIzWjAYMRYwFAYD VQQDEw02YWM1OTMxNy1iNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuahSq9MEztLhoDEKis5G4w6b4a1EFtQ9iic5dDeFcwGl5uOXUSusSmXgThWG AeWNar0fIEo6A72T5kLNklgNGkacRVjZkZvmbw7VZl3SyoIyzF1FXjVKyWzfpKyh ifFtvfxxY4CrwxoA2+B4aEkDov4sOrp/lktKlnqZao+Q141DijNZuVw/F7fX1UM7 Rk59DWPeXZqjGL8RdWr/z29CQMoNyk8qTZ/LLUi2CsCCV7cLUo5W7eolug/QU3tr VS1VhRUcnTQDCeZDGkGRM7C0SntLym1tWAY0pxaqk68Ybix2s5wB3f24cK/SE/iq 1AMHzITD4/jBPx905u2PlwalfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAARmKuT i8VVt0GoZTaM9NEc4QF6MB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFXTPxdVRSFmoZchN9IQAOcCCTq6ic85On6idYlg9N2RME+0GOMhck1tMI95h 4IDM0umdwtg5PpW6m635Lf4Z8HPHSBP6gxf7gZniQZGQZNhLbZT9Wh6OysvujXcw b4tB0JLqLhYESR7Em7HZ0uOa7WFkb4J05BQXjAubDMu+cDyu7IsjbUuJGCWqsoq2 D0rMIWpWtD51e2Gyqy1TTJBhQyNLRQZnERi//1PbnUQUv0Fgm6sqgIbJGOSlXPSO qmcpszkf/pl+R5P6Ng/1AxlQavAGw33iP77DrnhcQUTdH+WVj8uuA19Xhj5uAZpp Ftbaquh97w4FeTJNHeVVEBf4Ow== -----END CERTIFICATE-----Generated at Thu Oct 8 00:34:11 2026 by rpki-client