$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json) Hash identifier: UEcdwY9N6KlACZKxarEhggTGkHXNqvmmO+XqYE4cLAg= Subject key identifier: 4F:48:FE:1E:05:17:C5:55:0B:F1:A9:7B:C1:31:91:6A:A8:AF:F4:F2 Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft Manifest number: 067E Signing time: Sat 24 Oct 2026 22:31:08 +0000 Manifest this update: Sat 24 Oct 2026 22:31:08 +0000 Manifest next update: Sat 31 Oct 2026 22:31:08 +0000 Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: Vk+CcNk1JOTbFz7Mrm5lKbLx1JewUJGKNtP6uz253uk=) 2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: CMPczLui+l93sBtgTu8rd32rZ3/z96G+Pg0qcS/LMRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Validity Not Before: Oct 24 22:31:08 2026 GMT Not After : Oct 31 22:31:08 2026 GMT Subject: CN=6add31ac-a065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:67:29:1c:fe:92:e1:76:13:65:c2:be:08: 67:bb:9a:6d:0c:eb:86:54:6f:6b:22:67:26:da:97: ec:36:8c:bb:f9:fb:a3:f4:c2:2b:59:e3:09:4b:b6: 7c:17:59:eb:29:3a:0a:a5:9e:90:18:7f:ec:7d:44: 0f:06:c3:39:4e:9f:3a:63:ce:56:b3:b7:d1:09:b9: f7:5f:ea:b9:e0:91:4b:04:33:a0:a5:62:c1:3e:bd: c6:af:fb:6a:ba:13:88:fe:34:91:d3:31:11:04:a5: c0:da:10:7b:7b:f7:0a:95:41:98:22:3f:83:17:29: d9:44:fa:26:b7:d5:ba:bf:c5:e0:75:70:6b:95:db: cc:a0:4d:d1:5a:36:14:b4:47:16:2e:87:f9:ee:ee: 86:c0:bd:c2:0b:61:30:f1:0c:48:40:a9:45:c2:71: f3:47:85:87:aa:6c:ff:d9:01:ad:5b:c2:e1:5f:6a: ea:07:da:c4:ee:8f:a2:35:e6:a6:78:a8:d5:5b:b1: 6a:57:1b:3c:38:f7:85:fd:3e:55:d5:56:fa:be:0a: 5c:35:c5:17:4d:7f:49:4d:d2:7d:80:d7:45:db:04: f0:f0:a4:12:11:17:75:a8:9d:31:ed:0c:14:63:74: f2:0d:dc:e9:42:95:bd:0b:41:de:23:03:a6:5c:bb: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:FE:1E:05:17:C5:55:0B:F1:A9:7B:C1:31:91:6A:A8:AF:F4:F2 X509v3 Authority Key Identifier: keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f3:33:2c:3f:b5:04:72:65:6a:78:73:33:0d:cb:18:1e:f6: 2d:23:9c:bb:1f:e8:8a:f3:38:b4:c0:8d:24:c0:30:41:38:0d: ba:d4:ab:ae:9d:40:64:f0:15:d2:23:96:5e:d9:12:1f:1e:85: f4:d2:af:3f:69:30:d0:61:77:ff:57:2a:14:c2:a2:b5:bf:f2: d1:ba:7f:ef:82:84:5c:a9:56:6d:f6:45:1a:c8:3b:68:58:ec: 98:49:2a:c6:ec:a9:02:66:86:86:cf:a3:0e:03:8c:f7:e5:ff: 0d:fc:4f:ce:79:2b:00:36:b3:06:9d:47:f2:12:cd:39:d9:08: 8b:11:b3:c6:e3:82:1c:2b:fc:c7:c5:86:16:f0:f3:e8:8d:24: 45:60:63:11:18:03:62:d8:31:7e:e9:3c:ab:d2:e0:2d:0c:56: 9f:95:34:17:f2:aa:32:ae:11:e0:9b:17:dc:5d:1b:af:0f:c1: e6:1c:9e:c3:c2:8d:7b:4a:f9:d3:18:98:ed:bd:fb:0f:89:da: 90:a9:3f:3b:c6:be:3b:d2:de:80:76:94:87:a6:12:72:d1:e5: 0a:53:36:b5:f1:d7:fa:68:59:21:8a:6e:f1:91:0b:8a:a1:b3: b8:7d:e8:bb:cc:39:ce:77:17:08:73:35:04:5d:eb:ab:b7:4e: 27:03:93:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyMTgxMTAvBgNVBAUTKDg1RUY0RjUyQkU2QzBEMDkzNzM4NjlBOTAwMjIzODYy ODIzM0VCRUYwHhcNMjYxMDI0MjIzMTA4WhcNMjYxMDMxMjIzMTA4WjAYMRYwFAYD VQQDEw02YWRkMzFhYy1hMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdNnKRz+kuF2E2XCvghnu5ptDOuGVG9rImcm2pfsNoy7+fuj9MIrWeMJS7Z8 F1nrKToKpZ6QGH/sfUQPBsM5Tp86Y85Ws7fRCbn3X+q54JFLBDOgpWLBPr3Gr/tq uhOI/jSR0zERBKXA2hB7e/cKlUGYIj+DFynZRPomt9W6v8XgdXBrldvMoE3RWjYU tEcWLof57u6GwL3CC2Ew8QxIQKlFwnHzR4WHqmz/2QGtW8LhX2rqB9rE7o+iNeam eKjVW7FqVxs8OPeF/T5V1Vb6vgpcNcUXTX9JTdJ9gNdF2wTw8KQSERd1qJ0x7QwU Y3TyDdzpQpW9C0HeIwOmXLtgLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9I/h4F F8VVC/Gpe8ExkWqor/TyMB8GA1UdIwQYMBaAFIXvT1K+bA0JNzhpqQAiOGKCM+vv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTIxOC9EODU3QTEzRURF QkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RRazNPR21wQUNJNFlvSXo2 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlOVBVcjVzRFFrM09HbXBBQ0k0WW9JejYtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTIxOC9EODU3QTEzRURFQkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RR azNPR21wQUNJNFlvSXo2LTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIfMzLD+1BHJlanhzMw3LGB72LSOcux/oivM4tMCNJMAwQTgNutSrrp1AZPAV 0iOWXtkSHx6F9NKvP2kw0GF3/1cqFMKitb/y0bp/74KEXKlWbfZFGsg7aFjsmEkq xuypAmaGhs+jDgOM9+X/DfxPznkrADazBp1H8hLNOdkIixGzxuOCHCv8x8WGFvDz 6I0kRWBjERgDYtgxfuk8q9LgLQxWn5U0F/KqMq4R4JsX3F0brw/B5hyew8KNe0r5 0xiY7b37D4nakKk/O8a+O9LegHaUh6YSctHlClM2tfHX+mhZIYpu8ZELiqGzuH3o u8w5zncXCHM1BF3rq7dOJwOTRw== -----END CERTIFICATE-----Generated at Mon Oct 26 03:49:27 2026 by rpki-client