$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: M5mGRmHQCXmw//KNiFX+PWbyW8X9aLybNMPkAUHUfXI= Subject key identifier: 03:94:F1:DF:C6:AC:88:68:0F:1D:EE:E0:67:65:80:9F:45:32:A3:63 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0CA2 Signing time: Mon 12 Oct 2026 18:43:35 +0000 Manifest this update: Mon 12 Oct 2026 18:43:35 +0000 Manifest next update: Mon 19 Oct 2026 18:43:35 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: Cjr1bivbg35u66gMSZxxhfZh27/PE8eAAmIiGMPUMqk=) 2: nytxr8dLMBbQr3j3UMGJgg_oDaI.asa (hash: sjj1Gj+oQ0s2eEHokHRUnJxX5k8FMrCUQHw4lScq1SU=) 3: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: ahBHdBU7RHmaEg5k9uPLc0EPvyCfJjb3xG2kQztcg90=) 4: BEB7C0D0BB1C11F181CCCE6E6711F970.roa (hash: 0urKms0wScUkjrUtJaQtzJZoMAc1TfYCz7DrN/a8kv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Oct 12 18:43:35 2026 GMT Not After : Oct 19 18:43:35 2026 GMT Subject: CN=6acd2a57-ac01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:43:0f:ec:e1:74:90:34:f7:8b:38:a4:19:a6: c8:9f:62:54:9b:e6:7b:d2:2f:95:ff:39:00:d8:02: 88:33:88:30:46:64:5f:f1:b7:14:1a:a5:8c:07:f4: 2e:19:e1:a2:f6:45:58:6f:dc:55:58:98:8d:f3:b9: 74:1a:a7:50:f7:16:3a:35:eb:45:bc:61:5e:83:e9: 71:45:ab:27:0e:46:ba:ef:27:c9:4e:db:06:6c:1a: 74:da:7b:df:da:51:ca:1a:73:a4:79:a1:6c:5c:5b: a5:a1:14:c7:aa:8c:72:2b:8c:9c:d0:f3:14:fe:a7: 10:c3:fd:38:e6:80:c3:23:bc:94:27:7e:a3:f8:59: e7:82:6f:4c:48:1d:d3:f8:f0:8d:88:36:15:0b:4f: 5f:64:b3:0f:00:ee:ce:93:ac:a4:73:50:f1:b0:54: 03:c6:1f:59:57:78:6e:f0:bc:d0:69:56:2d:fe:d8: e9:17:ae:9f:35:94:7b:1d:ba:f4:e6:39:14:94:a8: c0:2d:d7:d1:18:3d:50:e2:94:f1:ea:90:b8:c4:2b: 7f:24:98:8b:7b:8b:a0:e9:d6:b9:14:e0:fd:52:87: 67:3b:76:04:94:8d:a8:a7:29:66:d4:ba:75:f5:bf: be:fa:ad:8c:77:27:c6:92:fc:3c:89:f0:38:87:13: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:94:F1:DF:C6:AC:88:68:0F:1D:EE:E0:67:65:80:9F:45:32:A3:63 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:b9:f8:04:5e:a9:5a:a5:8d:27:b1:a8:21:7e:71:a0:e6:d0: d9:d9:dd:52:1b:8f:2f:eb:18:db:66:a8:5e:eb:02:0c:4c:7b: 9f:c0:90:df:1e:78:2e:1e:5b:e0:36:aa:2b:f9:fb:d5:1a:d5: d8:1c:17:84:89:37:6f:3b:cf:f6:5a:86:25:e6:76:39:d2:3b: b5:60:65:42:89:99:8f:33:8a:64:4d:c7:15:e7:78:b9:8f:95: ff:84:43:54:ca:13:17:17:4d:df:16:16:8b:15:d7:1c:27:62: 49:be:32:36:87:23:07:c8:1f:27:25:43:8b:68:14:c3:54:a8: 3f:11:17:42:a9:c7:4d:af:36:0d:7e:af:e0:f3:98:2f:91:e5: 86:7b:73:6c:a0:bc:7a:86:62:8a:f9:45:9a:b8:9f:f1:ae:bf: 8d:b8:4c:8a:a9:28:05:e4:e0:e2:eb:be:74:92:23:97:9c:44: 43:b6:76:a5:b0:83:a3:c6:1b:23:84:1f:1b:f5:24:f2:cf:06: c1:e7:4e:b5:a6:52:cf:1c:b2:06:47:17:a0:fb:69:54:44:62: 84:a7:31:99:56:6e:a7:d4:40:59:6e:9f:3c:ac:08:d3:1d:d2: 35:ac:a3:c8:4a:37:5f:92:6e:6b:09:0f:27:70:f1:73:d0:8b: ac:42:0e:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjYxMDEyMTg0MzM1WhcNMjYxMDE5MTg0MzM1WjAYMRYwFAYD VQQDEw02YWNkMmE1Ny1hYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8kMP7OF0kDT3izikGabIn2JUm+Z70i+V/zkA2AKIM4gwRmRf8bcUGqWMB/Qu GeGi9kVYb9xVWJiN87l0GqdQ9xY6NetFvGFeg+lxRasnDka67yfJTtsGbBp02nvf 2lHKGnOkeaFsXFuloRTHqoxyK4yc0PMU/qcQw/045oDDI7yUJ36j+Fnngm9MSB3T +PCNiDYVC09fZLMPAO7Ok6ykc1DxsFQDxh9ZV3hu8LzQaVYt/tjpF66fNZR7Hbr0 5jkUlKjALdfRGD1Q4pTx6pC4xCt/JJiLe4ug6da5FOD9UodnO3YElI2opylm1Lp1 9b+++q2MdyfGkvw8ifA4hxNG0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOU8d/G rIhoDx3u4GdlgJ9FMqNjMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxLn4BF6pWqWNJ7GoIX5xoObQ2dndUhuPL+sY22aoXusCDEx7n8CQ3x54Lh5b 4DaqK/n71RrV2BwXhIk3bzvP9lqGJeZ2OdI7tWBlQomZjzOKZE3HFed4uY+V/4RD VMoTFxdN3xYWixXXHCdiSb4yNocjB8gfJyVDi2gUw1SoPxEXQqnHTa82DX6v4POY L5HlhntzbKC8eoZiivlFmrif8a6/jbhMiqkoBeTg4uu+dJIjl5xEQ7Z2pbCDo8Yb I4QfG/Uk8s8GwedOtaZSzxyyBkcXoPtpVERihKcxmVZup9RAWW6fPKwI0x3SNayj yEo3X5JuawkPJ3Dxc9CLrEIOyg== -----END CERTIFICATE-----Generated at Mon Oct 12 22:15:49 2026 by rpki-client