$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft File: ChYfF3ryrIp11Br-R61A0quRh8o.mft (raw, json) Hash identifier: 99E7jKjkXE5EPx/VsPCBZhz/ELvqS6H1aIMlMiGIgSY= Subject key identifier: 8B:5F:FE:CD:73:15:F9:32:93:7A:19:BC:C8:71:91:8E:34:B7:BD:C7 Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft Manifest number: 02DB Signing time: Wed 07 Oct 2026 01:38:03 +0000 Manifest this update: Wed 07 Oct 2026 01:38:03 +0000 Manifest next update: Wed 14 Oct 2026 01:38:03 +0000 Files and hashes: 1: ChYfF3ryrIp11Br-R61A0quRh8o.crl (hash: ozzv4fG78HHBPUUEqShBU5bHNTqI6aZOL4lrOUpQMok=) 2: 7817D2327A5C11EDA0156D76C4F9AE02.roa (hash: Rq+tZUOjeaItK065Mwn6s2PgGSWpFi22osco/w96fYU=) 3: 130A89761FAE11F0B3E41E84C4F9AE02.roa (hash: D/XxgpTmAqVDQH9jHYni1JxMUh1+GB1xdzs9QThZoNk=) 4: 1376B9341FAE11F0B3E41E84C4F9AE02.roa (hash: PtDZ91mnT8EbY3+b/UvFfpQljI6ctCClP32Mn4w89n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Validity Not Before: Oct 7 01:38:03 2026 GMT Not After : Oct 14 01:38:03 2026 GMT Subject: CN=6ac5a27b-8444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:30:4b:53:af:51:bf:0d:93:d0:fb:e8:2a: b5:12:96:ab:93:8b:10:8a:22:5b:42:6f:9e:68:7b: d7:3c:6e:05:be:81:24:5d:87:bc:70:7e:87:e2:0c: c1:24:ef:99:2d:d9:cd:ec:af:76:f6:d5:f0:1b:fd: 39:d7:a2:ce:35:ee:b8:55:6d:93:db:07:76:aa:93: f5:1d:52:26:ea:51:55:29:5c:ab:0a:90:2a:ce:04: f4:a6:c5:53:3c:5b:6f:8a:2a:c1:88:eb:82:d8:e5: 5d:e6:90:2b:60:36:81:1e:f3:f7:71:37:b7:38:b6: 85:57:fa:43:7e:6b:aa:52:f9:80:28:b5:33:cd:4f: b5:4d:55:4d:6c:51:5f:ee:4b:6a:45:39:83:b2:18: db:9f:c2:db:67:2b:df:6c:ac:71:76:3c:4b:2a:22: 61:e3:6a:19:2f:fb:ac:ba:94:81:dd:ff:ab:7b:c1: 0c:e1:c7:0f:51:88:d4:29:91:8d:47:a3:70:43:2e: 4c:63:8f:d1:f0:79:20:b8:11:1d:db:b5:09:81:83: ad:95:8f:9c:6f:5b:b2:97:01:aa:94:05:7a:ef:ec: e7:af:da:87:15:04:6d:4f:6c:0d:b8:66:b2:bb:42: 54:5e:0b:2a:35:0a:df:b5:7a:97:19:19:24:1e:39: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5F:FE:CD:73:15:F9:32:93:7A:19:BC:C8:71:91:8E:34:B7:BD:C7 X509v3 Authority Key Identifier: keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9a:f3:1b:eb:91:e9:e6:0d:85:d6:52:d8:50:3d:c8:fb:60: 4f:bc:27:2d:1e:98:75:4e:ec:46:54:e3:a1:7b:50:8e:87:15: 64:a9:5b:cd:44:98:a1:cb:a7:df:89:8a:63:95:ea:e4:07:be: f0:d2:7f:19:bc:7b:32:2b:c8:16:19:fb:ee:29:13:bd:9e:ac: f9:44:ae:92:d9:cc:af:b2:b4:17:ba:0f:b6:4b:53:65:d0:a2: b7:67:6b:d0:6c:ca:c6:cd:a6:b4:72:8d:e1:19:84:d1:75:6e: 6a:2d:59:b4:cf:b9:e6:7d:92:6c:c1:8d:f2:a8:36:b5:e1:ae: e0:2b:38:bf:e5:86:a5:8f:fd:af:1d:d4:ad:c2:53:e1:cd:5f: 76:9b:64:f4:d6:36:a2:59:1e:b1:28:1a:e5:bb:6d:38:66:6b: b5:0a:4b:bc:54:03:6e:d0:85:72:e2:97:a5:d5:f6:b8:25:fa: 08:0f:e9:69:34:65:b6:b3:49:7c:b8:65:1b:d9:b2:c8:5e:6a: 33:9a:ed:1b:cc:00:3a:7f:88:ae:42:2f:73:03:36:c9:0a:ea: 0e:fc:3d:54:3b:3f:3a:26:de:01:8d:b5:05:e0:9a:d4:a6:9b: d1:70:4f:64:5d:01:49:e9:90:82:3c:3e:fd:9d:46:8e:eb:04: 3f:e8:ad:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy QUI5MTg3Q0EwHhcNMjYxMDA3MDEzODAzWhcNMjYxMDE0MDEzODAzWjAYMRYwFAYD VQQDEw02YWM1YTI3Yi04NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uMwS1OvUb8Nk9D76Cq1Epark4sQiiJbQm+eaHvXPG4FvoEkXYe8cH6H4gzB JO+ZLdnN7K929tXwG/0516LONe64VW2T2wd2qpP1HVIm6lFVKVyrCpAqzgT0psVT PFtviirBiOuC2OVd5pArYDaBHvP3cTe3OLaFV/pDfmuqUvmAKLUzzU+1TVVNbFFf 7ktqRTmDshjbn8LbZyvfbKxxdjxLKiJh42oZL/usupSB3f+re8EM4ccPUYjUKZGN R6NwQy5MY4/R8HkguBEd27UJgYOtlY+cb1uylwGqlAV67+znr9qHFQRtT2wNuGay u0JUXgsqNQrftXqXGRkkHjmr6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItf/s1z Ffkyk3oZvMhxkY40t73HMB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8zNjVCQ0NFQzdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJ cDExQnItUjYxQTBxdVJoOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArJrzG+uR6eYNhdZS2FA9yPtgT7wnLR6YdU7sRlTjoXtQjocVZKlbzUSYocun 34mKY5Xq5Ae+8NJ/Gbx7MivIFhn77ikTvZ6s+USuktnMr7K0F7oPtktTZdCit2dr 0GzKxs2mtHKN4RmE0XVuai1ZtM+55n2SbMGN8qg2teGu4Cs4v+WGpY/9rx3UrcJT 4c1fdptk9NY2olkesSga5bttOGZrtQpLvFQDbtCFcuKXpdX2uCX6CA/paTRltrNJ fLhlG9myyF5qM5rtG8wAOn+IrkIvcwM2yQrqDvw9VDs/OibeAY21BeCa1Kab0XBP ZF0BSemQgjw+/Z1GjusEP+itMQ== -----END CERTIFICATE-----Generated at Thu Oct 8 01:23:19 2026 by rpki-client