$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: 9jQZcBEb+ZPrKh2Lmt8kVP4B3kdP3qztzxgnpEeF11g= Subject key identifier: A8:41:8E:0E:AC:0E:CD:B6:80:70:2C:C8:44:67:85:D6:9A:0E:20:AF Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: 0227 Signing time: Wed 07 Oct 2026 03:20:02 +0000 Manifest this update: Wed 07 Oct 2026 03:20:01 +0000 Manifest next update: Wed 14 Oct 2026 03:20:01 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: 1oqnXRNWilCjYQBQ9ZvVpvO4LAGdk3QHXJBjXnJxdVI=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: 33hf+OZOIdsgTL8jr30aVQitqwm7D2R6ndR/vMRIX9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: Oct 7 03:20:01 2026 GMT Not After : Oct 14 03:20:01 2026 GMT Subject: CN=6ac5ba61-127b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:4d:0b:94:46:8c:a7:27:47:03:1e:a5:33: 20:f1:4e:02:31:7f:86:b4:d8:fe:b9:59:da:2c:82: c3:d5:c2:1b:f5:a9:a2:74:b4:0b:6d:5b:75:eb:67: 03:78:88:e4:41:83:3c:60:7d:9c:1d:ec:a1:3a:5c: dd:c5:88:f1:51:87:91:e1:7c:09:59:0c:2e:5e:bb: 5b:54:3c:66:83:8e:2d:dd:50:2a:98:66:69:19:6b: 5c:f6:cb:e6:75:a9:2f:d6:84:c9:8e:db:a2:d3:ff: 04:76:57:a6:18:ff:55:34:31:f1:57:c0:72:cf:d5: d6:ea:0d:4c:3d:9a:bb:16:d3:0b:52:05:4d:37:4f: 49:6d:13:19:31:08:9e:3b:be:d6:30:6a:a2:81:2c: 46:4e:91:3c:22:5b:d0:5f:4d:04:33:76:78:23:60: ab:38:c0:8c:59:7f:3a:3f:ec:d7:61:49:3f:3c:07: 4b:2f:bd:81:c4:ff:14:f1:e5:c4:d8:9a:91:21:aa: b8:a6:2a:a0:53:69:b2:89:9e:92:7c:e4:ef:d2:15: 22:b5:4c:9e:e9:12:69:89:24:32:65:f5:f2:86:00: 6c:3a:cb:de:6d:82:af:1f:98:5c:c2:a3:ae:16:9f: 79:e4:48:c4:86:00:93:8d:b3:34:4f:f1:64:f3:b3: 4d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:41:8E:0E:AC:0E:CD:B6:80:70:2C:C8:44:67:85:D6:9A:0E:20:AF X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:54:77:6f:6b:f6:c7:a0:70:d2:a8:ab:48:da:ab:f1:3d: a5:7e:81:55:92:0e:91:66:0a:f5:33:c2:75:0d:ce:d5:06:46: 2e:8f:2e:49:ee:a7:a3:98:80:68:6b:4a:4a:5b:5c:74:58:1b: 63:26:ed:b5:6d:74:48:20:b3:b5:b8:db:35:54:cd:99:b3:86: 0b:d9:20:4e:13:c5:57:b9:97:56:38:58:74:8b:68:61:a9:7b: 8e:cb:35:78:73:a7:9b:9c:09:a9:9f:b2:c8:64:ab:fa:ba:9a: 85:3e:c1:b1:0c:c1:e1:8e:85:e8:ad:cf:ba:d9:e1:6d:aa:81: 67:15:24:05:1e:36:e4:b3:94:02:38:61:39:70:8f:3b:b3:89: 04:75:89:e2:69:04:0c:7d:3c:6f:fb:cb:d8:86:ef:17:e8:1e: 20:a3:4b:cf:a0:c1:75:f2:22:11:ad:44:96:eb:79:ab:37:21: 41:5b:13:fd:12:e6:d2:02:af:50:c7:d8:fa:e7:91:4e:d7:51: 3e:b5:81:09:4c:e8:e7:cd:e4:32:95:54:e4:f1:b5:fd:eb:34: a8:4d:6a:c5:23:f6:cd:c3:22:4b:52:2f:38:48:7c:b0:f0:0b: 0d:c2:6e:84:8a:a1:10:26:6b:da:7d:c6:d7:ab:08:ae:af:26: ae:8f:25:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw QjYxMzgyMEQwHhcNMjYxMDA3MDMyMDAxWhcNMjYxMDE0MDMyMDAxWjAYMRYwFAYD VQQDEw02YWM1YmE2MS0xMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQJNC5RGjKcnRwMepTMg8U4CMX+GtNj+uVnaLILD1cIb9amidLQLbVt162cD eIjkQYM8YH2cHeyhOlzdxYjxUYeR4XwJWQwuXrtbVDxmg44t3VAqmGZpGWtc9svm dakv1oTJjtui0/8EdlemGP9VNDHxV8Byz9XW6g1MPZq7FtMLUgVNN09JbRMZMQie O77WMGqigSxGTpE8IlvQX00EM3Z4I2CrOMCMWX86P+zXYUk/PAdLL72BxP8U8eXE 2JqRIaq4piqgU2myiZ6SfOTv0hUitUye6RJpiSQyZfXyhgBsOsvebYKvH5hcwqOu Fp955EjEhgCTjbM0T/Fk87NNPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhBjg6s Ds22gHAsyERnhdaaDiCvMB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4 NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z Y0stRUJWZV9RVm9MWVRnZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABCFUd29r9segcNKoq0jaq/E9pX6BVZIOkWYK9TPCdQ3O1QZGLo8uSe6no5iA aGtKSltcdFgbYybttW10SCCztbjbNVTNmbOGC9kgThPFV7mXVjhYdItoYal7jss1 eHOnm5wJqZ+yyGSr+rqahT7BsQzB4Y6F6K3PutnhbaqBZxUkBR425LOUAjhhOXCP O7OJBHWJ4mkEDH08b/vL2IbvF+geIKNLz6DBdfIiEa1Elut5qzchQVsT/RLm0gKv UMfY+ueRTtdRPrWBCUzo583kMpVU5PG1/es0qE1qxSP2zcMiS1IvOEh8sPALDcJu hIqhECZr2n3G16sIrq8mro8lnw== -----END CERTIFICATE-----Generated at Wed Oct 7 14:35:53 2026 by rpki-client