$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: ILufBBAeXXLxOOACNtL8QnSzRUDufTmw/negETBbtvc= Subject key identifier: 08:7F:65:86:08:98:1B:5E:0E:3B:CB:4D:4D:B2:18:96:1A:F5:58:22 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 028A Signing time: Mon 21 Sep 2026 01:49:43 +0000 Manifest this update: Mon 21 Sep 2026 01:49:42 +0000 Manifest next update: Mon 28 Sep 2026 01:49:42 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: 1Xw6lOEePsfXu3bqNRyPDGy5Z8fWGUWt5IZsU25se8M=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Sep 21 01:49:42 2026 GMT Not After : Sep 28 01:49:42 2026 GMT Subject: CN=6ab08d36-f505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:86:02:51:af:2c:b9:89:df:33:87:10:6f: 79:59:0c:6a:ad:4e:97:35:c7:b6:af:b0:c8:63:bf: 23:9a:4d:77:7c:fa:2a:2e:dc:f9:df:64:cb:46:bf: 90:1c:2e:11:ff:d9:ac:0f:2b:38:15:99:c0:c3:48: 0c:fd:81:55:16:f6:43:9e:8e:a0:fc:40:4b:6c:3e: 1f:f7:bb:c9:74:03:2f:50:77:b5:7a:d2:cf:e9:bb: e0:d4:29:c7:e9:cc:09:00:f3:4e:2e:e2:d9:33:83: 78:15:25:e5:9d:d5:58:bc:6f:61:48:fb:f4:ff:6b: 48:86:08:17:7b:08:8d:e1:0d:e6:a0:f5:90:76:6f: 85:22:ba:96:6e:67:fb:eb:9c:2c:6d:3d:95:75:f8: e6:66:a1:96:22:2f:e4:f3:04:c2:80:dd:61:c8:a9: 31:79:46:63:77:a9:47:3b:47:f3:78:41:fe:00:c4: a8:bc:91:00:87:92:46:63:ef:f0:39:cd:01:a8:f5: 18:fc:73:5e:48:ed:81:4c:5e:5c:91:95:7b:1d:7e: a2:1f:0c:b5:ff:0a:81:b8:a0:dc:39:c9:7d:3e:ad: d5:38:d6:37:28:dd:2b:40:a2:00:3e:0c:75:39:f3: fa:ee:70:b3:fb:f5:7d:20:41:70:49:cf:28:11:45: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7F:65:86:08:98:1B:5E:0E:3B:CB:4D:4D:B2:18:96:1A:F5:58:22 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ce:f8:45:e5:a6:ad:b8:d0:1a:fa:a1:85:53:b5:51:2a:6e: 9d:f5:3c:6b:cc:08:1d:30:70:dc:ea:af:00:72:61:6a:34:0b: 02:56:0b:94:8d:06:af:17:01:9d:00:5f:a2:69:1f:6f:22:72: 12:fc:03:94:83:dc:0a:0f:17:2b:c7:d1:4a:90:56:08:02:10: ad:44:b1:04:a7:99:38:27:c1:86:30:41:a8:e8:c0:32:6b:50: c6:f8:d1:42:7f:4d:41:72:b7:61:b6:b7:ab:cc:2a:8a:bf:ff: b2:ce:50:ce:9c:d6:ce:93:94:57:50:02:fc:8c:b4:82:6b:10: 8b:05:c2:e3:89:49:77:89:e3:97:fb:a2:25:87:14:47:65:02: 75:e0:43:2d:7c:03:4e:48:ec:59:4c:6e:4f:27:bd:ab:0f:e4: 11:39:5a:1f:46:63:84:02:27:22:d9:56:50:5b:97:81:2c:b9: 83:fe:e9:83:aa:82:a0:5d:5f:e4:33:71:1d:21:32:3f:74:74: d0:de:6e:77:ea:72:97:2d:2f:84:d7:45:7b:52:f3:12:cb:2f: a2:28:24:35:0d:e5:22:cc:8f:33:b1:fa:e2:3e:52:2f:ce:df: a7:b2:b0:f6:2c:97:07:68:3a:f9:15:25:92:5b:ca:db:28:4e: 5b:90:10:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjYwOTIxMDE0OTQyWhcNMjYwOTI4MDE0OTQyWjAYMRYwFAYD VQQDEw02YWIwOGQzNi1mNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pKGAlGvLLmJ3zOHEG95WQxqrU6XNce2r7DIY78jmk13fPoqLtz532TLRr+Q HC4R/9msDys4FZnAw0gM/YFVFvZDno6g/EBLbD4f97vJdAMvUHe1etLP6bvg1CnH 6cwJAPNOLuLZM4N4FSXlndVYvG9hSPv0/2tIhggXewiN4Q3moPWQdm+FIrqWbmf7 65wsbT2VdfjmZqGWIi/k8wTCgN1hyKkxeUZjd6lHO0fzeEH+AMSovJEAh5JGY+/w Oc0BqPUY/HNeSO2BTF5ckZV7HX6iHwy1/wqBuKDcOcl9Pq3VONY3KN0rQKIAPgx1 OfP67nCz+/V9IEFwSc8oEUXkqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAh/ZYYI mBteDjvLTU2yGJYa9VgiMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqM74ReWmrbjQGvqhhVO1USpunfU8a8wIHTBw3OqvAHJhajQLAlYLlI0GrxcB nQBfomkfbyJyEvwDlIPcCg8XK8fRSpBWCAIQrUSxBKeZOCfBhjBBqOjAMmtQxvjR Qn9NQXK3Yba3q8wqir//ss5QzpzWzpOUV1AC/Iy0gmsQiwXC44lJd4njl/uiJYcU R2UCdeBDLXwDTkjsWUxuTye9qw/kETlaH0ZjhAInItlWUFuXgSy5g/7pg6qCoF1f 5DNxHSEyP3R00N5ud+pyly0vhNdFe1LzEssvoigkNQ3lIsyPM7H64j5SL87fp7Kw 9iyXB2g6+RUlklvK2yhOW5AQ0Q== -----END CERTIFICATE-----Generated at Tue Sep 22 00:18:01 2026 by rpki-client