$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json) Hash identifier: QY1AWlU2vDYMxsc1dgyqiIgu6VvMFPS6Uqs+JHDalco= Subject key identifier: C4:7F:8C:B1:3E:2E:7E:F0:71:85:B3:CD:8E:EE:9B:B0:EF:F0:1E:E2 Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft Manifest number: 03A4 Signing time: Mon 21 Sep 2026 00:34:18 +0000 Manifest this update: Mon 21 Sep 2026 00:34:17 +0000 Manifest next update: Mon 28 Sep 2026 00:34:17 +0000 Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: DRAmX0ArQq58xbnPa8CHc/nJAC+3fz0WDiLKQC3I7MI=) 2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: ++TOpbIz4D1k0QpqFIUl2h1hNZQ4CZfs4q8RLlyTsbo=) 3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: lnnL+su9O1+tyTc7UZqdIqQQ4ZWtCaqAPlr6TpKkWjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Validity Not Before: Sep 21 00:34:17 2026 GMT Not After : Sep 28 00:34:17 2026 GMT Subject: CN=6ab07b8a-5311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:e5:4f:74:ac:ef:5f:28:72:62:fc:b2:60: db:f1:f1:80:af:24:0e:13:67:6c:6a:00:2e:f9:22: 22:9d:75:c3:c9:91:37:21:52:ec:4a:23:2d:98:dd: 74:7a:88:47:bf:6b:4e:dc:0e:e0:b0:1e:18:0e:44: 9d:2d:18:22:bb:69:3e:7e:59:04:55:a4:58:be:48: 0c:18:a2:ec:28:9b:7b:04:70:27:f7:d9:8e:8e:6c: 8f:2d:0c:9a:39:bc:9a:21:30:50:c9:76:e1:56:a3: 74:ab:71:ec:8b:04:f9:fd:13:a4:c0:b7:54:bf:57: 57:22:96:b8:23:1b:7a:0b:af:ff:8d:0c:3f:d6:38: 94:f2:f1:77:60:ae:fe:e1:69:c5:61:6d:54:9a:df: 94:05:28:5f:6f:82:bb:b8:ca:09:02:ac:cd:c8:49: 9e:35:e3:11:b3:16:d0:a7:40:e0:94:76:35:2e:aa: 3f:ba:05:c7:c7:66:04:60:ae:91:ac:f7:30:35:44: 96:d4:c3:88:7c:31:b3:a8:a6:43:fc:f4:71:f2:c3: 46:dd:9b:66:81:75:72:84:30:5e:d6:86:1c:5d:44: 02:b3:2d:6b:34:29:be:a5:d4:f3:a4:5e:0e:a4:e0: e3:23:aa:f1:10:41:e8:86:25:19:5f:52:1c:f4:40: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7F:8C:B1:3E:2E:7E:F0:71:85:B3:CD:8E:EE:9B:B0:EF:F0:1E:E2 X509v3 Authority Key Identifier: keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6b:e7:6e:b0:7c:43:f8:6f:a4:98:59:78:3b:3f:90:09:90: 94:cc:24:f3:a9:45:4b:02:bf:86:1b:69:ff:00:c0:40:47:98: 20:cb:78:89:b8:07:01:0a:1f:b1:a5:23:62:2b:0f:7d:d5:f4: d1:72:a1:20:61:b5:c8:6f:54:8b:8c:41:c5:c8:b2:40:69:8e: 41:43:4b:7a:99:b8:f7:56:ae:4f:24:18:df:ef:e0:e1:c4:11: 55:3e:32:e0:10:27:5c:18:6c:e3:95:1a:e2:46:ed:bf:5f:14: 19:0c:a0:c0:1a:68:b2:de:b9:27:b0:90:1e:11:90:0e:06:6e: fd:44:18:bb:59:10:0b:fe:8b:e0:ea:70:c7:b5:a7:c9:a4:60: 50:15:27:5d:c4:12:de:8d:14:b1:6f:b0:44:93:ed:fc:24:30: e6:23:9d:84:fe:36:62:87:09:af:33:3b:6b:90:1a:f9:42:95: 43:cc:30:d7:0c:f6:cf:8e:14:c0:f8:3a:ad:b6:71:1a:ee:d3: a2:eb:8b:bb:9f:78:51:d2:11:ea:c6:c2:5d:1e:14:fe:42:70: bf:8a:ba:52:15:fb:d8:c1:77:2a:6e:c0:5b:b7:c3:a9:6f:5e: 5a:73:51:4d:51:cd:0b:e7:b6:7e:b5:ed:7d:6f:f6:c4:2f:24: da:11:0f:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1 QkEwMzkzNTUwHhcNMjYwOTIxMDAzNDE3WhcNMjYwOTI4MDAzNDE3WjAYMRYwFAYD VQQDEw02YWIwN2I4YS01MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsrlT3Ss718ocmL8smDb8fGAryQOE2dsagAu+SIinXXDyZE3IVLsSiMtmN10 eohHv2tO3A7gsB4YDkSdLRgiu2k+flkEVaRYvkgMGKLsKJt7BHAn99mOjmyPLQya ObyaITBQyXbhVqN0q3HsiwT5/ROkwLdUv1dXIpa4Ixt6C6//jQw/1jiU8vF3YK7+ 4WnFYW1Umt+UBShfb4K7uMoJAqzNyEmeNeMRsxbQp0DglHY1Lqo/ugXHx2YEYK6R rPcwNUSW1MOIfDGzqKZD/PRx8sNG3ZtmgXVyhDBe1oYcXUQCsy1rNCm+pdTzpF4O pODjI6rxEEHohiUZX1Ic9EAD6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMR/jLE+ Ln7wcYWzzY7um7Dv8B7iMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2 NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVCMi83QUM3NjdERTA2NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3 Ny0xazIzRGVVY2Rib0RrMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEmvnbrB8Q/hvpJhZeDs/kAmQlMwk86lFSwK/hhtp/wDAQEeYIMt4ibgHAQof saUjYisPfdX00XKhIGG1yG9Ui4xBxciyQGmOQUNLepm491auTyQY3+/g4cQRVT4y 4BAnXBhs45Ua4kbtv18UGQygwBpost65J7CQHhGQDgZu/UQYu1kQC/6L4Opwx7Wn yaRgUBUnXcQS3o0UsW+wRJPt/CQw5iOdhP42YocJrzM7a5Aa+UKVQ8ww1wz2z44U wPg6rbZxGu7TouuLu594UdIR6sbCXR4U/kJwv4q6UhX72MF3Km7AW7fDqW9eWnNR TVHNC+e2frXtfW/2xC8k2hEPRA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:54:57 2026 by rpki-client