$ rpki-client -vvvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: drtPws7/JvZMNDCdMx32+ruQGKkLUZful9XwrsVTw/E= Subject key identifier: 0A:40:0B:3E:5A:AF:69:A0:C1:AE:19:C3:A6:AD:98:77:A7:2D:3E:C9 Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 0214 Signing time: Mon 21 Sep 2026 03:02:57 +0000 Manifest this update: Mon 21 Sep 2026 03:02:56 +0000 Manifest next update: Mon 28 Sep 2026 03:02:56 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: cwMR6gGqLFMOYUYkXYY1f9GjvX2G98ZNNHWsxts3/Iw=) 2: 385B3E3A42EB11F187C800F790833773.roa (hash: lsXYrcjPbnHgiNpDbl0Ybrr03F7tffMHJYTiyEAODzQ=) 3: F9EE01A842E211F1B650BCD08E833773.roa (hash: 2XaqgQvJvdCsnon/kkAwU+ckm99qA9tybA5kJKKFgfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Sep 21 03:02:56 2026 GMT Not After : Sep 28 03:02:56 2026 GMT Subject: CN=6ab09e61-f13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:b7:74:5d:6f:87:b0:e8:e2:f0:b6:d2:33: 22:73:da:fd:27:ba:d0:09:ea:00:ba:ae:3a:7f:97: 6c:a6:b2:84:4b:77:d5:68:c6:85:3c:fb:67:5e:cc: ad:86:ea:1e:bf:5f:02:c0:8b:1d:c8:fa:13:c7:4c: cd:48:b5:be:37:f6:9c:40:42:68:af:13:29:8b:39: 2d:eb:24:25:28:84:c8:f5:23:91:1d:78:2c:73:51: 6a:21:33:93:4d:3e:04:5f:25:7d:01:cf:42:a4:42: 50:c6:6b:1e:02:0f:0c:08:43:18:7d:11:3b:ef:67: c9:74:b3:bf:75:07:af:ba:d6:f0:7e:61:11:d0:0a: 2c:af:73:8b:55:a6:51:76:82:b6:44:1f:f1:de:bc: d2:48:f8:a8:0b:61:48:98:83:97:ec:ee:3d:ec:be: ea:bd:27:42:c8:a6:0b:a7:87:43:9a:a3:d2:be:b9: ea:a8:98:be:53:17:51:ef:ba:52:8b:0a:f4:73:9c: 21:9d:36:b5:cd:72:3a:bf:ff:2b:71:cb:07:63:38: a1:0c:27:f1:c4:58:64:2f:bc:1d:49:be:40:b3:72: b6:e9:59:7f:43:07:a8:08:c2:36:8e:7b:3f:3c:d8: 29:1a:97:c1:d1:8c:6a:75:c2:13:41:c0:37:78:83: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:40:0B:3E:5A:AF:69:A0:C1:AE:19:C3:A6:AD:98:77:A7:2D:3E:C9 X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:dc:93:30:66:24:bd:b3:ac:ae:9e:25:a2:aa:60:ec:a9:03: 18:73:33:d5:68:69:8e:b9:33:f2:5b:6c:35:1a:8d:a1:c0:43: 86:82:ec:74:c2:cd:f1:d3:17:22:8b:7d:aa:d9:75:e3:15:fa: 93:fd:d5:4f:96:c7:5d:49:52:fb:40:2a:8b:af:69:15:bc:86: 18:82:28:1e:10:5f:fc:48:64:33:48:b8:ca:d8:dd:7c:78:c4: 1e:6c:01:b5:aa:8e:3a:5f:b1:5d:f4:21:84:ff:5e:1b:e1:24: 90:99:dd:bb:4f:65:12:4a:db:d5:7e:cf:6d:28:7e:9d:b8:bb: 36:ff:61:b7:0a:ba:80:6a:1a:e1:bf:87:6a:ea:1c:73:25:a3: 0d:4e:0f:8e:22:06:53:bb:11:df:d5:66:6d:a2:c2:f9:01:30: 73:d1:ab:a8:e5:2b:4a:a6:da:b4:e1:aa:7d:2d:0a:04:3c:83: 07:3c:7b:42:08:d8:e9:7e:a9:b9:5d:02:be:ef:74:34:68:c8: 11:37:b5:ee:c0:33:91:9f:cf:be:9c:62:21:e8:3f:28:38:0c: d4:0f:1d:b0:83:83:f2:87:97:cf:f0:c3:a6:dd:87:90:05:f5: f1:bd:27:fd:ef:6a:40:a1:c9:fd:f7:5e:d5:b2:15:7d:eb:39: 06:54:2f:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjYwOTIxMDMwMjU2WhcNMjYwOTI4MDMwMjU2WjAYMRYwFAYD VQQDEw02YWIwOWU2MS1mMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Oi3dF1vh7Do4vC20jMic9r9J7rQCeoAuq46f5dsprKES3fVaMaFPPtnXsyt huoev18CwIsdyPoTx0zNSLW+N/acQEJorxMpizkt6yQlKITI9SORHXgsc1FqITOT TT4EXyV9Ac9CpEJQxmseAg8MCEMYfRE772fJdLO/dQevutbwfmER0Aosr3OLVaZR doK2RB/x3rzSSPioC2FImIOX7O497L7qvSdCyKYLp4dDmqPSvrnqqJi+UxdR77pS iwr0c5whnTa1zXI6v/8rccsHYzihDCfxxFhkL7wdSb5As3K26Vl/QweoCMI2jns/ PNgpGpfB0YxqdcITQcA3eIOJ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFApACz5a r2mgwa4Zw6atmHenLT7JMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmdyTMGYkvbOsrp4loqpg7KkDGHMz1Whpjrkz8ltsNRqNocBDhoLsdMLN8dMX Iot9qtl14xX6k/3VT5bHXUlS+0Aqi69pFbyGGIIoHhBf/EhkM0i4ytjdfHjEHmwB taqOOl+xXfQhhP9eG+EkkJndu09lEkrb1X7PbSh+nbi7Nv9htwq6gGoa4b+Hauoc cyWjDU4PjiIGU7sR39VmbaLC+QEwc9GrqOUrSqbatOGqfS0KBDyDBzx7QgjY6X6p uV0Cvu90NGjIETe17sAzkZ/PvpxiIeg/KDgM1A8dsIOD8oeXz/DDpt2HkAX18b0n /e9qQKHJ/fde1bIVfes5BlQv8w== -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:06 2026 by rpki-client