$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.mft File: MHNp4pMHZnZJcVH2zG_W1Vjqvpc.mft (raw, json) Hash identifier: tvZUS95NQAJskaUExgAvzOS5cJdPOP50XFYb0DQ3Ll0= Subject key identifier: 43:21:BF:F7:8C:41:E3:BC:83:E6:50:F1:E5:6D:F8:A0:3D:DC:06:B7 Authority key identifier: 30:73:69:E2:93:07:66:76:49:71:51:F6:CC:6F:D6:D5:58:EA:BE:97 Certificate issuer: /CN=A911BEC0/serialNumber=307369E293076676497151F6CC6FD6D558EABE97 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.mft Manifest number: 0E Signing time: Mon 21 Sep 2026 09:10:18 +0000 Manifest this update: Mon 21 Sep 2026 09:10:17 +0000 Manifest next update: Mon 28 Sep 2026 09:10:17 +0000 Files and hashes: 1: MHNp4pMHZnZJcVH2zG_W1Vjqvpc.crl (hash: 0nmzsb8bbJTal+o29MNLlzVOWgzL1xSYuUTLApiMveA=) 2: 3C3DE5B6AE5211F18ACCAF026211F970.roa (hash: fSn+1K56kX62VEQ4HL8mADlDJ99haJdkNEoVoHCOFeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.crl rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEC0, serialNumber=307369E293076676497151F6CC6FD6D558EABE97 Validity Not Before: Sep 21 09:10:17 2026 GMT Not After : Sep 28 09:10:17 2026 GMT Subject: CN=6ab0f479-861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:f0:08:60:43:5d:ff:62:b2:84:d5:ab:57: 28:fd:50:86:e7:2a:a7:e3:40:8e:8d:11:e8:3e:c7: 3d:38:b0:55:a6:74:02:ed:49:bb:a4:31:ba:ba:f9: cb:fc:36:32:13:ea:35:a2:cf:50:f4:ed:a2:a4:3d: 5b:bc:40:a1:e5:42:33:86:c9:54:03:4a:4a:fe:80: ca:75:dc:c7:af:27:5a:85:80:56:2a:e9:f0:d7:97: cf:47:92:ed:88:10:26:6c:2a:a4:bd:9c:86:a0:76: 9f:7d:e2:b9:58:6b:ac:40:18:d0:f9:ee:b3:c0:00: 3d:2e:d0:ef:81:22:b9:6f:bc:8e:f6:9f:61:79:f7: e0:89:54:52:1c:43:4c:19:11:4c:1c:18:6d:11:fc: e3:cc:25:51:33:24:5d:8e:8d:3d:58:bb:14:6e:77: 70:cc:d6:c7:3b:11:7c:52:2d:b2:d4:48:13:ef:2e: ca:d7:18:47:a3:d4:08:cf:df:6c:15:36:46:2b:34: fd:c9:25:f5:69:73:6b:fa:ea:d0:16:35:87:f2:94: 1f:6a:43:71:29:48:97:5a:fd:5d:82:2c:77:06:55: 63:2b:85:5d:d5:2f:fa:6e:e4:4e:ab:2d:d9:75:4c: c3:66:86:0d:80:e9:e5:39:9f:93:c5:ac:e4:40:4b: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:21:BF:F7:8C:41:E3:BC:83:E6:50:F1:E5:6D:F8:A0:3D:DC:06:B7 X509v3 Authority Key Identifier: keyid:30:73:69:E2:93:07:66:76:49:71:51:F6:CC:6F:D6:D5:58:EA:BE:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:91:eb:17:c9:41:f9:6b:c5:cb:2a:b2:35:6f:88:60:e8:8d: 85:ff:46:25:ad:f3:73:9d:fb:54:c4:70:55:82:17:60:3b:cc: af:bd:34:11:87:ba:07:18:56:04:4b:55:5f:e9:6a:23:be:b9: 03:ea:ec:87:2a:e1:ab:0a:39:3d:84:f9:a4:6b:1b:9f:41:7a: e6:ca:c0:22:dd:6d:c0:2c:e1:26:98:f7:f0:19:0b:a0:5f:7b: f6:92:6a:c3:e5:53:28:94:47:46:d9:26:37:75:71:e2:65:3c: 60:03:5c:fa:6f:4c:a7:b8:9d:df:41:93:b8:a5:17:8d:21:a7: 09:7b:7a:7f:17:bb:6c:ea:fb:e3:9f:62:28:d0:b1:2a:23:b7: 75:b8:7a:67:ed:ca:bb:56:18:77:11:e0:e9:0f:0d:c0:f1:7d: f9:ba:a7:f5:bd:75:b7:3f:99:33:69:aa:eb:54:fc:15:28:b1: 1b:f6:c1:c4:17:66:0f:39:5f:14:d1:a9:d4:de:38:08:ac:b1: 70:9a:ab:5a:d2:18:86:be:7d:3c:1c:53:7b:3b:6d:7c:89:71: c6:f0:1d:a5:cf:f5:b1:17:0b:02:b4:c9:5e:85:77:62:12:83: 8f:b4:13:66:a3:1d:b6:9a:24:2f:27:85:ec:22:cb:d9:e1:de: c1:e8:51:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkVDMDExMC8GA1UEBRMoMzA3MzY5RTI5MzA3NjY3NjQ5NzE1MUY2Q0M2RkQ2RDU1 OEVBQkU5NzAeFw0yNjA5MjEwOTEwMTdaFw0yNjA5MjgwOTEwMTdaMBgxFjAUBgNV BAMTDTZhYjBmNDc5LTg2MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSy/AIYENd/2KyhNWrVyj9UIbnKqfjQI6NEeg+xz04sFWmdALtSbukMbq6+cv8 NjIT6jWiz1D07aKkPVu8QKHlQjOGyVQDSkr+gMp13MevJ1qFgFYq6fDXl89Hku2I ECZsKqS9nIagdp994rlYa6xAGND57rPAAD0u0O+BIrlvvI72n2F59+CJVFIcQ0wZ EUwcGG0R/OPMJVEzJF2OjT1YuxRud3DM1sc7EXxSLbLUSBPvLsrXGEej1AjP32wV NkYrNP3JJfVpc2v66tAWNYfylB9qQ3EpSJda/V2CLHcGVWMrhV3VL/pu5E6rLdl1 TMNmhg2A6eU5n5PFrORASyJLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQyG/94xB 47yD5lDx5W34oD3cBrcwHwYDVR0jBBgwFoAUMHNp4pMHZnZJcVH2zG/W1Vjqvpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRUMwLzdGMEEwOTE2QTlD NDExRjFCQUQ0M0Y5RDZFMTFGOTcwL01ITnA0cE1IWm5aSmNWSDJ6R19XMVZqcXZw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUhOcDRwTUhablpKY1ZIMnpHX1cxVmpxdnBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RUMwLzdGMEEwOTE2QTlDNDExRjFCQUQ0M0Y5RDZFMTFGOTcwL01ITnA0cE1IWm5a SmNWSDJ6R19XMVZqcXZwYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbkesXyUH5a8XLKrI1b4hg6I2F/0YlrfNznftUxHBVghdgO8yvvTQRh7oHGFYE S1Vf6WojvrkD6uyHKuGrCjk9hPmkaxufQXrmysAi3W3ALOEmmPfwGQugX3v2kmrD 5VMolEdG2SY3dXHiZTxgA1z6b0ynuJ3fQZO4pReNIacJe3p/F7ts6vvjn2Io0LEq I7d1uHpn7cq7Vhh3EeDpDw3A8X35uqf1vXW3P5kzaarrVPwVKLEb9sHEF2YPOV8U 0anU3jgIrLFwmqta0hiGvn08HFN7O218iXHG8B2lz/WxFwsCtMlehXdiEoOPtBNm ox22miQvJ4XsIsvZ4d7B6FHR -----END CERTIFICATE-----Generated at Tue Sep 22 16:26:53 2026 by rpki-client