$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json) Hash identifier: dCDo8k5XXwiGbO/8nhYRE9+1fUqFSrjkISgTgVpPclY= Subject key identifier: 5A:E5:EC:C7:83:89:9E:E9:A0:E0:E0:91:4C:59:69:3D:21:99:C1:6B Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft Manifest number: 0236 Signing time: Mon 21 Sep 2026 02:39:11 +0000 Manifest this update: Mon 21 Sep 2026 02:39:11 +0000 Manifest next update: Mon 28 Sep 2026 02:39:11 +0000 Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: zal3ZF1be1SH6lTjUsc3bTf2ge65KJf/OIpU0lJnL64=) 2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: Sep 21 02:39:11 2026 GMT Not After : Sep 28 02:39:11 2026 GMT Subject: CN=6ab098cf-9f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:ad:85:9a:3a:42:64:ca:73:29:3a:7f:75: 19:f0:ce:08:3e:9e:3f:56:2b:f1:f0:d5:07:95:49: a3:c5:c6:4f:3f:58:14:0c:a4:df:70:47:a6:12:2d: d1:51:aa:88:77:f7:90:43:dd:05:82:2e:39:96:19: 89:a6:68:4a:52:7a:f5:1f:75:66:7b:9b:45:8b:ce: 33:ca:ec:82:66:e1:b3:33:63:9e:88:5e:d9:92:2d: f7:40:d5:98:70:77:d1:b1:45:7a:52:0a:eb:d0:4c: b3:19:4f:63:6c:0f:21:d1:1c:b1:a6:35:da:8c:ff: 4c:d2:a5:87:2c:2e:af:8e:ca:e5:6a:88:d7:3a:0d: e2:f7:2d:eb:15:79:f7:1c:84:e4:e4:6e:74:74:61: a6:b8:3c:12:9f:17:ed:88:63:1c:51:7f:26:2b:61: 87:d0:0e:5c:7f:2d:1d:45:04:36:cf:1f:a9:fd:ae: 6b:64:b5:b1:0d:93:f3:43:de:29:ee:9d:7b:49:63: e2:2b:8b:f0:d1:3f:1f:9d:d9:5b:b2:88:e9:52:4a: 70:55:2f:8e:f1:11:2f:e2:3a:c0:44:82:fe:2b:fa: 2a:0a:85:8b:0d:64:83:f6:11:4e:e1:a4:5b:c0:d2: 9c:be:ba:23:7b:a5:74:64:39:44:bb:90:f7:a0:69: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:EC:C7:83:89:9E:E9:A0:E0:E0:91:4C:59:69:3D:21:99:C1:6B X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c1:8d:73:ca:66:73:91:9d:d1:2c:36:0b:c2:59:e6:5a:73: b4:61:4b:53:29:1c:2c:a2:a9:a8:be:ef:4c:b0:91:fa:07:bd: 4f:0f:4c:fe:be:bc:02:d9:46:19:5b:f2:48:e4:c3:96:1a:b6: d0:73:2c:1d:48:2a:b7:e7:8d:08:6a:c2:fb:d9:01:5a:c1:a6: 8d:34:c0:d3:ec:ec:be:94:ba:f9:ed:21:a1:be:fa:44:23:6e: e6:b4:e0:8b:1c:96:d0:ff:8c:37:6b:18:47:a0:1a:46:74:fa: e5:8d:21:04:fb:ad:5a:db:82:a0:b2:a8:9a:e2:c6:df:52:ec: 3a:cf:04:7a:82:a2:8d:30:b6:d0:55:c9:c7:4c:62:b0:20:00: 6c:59:28:b8:7f:68:93:35:40:18:42:88:bd:10:ec:a8:d9:27: a2:df:26:b9:a7:05:f4:57:7e:b3:cf:28:4a:56:74:8e:3d:9e: 9e:e3:92:88:2a:42:db:ba:ad:7e:0a:43:db:e7:bd:bd:e2:aa: 96:c6:77:04:35:6d:52:4e:7d:c0:b6:12:b3:e1:41:34:3e:54: f5:3c:60:7c:15:db:fd:79:db:b3:99:97:86:a1:0e:06:de:b1: af:38:83:ee:2b:64:af:d7:37:66:6a:84:52:fa:c9:69:28:af: 51:95:15:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1 OUMxNTI0QkYwHhcNMjYwOTIxMDIzOTExWhcNMjYwOTI4MDIzOTExWjAYMRYwFAYD VQQDEw02YWIwOThjZi05ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8uthZo6QmTKcyk6f3UZ8M4IPp4/Vivx8NUHlUmjxcZPP1gUDKTfcEemEi3R UaqId/eQQ90Fgi45lhmJpmhKUnr1H3Vme5tFi84zyuyCZuGzM2OeiF7Zki33QNWY cHfRsUV6Ugrr0EyzGU9jbA8h0RyxpjXajP9M0qWHLC6vjsrlaojXOg3i9y3rFXn3 HITk5G50dGGmuDwSnxftiGMcUX8mK2GH0A5cfy0dRQQ2zx+p/a5rZLWxDZPzQ94p 7p17SWPiK4vw0T8fndlbsojpUkpwVS+O8REv4jrARIL+K/oqCoWLDWSD9hFO4aRb wNKcvroje6V0ZDlEu5D3oGn+AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrl7MeD iZ7poODgkUxZaT0hmcFrMB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4 RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzlFOC9GREY2NzMwNjU4RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3 cFQwa1J1X2JETUJad1ZKTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqsGNc8pmc5Gd0Sw2C8JZ5lpztGFLUykcLKKpqL7vTLCR+ge9Tw9M/r68AtlG GVvySOTDlhq20HMsHUgqt+eNCGrC+9kBWsGmjTTA0+zsvpS6+e0hob76RCNu5rTg ixyW0P+MN2sYR6AaRnT65Y0hBPutWtuCoLKomuLG31LsOs8EeoKijTC20FXJx0xi sCAAbFkouH9okzVAGEKIvRDsqNknot8muacF9Fd+s88oSlZ0jj2enuOSiCpC27qt fgpD2+e9veKqlsZ3BDVtUk59wLYSs+FBND5U9TxgfBXb/Xnbs5mXhqEOBt6xrziD 7itkr9c3ZmqEUvrJaSivUZUViw== -----END CERTIFICATE-----Generated at Mon Sep 21 18:48:16 2026 by rpki-client