$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: dDX8V+I+pJ01nEWkvK2M+oJiQKjqAkUhWqO/H7JQa5s= Subject key identifier: 35:96:10:C1:AF:4D:BB:E5:94:1C:4C:3A:56:AC:19:6F:22:7A:3A:F3 Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: 021D Signing time: Fri 25 Sep 2026 02:59:38 +0000 Manifest this update: Fri 25 Sep 2026 02:59:37 +0000 Manifest next update: Fri 02 Oct 2026 02:59:37 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: MUkYjBLPmNwd+46rZtpc1ReL13okGbhysaLOLaLnvoY=) 2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: bPTiYTxBxLwgfGF9jUdmUbDxjsKoq1F4YRnN4H89Q34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: Sep 25 02:59:37 2026 GMT Not After : Oct 2 02:59:37 2026 GMT Subject: CN=6ab5e39a-1d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:01:8b:e2:ae:8f:b7:81:77:d7:ae:9f:83: f5:98:cf:99:0f:95:1b:2a:68:96:42:c3:6b:49:14: 60:d4:ef:ef:00:e3:6f:d8:e4:38:99:10:2e:54:85: 9c:88:d3:28:97:37:af:83:9a:6e:80:c0:13:39:93: 04:22:8d:7c:ca:d3:55:23:f9:49:c2:ce:55:16:a3: d0:07:97:1f:03:4d:4e:09:bd:7a:f8:12:88:1d:5f: 76:49:23:92:cb:f6:29:85:9d:97:04:8b:30:b6:52: 45:dd:d2:39:c9:9d:c3:83:b4:e2:68:87:93:5a:34: 34:92:d6:54:5e:86:92:36:92:49:75:6e:a3:4b:17: 18:83:4d:4a:94:3f:10:81:2e:a6:e3:d5:fe:49:fe: ad:fe:1d:58:e2:84:63:d2:f7:55:0e:74:ce:89:b2: 74:5a:71:f0:1d:99:e3:3d:30:1a:2b:be:dc:e6:db: 9c:e4:3f:b2:ad:39:de:af:db:f3:1e:32:14:4b:f8: 49:3f:59:fe:35:a1:5f:36:9a:ab:99:29:d6:4b:b0: 57:c4:b8:ac:55:93:e5:ba:b8:eb:9e:86:0d:70:81: 2d:ff:35:5d:54:bf:e2:ea:63:21:aa:f3:35:1c:55: 50:7d:94:31:91:30:27:f0:72:30:3b:53:3c:b5:d1: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:96:10:C1:AF:4D:BB:E5:94:1C:4C:3A:56:AC:19:6F:22:7A:3A:F3 X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c6:e7:a5:ca:19:48:13:c0:c7:ef:eb:12:8c:1a:6b:c5:78: b7:f7:25:33:07:0e:f9:15:55:68:26:b9:df:8f:aa:5d:5c:b9: f6:0e:9b:a3:b7:1c:d4:74:a6:a5:37:57:5a:a3:c9:1c:1f:71: fa:a6:09:24:7f:cd:d4:51:57:6b:68:21:a1:f7:6b:86:2a:de: c6:51:0d:f1:ba:45:01:e3:8c:08:cf:64:f4:52:39:2e:c8:cd: ee:30:39:a8:b9:35:dc:2b:d4:12:5f:79:0c:43:70:e6:20:36: 6d:e8:4b:69:6a:58:7b:69:ed:9f:91:e5:cf:f7:b7:d4:41:3a: dc:ec:85:a0:6c:26:dd:c4:81:24:4e:a1:b7:2e:75:76:ed:89: e3:82:cf:fc:41:7b:f9:3b:7c:7d:8f:d2:a4:c6:43:2c:b1:cf: e5:4d:20:66:75:2e:58:f0:5e:85:21:0e:6a:bc:25:c6:bc:83: cf:da:52:cc:59:13:97:69:0c:70:ec:40:86:ae:c4:ee:2f:14: bd:c8:b2:02:81:ff:09:73:9a:0f:6d:13:eb:4f:67:50:34:b8: 24:fd:96:53:28:e1:a8:39:fe:5e:27:15:dc:9e:53:ee:c9:e7: 8f:fe:3f:63:73:10:9d:28:d1:d1:27:97:f7:37:44:c6:c4:7a: 0e:53:5b:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz NTE5M0Y3NzIwHhcNMjYwOTI1MDI1OTM3WhcNMjYxMDAyMDI1OTM3WjAYMRYwFAYD VQQDEw02YWI1ZTM5YS0xZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyMBi+Kuj7eBd9eun4P1mM+ZD5UbKmiWQsNrSRRg1O/vAONv2OQ4mRAuVIWc iNMolzevg5pugMATOZMEIo18ytNVI/lJws5VFqPQB5cfA01OCb16+BKIHV92SSOS y/YphZ2XBIswtlJF3dI5yZ3Dg7TiaIeTWjQ0ktZUXoaSNpJJdW6jSxcYg01KlD8Q gS6m49X+Sf6t/h1Y4oRj0vdVDnTOibJ0WnHwHZnjPTAaK77c5tuc5D+yrTner9vz HjIUS/hJP1n+NaFfNpqrmSnWS7BXxLisVZPlurjrnoYNcIEt/zVdVL/i6mMhqvM1 HFVQfZQxkTAn8HIwO1M8tdH9AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWWEMGv TbvllBxMOlasGW8iejrzMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5 QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWcbnpcoZSBPAx+/rEowaa8V4t/clMwcO+RVVaCa534+qXVy59g6bo7cc1HSm pTdXWqPJHB9x+qYJJH/N1FFXa2ghofdrhirexlEN8bpFAeOMCM9k9FI5LsjN7jA5 qLk13CvUEl95DENw5iA2behLaWpYe2ntn5Hlz/e31EE63OyFoGwm3cSBJE6hty51 du2J44LP/EF7+Tt8fY/SpMZDLLHP5U0gZnUuWPBehSEOarwlxryDz9pSzFkTl2kM cOxAhq7E7i8UvciyAoH/CXOaD20T609nUDS4JP2WUyjhqDn+XicV3J5T7snnj/4/ Y3MQnSjR0SeX9zdExsR6DlNbGQ== -----END CERTIFICATE-----Generated at Sat Sep 26 22:20:44 2026 by rpki-client