$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: 82OdZvwjDk/P6YRbrLMKolCgupOYMV26PEvxCPN8A/U= Subject key identifier: A8:FB:52:64:3F:B5:93:59:34:C4:F2:D1:9D:DF:47:DA:03:ED:98:C9 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 025C Signing time: Mon 21 Sep 2026 02:32:58 +0000 Manifest this update: Mon 21 Sep 2026 02:32:57 +0000 Manifest next update: Mon 28 Sep 2026 02:32:57 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: 8UqJ95tXdCzapAZgyEZIp9TKjkaHHjsE1cRytMsfuMo=) 2: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: GDl5mVu/aHI+hBuO6VNjgfJXS25xVSRkSRDDKqvvcrI=) 3: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=) 4: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Sep 21 02:32:57 2026 GMT Not After : Sep 28 02:32:57 2026 GMT Subject: CN=6ab0975a-0db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:18:d8:72:09:91:1f:6d:b5:87:77:3c:14: b3:74:cb:9c:2d:b6:26:14:34:ba:49:81:d4:5a:5d: 29:29:b2:6e:c7:53:34:9b:c9:8b:c2:99:d8:ab:16: 79:d1:ce:6f:60:07:50:a3:43:e1:e6:dd:63:ab:7b: 8d:52:fc:1a:6f:13:0e:04:76:22:a5:0c:de:a1:ca: 66:c6:b8:d6:db:5c:c9:93:c0:07:1c:b9:bb:9d:a0: 9c:ac:ab:6c:9a:dc:82:af:42:50:17:9c:67:13:b2: 07:c8:27:d8:37:bc:68:a8:8a:42:89:78:58:ef:f2: 45:0f:9f:e5:3e:2c:b6:2c:8c:40:e1:83:e3:f8:28: d6:58:78:d5:bd:28:a4:f1:5e:23:98:6a:49:78:82: 04:ab:fb:f5:1b:35:41:a5:e6:0c:7d:b6:c5:9c:85: 6c:c3:c8:94:be:00:f2:c0:df:c4:e3:80:b6:d4:5a: 00:66:af:51:5a:f1:d6:a7:8b:2d:a2:3a:e1:b0:25: 05:a7:aa:4f:dd:d3:09:a7:8d:3f:9f:78:68:0a:3b: 5d:dc:32:c0:4f:eb:d4:58:8f:dd:af:f2:a8:63:90: 60:a1:2c:16:09:e8:e9:64:5c:83:67:6c:1a:75:3f: 62:49:86:01:de:d7:a0:df:01:c2:6f:ae:48:79:f3: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FB:52:64:3F:B5:93:59:34:C4:F2:D1:9D:DF:47:DA:03:ED:98:C9 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5f:6c:c9:57:ba:38:e2:df:68:06:e1:ab:cd:be:13:5c:da: ec:02:7c:e9:23:f6:90:b4:60:5a:92:83:bb:a8:e1:88:af:76: 72:ac:db:8c:8f:4f:e6:63:f3:b7:8f:9f:cc:4a:ed:3e:0f:90: e1:94:de:08:ef:c6:b0:13:df:03:ac:8c:5e:4d:f2:75:d9:c6: 3b:dc:47:bc:6c:f6:14:96:77:f7:87:ab:6c:5b:3c:8f:31:3c: a8:62:0d:c8:d3:cd:25:79:0f:76:fe:89:a3:ba:f9:84:29:af: cd:1d:0d:0b:a0:80:f7:24:67:e2:1d:de:65:b7:1d:bf:df:26: 8c:97:7c:af:86:ce:66:55:ec:89:1e:1f:a6:ad:a9:4e:df:aa: 1b:33:fe:a1:9f:1b:f7:28:f3:18:2d:42:9b:1a:3d:66:50:a0: 36:60:ff:fb:24:37:85:4b:4a:1a:2a:de:dc:08:4f:b0:74:c2: 96:4c:a3:78:6a:93:19:18:ea:62:99:48:7e:eb:b3:f4:6b:25: 45:92:92:9c:44:8e:43:ce:69:62:ac:0c:9b:91:6a:ea:ac:9e: c5:8a:c3:71:d5:0e:79:28:fd:b7:f4:17:dd:89:6d:78:55:67: 44:5b:fe:97:8d:73:18:3f:a5:d0:82:a6:75:1f:1f:72:ea:c6: e4:4b:c8:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjYwOTIxMDIzMjU3WhcNMjYwOTI4MDIzMjU3WjAYMRYwFAYD VQQDEw02YWIwOTc1YS0wZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q0Y2HIJkR9ttYd3PBSzdMucLbYmFDS6SYHUWl0pKbJux1M0m8mLwpnYqxZ5 0c5vYAdQo0Ph5t1jq3uNUvwabxMOBHYipQzeocpmxrjW21zJk8AHHLm7naCcrKts mtyCr0JQF5xnE7IHyCfYN7xoqIpCiXhY7/JFD5/lPiy2LIxA4YPj+CjWWHjVvSik 8V4jmGpJeIIEq/v1GzVBpeYMfbbFnIVsw8iUvgDywN/E44C21FoAZq9RWvHWp4st ojrhsCUFp6pP3dMJp40/n3hoCjtd3DLAT+vUWI/dr/KoY5BgoSwWCejpZFyDZ2wa dT9iSYYB3teg3wHCb65IefOvwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKj7UmQ/ tZNZNMTy0Z3fR9oD7ZjJMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB19syVe6OOLfaAbhq82+E1za7AJ86SP2kLRgWpKDu6jhiK92cqzbjI9P5mPz t4+fzErtPg+Q4ZTeCO/GsBPfA6yMXk3yddnGO9xHvGz2FJZ394erbFs8jzE8qGIN yNPNJXkPdv6Jo7r5hCmvzR0NC6CA9yRn4h3eZbcdv98mjJd8r4bOZlXsiR4fpq2p Tt+qGzP+oZ8b9yjzGC1Cmxo9ZlCgNmD/+yQ3hUtKGire3AhPsHTClkyjeGqTGRjq YplIfuuz9GslRZKSnESOQ85pYqwMm5Fq6qyexYrDcdUOeSj9t/QX3YlteFVnRFv+ l41zGD+l0IKmdR8fcurG5EvICw== -----END CERTIFICATE-----Generated at Tue Sep 22 18:09:29 2026 by rpki-client