$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: BUwBFV3PDVG2jwfuhP+8ECy4uxQ4icUWxqL9FevgalI= Subject key identifier: 7F:79:6A:56:1E:93:C4:9D:B7:96:D4:83:4F:B3:A6:1C:E9:F5:6F:10 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0161 Signing time: Tue 22 Sep 2026 19:00:32 +0000 Manifest this update: Tue 22 Sep 2026 19:00:32 +0000 Manifest next update: Tue 29 Sep 2026 19:00:32 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: aXLyeC5eNYqOx9ytBqgfSzGQHxbWWHOUdzYOM13MUdM=) 2: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) 3: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 4: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Sep 22 19:00:32 2026 GMT Not After : Sep 29 19:00:32 2026 GMT Subject: CN=6ab2d050-fe8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:cb:e9:f9:35:aa:57:f0:84:f6:08:6f:13: 29:13:33:63:81:24:6e:f3:0d:d8:81:c4:a3:ff:9f: 52:b7:69:eb:b5:b2:b6:24:54:a2:1b:06:61:0a:a8: 08:c0:d3:e4:8c:ac:41:68:02:60:3c:96:21:59:21: 40:ba:b7:b5:8d:b5:66:2c:44:8c:8d:03:38:7e:4f: 38:28:2a:fe:c3:60:4a:d4:c0:df:3b:e9:7a:24:80: e4:e1:3f:da:98:f5:b5:20:80:f2:9c:b6:8a:7b:d6: 6d:4a:09:40:17:69:61:36:a7:a6:50:5d:b4:d2:da: 08:0b:eb:3c:d4:4c:b9:f5:84:56:01:c3:6d:f6:d2: 5f:b8:92:b3:3e:5a:ab:35:c9:39:35:64:7e:98:04: f8:32:2b:26:b4:41:5a:76:7a:f8:45:8e:ce:df:20: 24:69:bb:87:75:c7:e9:d6:2f:18:ab:22:5d:df:c9: e3:4a:c0:46:12:33:7d:d9:b4:32:0f:e3:80:a6:3d: d6:45:dc:8b:62:74:c5:b3:52:0f:fe:5f:f8:06:38: 16:16:03:8d:bc:3b:38:d2:e4:26:79:b0:a4:55:ed: ec:8d:e8:30:9f:8b:a1:e1:28:d9:f2:bf:4b:09:82: 8a:76:91:e6:f2:d3:bd:66:f4:33:f6:41:8c:4e:e6: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:79:6A:56:1E:93:C4:9D:B7:96:D4:83:4F:B3:A6:1C:E9:F5:6F:10 X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:52:55:87:7f:e5:c3:84:c6:11:84:96:02:f8:b1:eb:0a:ce: 95:ee:dc:6d:5b:c1:53:49:2f:44:12:49:c6:e7:5f:c6:27:3e: 4f:fb:42:b3:e8:21:fb:c6:27:5c:cb:21:1f:20:c3:6c:ed:ff: ca:53:ca:05:87:1b:2e:3b:3f:2e:e6:c1:d2:c7:e1:38:88:4c: 5f:44:5a:42:19:8a:4e:20:f6:5a:3c:d1:14:f6:6a:29:ff:a9: d5:05:36:6e:df:30:6d:22:7b:12:60:1d:75:f6:60:9a:e0:35: 80:d7:3d:62:c7:06:2a:22:87:c0:9f:f4:8d:58:10:79:ec:6d: d5:2f:df:7d:aa:ca:db:9a:ce:9a:9a:7a:ea:bd:65:a8:df:20: 1f:2c:e4:f8:67:fb:bb:76:d2:d9:32:49:26:36:f7:1d:9b:cd: ce:33:d8:3b:bb:8d:f3:16:af:7d:ad:d1:d0:7c:05:44:b2:37: aa:27:53:6f:e1:a1:06:de:92:f5:11:0f:05:19:90:80:c2:2b: 9b:31:2f:65:48:87:07:8e:fb:a7:f2:fd:65:16:92:f7:16:e7: 92:4e:2b:8c:97:c4:f1:2c:59:22:b0:dc:49:f2:6b:ea:e6:c5: 0e:ae:32:0a:a4:07:c3:08:d2:0b:8c:b7:65:8a:81:02:e7:7a: d2:36:06:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwOTIyMTkwMDMyWhcNMjYwOTI5MTkwMDMyWjAYMRYwFAYD VQQDEw02YWIyZDA1MC1mZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SHL6fk1qlfwhPYIbxMpEzNjgSRu8w3YgcSj/59St2nrtbK2JFSiGwZhCqgI wNPkjKxBaAJgPJYhWSFAure1jbVmLESMjQM4fk84KCr+w2BK1MDfO+l6JIDk4T/a mPW1IIDynLaKe9ZtSglAF2lhNqemUF200toIC+s81Ey59YRWAcNt9tJfuJKzPlqr Nck5NWR+mAT4MismtEFadnr4RY7O3yAkabuHdcfp1i8YqyJd38njSsBGEjN92bQy D+OApj3WRdyLYnTFs1IP/l/4BjgWFgONvDs40uQmebCkVe3sjegwn4uh4SjZ8r9L CYKKdpHm8tO9ZvQz9kGMTuZqoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH95alYe k8Sdt5bUg0+zphzp9W8QMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGlJVh3/lw4TGEYSWAvix6wrOle7cbVvBU0kvRBJJxudfxic+T/tCs+gh+8Yn XMshHyDDbO3/ylPKBYcbLjs/LubB0sfhOIhMX0RaQhmKTiD2WjzRFPZqKf+p1QU2 bt8wbSJ7EmAddfZgmuA1gNc9YscGKiKHwJ/0jVgQeext1S/ffarK25rOmpp66r1l qN8gHyzk+Gf7u3bS2TJJJjb3HZvNzjPYO7uN8xavfa3R0HwFRLI3qidTb+GhBt6S 9REPBRmQgMIrmzEvZUiHB477p/L9ZRaS9xbnkk4rjJfE8SxZIrDcSfJr6ubFDq4y CqQHwwjSC4y3ZYqBAud60jYGbw== -----END CERTIFICATE-----Generated at Wed Sep 23 02:33:51 2026 by rpki-client