$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: leH6tG/t/7sFWO5N9hXGSzByOPth0JfXUKUR1LuRBrQ= Subject key identifier: 89:3C:A5:F2:FC:56:BF:E5:C9:1A:AD:97:D4:5C:E3:4D:D2:9F:FD:2B Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 04EE Signing time: Sun 20 Sep 2026 23:31:58 +0000 Manifest this update: Sun 20 Sep 2026 23:31:58 +0000 Manifest next update: Sun 27 Sep 2026 23:31:58 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: ePcr5B8ZHEfAMASFWWw03j8DjjDQVeBAUZKET4pDYAE=) 2: 2DDD88A0A75911F1AF5343123411F970.roa (hash: 9EmOCnTu4Fq+Sx1iPpBHYJ6Pu50AYRK5Hfc3dx16G7Y=) 3: 4B167396E74111EC80E35542C4F9AE02.roa (hash: s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=) 4: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Q/WW69HDFqBmPazKy9CWTwg7ADAfQr3xucgCfcoGH6o=) 5: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: W6dMaUqeZUZ5yl2vrB4kDnmuCp2AkA9688MbXMn1Iu0=) 6: 25C6FD9CAE0511F187A47F574B11F970.roa (hash: tPUksVd0vhsyj5oWFgysZ5c2itueSX3x7L98+NauflU=) 7: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: 3jewHBb77PCvairN2996ZvKaBpoln62DoJ8FtmWYmYo=) 8: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: Jq67A+F4rIfzW8WwGVI/74n9tCcPV6PLGYDBFsxh/v4=) 9: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: woJiUlfh+5rrMBDG7PnsvNBeiKjiLhLTkpDWmy2sy4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Sep 20 23:31:58 2026 GMT Not After : Sep 27 23:31:58 2026 GMT Subject: CN=6ab06cee-25f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:35:c4:1a:c1:9c:b1:4d:a7:4d:bc:cc:06: ba:9f:ad:37:ec:06:d5:52:c8:a2:35:eb:cc:90:09: 30:53:d7:2f:4e:f3:b6:45:5c:03:94:58:8c:30:cc: 92:a0:4d:d1:76:51:fe:4b:57:72:1d:e1:c3:05:f1: 9b:f8:ec:3d:0a:29:65:c9:af:80:a2:5d:6c:82:c4: 3b:04:11:a1:88:21:fb:fa:26:1f:fc:22:13:9a:de: 2b:08:d7:6b:ef:22:30:e6:dd:c4:78:31:81:1e:11: 7f:53:04:4b:46:c3:be:f4:19:c9:97:b7:f2:2a:4d: c2:fa:22:48:5a:08:59:9f:10:6d:bd:9f:48:3e:67: 8c:3c:46:3e:2e:95:f3:71:b2:1a:18:0a:dc:45:8f: 78:22:76:5a:c7:33:c6:7b:ee:31:47:cc:e7:d5:fd: 9e:fc:f8:46:a0:a3:24:27:12:ff:8d:c6:b3:0d:7b: f5:25:d4:2f:88:5f:4f:db:ad:a8:1d:ca:33:3c:32: 08:c9:00:7f:3e:27:66:da:67:c1:bf:1c:b3:f4:a4: 0e:89:00:b4:4f:0e:25:96:34:2f:e0:28:62:a8:f8: aa:d7:79:e1:63:31:3a:ba:c0:d0:72:2d:1f:f8:98: 08:22:29:a6:4e:6b:dc:3f:41:88:3e:09:71:f8:9d: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3C:A5:F2:FC:56:BF:E5:C9:1A:AD:97:D4:5C:E3:4D:D2:9F:FD:2B X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:da:fd:2d:a3:2c:18:a3:12:c4:96:55:05:bc:3c:3a:74:92: f7:cb:dc:2e:da:84:f7:ad:43:b4:7e:64:3b:29:44:c6:33:f6: a2:ad:6e:20:48:7c:c6:45:42:e5:ea:02:ac:4b:88:ca:fd:d4: a3:77:51:39:d5:ca:58:5e:04:2e:e6:9a:4c:63:88:33:4b:ab: 53:61:7b:39:75:73:8d:1b:26:7d:e3:3e:e6:16:57:56:9a:f8: 21:de:ef:aa:b0:5f:23:a8:6d:0e:1c:5f:53:65:33:4a:db:ed: 1a:4d:8f:9e:66:3f:5d:4e:ec:63:d0:38:92:a0:58:fb:4d:14: 61:7c:85:66:17:a4:c0:8d:d1:a5:2d:64:db:c3:94:f5:79:74: fe:25:45:d1:fe:96:48:9f:e5:b3:84:50:06:bd:f9:9b:85:27: a3:2d:34:e6:bf:c4:d0:8e:ef:13:cf:e6:78:a4:a5:62:11:37: 7f:de:30:07:55:73:95:8f:c2:10:fb:28:29:9b:44:a0:4c:b1: d1:06:46:a0:e0:a4:df:e8:95:c2:51:ba:0c:28:2c:ab:99:a6: 52:6f:e2:9a:7a:53:5a:67:36:7e:e0:bf:16:9b:c6:9e:47:3b: c5:b6:d6:e0:5b:18:e2:13:c5:d8:db:ae:1d:43:25:8c:ac:39: 7d:26:01:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwOTIwMjMzMTU4WhcNMjYwOTI3MjMzMTU4WjAYMRYwFAYD VQQDEw02YWIwNmNlZS0yNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1o1xBrBnLFNp028zAa6n6037AbVUsiiNevMkAkwU9cvTvO2RVwDlFiMMMyS oE3RdlH+S1dyHeHDBfGb+Ow9Cillya+Aol1sgsQ7BBGhiCH7+iYf/CITmt4rCNdr 7yIw5t3EeDGBHhF/UwRLRsO+9BnJl7fyKk3C+iJIWghZnxBtvZ9IPmeMPEY+LpXz cbIaGArcRY94InZaxzPGe+4xR8zn1f2e/PhGoKMkJxL/jcazDXv1JdQviF9P262o HcozPDIIyQB/Pidm2mfBvxyz9KQOiQC0Tw4lljQv4ChiqPiq13nhYzE6usDQci0f +JgIIimmTmvcP0GIPglx+J0mawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIk8pfL8 Vr/lyRqtl9Rc403Sn/0rMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtNr9LaMsGKMSxJZVBbw8OnSS98vcLtqE961DtH5kOylExjP2oq1uIEh8xkVC 5eoCrEuIyv3Uo3dROdXKWF4ELuaaTGOIM0urU2F7OXVzjRsmfeM+5hZXVpr4Id7v qrBfI6htDhxfU2UzStvtGk2PnmY/XU7sY9A4kqBY+00UYXyFZhekwI3RpS1k28OU 9Xl0/iVF0f6WSJ/ls4RQBr35m4Unoy005r/E0I7vE8/meKSlYhE3f94wB1VzlY/C EPsoKZtEoEyx0QZGoOCk3+iVwlG6DCgsq5mmUm/imnpTWmc2fuC/FpvGnkc7xbbW 4FsY4hPF2NuuHUMljKw5fSYBLw== -----END CERTIFICATE-----Generated at Tue Sep 22 18:41:40 2026 by rpki-client