$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json) Hash identifier: lZLkHr9+zv3IhJbAbf24TqxCLQMdAgmC3SvrMKyG4C0= Subject key identifier: A8:B8:ED:3A:6B:AF:79:91:1C:E5:6A:26:BA:5C:E6:93:61:57:62:A9 Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37 Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37 Certificate serial: 035D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft Manifest number: 0357 Signing time: Mon 21 Sep 2026 00:44:19 +0000 Manifest this update: Mon 21 Sep 2026 00:44:18 +0000 Manifest next update: Mon 28 Sep 2026 00:44:18 +0000 Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: RuvC0rfIz62fTpqc1CfLYGwgG8Yi4cyXnxHXVPwbdPU=) 2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kTT7eEgt9uaGhMCIrcNR40b0329psOBKWZcG/FsxbWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37 Validity Not Before: Sep 21 00:44:18 2026 GMT Not After : Sep 28 00:44:18 2026 GMT Subject: CN=6ab07de3-6150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:06:46:5f:37:33:a5:60:63:b3:00:9f:ed: cb:96:18:37:ce:f5:45:ab:30:b2:f3:a4:a9:16:d4: 3a:f7:93:7f:84:1c:8a:64:66:aa:28:14:3b:09:48: 67:dc:29:50:ec:66:4e:81:65:85:e1:7c:75:98:34: 53:71:72:a1:af:a3:f3:57:68:c1:cd:02:95:5f:a4: 0e:6e:aa:eb:6a:b5:9e:5c:25:77:ae:ff:3b:99:4d: 04:ec:8a:16:99:c9:a9:48:ba:65:ad:91:fa:fb:e8: ff:58:ce:8c:54:50:0a:f0:45:00:c3:b7:52:80:fa: 0b:c8:bb:c6:89:99:47:33:1a:48:bb:9d:8c:8b:b9: bc:42:53:a2:8a:81:9c:70:54:2f:46:c4:db:3b:61: 04:75:89:58:99:39:ea:06:d5:d1:91:8b:9f:0e:c8: d4:e9:19:70:28:97:c3:fe:b8:1a:65:b5:56:ab:89: 5b:09:08:e5:dd:2a:56:54:73:d9:ab:6f:c1:d9:b6: a5:77:d9:23:1b:5b:e5:69:61:2f:e0:69:aa:78:0c: 1c:16:6e:4e:6e:7c:e1:29:01:3c:9b:89:e3:f3:0b: 25:28:05:06:e1:32:cc:e9:af:3d:0b:e6:e7:ca:47: 50:56:e5:c0:ab:49:0e:84:bc:d6:20:91:9d:b2:e5: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B8:ED:3A:6B:AF:79:91:1C:E5:6A:26:BA:5C:E6:93:61:57:62:A9 X509v3 Authority Key Identifier: keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:04:14:01:d1:37:ae:b3:5b:ce:ac:24:af:d6:25:9a:92:59: 4a:86:c5:e9:1b:0d:27:9d:15:34:f2:f2:ce:61:11:1b:bd:fa: 58:e5:00:88:dd:aa:b2:6a:4b:4b:f0:75:22:1d:db:b3:1a:3d: d8:3f:1c:0e:0d:27:ac:ad:d2:aa:37:1f:46:1b:e8:00:fd:11: ee:bb:cd:6d:ad:30:db:2b:0a:35:ee:ff:39:b2:54:62:a8:95: 17:b8:26:1c:47:b3:ec:c0:51:07:1c:62:ac:ac:66:5d:89:0f: 61:21:38:3a:02:a8:2a:f2:c2:9b:fe:9f:3e:f8:ef:08:ed:e3: 5b:30:d6:88:4a:75:49:d9:70:77:0f:4a:4f:84:72:71:0c:6d: 89:69:fb:83:27:65:0d:1c:4a:7b:26:e1:cf:b7:88:7a:cc:60: 43:76:75:72:c0:fb:8c:b1:25:2b:69:56:ea:51:1b:5f:e1:90: 4e:6a:28:d4:ed:71:ab:7f:38:51:0b:fe:ce:31:2d:f2:1f:05: 11:06:ff:89:7a:eb:03:63:78:d9:9c:3a:e4:fd:ed:98:f7:bb: 2e:86:6f:fa:42:06:df:69:38:bf:78:ab:d4:0b:a6:e0:0b:51: 51:84:9e:ad:32:5d:9b:df:dd:8b:e3:3b:ce:0c:6f:fe:53:26: a7:b6:9f:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQUYxMTAvBgNVBAUTKDdBMTMwNDRBMTExODU4NkMwRkRBMTM4QkIzRUJERDQ4 NDg5MTRFMzcwHhcNMjYwOTIxMDA0NDE4WhcNMjYwOTI4MDA0NDE4WjAYMRYwFAYD VQQDEw02YWIwN2RlMy02MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuEGRl83M6VgY7MAn+3Llhg3zvVFqzCy86SpFtQ695N/hByKZGaqKBQ7CUhn 3ClQ7GZOgWWF4Xx1mDRTcXKhr6PzV2jBzQKVX6QObqrrarWeXCV3rv87mU0E7IoW mcmpSLplrZH6++j/WM6MVFAK8EUAw7dSgPoLyLvGiZlHMxpIu52Mi7m8QlOiioGc cFQvRsTbO2EEdYlYmTnqBtXRkYufDsjU6RlwKJfD/rgaZbVWq4lbCQjl3SpWVHPZ q2/B2bald9kjG1vlaWEv4GmqeAwcFm5ObnzhKQE8m4nj8wslKAUG4TLM6a89C+bn ykdQVuXAq0kOhLzWIJGdsuUB7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKi47Tpr r3mRHOVqJrpc5pNhV2KpMB8GA1UdIwQYMBaAFHoTBEoRGFhsD9oTi7Pr3UhIkU43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVBRi80N0Q1QTdFMDE2 QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdHd1AyaE9Mcy12ZFNFaVJU amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VoTUVTaEVZV0d3UDJoT0xzLXZkU0VpUlRqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVBRi80N0Q1QTdFMDE2QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdH d1AyaE9Mcy12ZFNFaVJUamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACAQUAdE3rrNbzqwkr9YlmpJZSobF6RsNJ50VNPLyzmERG736WOUAiN2qsmpL S/B1Ih3bsxo92D8cDg0nrK3SqjcfRhvoAP0R7rvNba0w2ysKNe7/ObJUYqiVF7gm HEez7MBRBxxirKxmXYkPYSE4OgKoKvLCm/6fPvjvCO3jWzDWiEp1Sdlwdw9KT4Ry cQxtiWn7gydlDRxKeybhz7eIesxgQ3Z1csD7jLElK2lW6lEbX+GQTmoo1O1xq384 UQv+zjEt8h8FEQb/iXrrA2N42Zw65P3tmPe7LoZv+kIG32k4v3ir1Aum4AtRUYSe rTJdm9/di+M7zgxv/lMmp7afWw== -----END CERTIFICATE-----Generated at Tue Sep 22 13:32:05 2026 by rpki-client