$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json) Hash identifier: 0OtLc35jpFANWleATnPoAJMxE7iIHO7D2NOgOxBN2mw= Subject key identifier: 27:EE:C9:63:7D:BA:F9:A2:FA:C6:ED:FA:26:D0:F0:2B:2A:71:B1:55 Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft Manifest number: 0277 Signing time: Wed 23 Sep 2026 01:57:39 +0000 Manifest this update: Wed 23 Sep 2026 01:57:39 +0000 Manifest next update: Wed 30 Sep 2026 01:57:39 +0000 Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: IR24aekBjUKOM3Ll3OqX6YwjPCf2pB66rZxoDFY7XMU=) 2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: X6nIJKrPOsKF/xBNNQOCxuWrhRZQbFDhttqReRf2IsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Sep 23 01:57:39 2026 GMT Not After : Sep 30 01:57:39 2026 GMT Subject: CN=6ab33213-f151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:27:95:1a:27:3e:6e:2a:17:49:1a:ac:1b: a4:4c:9f:6b:39:be:39:05:b2:22:1e:36:21:56:45: df:e6:72:06:6c:a3:df:62:b3:70:07:13:86:41:2a: 36:54:2d:5b:21:3a:a2:a4:c7:fa:e4:6c:0b:49:9b: b6:e5:52:dc:85:ba:bd:36:c4:25:1c:7a:a8:d2:76: fc:c2:ea:e7:a1:0f:e3:75:af:7e:d8:f2:ef:60:a2: d9:df:eb:ff:47:35:96:00:c4:e5:50:7f:25:68:8d: ca:bd:d5:e5:4b:73:fa:28:05:2c:06:49:26:ff:38: 16:9f:c5:e6:07:bd:ae:64:a4:b1:2b:71:2f:d8:0a: b9:01:6c:49:3e:57:ed:64:71:88:a4:6d:d5:68:d7: 45:7e:73:9b:3a:8b:71:27:7c:3a:70:1d:58:0c:1f: b3:c1:db:78:5b:e2:92:51:fe:1f:b4:da:9c:aa:92: f2:c5:d6:19:07:91:f0:75:2e:ac:4c:c8:ce:8d:1a: b3:9b:d5:39:99:8f:5c:98:63:1e:ca:11:a4:73:b9: 5a:1a:36:0d:70:26:06:07:ea:10:80:89:9b:d7:94: 03:91:c5:1b:09:7a:82:9a:a4:d6:76:30:15:7c:bb: c5:ee:31:c8:91:d4:0d:50:0b:09:ac:31:ac:7b:03: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EE:C9:63:7D:BA:F9:A2:FA:C6:ED:FA:26:D0:F0:2B:2A:71:B1:55 X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:07:ea:96:68:2c:86:e5:11:75:f6:b7:b0:e2:f2:46:76:99: b8:8d:1d:b4:05:12:13:c0:c7:86:a8:55:5e:07:30:9a:a7:e1: 0f:08:7c:69:a9:e7:52:0e:93:3c:ae:9f:e6:c8:96:a3:f0:56: 84:e0:e6:33:1d:e6:46:1f:c5:14:20:f8:65:ac:73:98:74:d8: 76:ca:a7:b3:f8:66:8c:00:e7:65:71:cf:c6:f7:fb:2e:d9:70: 1a:c9:57:6a:2d:9a:05:40:66:fe:46:de:01:f6:2e:65:31:c3: 09:f1:bb:89:bf:ed:75:dc:10:15:29:d3:8b:a0:21:50:47:51: e3:08:61:d8:8f:ba:9c:64:c7:bf:b8:49:39:c4:d7:c9:57:02: d2:d2:f9:33:26:43:ed:72:97:c6:e2:64:bb:b2:55:ae:61:e3: 7f:d5:41:a2:99:bb:53:4b:d1:87:69:7a:e7:c6:74:ed:7c:2c: 86:cb:0e:eb:5a:03:f8:e7:7c:15:b0:32:4a:ee:a3:64:05:d5: 0e:24:2d:44:0d:40:5d:34:26:33:58:dd:70:ab:d6:16:1d:8d: 11:df:db:c3:bb:b9:f6:ce:73:a5:a3:7d:bb:d2:ee:a8:9f:46: ac:db:dc:22:c2:59:61:44:bd:9a:2f:a3:f7:93:04:52:98:10: 91:7b:92:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjYwOTIzMDE1NzM5WhcNMjYwOTMwMDE1NzM5WjAYMRYwFAYD VQQDEw02YWIzMzIxMy1mMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwngnlRonPm4qF0karBukTJ9rOb45BbIiHjYhVkXf5nIGbKPfYrNwBxOGQSo2 VC1bITqipMf65GwLSZu25VLchbq9NsQlHHqo0nb8wurnoQ/jda9+2PLvYKLZ3+v/ RzWWAMTlUH8laI3KvdXlS3P6KAUsBkkm/zgWn8XmB72uZKSxK3Ev2Aq5AWxJPlft ZHGIpG3VaNdFfnObOotxJ3w6cB1YDB+zwdt4W+KSUf4ftNqcqpLyxdYZB5HwdS6s TMjOjRqzm9U5mY9cmGMeyhGkc7laGjYNcCYGB+oQgImb15QDkcUbCXqCmqTWdjAV fLvF7jHIkdQNUAsJrDGsewNlgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfuyWN9 uvmi+sbt+ibQ8CsqcbFVMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0 TW1zLTFIeU9TbDM1aWVRdkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAogfqlmgshuURdfa3sOLyRnaZuI0dtAUSE8DHhqhVXgcwmqfhDwh8aannUg6T PK6f5siWo/BWhODmMx3mRh/FFCD4ZaxzmHTYdsqns/hmjADnZXHPxvf7LtlwGslX ai2aBUBm/kbeAfYuZTHDCfG7ib/tddwQFSnTi6AhUEdR4whh2I+6nGTHv7hJOcTX yVcC0tL5MyZD7XKXxuJku7JVrmHjf9VBopm7U0vRh2l658Z07XwshssO61oD+Od8 FbAySu6jZAXVDiQtRA1AXTQmM1jdcKvWFh2NEd/bw7u59s5zpaN9u9LuqJ9GrNvc IsJZYUS9mi+j95MEUpgQkXuSEg== -----END CERTIFICATE-----Generated at Wed Sep 23 16:16:02 2026 by rpki-client