$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: WGTB3XJTOibGgkKuTvXjkLvOnWCvJY5HkB2FWd3DGJk= Subject key identifier: B6:4B:DD:DC:1A:B3:D5:65:97:C0:E4:C6:3C:8B:49:F2:4D:AF:66:64 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 0157 Signing time: Mon 21 Sep 2026 05:15:28 +0000 Manifest this update: Mon 21 Sep 2026 05:15:28 +0000 Manifest next update: Mon 28 Sep 2026 05:15:28 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: /VLE2wPDkrpapNR8JTTiACOr9+fy1joZGwL/SJJ3EtA=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=) 3: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=) 4: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Sep 21 05:15:28 2026 GMT Not After : Sep 28 05:15:28 2026 GMT Subject: CN=6ab0bd70-668e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:e3:37:0a:0b:f9:ea:18:5d:23:3c:09:c2: cf:19:a2:f2:ee:f8:ea:85:8b:92:9e:db:ea:6d:e5: df:a2:2d:25:3f:16:ff:64:f9:18:b3:6c:31:dd:61: ab:3f:4c:4f:14:04:e7:9b:4c:fd:8c:17:32:d6:18: 1e:c4:99:1d:ee:63:08:ff:7e:20:22:b4:66:98:ac: d2:9e:d9:1f:ca:11:3f:70:a0:62:dd:6e:92:2b:3f: bf:c9:70:9f:e9:26:29:1d:d2:40:89:de:79:d1:08: 1b:fd:65:31:a7:b0:1a:ba:8b:0d:3e:97:65:92:64: 75:a3:b8:26:bf:bd:db:8f:6b:8f:65:e0:82:d2:3c: e8:2d:b5:70:e5:6c:05:d2:03:ab:a3:31:4f:65:8a: 51:2e:37:c1:f1:67:d1:78:d6:99:2a:98:9a:86:00: fe:85:6c:6d:ca:5a:20:2f:d5:13:5d:3c:95:24:30: 3c:33:d0:0a:a8:01:22:f6:11:fe:2d:a1:6d:8f:34: b7:19:ca:39:bf:39:e9:ec:ee:b7:de:61:be:58:1c: 17:3d:7a:c6:fd:19:64:f7:c3:15:57:01:14:43:f2: 15:a7:03:52:4d:c7:3c:2a:09:95:be:81:0e:e5:d4: 67:79:e9:9d:13:51:19:c1:1d:9e:02:9f:2b:c6:a8: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:DD:DC:1A:B3:D5:65:97:C0:E4:C6:3C:8B:49:F2:4D:AF:66:64 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:13:ff:25:67:f9:e0:34:d1:b7:2e:00:07:03:06:8e:69:70: e6:3b:ae:07:c4:ea:36:ac:2b:eb:c2:2c:75:1d:4d:c8:6f:fe: 87:b6:42:53:d0:32:65:69:42:26:50:2d:66:9f:a6:4b:61:69: 31:5e:40:f1:78:72:55:14:43:66:0c:68:b1:03:e4:f1:8a:c1: 03:d1:21:d3:7a:48:3d:22:9c:7f:82:dc:16:d9:08:51:77:22: 07:6e:2e:32:93:fa:5f:99:83:56:b0:50:b5:4a:21:89:c8:2b: 7d:40:e3:27:e4:3f:85:e2:22:ee:1d:b1:5f:74:c1:be:c1:e0: 49:df:a1:d0:c5:dc:34:f0:c9:d7:e4:ec:db:3e:4c:98:be:ab: f5:d9:f0:f9:3c:af:47:d3:6f:6d:97:ac:9c:3b:f5:68:09:53: 96:fb:01:25:04:8a:8d:11:12:6f:77:49:f0:b1:9e:ab:92:25: 82:63:78:a3:5b:cc:b0:93:de:dd:0f:da:8e:7a:a3:b7:69:c3: 9a:11:71:8a:03:b8:8f:3f:f4:51:f7:0c:1d:e4:8d:5c:1b:7d: bc:c2:4f:ce:6f:3e:b7:be:f2:f8:34:05:d6:76:1e:25:dd:95: b2:cc:25:49:83:98:9d:0c:a3:51:34:2f:2c:77:91:fb:a9:a7: b3:bd:e9:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjYwOTIxMDUxNTI4WhcNMjYwOTI4MDUxNTI4WjAYMRYwFAYD VQQDEw02YWIwYmQ3MC02NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVzjNwoL+eoYXSM8CcLPGaLy7vjqhYuSntvqbeXfoi0lPxb/ZPkYs2wx3WGr P0xPFATnm0z9jBcy1hgexJkd7mMI/34gIrRmmKzSntkfyhE/cKBi3W6SKz+/yXCf 6SYpHdJAid550Qgb/WUxp7AauosNPpdlkmR1o7gmv73bj2uPZeCC0jzoLbVw5WwF 0gOrozFPZYpRLjfB8WfReNaZKpiahgD+hWxtylogL9UTXTyVJDA8M9AKqAEi9hH+ LaFtjzS3Gco5vznp7O633mG+WBwXPXrG/Rlk98MVVwEUQ/IVpwNSTcc8KgmVvoEO 5dRneemdE1EZwR2eAp8rxqhbbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZL3dwa s9Vll8DkxjyLSfJNr2ZkMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANBP/JWf54DTRty4ABwMGjmlw5juuB8TqNqwr68IsdR1NyG/+h7ZCU9AyZWlC JlAtZp+mS2FpMV5A8XhyVRRDZgxosQPk8YrBA9Eh03pIPSKcf4LcFtkIUXciB24u MpP6X5mDVrBQtUohicgrfUDjJ+Q/heIi7h2xX3TBvsHgSd+h0MXcNPDJ1+Ts2z5M mL6r9dnw+TyvR9NvbZesnDv1aAlTlvsBJQSKjRESb3dJ8LGeq5IlgmN4o1vMsJPe 3Q/ajnqjt2nDmhFxigO4jz/0UfcMHeSNXBt9vMJPzm8+t77y+DQF1nYeJd2Vsswl SYOYnQyjUTQvLHeR+6mns73pgg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:13:17 2026 by rpki-client