$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: Ep/P9bFWdwV2cwNWcmcL7GWQbjrU+pnTEoXlHE0cgrw= Subject key identifier: 9B:7D:CA:50:03:81:FE:4D:E5:98:99:F4:C3:28:27:87:8C:FD:FB:AE Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 036D Signing time: Mon 21 Sep 2026 00:39:43 +0000 Manifest this update: Mon 21 Sep 2026 00:39:43 +0000 Manifest next update: Mon 28 Sep 2026 00:39:43 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: HWtStkZZbzhSR4c17bIYORo9S076FwtAD477kxtlCOM=) 2: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: 6HsKuqL5S8uKAR1j1etyr6JU/lQn3ubk+2w56Dk0K+A=) 3: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: dfXE23weJbeF3Q0ekQ196ZT9XngXBchYp3WwEpVjFic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Sep 21 00:39:43 2026 GMT Not After : Sep 28 00:39:43 2026 GMT Subject: CN=6ab07ccf-a355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:a0:41:02:67:f5:cd:f6:d8:d0:b0:ec:6b: c6:8f:cf:c2:e0:fd:18:34:50:94:78:ee:10:ee:9c: 80:77:95:22:ff:97:6a:32:9e:25:99:16:de:e1:91: de:23:4b:55:0f:23:c0:aa:d9:cc:48:ed:44:be:57: 11:d3:2d:0f:38:01:da:64:c6:69:fb:d7:9a:d3:a4: 3c:a6:22:0b:fd:43:c7:c2:f3:8f:f6:29:9b:a0:a2: b6:9f:57:1c:48:c8:ed:d2:d3:f0:cd:b3:92:a6:87: 65:aa:5a:2b:80:ed:85:9f:b0:23:40:23:1a:53:23: c8:5b:b9:f8:71:14:a9:ab:5c:f2:b4:2d:67:a8:49: e6:60:7f:72:78:40:67:88:8f:21:99:24:5b:e4:a9: 82:ab:33:b9:bb:2f:2c:16:31:d3:1f:1f:ce:18:75: 9d:e1:5e:86:84:ba:ac:41:90:0c:51:c6:60:af:40: 0a:f0:43:c5:cc:c2:63:d8:79:cc:49:2a:fa:8f:73: 3b:05:c5:2f:d2:a6:0e:55:33:7a:84:d4:7d:c6:d9: 49:e7:e7:15:68:06:8d:7a:38:b8:0d:3e:ca:7b:f2: b6:3f:b8:76:1d:28:ca:e5:47:58:a4:55:e5:97:96: 9b:65:6f:50:20:ab:30:0d:74:19:08:64:0a:94:0b: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7D:CA:50:03:81:FE:4D:E5:98:99:F4:C3:28:27:87:8C:FD:FB:AE X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:51:68:17:b1:bd:2d:d3:55:1d:82:a4:38:86:5b:15:94:e5: bc:7c:d9:3e:d3:d3:93:51:ba:0a:63:55:1a:cf:16:d3:28:67: 0f:ad:73:8f:96:24:34:85:4f:84:8b:72:ea:9b:03:91:2c:45: 4e:fd:dc:25:6e:88:21:bb:3c:23:18:e6:6a:98:df:d7:e4:75: 39:07:56:ea:c1:6c:e5:c7:99:5c:59:19:fe:01:8b:07:46:b8: 75:ed:56:a5:33:ab:c0:59:88:c7:a1:00:e2:74:de:b4:70:d4: f4:98:2b:2e:3a:f2:c1:2d:a5:75:5e:8e:d5:c4:4c:d2:31:ab: 10:86:b3:41:31:0e:39:2c:45:31:2b:8d:e9:98:2d:5f:d8:0a: 8c:11:6c:df:3b:85:bf:d4:5b:47:c9:bc:0a:53:ef:a7:5e:e9: d9:cb:de:10:6a:5a:8d:33:57:2d:d8:ce:a3:c3:b5:37:94:57: 4d:d6:19:e1:d8:fa:b2:9e:a3:a5:e4:8c:51:16:8d:27:1a:11: 64:26:43:2e:c6:81:16:5e:6e:5a:c0:a6:72:3e:7b:ee:e5:81: d3:03:f4:d2:a6:7e:7c:57:65:9a:71:84:df:bd:3e:37:ae:55: c1:b4:43:d5:cd:72:84:bd:1c:e6:be:cc:ef:62:07:bb:7e:b4: d0:48:03:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjYwOTIxMDAzOTQzWhcNMjYwOTI4MDAzOTQzWjAYMRYwFAYD VQQDEw02YWIwN2NjZi1hMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMmgQQJn9c322NCw7GvGj8/C4P0YNFCUeO4Q7pyAd5Ui/5dqMp4lmRbe4ZHe I0tVDyPAqtnMSO1EvlcR0y0POAHaZMZp+9ea06Q8piIL/UPHwvOP9imboKK2n1cc SMjt0tPwzbOSpodlqlorgO2Fn7AjQCMaUyPIW7n4cRSpq1zytC1nqEnmYH9yeEBn iI8hmSRb5KmCqzO5uy8sFjHTHx/OGHWd4V6GhLqsQZAMUcZgr0AK8EPFzMJj2HnM SSr6j3M7BcUv0qYOVTN6hNR9xtlJ5+cVaAaNeji4DT7Ke/K2P7h2HSjK5UdYpFXl l5abZW9QIKswDXQZCGQKlAt7SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJt9ylAD gf5N5ZiZ9MMoJ4eM/fuuMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnFFoF7G9LdNVHYKkOIZbFZTlvHzZPtPTk1G6CmNVGs8W0yhnD61zj5YkNIVP hIty6psDkSxFTv3cJW6IIbs8Ixjmapjf1+R1OQdW6sFs5ceZXFkZ/gGLB0a4de1W pTOrwFmIx6EA4nTetHDU9JgrLjrywS2ldV6O1cRM0jGrEIazQTEOOSxFMSuN6Zgt X9gKjBFs3zuFv9RbR8m8ClPvp17p2cveEGpajTNXLdjOo8O1N5RXTdYZ4dj6sp6j peSMURaNJxoRZCZDLsaBFl5uWsCmcj577uWB0wP00qZ+fFdlmnGE370+N65VwbRD 1c1yhL0c5r7M72IHu3600EgDmQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:10:07 2026 by rpki-client