$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json) Hash identifier: dHon6dk70RcEfQfEGSox1T4kjDUwjGTXFbRgFsG0vug= Subject key identifier: 1B:DA:2C:2E:0C:7E:3D:FA:85:5C:3D:9C:AE:80:32:91:2D:56:5B:62 Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft Manifest number: E9 Signing time: Mon 21 Sep 2026 06:26:36 +0000 Manifest this update: Mon 21 Sep 2026 06:26:36 +0000 Manifest next update: Mon 28 Sep 2026 06:26:36 +0000 Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: Ds6w6B7nsnxC2pnmh61xJVYKg80sDmxD1pc4CZzsSfE=) 2: 730C503A56C611F096620043C4F9AE02.roa (hash: 0O+T5p2u9RjCzYCInOpadN0gyJxBbnecFtZNvwYOPBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Validity Not Before: Sep 21 06:26:36 2026 GMT Not After : Sep 28 06:26:36 2026 GMT Subject: CN=6ab0ce1c-ad02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:8f:f9:7a:eb:f4:06:19:f2:2e:79:22:12: a3:bb:e9:74:99:19:ba:bc:4c:03:5d:93:0b:ac:32: 96:44:25:52:84:56:a9:7f:e4:fd:f2:4b:ad:97:37: bb:4b:fc:ec:55:f9:00:2a:a8:f6:59:ae:fa:86:dc: eb:a5:d8:cb:91:32:66:3a:4a:40:48:f6:52:02:a9: 9c:dc:db:7a:15:87:a6:14:02:91:b2:c5:68:05:4a: d8:fd:b5:91:11:b2:52:08:85:1f:4d:76:e0:40:22: 0a:17:c8:86:8b:0f:17:da:e3:d8:d1:43:4d:d6:61: 96:a1:69:d1:76:eb:c2:3a:4c:4a:fa:b9:3a:06:1e: b7:3b:74:8b:ac:6c:8f:a3:ef:cf:ff:77:57:1f:89: b6:4a:7c:06:e8:b6:02:05:39:af:b9:4a:14:b7:23: db:40:be:7a:54:08:90:44:8c:00:1d:cf:8e:7d:be: 12:dc:30:3f:bc:ed:27:e9:d1:58:17:be:d7:39:7a: 36:c4:f8:1d:c7:dc:e8:cf:60:42:2d:40:97:9b:a4: 4f:80:ba:ce:ff:9b:f1:a0:c5:99:e6:b5:69:f5:26: 8a:3d:3b:e1:18:30:57:cb:ab:fa:53:c4:f5:d8:39: 45:74:ef:52:d0:fc:a1:92:3a:0e:ed:a3:57:5b:69: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:2C:2E:0C:7E:3D:FA:85:5C:3D:9C:AE:80:32:91:2D:56:5B:62 X509v3 Authority Key Identifier: keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:55:da:de:b5:8a:34:ca:17:d7:d6:f4:f6:7b:57:17:27:f6: c6:72:74:f6:96:5e:7e:78:3a:19:8e:8b:a9:fe:f8:e0:9f:45: 79:23:6e:e5:9f:1d:3a:c7:7e:10:50:94:21:73:cf:22:7c:14: 84:eb:fa:67:be:49:e3:50:0a:9c:36:1d:43:b4:63:96:8e:b9: 32:86:f6:6f:1b:1f:8e:3e:a3:86:b6:55:96:ee:8d:d7:43:cb: 00:02:41:a2:ed:06:11:d9:ef:c8:fb:b1:eb:3c:f8:f2:86:04: 0f:51:a7:b3:a6:ef:84:46:c7:f6:c4:71:2e:9f:9d:0d:e7:5a: 1b:9e:ff:ed:8a:74:73:b6:db:92:51:8e:cc:31:e9:a3:09:47: 75:b9:ad:c4:ec:80:c2:6a:1e:78:e2:37:b5:be:9a:c8:a2:d3: 87:d2:54:37:c8:b2:60:ec:9f:9b:53:4d:7c:66:92:6c:a3:40: 6f:49:d7:49:b1:3a:a2:df:20:d5:c3:d3:14:1e:26:88:57:a9: 27:65:22:f5:15:45:d7:e1:d0:b1:d9:c5:46:2a:c8:89:e0:f7: f9:05:ae:ba:d7:80:4e:eb:df:d9:9e:c8:6e:f4:ee:f7:50:ff: 6d:1b:c8:50:a0:4d:24:04:ce:ea:08:91:5f:67:8f:58:fe:e4: c4:be:cc:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RjIxMTAvBgNVBAUTKEUzN0RDNEQ4MjQ3NjAzRTg0OEMwMDY2QzQ0NUI5Q0Q4 REE3MzUwRDYwHhcNMjYwOTIxMDYyNjM2WhcNMjYwOTI4MDYyNjM2WjAYMRYwFAYD VQQDEw02YWIwY2UxYy1hZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWSP+Xrr9AYZ8i55IhKju+l0mRm6vEwDXZMLrDKWRCVShFapf+T98kutlze7 S/zsVfkAKqj2Wa76htzrpdjLkTJmOkpASPZSAqmc3Nt6FYemFAKRssVoBUrY/bWR EbJSCIUfTXbgQCIKF8iGiw8X2uPY0UNN1mGWoWnRduvCOkxK+rk6Bh63O3SLrGyP o+/P/3dXH4m2SnwG6LYCBTmvuUoUtyPbQL56VAiQRIwAHc+Ofb4S3DA/vO0n6dFY F77XOXo2xPgdx9zoz2BCLUCXm6RPgLrO/5vxoMWZ5rVp9SaKPTvhGDBXy6v6U8T1 2DlFdO9S0PyhkjoO7aNXW2k+LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvaLC4M fj36hVw9nK6AMpEtVltiMB8GA1UdIwQYMBaAFON9xNgkdgPoSMAGbERbnNjac1DW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhGMi8yODdERTczNjU2 QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEtaEl3QVpzUkZ1YzJOcHpV TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzM0UyQ1IyQS1oSXdBWnNSRnVjMk5welVOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhGMi8yODdERTczNjU2QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEt aEl3QVpzUkZ1YzJOcHpVTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHVXa3rWKNMoX19b09ntXFyf2xnJ09pZefng6GY6Lqf744J9FeSNu5Z8dOsd+ EFCUIXPPInwUhOv6Z75J41AKnDYdQ7Rjlo65Mob2bxsfjj6jhrZVlu6N10PLAAJB ou0GEdnvyPux6zz48oYED1Gns6bvhEbH9sRxLp+dDedaG57/7Yp0c7bbklGOzDHp owlHdbmtxOyAwmoeeOI3tb6ayKLTh9JUN8iyYOyfm1NNfGaSbKNAb0nXSbE6ot8g 1cPTFB4miFepJ2Ui9RVF1+HQsdnFRirIieD3+QWuuteATuvf2Z7IbvTu91D/bRvI UKBNJATO6giRX2ePWP7kxL7MLw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:44:02 2026 by rpki-client