$ rpki-client -vvvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: GGengCH6vt0qFAXMDsrPMaYVVIRQjo1JmYCo68ysUiM= Subject key identifier: 12:76:58:39:9A:69:58:2F:5A:60:FF:6F:15:53:06:7F:4A:FA:D1:1A Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 0431 Signing time: Sun 27 Sep 2026 00:17:41 +0000 Manifest this update: Sun 27 Sep 2026 00:17:41 +0000 Manifest next update: Sun 04 Oct 2026 00:17:41 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: vVoxvMtb+d4EostWN6tTjS5msYTptHQDADBDwaeM0Hc=) 2: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: lA+CaygcBrj0YtEqp60seW0ZCX6+tWFwXRqNraQ10Ek=) 3: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: Q8R/e0WkRoUvhV/duXOH10RMzYjCZjcCedO7vhrkXRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Sep 27 00:17:41 2026 GMT Not After : Oct 4 00:17:41 2026 GMT Subject: CN=6ab860a5-861f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:45:ca:e1:42:2d:95:23:21:26:4f:a0:9b: e9:cc:0b:23:2a:85:8c:ff:a3:d3:fb:e2:ec:c0:45: d4:09:12:24:a1:65:34:18:79:3e:b3:70:c6:e9:37: 7e:b5:32:e6:ec:29:10:96:d9:12:be:cf:e8:fc:ac: 81:09:89:bf:28:08:f0:41:3c:00:f4:5c:f2:eb:73: 7a:44:a6:e1:1c:9e:a1:3b:63:ef:b7:84:59:dd:3c: a5:16:23:59:9c:32:fb:43:f3:c2:cd:a2:3b:cb:4d: c3:08:53:b1:ac:cf:0f:36:4c:25:46:3d:73:a2:fe: a2:47:1e:fe:c9:9f:8a:9f:5c:62:02:ad:70:be:30: 2e:20:cd:c9:a9:17:e7:82:30:3a:d6:85:06:9b:76: e7:32:63:f9:29:71:00:2a:82:91:be:93:5d:9e:0c: 45:69:af:c7:f3:97:97:17:10:5f:06:a1:e6:19:b2: 08:96:b5:83:3f:23:c5:b5:bb:6b:4d:df:cc:ac:92: 68:88:1c:d7:f7:14:32:c1:a7:5a:7a:e2:2d:11:6e: 3e:8d:b2:46:ae:21:98:37:14:56:2d:4f:1e:0d:40: 94:85:8c:1b:06:12:38:09:6d:49:48:99:1b:14:28: 08:9e:29:9a:db:7d:8d:71:a5:aa:8c:e7:ad:47:51: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:58:39:9A:69:58:2F:5A:60:FF:6F:15:53:06:7F:4A:FA:D1:1A X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:90:b4:88:fc:ca:04:9e:4d:a3:25:6c:45:ea:42:81:0d:12: 73:c6:76:45:46:56:dc:76:47:13:97:e6:91:50:7b:38:12:bf: 9a:be:68:ac:ce:d4:2f:fe:76:d7:cd:2d:18:c5:82:db:ed:b6: 67:87:a1:cd:8e:0e:e3:0e:5f:a1:45:41:25:f6:c3:fb:74:07: 86:a2:11:a7:e7:e5:d4:85:33:3b:29:14:e2:44:46:e7:ba:21: 0e:44:ec:3b:5d:5d:d2:e8:14:e5:9c:48:4a:d5:b6:9c:55:bb: 06:1c:47:a1:6e:74:d0:16:25:29:ca:42:97:94:26:9e:58:13: de:6f:fc:e5:59:bc:71:ae:84:e9:73:49:29:17:d4:6a:a3:7e: a4:5e:fa:0b:87:4c:29:03:46:bc:4b:f1:df:5b:07:6e:37:4f: 9f:f3:bc:5c:f0:93:48:ac:36:a6:ee:08:5a:5b:14:eb:7d:d9: 94:36:fb:e9:87:58:63:2e:8f:c3:92:29:b9:d3:07:26:33:cc: b7:38:f5:32:1b:e6:86:1f:7e:85:d2:7c:dd:5b:5b:b1:bc:f4: 60:d6:f6:84:61:b1:a1:dc:c0:dd:fd:da:51:a3:0f:f1:79:eb: bd:1d:82:aa:a4:e3:d3:86:89:e8:2f:38:b1:b9:3a:fb:b2:56: 82:d9:ef:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjYwOTI3MDAxNzQxWhcNMjYxMDA0MDAxNzQxWjAYMRYwFAYD VQQDEw02YWI4NjBhNS04NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xZFyuFCLZUjISZPoJvpzAsjKoWM/6PT++LswEXUCRIkoWU0GHk+s3DG6Td+ tTLm7CkQltkSvs/o/KyBCYm/KAjwQTwA9Fzy63N6RKbhHJ6hO2Pvt4RZ3TylFiNZ nDL7Q/PCzaI7y03DCFOxrM8PNkwlRj1zov6iRx7+yZ+Kn1xiAq1wvjAuIM3JqRfn gjA61oUGm3bnMmP5KXEAKoKRvpNdngxFaa/H85eXFxBfBqHmGbIIlrWDPyPFtbtr Td/MrJJoiBzX9xQywadaeuItEW4+jbJGriGYNxRWLU8eDUCUhYwbBhI4CW1JSJkb FCgInima232NcaWqjOetR1GoFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJ2WDma aVgvWmD/bxVTBn9K+tEaMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmZC0iPzKBJ5NoyVsRepCgQ0Sc8Z2RUZW3HZHE5fmkVB7OBK/mr5orM7UL/52 180tGMWC2+22Z4ehzY4O4w5foUVBJfbD+3QHhqIRp+fl1IUzOykU4kRG57ohDkTs O11d0ugU5ZxIStW2nFW7BhxHoW500BYlKcpCl5QmnlgT3m/85Vm8ca6E6XNJKRfU aqN+pF76C4dMKQNGvEvx31sHbjdPn/O8XPCTSKw2pu4IWlsU633ZlDb76YdYYy6P w5IpudMHJjPMtzj1Mhvmhh9+hdJ83Vtbsbz0YNb2hGGxodzA3f3aUaMP8XnrvR2C qqTj04aJ6C84sbk6+7JWgtnvXw== -----END CERTIFICATE-----Generated at Mon Sep 28 23:35:55 2026 by rpki-client