$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json) Hash identifier: FB05zzgvW1LXypNiUpzLzklALX5vRsSd6/dXAMnA+lM= Subject key identifier: 1C:63:30:BC:68:A2:2C:D8:0D:E4:5D:41:C9:E6:B1:A7:8F:D7:15:32 Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft Manifest number: 08C2 Signing time: Sat 26 Sep 2026 20:36:50 +0000 Manifest this update: Sat 26 Sep 2026 20:36:49 +0000 Manifest next update: Sat 03 Oct 2026 20:36:49 +0000 Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: bdMdUcC8FAJ41/+jAB6Do8vTIM9ylO38nfQ+jR6kHqQ=) 2: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: /xCNBqLNz0L8cDqpYEQMnHLgfzVahak+S8dk9Uan5oM=) 3: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: IxYVxX1BoFCHdIOrjAwAEmnCO+dNiZSE2wEYWsIxYD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Sep 26 20:36:49 2026 GMT Not After : Oct 3 20:36:49 2026 GMT Subject: CN=6ab82ce1-1d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:65:a6:f4:61:f5:d2:85:d5:51:a4:fa:7c: 51:79:bb:b6:d6:bd:04:f3:ae:29:cd:ea:26:ea:35: 86:38:3e:96:c5:71:59:6c:1f:8f:2f:79:68:e2:17: 52:53:ab:cc:ae:11:a0:f2:4e:78:d5:8f:e9:84:38: 57:c9:02:9f:37:cc:4e:a9:4a:3b:b4:16:60:85:44: 36:99:f1:2e:4b:d5:ab:4f:a3:16:c9:1d:8c:ae:6d: 00:00:65:74:bf:52:e6:2f:40:05:29:c8:cc:f8:6e: 74:a1:ce:cc:7b:e9:cc:17:34:3a:90:9e:f0:eb:0c: 40:a5:0b:85:a6:48:5a:41:7d:4d:76:6a:11:9b:ab: 76:11:83:04:ef:d0:17:b9:72:9c:4c:76:8f:e9:c5: 52:c1:be:2b:31:71:80:40:38:98:67:b8:b2:ea:33: e3:dd:8b:85:df:00:b1:a0:a6:26:b3:81:62:00:90: d8:72:2d:1a:44:b8:b3:35:51:03:8c:3c:41:f8:be: 61:13:4f:3b:94:ae:a8:bc:16:b6:f3:22:78:36:1a: ec:fc:fa:2f:ac:36:51:1f:9f:92:ba:06:96:26:9a: 09:39:c9:af:0d:9a:c6:d7:5e:59:54:37:48:b3:61: 51:18:a0:0e:5d:df:a2:dd:84:e1:d4:20:c3:96:a7: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:30:BC:68:A2:2C:D8:0D:E4:5D:41:C9:E6:B1:A7:8F:D7:15:32 X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:72:f2:e0:19:ad:3f:38:15:6e:2c:58:de:9f:af:21:30:d5: be:d6:f2:03:a0:95:4d:07:cf:99:b5:be:88:f8:f0:f2:6a:a1: 9b:18:a5:de:97:0e:fd:7f:a0:35:c8:c6:e7:c3:82:f1:86:61: 17:7f:3f:d6:bd:f7:a2:a9:fe:88:71:b2:7e:87:ad:ec:47:43: eb:25:c2:a1:07:ea:23:6c:38:80:46:90:7d:3f:41:80:f0:6a: 83:27:54:3b:9c:df:8d:90:ad:70:f0:e3:76:94:85:ab:3c:42: a7:5e:94:f0:0d:ca:5f:88:2b:ee:35:5a:ae:83:0b:99:d6:07: ea:2d:ed:35:63:ea:ae:72:86:d3:2d:fc:ba:54:4e:18:f8:cc: 64:a1:d1:e7:9c:74:58:84:0d:9d:74:b1:3a:de:cd:07:82:1e: a1:e0:d8:79:10:dd:b4:58:11:48:4d:dc:c8:28:5e:2a:83:9f: 28:e6:61:d7:e9:77:aa:73:15:c0:20:b2:c5:13:37:30:7a:40: c1:66:04:60:78:42:0d:7b:bd:ab:71:a0:0f:25:ee:bd:ca:14: 7a:d4:50:ea:11:23:70:f7:2d:b8:ef:92:7b:c3:5f:2f:12:52: fb:6a:1f:08:64:ca:e0:48:b0:b1:a7:88:56:c3:99:bf:f3:36: 8f:24:e4:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjYwOTI2MjAzNjQ5WhcNMjYxMDAzMjAzNjQ5WjAYMRYwFAYD VQQDEw02YWI4MmNlMS0xZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSFlpvRh9dKF1VGk+nxRebu21r0E864pzeom6jWGOD6WxXFZbB+PL3lo4hdS U6vMrhGg8k541Y/phDhXyQKfN8xOqUo7tBZghUQ2mfEuS9WrT6MWyR2Mrm0AAGV0 v1LmL0AFKcjM+G50oc7Me+nMFzQ6kJ7w6wxApQuFpkhaQX1NdmoRm6t2EYME79AX uXKcTHaP6cVSwb4rMXGAQDiYZ7iy6jPj3YuF3wCxoKYms4FiAJDYci0aRLizNVED jDxB+L5hE087lK6ovBa28yJ4Nhrs/PovrDZRH5+SugaWJpoJOcmvDZrG115ZVDdI s2FRGKAOXd+i3YTh1CDDlqcfHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxjMLxo oizYDeRdQcnmsaeP1xUyMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf ZDFkU0JYM0lhQ0pac3huSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHLy4BmtPzgVbixY3p+vITDVvtbyA6CVTQfPmbW+iPjw8mqhmxil3pcO/X+g NcjG58OC8YZhF38/1r33oqn+iHGyfoet7EdD6yXCoQfqI2w4gEaQfT9BgPBqgydU O5zfjZCtcPDjdpSFqzxCp16U8A3KX4gr7jVaroMLmdYH6i3tNWPqrnKG0y38ulRO GPjMZKHR55x0WIQNnXSxOt7NB4IeoeDYeRDdtFgRSE3cyCheKoOfKOZh1+l3qnMV wCCyxRM3MHpAwWYEYHhCDXu9q3GgDyXuvcoUetRQ6hEjcPctuO+Se8NfLxJS+2of CGTK4EiwsaeIVsOZv/M2jyTkMA== -----END CERTIFICATE-----Generated at Mon Sep 28 00:03:31 2026 by rpki-client