$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: WJaoImBggQPZHNGe7dGVL0BMohuPBxYCiCpA8Akwp3Y= Subject key identifier: 1E:C1:EF:06:1A:07:4D:D0:E6:F4:A9:C3:B6:95:EF:3F:AC:BF:7E:51 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 0279 Signing time: Mon 21 Sep 2026 02:02:15 +0000 Manifest this update: Mon 21 Sep 2026 02:02:15 +0000 Manifest next update: Mon 28 Sep 2026 02:02:15 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: mewDp5I5Ga306RaJAsQj6Dq4q3LvcNmFkVS3IOHSOJI=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: 2qm8xc9Dh6l4WZzdxSvQg3OKbuj7hzzJ5qxge8M4c/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Sep 21 02:02:15 2026 GMT Not After : Sep 28 02:02:15 2026 GMT Subject: CN=6ab09027-6ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:be:c1:4a:ee:05:3b:97:48:cb:22:c1:a4: 83:b5:18:e6:22:2e:b4:0c:57:af:dd:50:0c:08:fa: 0b:58:da:8b:01:fd:61:7a:14:a3:e9:28:0b:18:b5: 75:ae:6f:00:79:67:29:b3:d4:8d:50:11:1e:70:7d: b6:5f:38:b9:18:e5:67:86:37:c2:26:2e:a4:b1:7d: af:cd:3e:14:c3:ca:66:7b:2f:f8:e6:d2:27:ba:54: 53:ed:4f:4a:3c:0d:13:86:da:0d:eb:9c:42:c5:a1: e4:be:cd:46:e5:af:4d:c9:e3:97:ca:bf:36:27:9b: 1f:d6:1c:9d:c9:d6:12:89:51:c4:8e:59:b5:01:ba: 82:ac:96:e6:36:6a:1d:7c:af:40:2c:9e:30:28:c4: 58:ea:fc:8c:f1:6d:94:a0:74:81:ad:50:de:75:d2: e6:0c:b3:5a:c3:6a:ff:8b:59:da:b2:49:0b:b0:86: b0:08:0f:ae:5d:47:66:fa:06:6c:b8:57:30:e9:bd: 3a:f2:fd:33:64:38:a3:be:1a:c5:ee:bf:ea:c0:e6: 68:66:66:09:df:8e:d1:61:5f:4b:1b:71:ce:ab:3c: ff:07:e4:2b:da:f4:c1:24:42:a1:57:48:df:7b:fe: 6e:14:6b:3b:bc:3b:ae:a3:44:15:c4:fc:07:5a:a4: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C1:EF:06:1A:07:4D:D0:E6:F4:A9:C3:B6:95:EF:3F:AC:BF:7E:51 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:b4:bd:9c:a2:ac:82:cf:85:86:f3:5e:fa:f0:7b:72:9d: e2:e4:ac:0e:ee:cc:55:1f:59:4f:74:69:3a:a0:bd:e0:3f:8b: c2:81:26:99:81:aa:50:5c:a3:23:10:7e:7e:d6:39:66:34:1b: 91:d7:2c:50:60:3a:02:16:34:51:e9:bf:71:13:6d:24:df:e4: 69:43:fe:de:09:b8:8a:f5:07:58:86:51:23:c4:f0:cb:2e:a4: a7:10:b1:75:cd:00:7e:26:5b:97:d2:e7:88:19:5d:a6:10:23: c5:d6:0f:a2:ea:60:34:58:90:11:2c:f3:c8:29:b5:16:58:da: c4:23:eb:00:8d:a2:ec:d2:c7:e3:19:34:b6:68:2d:68:cb:5a: 60:4b:36:e0:04:5b:b3:b3:67:9c:9a:4e:85:4a:67:8a:5d:0f: 42:72:5b:08:7b:59:05:dc:e1:68:fe:eb:35:f6:09:cf:fb:70: 73:da:2b:28:69:8b:70:82:a8:15:49:f4:7d:98:b7:17:b9:c2: 65:21:95:b0:a1:a3:d1:61:bd:97:d6:00:ad:ac:6e:c4:6c:a2: c0:dc:26:bd:63:a4:5a:a7:99:f2:a9:8f:41:9f:b6:5e:c1:e5: 71:e7:17:97:7a:b8:db:22:f1:6a:75:fb:96:44:bf:46:78:b5: 9a:f7:ad:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwOTIxMDIwMjE1WhcNMjYwOTI4MDIwMjE1WjAYMRYwFAYD VQQDEw02YWIwOTAyNy02Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAki++wUruBTuXSMsiwaSDtRjmIi60DFev3VAMCPoLWNqLAf1hehSj6SgLGLV1 rm8AeWcps9SNUBEecH22Xzi5GOVnhjfCJi6ksX2vzT4Uw8pmey/45tInulRT7U9K PA0ThtoN65xCxaHkvs1G5a9NyeOXyr82J5sf1hydydYSiVHEjlm1AbqCrJbmNmod fK9ALJ4wKMRY6vyM8W2UoHSBrVDeddLmDLNaw2r/i1naskkLsIawCA+uXUdm+gZs uFcw6b068v0zZDijvhrF7r/qwOZoZmYJ347RYV9LG3HOqzz/B+Qr2vTBJEKhV0jf e/5uFGs7vDuuo0QVxPwHWqTXwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7B7wYa B03Q5vSpw7aV7z+sv35RMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC060vZyirILPhYbzXvrwe3Kd4uSsDu7MVR9ZT3RpOqC94D+LwoEmmYGqUFyj IxB+ftY5ZjQbkdcsUGA6AhY0Uem/cRNtJN/kaUP+3gm4ivUHWIZRI8Twyy6kpxCx dc0AfiZbl9LniBldphAjxdYPoupgNFiQESzzyCm1FljaxCPrAI2i7NLH4xk0tmgt aMtaYEs24ARbs7NnnJpOhUpnil0PQnJbCHtZBdzhaP7rNfYJz/twc9orKGmLcIKo FUn0fZi3F7nCZSGVsKGj0WG9l9YAraxuxGyiwNwmvWOkWqeZ8qmPQZ+2XsHlcecX l3q42yLxanX7lkS/Rni1mvetYQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:58:42 2026 by rpki-client