$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: qlBJ0kdrgzjjmRMNYvCkKiNyLhAL6sOKG20gUVAGUm8= Subject key identifier: 70:73:20:F7:32:70:A8:E2:10:8B:42:40:B6:A2:84:A6:20:2F:20:82 Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 361B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35D6 Signing time: Sun 20 Sep 2026 14:26:49 +0000 Manifest this update: Sun 20 Sep 2026 14:26:49 +0000 Manifest next update: Sun 27 Sep 2026 14:26:49 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: PnwCHTotrPludzrYudO5lK2veif4nA6CBhvU/QpRYao=) 2: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) 3: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) 4: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 5: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13851 (0x361b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Sep 20 14:26:49 2026 GMT Not After : Sep 27 14:26:49 2026 GMT Subject: CN=6aafed29-48fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:39:75:6e:e6:59:8e:51:c2:aa:d8:b5:46: d2:8e:71:92:7a:96:71:2c:43:fd:b1:cf:5d:ed:93: bd:50:21:e4:de:a2:71:c6:3d:b2:3b:ab:be:62:64: 17:2b:34:e4:39:59:25:bd:6f:de:bb:3f:8d:6d:45: 11:99:7c:bb:2d:81:0a:c9:f7:e3:cb:19:8e:45:1e: 9f:14:a3:0e:7a:d0:7a:67:16:b2:7f:6b:5d:fb:e3: aa:ba:c8:26:69:da:b8:10:5b:75:6e:80:b9:e7:5b: 22:c0:24:12:07:81:f7:00:fd:9e:26:22:ac:a6:ce: b1:e4:9c:e7:c5:82:7f:eb:d0:8d:99:16:fd:59:20: 5e:a2:9b:85:3c:10:c1:80:13:71:a5:61:16:81:ae: 58:ba:88:86:ff:68:d2:5e:fc:aa:c2:9c:ec:1d:de: c9:4d:16:e7:7e:21:0e:05:dc:c7:6e:6b:ad:8d:15: b2:2e:f0:b0:1f:0e:de:19:f2:6b:79:54:f9:7f:85: 45:84:d7:33:2c:e7:56:0f:8f:3b:f9:32:71:97:e5: 0f:04:44:44:ce:ce:a6:8c:32:2d:92:67:0a:97:a4: 96:a7:41:1a:36:4f:6d:ce:16:8f:33:80:4b:14:6a: dd:f6:94:1d:36:73:18:4e:24:5f:b0:80:40:5b:86: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:73:20:F7:32:70:A8:E2:10:8B:42:40:B6:A2:84:A6:20:2F:20:82 X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:9e:1a:8a:e2:36:c1:33:e3:6f:74:31:c5:f1:88:30:10:76: 40:56:01:36:af:a8:d0:6e:fb:1f:be:11:c5:e6:f8:18:69:c3: 65:71:62:75:34:08:d2:71:fd:ed:3e:97:80:7b:65:0a:4f:1c: 7c:3a:27:21:33:0b:22:89:31:2b:f0:d2:9b:d5:00:31:63:4c: 13:e8:ee:39:19:cc:a1:d9:2a:5f:47:50:99:38:1e:9e:69:f4: 72:69:7d:cd:f3:94:8d:76:47:c8:19:8b:19:ce:8a:43:52:67: 49:2a:39:cb:d4:93:43:e9:c6:45:cb:03:68:09:24:0a:b4:a7: 11:95:a3:fb:d3:ee:7b:06:b3:3f:a7:07:c2:9d:a2:cc:a2:60: cd:cb:c9:1c:1d:49:d7:04:85:c7:5f:dc:f7:3d:c6:fd:39:50: c8:5e:e6:47:a4:37:06:a1:bf:01:f6:e5:2e:c5:b8:77:c3:73: 95:57:76:00:de:b3:5a:70:72:d4:2e:b3:1b:4a:5e:d9:d2:36: 8f:22:33:17:42:5a:ac:25:60:2c:be:9b:f7:ec:cc:21:21:35: 9f:d8:0f:aa:85:ea:87:01:89:7f:09:60:10:b2:b3:a1:2d:d5: 3d:18:66:ec:3c:55:e2:15:40:fd:0c:81:13:91:f8:36:4b:80: c0:c3:9a:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYwOTIwMTQyNjQ5WhcNMjYwOTI3MTQyNjQ5WjAYMRYwFAYD VQQDEw02YWFmZWQyOS00OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBU5dW7mWY5RwqrYtUbSjnGSepZxLEP9sc9d7ZO9UCHk3qJxxj2yO6u+YmQX KzTkOVklvW/euz+NbUURmXy7LYEKyffjyxmORR6fFKMOetB6Zxayf2td++Oqusgm adq4EFt1boC551siwCQSB4H3AP2eJiKsps6x5JznxYJ/69CNmRb9WSBeopuFPBDB gBNxpWEWga5YuoiG/2jSXvyqwpzsHd7JTRbnfiEOBdzHbmutjRWyLvCwHw7eGfJr eVT5f4VFhNczLOdWD487+TJxl+UPBEREzs6mjDItkmcKl6SWp0EaNk9tzhaPM4BL FGrd9pQdNnMYTiRfsIBAW4Y+SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBzIPcy cKjiEItCQLaihKYgLyCCMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxp4aiuI2wTPjb3QxxfGIMBB2QFYBNq+o0G77H74Rxeb4GGnDZXFidTQI0nH9 7T6XgHtlCk8cfDonITMLIokxK/DSm9UAMWNME+juORnModkqX0dQmTgenmn0cml9 zfOUjXZHyBmLGc6KQ1JnSSo5y9STQ+nGRcsDaAkkCrSnEZWj+9PuewazP6cHwp2i zKJgzcvJHB1J1wSFx1/c9z3G/TlQyF7mR6Q3BqG/AfblLsW4d8NzlVd2AN6zWnBy 1C6zG0pe2dI2jyIzF0JarCVgLL6b9+zMISE1n9gPqoXqhwGJfwlgELKzoS3VPRhm 7DxV4hVA/QyBE5H4NkuAwMOaiQ== -----END CERTIFICATE-----Generated at Mon Sep 21 03:24:37 2026 by rpki-client