$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft File: _whTCVKXG6BlIktSH1ZWO20hJO0.mft (raw, json) Hash identifier: SgclxOBkFL7CEssAwvx1Q1fjcdfO4ClGywglxP7A8m0= Subject key identifier: 1D:AC:3E:2E:E7:7C:8C:8C:73:1F:B8:70:CB:8B:2F:17:E9:80:A7:72 Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED Certificate serial: 0DEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft Manifest number: 0DE1 Signing time: Sun 20 Sep 2026 17:49:57 +0000 Manifest this update: Sun 20 Sep 2026 17:49:57 +0000 Manifest next update: Sun 27 Sep 2026 17:49:57 +0000 Files and hashes: 1: _whTCVKXG6BlIktSH1ZWO20hJO0.crl (hash: eeNOL5XrJLtVlTOygcrfA2VYA+5U/SM31FMVg2noT4Q=) 2: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (hash: n4Sr8XQlMSqL6gzDWm/TDckqQSOFH1CNlIw47oAhdDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED Validity Not Before: Sep 20 17:49:57 2026 GMT Not After : Sep 27 17:49:57 2026 GMT Subject: CN=6ab01cc5-3148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:bc:bf:0c:24:9c:84:6e:d4:9a:fc:93:f8: c9:46:2b:ab:e2:15:9c:0b:4e:25:03:46:5b:05:29: 2a:4a:bb:cb:6e:c4:86:f8:ab:51:c8:b3:34:bc:63: 44:8e:a2:5e:9a:09:9c:30:1f:b0:2a:9f:47:f8:4e: 3e:94:7e:df:4a:0c:6d:8d:6d:28:f3:94:56:a0:82: 3e:00:61:a3:c0:2f:ba:4d:a5:18:e9:7e:db:56:66: f6:93:66:eb:cb:3a:85:bc:36:6d:20:e8:7a:0d:67: db:f0:a2:88:6c:d4:96:f1:10:08:f1:25:ce:d6:dc: c2:19:fb:68:e4:07:f0:a3:90:b5:f1:91:f6:04:a0: f6:15:47:ee:16:61:a9:ee:d3:27:24:ca:e5:61:be: 42:2c:bf:f6:0a:ad:58:dc:e9:2c:d7:f1:df:94:b6: 37:93:1a:94:08:fa:1a:4f:f7:27:ee:20:ae:e6:cd: 7e:58:bd:31:5f:12:49:33:51:34:c7:6c:d4:d0:16: d7:8b:11:37:58:ec:de:1b:c1:48:4b:88:b7:bd:48: 32:28:a0:64:90:6d:db:50:f1:7d:8a:88:1f:b4:da: e2:63:d0:51:22:16:8c:e9:5a:22:f8:ab:86:ad:00: b6:10:0a:c1:5c:ea:28:89:00:f8:30:ec:a4:a8:33: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:3E:2E:E7:7C:8C:8C:73:1F:B8:70:CB:8B:2F:17:E9:80:A7:72 X509v3 Authority Key Identifier: keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2d:58:59:c7:50:4f:32:95:5c:fd:f5:9f:73:9d:15:61:7a: 9d:26:4f:23:54:56:f4:f5:a5:e4:23:95:53:d9:5f:2a:fd:e7: d0:df:63:ca:a8:cc:b6:69:82:fc:31:3a:4d:0b:78:72:fb:93: a9:f3:a0:3c:db:fd:4e:45:36:d2:7a:4b:c4:3f:c7:76:8c:2c: b4:57:44:8b:44:c9:04:bd:7e:dd:b9:32:87:1e:b1:2d:5f:93: bc:e6:82:d7:01:1c:b3:b9:3e:ab:3b:2b:9b:5d:a6:64:5d:d6: 80:3e:47:b0:b6:d3:37:9d:cf:df:cf:78:9c:56:d3:03:e7:35: 97:09:db:6a:14:1a:ec:78:8b:b1:d2:3b:a2:1b:e6:d6:28:1e: fe:1e:b6:42:99:35:50:c2:94:e0:42:76:c6:63:95:f8:23:ef: 91:55:cb:57:5d:4d:be:2b:df:5b:f1:e2:f7:a8:3c:71:d6:78: a0:2f:56:24:40:ec:5e:cd:5d:a7:79:47:74:f9:6f:89:fa:af: bc:b5:a0:18:7a:89:c8:18:5a:41:ee:97:0c:6c:1e:e0:4b:d3: 57:97:21:3d:30:8b:60:33:59:60:38:6c:45:2b:30:37:14:fd: 9f:73:5d:47:b8:70:5b:8b:ad:aa:b1:c9:4a:24:a8:26:f8:af: fc:da:e2:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0NzUxMTAvBgNVBAUTKEZGMDg1MzA5NTI5NzFCQTA2NTIyNEI1MjFGNTY1NjNC NkQyMTI0RUQwHhcNMjYwOTIwMTc0OTU3WhcNMjYwOTI3MTc0OTU3WjAYMRYwFAYD VQQDEw02YWIwMWNjNS0zMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTy8vwwknIRu1Jr8k/jJRiur4hWcC04lA0ZbBSkqSrvLbsSG+KtRyLM0vGNE jqJemgmcMB+wKp9H+E4+lH7fSgxtjW0o85RWoII+AGGjwC+6TaUY6X7bVmb2k2br yzqFvDZtIOh6DWfb8KKIbNSW8RAI8SXO1tzCGfto5Afwo5C18ZH2BKD2FUfuFmGp 7tMnJMrlYb5CLL/2Cq1Y3Oks1/HflLY3kxqUCPoaT/cn7iCu5s1+WL0xXxJJM1E0 x2zU0BbXixE3WOzeG8FIS4i3vUgyKKBkkG3bUPF9iogftNriY9BRIhaM6Voi+KuG rQC2EArBXOooiQD4MOykqDNAowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2sPi7n fIyMcx+4cMuLLxfpgKdyMB8GA1UdIwQYMBaAFP8IUwlSlxugZSJLUh9WVjttISTt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ3NS9EQkZCM0VCNEU0 MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2QmxJa3RTSDFaV08yMGhK TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193aFRDVktYRzZCbElrdFNIMVpXTzIwaEpPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQ3NS9EQkZCM0VCNEU0MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2 QmxJa3RTSDFaV08yMGhKTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmi1YWcdQTzKVXP31n3OdFWF6nSZPI1RW9PWl5COVU9lfKv3n0N9jyqjMtmmC /DE6TQt4cvuTqfOgPNv9TkU20npLxD/HdowstFdEi0TJBL1+3bkyhx6xLV+TvOaC 1wEcs7k+qzsrm12mZF3WgD5HsLbTN53P3894nFbTA+c1lwnbahQa7HiLsdI7ohvm 1ige/h62Qpk1UMKU4EJ2xmOV+CPvkVXLV11NvivfW/Hi96g8cdZ4oC9WJEDsXs1d p3lHdPlvifqvvLWgGHqJyBhaQe6XDGwe4EvTV5chPTCLYDNZYDhsRSswNxT9n3Nd R7hwW4utqrHJSiSoJviv/Nriiw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:04:55 2026 by rpki-client