$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json) Hash identifier: zLzz4wIC5113U6GgYxtWrAxbZoZsTsZ2/mX3zNWUBFc= Subject key identifier: B9:B1:7B:0B:BB:37:07:82:FB:11:8C:49:4F:FF:98:51:B3:8E:6E:D5 Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft Manifest number: 0458 Signing time: Sun 20 Sep 2026 23:58:34 +0000 Manifest this update: Sun 20 Sep 2026 23:58:33 +0000 Manifest next update: Sun 27 Sep 2026 23:58:33 +0000 Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: R4QMjGRENUny/KAGgMtfI6t1oaZIurxj/vK/odq+PJc=) 2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: gYFwC5k2adNiGUC8mTnrPd2F0ktvtrVBLWYeACoVYqU=) 3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: kkADNHMGho1cJcxgujF7FqwJofNaLhAL0T7zwMKpQTE=) 4: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: IqecsrYsQpIp/5eCM+4hpeu8TBUj8KVmWEPSTo60jis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Validity Not Before: Sep 20 23:58:33 2026 GMT Not After : Sep 27 23:58:33 2026 GMT Subject: CN=6ab07329-b4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:07:bf:78:0b:f4:10:a2:8c:85:b2:66:2f: 3d:2b:f5:26:75:9e:97:f8:3f:ea:ac:a1:6d:e2:c0: 41:07:f2:f7:6b:4f:a1:5e:3a:f9:6a:fc:38:a5:21: 9a:17:7f:9c:41:34:bf:0c:8f:b0:c0:66:9a:b8:f2: 1d:e7:53:43:26:5c:ec:07:2e:17:d6:6a:03:29:2d: ff:f9:ba:19:4b:73:25:a9:14:2c:b7:06:d7:60:8f: 0c:76:bb:e5:90:c4:ff:b4:90:ae:b5:7a:b7:5d:93: b7:9d:d4:0b:a0:55:10:31:08:e3:7e:fa:5e:74:f5: 0b:6e:b4:af:2c:bc:5f:bb:cb:0a:8b:4c:30:75:be: 1e:b2:06:34:f2:c2:de:08:93:68:24:d1:51:cd:82: b3:cb:5a:48:ab:58:ba:bf:b2:34:ae:36:8d:47:ce: da:33:c9:cf:d6:9f:c2:6b:75:4b:1c:e8:5f:c2:dc: 98:07:cd:04:19:35:a8:15:4c:a8:ab:cd:ae:fa:8d: c9:78:8a:6c:3f:93:33:50:02:69:73:57:91:d8:ce: 6d:da:42:e4:ab:72:fa:b2:b8:78:c9:b5:d6:22:17: 53:e5:91:98:1f:cf:0c:04:f5:2d:ba:cf:a5:8b:9d: 52:64:f0:76:fc:c6:f6:b8:4e:de:25:41:50:ad:b5: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B1:7B:0B:BB:37:07:82:FB:11:8C:49:4F:FF:98:51:B3:8E:6E:D5 X509v3 Authority Key Identifier: keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:48:be:f3:dc:68:08:d5:45:10:4e:91:2c:16:a7:e4:f2:bc: 5d:b2:ac:dd:13:07:af:10:da:6f:17:6d:93:ed:b4:ef:36:7c: d6:43:d6:30:94:eb:a6:b7:bc:ee:1b:13:4c:f5:ad:f4:b9:d3: 12:5e:db:06:5a:14:7d:87:7d:3d:66:5f:c5:68:32:ed:47:cc: a8:d6:6d:e4:68:0d:01:aa:62:9f:4e:4a:7d:83:68:b3:c2:71: c5:07:ed:8b:12:06:b2:cb:2b:06:4e:ce:2a:2c:7a:81:65:b5: 74:41:f6:73:af:28:fc:f6:4b:02:c6:8a:76:ff:6c:c2:26:2a: b8:ca:ba:b4:ab:5f:4e:89:13:25:06:03:db:9e:69:4c:c3:19: 5f:ab:c0:93:28:b4:ee:2c:2a:aa:78:c4:56:30:b8:92:6f:71: 4f:bc:7d:08:29:7b:f5:f6:b1:ec:c9:74:00:82:c9:10:22:53: 85:41:d9:f0:0b:7b:12:3f:01:fc:b9:f1:25:2e:6b:9a:fb:33: 6f:98:66:f5:f5:33:50:23:25:a8:4a:12:51:69:ba:ac:33:5f: 42:04:3d:06:f3:73:bf:c8:02:8e:a8:a2:9f:e9:e7:e2:90:d2: bd:85:9f:02:9a:6e:79:18:b4:2a:20:55:e3:ec:13:f8:7e:2c: b2:ce:c1:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1 NTIwRUM0OTQwHhcNMjYwOTIwMjM1ODMzWhcNMjYwOTI3MjM1ODMzWjAYMRYwFAYD VQQDEw02YWIwNzMyOS1iNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFoHv3gL9BCijIWyZi89K/UmdZ6X+D/qrKFt4sBBB/L3a0+hXjr5avw4pSGa F3+cQTS/DI+wwGaauPId51NDJlzsBy4X1moDKS3/+boZS3MlqRQstwbXYI8Mdrvl kMT/tJCutXq3XZO3ndQLoFUQMQjjfvpedPULbrSvLLxfu8sKi0wwdb4esgY08sLe CJNoJNFRzYKzy1pIq1i6v7I0rjaNR87aM8nP1p/Ca3VLHOhfwtyYB80EGTWoFUyo q82u+o3JeIpsP5MzUAJpc1eR2M5t2kLkq3L6srh4ybXWIhdT5ZGYH88MBPUtus+l i51SZPB2/Mb2uE7eJUFQrbWAwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmxewu7 NweC+xGMSU//mFGzjm7VMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk dGY5cm53Vy1MVlJWSU94SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApki+89xoCNVFEE6RLBan5PK8XbKs3RMHrxDabxdtk+207zZ81kPWMJTrpre8 7hsTTPWt9LnTEl7bBloUfYd9PWZfxWgy7UfMqNZt5GgNAapin05KfYNos8JxxQft ixIGsssrBk7OKix6gWW1dEH2c68o/PZLAsaKdv9swiYquMq6tKtfTokTJQYD255p TMMZX6vAkyi07iwqqnjEVjC4km9xT7x9CCl79fax7Ml0AILJECJThUHZ8At7Ej8B /LnxJS5rmvszb5hm9fUzUCMlqEoSUWm6rDNfQgQ9BvNzv8gCjqiin+nn4pDSvYWf AppueRi0KiBV4+wT+H4sss7BBA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:19:10 2026 by rpki-client