$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json) Hash identifier: camNjof5r8zRljPacfN1kT/9HGzpviu5P8LlVuvetFI= Subject key identifier: E2:B6:DA:1E:9D:43:79:D8:E7:81:BE:DE:13:95:A3:A5:4B:99:F1:DD Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft Manifest number: 066D Signing time: Sun 20 Sep 2026 22:27:26 +0000 Manifest this update: Sun 20 Sep 2026 22:27:25 +0000 Manifest next update: Sun 27 Sep 2026 22:27:25 +0000 Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: d4Iz8RLi7qnK/q36MrI+IVPOB8dyBYLE3GjIOQ8mYbo=) 2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: CMPczLui+l93sBtgTu8rd32rZ3/z96G+Pg0qcS/LMRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Validity Not Before: Sep 20 22:27:25 2026 GMT Not After : Sep 27 22:27:25 2026 GMT Subject: CN=6ab05dce-869c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:b0:a7:58:28:ab:5f:f1:b1:05:d7:bd:90: 2d:0c:b6:aa:5b:8c:06:1b:e8:26:22:1c:f8:35:c8: fb:6c:e5:fb:4b:3c:4d:2d:21:72:f4:d0:c4:de:70: 43:3c:98:9a:20:24:2e:56:68:a0:c5:db:17:b0:cc: c7:02:f0:d4:28:92:13:f3:2b:c7:55:24:75:51:99: 70:3d:6e:c8:14:a1:ae:df:22:bf:f1:00:80:41:08: 60:aa:38:d8:1a:0a:71:77:f5:c2:e7:93:1b:a5:10: 73:9b:a7:88:22:01:28:68:f5:1d:d3:0f:1d:b8:68: cc:33:b2:06:dd:5d:7d:76:d7:03:4c:4a:4b:bd:f5: ff:dd:00:e3:b1:e9:0a:61:33:c2:c4:e0:39:f3:db: 86:a5:8e:9d:d0:67:32:32:98:da:e2:2f:e9:08:f4: 4e:0c:ab:cc:3d:b6:6e:bf:41:bd:6c:fa:72:52:5f: de:32:b0:bc:40:2b:af:5c:4a:55:16:4d:8d:29:7e: 37:12:98:6d:e0:e7:c0:4c:ef:66:71:4d:2c:29:2d: ea:c1:8c:8e:30:f8:cd:3d:73:c7:4b:5f:ab:b4:f6: 97:ad:95:b9:d2:85:c5:2b:9b:67:3c:3d:ca:80:6e: ff:5e:1a:ab:54:1d:c4:1c:82:33:7f:3e:10:29:1f: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B6:DA:1E:9D:43:79:D8:E7:81:BE:DE:13:95:A3:A5:4B:99:F1:DD X509v3 Authority Key Identifier: keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:59:fc:8d:9d:7d:5f:0a:f9:3e:15:ec:38:e2:b5:a6:88:fc: 57:9a:d7:dd:33:47:03:a9:07:d9:da:8b:af:c7:d7:4c:f9:53: ac:55:2c:f4:6b:4a:61:99:b7:98:48:02:28:09:a6:94:b9:10: 6b:93:9b:98:e3:6a:d3:67:ee:be:81:79:ad:cf:a8:23:f7:49: 17:d5:c2:8e:1c:60:08:6d:a4:c6:7e:24:47:10:c0:38:e8:1b: b9:ce:a8:0b:3e:08:37:81:5a:e9:90:c7:12:a7:d6:d0:af:bc: 4e:d3:b9:e0:c4:ee:17:2a:86:8f:7e:b9:24:8a:21:8a:33:e3: f8:95:1c:49:4d:30:30:ac:ea:e2:c3:fa:57:ad:44:26:4a:2a: 6a:87:6f:71:2d:5d:2f:b6:a7:40:86:54:ac:f1:63:86:43:fb: 8e:28:b3:ed:8f:0a:15:02:cd:67:1b:61:ad:d4:42:f4:09:2a: 0d:09:92:94:58:16:e5:0b:7d:d1:bc:33:2f:aa:ee:47:63:67: bb:e3:d2:8a:ec:21:b0:92:94:5a:41:d1:e4:f4:c7:91:ad:48: 7f:8c:e7:3a:d6:0a:5d:d1:f0:4c:b4:25:ee:e0:af:83:53:7b: 3e:85:56:0a:39:47:ad:ca:a4:96:92:11:ad:7f:b2:0b:ce:58: 0e:f1:bb:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyMTgxMTAvBgNVBAUTKDg1RUY0RjUyQkU2QzBEMDkzNzM4NjlBOTAwMjIzODYy ODIzM0VCRUYwHhcNMjYwOTIwMjIyNzI1WhcNMjYwOTI3MjIyNzI1WjAYMRYwFAYD VQQDEw02YWIwNWRjZS04NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jSwp1goq1/xsQXXvZAtDLaqW4wGG+gmIhz4Ncj7bOX7SzxNLSFy9NDE3nBD PJiaICQuVmigxdsXsMzHAvDUKJIT8yvHVSR1UZlwPW7IFKGu3yK/8QCAQQhgqjjY Ggpxd/XC55MbpRBzm6eIIgEoaPUd0w8duGjMM7IG3V19dtcDTEpLvfX/3QDjsekK YTPCxOA589uGpY6d0GcyMpja4i/pCPRODKvMPbZuv0G9bPpyUl/eMrC8QCuvXEpV Fk2NKX43Epht4OfATO9mcU0sKS3qwYyOMPjNPXPHS1+rtPaXrZW50oXFK5tnPD3K gG7/XhqrVB3EHIIzfz4QKR+vewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK22h6d Q3nY54G+3hOVo6VLmfHdMB8GA1UdIwQYMBaAFIXvT1K+bA0JNzhpqQAiOGKCM+vv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTIxOC9EODU3QTEzRURF QkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RRazNPR21wQUNJNFlvSXo2 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlOVBVcjVzRFFrM09HbXBBQ0k0WW9JejYtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTIxOC9EODU3QTEzRURFQkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RR azNPR21wQUNJNFlvSXo2LTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr1n8jZ19Xwr5PhXsOOK1poj8V5rX3TNHA6kH2dqLr8fXTPlTrFUs9GtKYZm3 mEgCKAmmlLkQa5ObmONq02fuvoF5rc+oI/dJF9XCjhxgCG2kxn4kRxDAOOgbuc6o Cz4IN4Fa6ZDHEqfW0K+8TtO54MTuFyqGj365JIohijPj+JUcSU0wMKzq4sP6V61E JkoqaodvcS1dL7anQIZUrPFjhkP7jiiz7Y8KFQLNZxthrdRC9AkqDQmSlFgW5Qt9 0bwzL6ruR2Nnu+PSiuwhsJKUWkHR5PTHka1If4znOtYKXdHwTLQl7uCvg1N7PoVW CjlHrcqklpIRrX+yC85YDvG7wQ== -----END CERTIFICATE-----Generated at Tue Sep 22 14:46:32 2026 by rpki-client