$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: 4ipIyC24Lecu3CqITOfbB4K89WRXEm8jgTU/s8ov8+8= Subject key identifier: 36:B4:5C:24:44:89:DA:44:3B:E8:A6:A0:A8:5D:7C:9A:8B:96:69:98 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0C9F Signing time: Tue 06 Oct 2026 18:43:49 +0000 Manifest this update: Tue 06 Oct 2026 18:43:48 +0000 Manifest next update: Tue 13 Oct 2026 18:43:48 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: 80laqWXw3WExON/4/jkhYuO/A2Xv8A3PUxMAVx2vylw=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: ahBHdBU7RHmaEg5k9uPLc0EPvyCfJjb3xG2kQztcg90=) 3: BEB7C0D0BB1C11F181CCCE6E6711F970.roa (hash: 0urKms0wScUkjrUtJaQtzJZoMAc1TfYCz7DrN/a8kv8=) 4: nytxr8dLMBbQr3j3UMGJgg_oDaI.asa (hash: sjj1Gj+oQ0s2eEHokHRUnJxX5k8FMrCUQHw4lScq1SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Oct 6 18:43:48 2026 GMT Not After : Oct 13 18:43:48 2026 GMT Subject: CN=6ac54165-7ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:25:09:c2:50:7a:c5:91:74:2d:b8:14:07: 22:5b:33:9b:6c:7f:34:80:d1:72:27:b0:9b:5d:3b: 6d:9c:5e:6e:27:3a:6a:25:74:ad:af:0d:cb:d8:67: e9:c5:7b:f1:db:e9:7b:7d:75:81:d4:d0:02:c4:67: c3:65:4b:85:5d:e9:cb:31:84:14:e9:25:fc:6b:3e: ea:c8:92:12:df:0a:f0:7c:68:35:56:5a:a7:ed:81: 44:b7:b3:f0:0b:83:e3:04:91:b0:23:99:3b:c3:14: 86:3a:23:51:e0:3c:5f:1c:ab:d0:da:48:6e:fc:3e: f6:e6:7c:08:06:f3:35:1f:b0:b6:ac:cd:96:31:2f: af:21:df:a8:cb:1e:c6:3d:d1:bc:39:c0:84:65:45: e6:72:8b:b0:52:f6:7b:e1:79:65:df:75:66:2b:fc: 00:34:6b:9f:39:e8:9a:1e:c7:3a:c8:42:a7:1b:ea: d5:8e:6f:7b:84:e0:3a:15:76:46:d4:d1:af:a7:4e: 8f:b2:c6:c7:2b:cd:22:25:4b:ec:82:97:7f:28:47: 0d:1e:de:26:76:13:fa:a4:ad:bf:83:93:7c:79:9f: d5:43:94:32:d2:42:9a:4f:24:0f:8c:15:ca:28:76: 27:76:74:db:23:4d:b7:d6:c8:a7:6e:76:88:0d:48: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B4:5C:24:44:89:DA:44:3B:E8:A6:A0:A8:5D:7C:9A:8B:96:69:98 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7d:10:c0:e8:da:06:25:2d:b0:9a:ab:12:75:19:8b:cb:37: be:3a:a2:46:b3:a8:7f:3c:07:e5:5f:01:bb:41:11:23:0a:86: 65:6f:65:12:99:d3:d8:fe:20:c8:28:e2:d5:0f:e4:c3:9e:5f: 8e:d9:c2:19:a5:c4:c9:83:07:cd:85:10:d5:fb:35:70:5c:b4: 1b:19:1b:61:e9:48:d0:a3:e9:5e:44:db:62:02:ed:04:45:e4: 8f:e3:4c:1f:3d:f3:57:a2:5a:5f:6f:74:ef:c5:15:49:e9:91: 42:54:f5:82:c8:84:7d:23:c2:ba:91:af:d9:fa:c2:c8:7f:c7: da:84:7b:98:c1:c9:cd:6b:50:bc:f8:a7:a2:da:d5:64:07:e6: 7a:9d:5b:41:1a:56:49:0d:11:02:64:61:af:8f:c0:3b:eb:10: 61:a1:cd:f8:92:6c:50:53:52:61:ce:83:b3:67:a4:62:b9:65: 9f:ba:4d:d6:5b:4d:b7:fd:cf:f3:6d:a2:53:e9:fb:5e:4d:b2: 8a:e8:52:e7:86:4a:81:36:7b:92:1c:f6:3d:4b:80:7d:5f:98: 0f:6e:b6:51:c8:59:06:54:38:7d:49:9a:25:09:67:ef:41:43: 29:17:cd:ac:7f:83:da:29:a7:c0:85:27:51:e6:61:65:95:1f: 07:04:2e:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjYxMDA2MTg0MzQ4WhcNMjYxMDEzMTg0MzQ4WjAYMRYwFAYD VQQDEw02YWM1NDE2NS03YWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6IlCcJQesWRdC24FAciWzObbH80gNFyJ7CbXTttnF5uJzpqJXStrw3L2Gfp xXvx2+l7fXWB1NACxGfDZUuFXenLMYQU6SX8az7qyJIS3wrwfGg1Vlqn7YFEt7Pw C4PjBJGwI5k7wxSGOiNR4DxfHKvQ2khu/D725nwIBvM1H7C2rM2WMS+vId+oyx7G PdG8OcCEZUXmcouwUvZ74Xll33VmK/wANGufOeiaHsc6yEKnG+rVjm97hOA6FXZG 1NGvp06PssbHK80iJUvsgpd/KEcNHt4mdhP6pK2/g5N8eZ/VQ5Qy0kKaTyQPjBXK KHYndnTbI0231sinbnaIDUiOaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDa0XCRE idpEO+imoKhdfJqLlmmYMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAX0QwOjaBiUtsJqrEnUZi8s3vjqiRrOofzwH5V8Bu0ERIwqGZW9lEpnT2P4g yCji1Q/kw55fjtnCGaXEyYMHzYUQ1fs1cFy0GxkbYelI0KPpXkTbYgLtBEXkj+NM Hz3zV6JaX29078UVSemRQlT1gsiEfSPCupGv2frCyH/H2oR7mMHJzWtQvPinotrV ZAfmep1bQRpWSQ0RAmRhr4/AO+sQYaHN+JJsUFNSYc6Ds2ekYrlln7pN1ltNt/3P 822iU+n7Xk2yiuhS54ZKgTZ7khz2PUuAfV+YD262UchZBlQ4fUmaJQln70FDKRfN rH+D2imnwIUnUeZhZZUfBwQuCQ== -----END CERTIFICATE-----Generated at Thu Oct 8 16:29:55 2026 by rpki-client