$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft File: ChYfF3ryrIp11Br-R61A0quRh8o.mft (raw, json) Hash identifier: 8p/ZHNXA7J4uBSSusIZz4tVu7J1jWkCBYwc0MQXjXhc= Subject key identifier: 4F:2A:F2:4E:6B:C0:01:8E:B2:FB:54:5B:6D:8A:D4:37:E1:B1:D3:18 Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft Manifest number: 02D3 Signing time: Mon 21 Sep 2026 01:18:59 +0000 Manifest this update: Mon 21 Sep 2026 01:18:59 +0000 Manifest next update: Mon 28 Sep 2026 01:18:59 +0000 Files and hashes: 1: ChYfF3ryrIp11Br-R61A0quRh8o.crl (hash: Wc51du6Yp93PJ3Pp9pE7aoyeDPT1+0SG2/gx7dj11W8=) 2: 1376B9341FAE11F0B3E41E84C4F9AE02.roa (hash: PtDZ91mnT8EbY3+b/UvFfpQljI6ctCClP32Mn4w89n8=) 3: 7817D2327A5C11EDA0156D76C4F9AE02.roa (hash: Rq+tZUOjeaItK065Mwn6s2PgGSWpFi22osco/w96fYU=) 4: 130A89761FAE11F0B3E41E84C4F9AE02.roa (hash: D/XxgpTmAqVDQH9jHYni1JxMUh1+GB1xdzs9QThZoNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Validity Not Before: Sep 21 01:18:59 2026 GMT Not After : Sep 28 01:18:59 2026 GMT Subject: CN=6ab08603-29ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:b3:b0:aa:88:44:0b:b9:bc:39:40:18:7e: 27:e4:7a:b4:f2:3e:36:f2:f6:2a:ff:0f:37:5d:13: 34:6f:eb:fd:30:45:95:a1:2b:ff:b5:8f:d5:3c:ff: b0:97:81:98:fd:b9:0c:6c:48:27:03:9e:bc:72:c5: a1:53:40:cf:f5:9c:69:e2:18:fe:b6:72:e0:2f:80: d2:5e:86:0b:fd:86:3e:a4:a1:6e:af:be:9e:ab:64: 4e:f4:b2:a7:bc:68:ec:2b:7a:44:7d:e2:12:7a:47: 56:72:5a:f5:33:d6:9f:7d:f7:c1:08:7a:d5:8e:d3: 26:0c:45:35:79:b4:47:0d:dd:3a:8e:05:9a:4e:68: c8:53:49:b9:8e:da:2e:a1:10:b1:a3:09:40:b5:f4: 53:b5:0c:24:9c:74:c4:99:53:8d:43:73:95:78:fa: fc:7e:5c:e0:b2:7b:ce:29:6d:97:40:92:49:c1:0b: 3a:b1:d8:a8:87:68:e7:9c:3b:6f:7c:7c:d4:cc:55: c9:0a:fb:be:b6:f3:4f:4b:cf:5e:ae:68:da:99:2f: ff:6f:a1:44:aa:a3:35:a4:35:c3:ad:25:20:fb:f8: c5:34:e5:0e:15:be:a1:d8:11:19:ae:38:db:98:e3: a4:f7:76:fd:b3:bb:61:99:8c:c6:d4:af:0b:55:6b: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:F2:4E:6B:C0:01:8E:B2:FB:54:5B:6D:8A:D4:37:E1:B1:D3:18 X509v3 Authority Key Identifier: keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2f:fb:6e:68:57:ab:c0:ec:1b:4e:5b:1e:28:9c:80:cd:8c: c8:56:5f:dc:31:5a:1e:f8:af:03:cf:07:86:39:cd:70:9a:38: 56:c0:51:67:0f:97:50:22:76:98:f1:d0:e2:b2:f9:db:0a:f4: 86:aa:4d:20:22:2c:f8:ef:7c:48:79:f8:f0:73:47:1b:8b:0e: 8d:8b:0c:39:8c:17:35:40:07:52:42:e2:65:de:8a:de:92:33: 64:4c:89:dd:17:55:e3:f6:99:43:26:a6:43:17:8f:1a:b8:a2: c4:b4:fa:cb:2f:b1:83:fa:40:13:a2:02:79:ec:c2:5a:8c:79: 23:f1:d0:0d:88:1b:26:d9:ca:73:32:d8:06:32:a1:14:fa:c0: 54:01:f6:90:78:f1:68:ce:35:1e:d1:17:b9:ce:c4:45:85:bb: 19:f6:19:67:a0:a1:87:3c:85:f8:8a:50:2f:32:0e:a3:3e:9d: 59:18:27:ac:a6:c9:2e:8e:d5:20:0a:03:aa:ef:b9:e7:52:8b: 08:ae:98:0d:c7:73:cb:47:57:d4:28:e8:ca:cc:92:58:4f:af: bc:79:67:fe:b0:d4:3e:b4:2d:51:5d:b9:3b:78:f2:37:a5:95: f6:bb:11:9d:34:aa:ac:51:07:ae:46:ce:a4:d1:19:a9:17:ae: 58:88:3d:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy QUI5MTg3Q0EwHhcNMjYwOTIxMDExODU5WhcNMjYwOTI4MDExODU5WjAYMRYwFAYD VQQDEw02YWIwODYwMy0yOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM2zsKqIRAu5vDlAGH4n5Hq08j428vYq/w83XRM0b+v9MEWVoSv/tY/VPP+w l4GY/bkMbEgnA568csWhU0DP9Zxp4hj+tnLgL4DSXoYL/YY+pKFur76eq2RO9LKn vGjsK3pEfeISekdWclr1M9affffBCHrVjtMmDEU1ebRHDd06jgWaTmjIU0m5jtou oRCxowlAtfRTtQwknHTEmVONQ3OVePr8flzgsnvOKW2XQJJJwQs6sdioh2jnnDtv fHzUzFXJCvu+tvNPS89ermjamS//b6FEqqM1pDXDrSUg+/jFNOUOFb6h2BEZrjjb mOOk93b9s7thmYzG1K8LVWsYnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8q8k5r wAGOsvtUW22K1DfhsdMYMB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8zNjVCQ0NFQzdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJ cDExQnItUjYxQTBxdVJoOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfi/7bmhXq8DsG05bHiicgM2MyFZf3DFaHvivA88HhjnNcJo4VsBRZw+XUCJ2 mPHQ4rL52wr0hqpNICIs+O98SHn48HNHG4sOjYsMOYwXNUAHUkLiZd6K3pIzZEyJ 3RdV4/aZQyamQxePGriixLT6yy+xg/pAE6ICeezCWox5I/HQDYgbJtnKczLYBjKh FPrAVAH2kHjxaM41HtEXuc7ERYW7GfYZZ6ChhzyF+IpQLzIOoz6dWRgnrKbJLo7V IAoDqu+551KLCK6YDcdzy0dX1CjoysySWE+vvHln/rDUPrQtUV25O3jyN6WV9rsR nTSqrFEHrkbOpNEZqReuWIg9rA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:42:33 2026 by rpki-client