$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: YrCciSH5m4RcwoaIb5POX18W/ZlRu7VnXYb/5+r4R8s= Subject key identifier: 71:C5:CC:87:B9:DE:C4:EA:5A:00:5C:CD:25:A9:E8:94:16:7F:FE:FB Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: 021F Signing time: Mon 21 Sep 2026 02:58:14 +0000 Manifest this update: Mon 21 Sep 2026 02:58:14 +0000 Manifest next update: Mon 28 Sep 2026 02:58:14 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: lkuHU4Fx9OAdQyEkY8dT9AQW3Xdvtf8oeNl3jbxXMFA=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: 33hf+OZOIdsgTL8jr30aVQitqwm7D2R6ndR/vMRIX9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: Sep 21 02:58:14 2026 GMT Not After : Sep 28 02:58:14 2026 GMT Subject: CN=6ab09d46-5ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:a9:a9:5d:81:5a:ab:3b:cb:c0:48:ff:92: e5:a9:d2:42:da:2b:55:27:0f:5b:e9:ed:60:b8:c9: 61:0e:49:37:18:bc:e0:44:54:14:fb:67:b1:c2:41: 0b:09:78:f2:06:3a:1e:39:6b:68:83:c8:de:12:dc: de:0f:4a:9f:99:41:0b:34:ff:af:e6:9d:4b:9d:6e: a0:50:97:d8:71:40:1b:6c:de:25:f1:39:74:8a:97: 28:9e:c7:a5:1d:ab:59:e6:eb:18:ad:7b:d1:a3:21: 18:09:fc:59:c5:bc:0c:d6:c1:db:79:3a:6e:49:44: 08:c5:d5:29:27:98:30:8e:6a:76:a8:e2:90:86:90: fe:c4:fc:e4:b4:97:d9:b9:52:74:b4:d9:90:0a:97: 8b:84:c4:85:b2:43:40:a0:f5:fe:ce:f9:45:55:08: 45:7c:18:49:fc:fd:17:f2:6a:42:18:ac:75:0f:16: e7:a5:66:89:3f:9f:22:3a:1a:a5:43:8a:6b:42:46: bb:fe:d2:5c:60:e6:7e:27:66:6c:08:77:d1:6f:b5: 79:8b:66:f8:e8:71:3a:a7:2c:dc:42:a3:a3:64:39: 7a:27:ff:6a:c9:b8:15:d1:a6:a9:99:dd:7b:da:92: 13:d9:f3:fa:b8:f0:5c:ed:1d:86:2c:c4:30:15:e7: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C5:CC:87:B9:DE:C4:EA:5A:00:5C:CD:25:A9:E8:94:16:7F:FE:FB X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:66:3c:63:52:a7:f8:ed:cd:ba:09:27:33:e5:33:c0:6c: 15:b4:6a:49:e4:d2:28:c6:b0:9e:97:f6:78:b8:ca:f8:a6:ff: 01:45:77:fd:47:9f:3e:86:c0:5b:37:78:ed:69:6a:b3:37:6a: 6e:9d:d5:5f:53:fe:37:1b:c4:c2:96:9a:0b:ed:95:c5:7e:64: 26:67:97:9f:17:de:ca:ce:20:6e:fc:04:6a:3e:98:fd:03:3f: 5b:6c:69:28:cf:ac:3b:bc:28:b0:5e:5b:cf:4e:c8:36:b7:0b: bf:12:da:dd:91:70:50:9a:24:70:01:c5:0d:d9:40:ee:a0:95: bb:36:e0:36:09:85:53:12:89:a4:92:1b:81:1e:40:4a:d2:c3: ed:2a:21:e8:00:9e:be:d9:79:38:22:cd:e1:c1:68:c0:77:ae: 4a:63:52:d6:35:ab:26:7e:d0:a6:c2:b6:15:16:4d:6b:f1:f0: b6:89:8f:3e:cf:fe:d8:a3:06:14:ec:c0:f4:a6:8c:7a:f1:73: cd:4a:e6:7c:24:9f:ae:fb:c5:55:d9:9d:b8:0e:54:62:60:7c: 84:26:3f:08:c7:34:7d:78:8d:09:ec:af:96:10:eb:72:bf:32: a0:43:80:84:07:4b:5a:1a:2e:a0:0f:04:65:5b:07:dd:a7:fc: d0:c5:5f:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw QjYxMzgyMEQwHhcNMjYwOTIxMDI1ODE0WhcNMjYwOTI4MDI1ODE0WjAYMRYwFAYD VQQDEw02YWIwOWQ0Ni01ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMGpqV2BWqs7y8BI/5LlqdJC2itVJw9b6e1guMlhDkk3GLzgRFQU+2exwkEL CXjyBjoeOWtog8jeEtzeD0qfmUELNP+v5p1LnW6gUJfYcUAbbN4l8Tl0ipconsel HatZ5usYrXvRoyEYCfxZxbwM1sHbeTpuSUQIxdUpJ5gwjmp2qOKQhpD+xPzktJfZ uVJ0tNmQCpeLhMSFskNAoPX+zvlFVQhFfBhJ/P0X8mpCGKx1DxbnpWaJP58iOhql Q4prQka7/tJcYOZ+J2ZsCHfRb7V5i2b46HE6pyzcQqOjZDl6J/9qybgV0aapmd17 2pIT2fP6uPBc7R2GLMQwFedONwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHFzIe5 3sTqWgBczSWp6JQWf/77MB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4 NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z Y0stRUJWZV9RVm9MWVRnZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhh5mPGNSp/jtzboJJzPlM8BsFbRqSeTSKMawnpf2eLjK+Kb/AUV3/UefPobA Wzd47Wlqszdqbp3VX1P+NxvEwpaaC+2VxX5kJmeXnxfeys4gbvwEaj6Y/QM/W2xp KM+sO7wosF5bz07INrcLvxLa3ZFwUJokcAHFDdlA7qCVuzbgNgmFUxKJpJIbgR5A StLD7Soh6ACevtl5OCLN4cFowHeuSmNS1jWrJn7QpsK2FRZNa/HwtomPPs/+2KMG FOzA9KaMevFzzUrmfCSfrvvFVdmduA5UYmB8hCY/CMc0fXiNCeyvlhDrcr8yoEOA hAdLWhouoA8EZVsH3af80MVftQ== -----END CERTIFICATE-----Generated at Tue Sep 22 07:21:31 2026 by rpki-client