$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: MtxvxCYEknjZ6sK2gGCBSQP9eAIpouckIKXa3ovYupQ= Subject key identifier: 7D:74:0D:86:85:11:60:51:65:FA:C9:A1:D0:68:FE:A8:1B:0F:42:04 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01F2 Signing time: Sun 11 Oct 2026 04:06:54 +0000 Manifest this update: Sun 11 Oct 2026 04:06:53 +0000 Manifest next update: Sun 18 Oct 2026 04:06:53 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: fLozmPInxJtXbPw2XiN7uqqgeM22Xr3XAy9C30UBDG8=) 2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=) 3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Oct 11 04:06:53 2026 GMT Not After : Oct 18 04:06:53 2026 GMT Subject: CN=6acb0b5d-581c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:4c:27:5f:89:6b:ae:2d:e3:2f:90:4b:80: f5:51:6b:4c:e2:60:ff:93:3c:e9:cc:49:65:7c:f9: b7:95:f3:e9:75:69:d4:3e:c5:9b:dd:04:6a:65:ed: 1b:42:47:56:66:52:2b:45:0c:c3:02:20:f4:63:1a: 14:d5:c3:c8:ed:0a:b6:5d:06:3d:0d:23:63:43:cb: 37:6c:e1:c4:3a:fc:7b:bb:ad:f5:08:28:44:e7:3c: 94:73:37:92:70:be:6a:fd:74:54:9c:4e:aa:7e:63: 69:34:5a:87:9a:e7:07:f0:84:21:4f:b3:66:76:e1: a2:47:68:a3:21:20:2a:b7:d4:f4:05:4e:2d:e4:49: e7:3f:68:76:73:82:66:3b:99:34:5d:da:77:ce:33: 24:6b:2b:6f:b2:4a:17:8d:a5:e5:e8:12:16:b7:c2: 33:6d:24:bf:6b:72:8b:61:4e:5d:43:2b:ae:e3:85: c9:e4:90:d3:0f:c5:37:9e:27:d0:a1:b0:a8:83:af: 14:70:08:b7:0c:68:b7:e9:28:8a:3c:41:f9:f3:c0: 55:7b:98:9d:22:75:25:da:9b:da:be:40:2e:ff:56: 08:7a:b4:3e:65:57:a8:2f:10:3d:94:de:fa:31:2d: c1:a4:25:3e:73:47:ce:d3:7e:46:74:80:f0:65:d7: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:74:0D:86:85:11:60:51:65:FA:C9:A1:D0:68:FE:A8:1B:0F:42:04 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:66:45:bd:99:e0:94:17:23:3a:7c:63:6e:44:92:02:e5:df: d6:f0:dd:f4:11:be:1a:ca:8d:10:ec:6b:bd:55:fc:cd:c0:27: 39:13:67:6c:a4:d9:c5:81:5e:6b:0d:36:e7:f1:b5:02:93:ec: d9:7a:1e:84:76:d6:85:af:31:55:db:be:75:ec:9a:9d:1e:80: da:a2:38:ed:e6:6e:3c:ad:bb:51:21:a4:72:e2:e8:11:f1:ca: 04:00:3f:1b:d4:ac:90:b6:4b:61:83:cd:f5:c9:06:f9:00:14: 3e:82:8a:f6:04:38:09:fc:0a:03:42:81:1b:09:c5:db:cf:47: 19:fd:02:9b:5a:b1:af:8a:78:df:ac:bd:c4:ec:12:98:09:4e: ad:ac:2c:f8:6e:f7:90:03:c2:61:cc:e8:cc:e2:d7:c4:ff:9c: f6:00:af:ee:8b:9a:77:8b:a6:32:1f:d7:d9:21:57:77:d1:b0: 4f:d8:ec:61:b3:46:d9:13:65:60:e6:4c:55:85:df:28:dd:53: ca:1a:a9:e2:ef:5c:19:82:6a:96:d7:85:f1:79:84:36:ec:bc: e0:94:97:2d:2f:48:0f:1f:aa:84:b1:8f:28:a8:bf:d1:3c:5e: e0:3f:58:79:b2:f2:a3:57:4d:3d:95:de:68:33:7d:35:71:18: 11:e9:f8:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYxMDExMDQwNjUzWhcNMjYxMDE4MDQwNjUzWjAYMRYwFAYD VQQDEw02YWNiMGI1ZC01ODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHpMJ1+Ja64t4y+QS4D1UWtM4mD/kzzpzEllfPm3lfPpdWnUPsWb3QRqZe0b QkdWZlIrRQzDAiD0YxoU1cPI7Qq2XQY9DSNjQ8s3bOHEOvx7u631CChE5zyUczeS cL5q/XRUnE6qfmNpNFqHmucH8IQhT7NmduGiR2ijISAqt9T0BU4t5EnnP2h2c4Jm O5k0Xdp3zjMkaytvskoXjaXl6BIWt8IzbSS/a3KLYU5dQyuu44XJ5JDTD8U3nifQ obCog68UcAi3DGi36SiKPEH588BVe5idInUl2pvavkAu/1YIerQ+ZVeoLxA9lN76 MS3BpCU+c0fO035GdIDwZdevHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH10DYaF EWBRZfrJodBo/qgbD0IEMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbGZFvZnglBcjOnxjbkSSAuXf1vDd9BG+GsqNEOxrvVX8zcAnORNnbKTZxYFe aw025/G1ApPs2XoehHbWha8xVdu+deyanR6A2qI47eZuPK27USGkcuLoEfHKBAA/ G9SskLZLYYPN9ckG+QAUPoKK9gQ4CfwKA0KBGwnF289HGf0Cm1qxr4p436y9xOwS mAlOraws+G73kAPCYczozOLXxP+c9gCv7ouad4umMh/X2SFXd9GwT9jsYbNG2RNl YOZMVYXfKN1Tyhqp4u9cGYJqlteF8XmENuy84JSXLS9IDx+qhLGPKKi/0Txe4D9Y ebLyo1dNPZXeaDN9NXEYEen4nA== -----END CERTIFICATE-----Generated at Mon Oct 12 19:54:40 2026 by rpki-client