$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: UxVnL5GcS80TzYUQu809pLrtWC5hMzy/3qDZ4NiPqGY= Subject key identifier: 95:66:4C:39:E7:2D:D9:8E:76:7A:1D:62:AC:C4:64:E3:B5:3B:02:70 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 1195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 1177 Signing time: Wed 28 Oct 2026 17:18:10 +0000 Manifest this update: Wed 28 Oct 2026 17:18:10 +0000 Manifest next update: Wed 04 Nov 2026 17:18:10 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: iAMy7srBI8S/XHvTv4yRCfLtlRyiMsnvcyaR/h+4dFU=) 2: FC86F6E896C711F1AEEE8D0A5411F970.roa (hash: +vGOfCr2DEhlj08hRjpnXIruWDVaqxVVGeLxooBz6Tk=) 3: 9B8EF5B2ACBF11F19E9C47286511F970.roa (hash: QzkA3EztMBAZxrW2yeEzjtU9hztdqcb/aHMaxEZww9M=) 4: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: xEpgs9EW6VJ0cW2siZLFxIERKuNtIAPU67VQP3joc6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 17:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4501 (0x1195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Oct 28 17:18:10 2026 GMT Not After : Nov 4 17:18:10 2026 GMT Subject: CN=6ae22e52-912a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:ac:d5:05:7c:51:cb:07:bc:7e:82:62:af: e6:b5:48:ff:37:8e:03:2a:37:f7:29:b7:0b:a4:a8: 14:6a:77:29:68:ed:f6:4d:ed:aa:03:1a:5b:1a:65: 48:72:da:49:e9:e9:85:56:da:47:d3:4d:da:67:58: 82:ba:8f:70:68:b7:59:47:97:d8:a3:12:e1:c3:29: 2b:36:89:93:2a:5b:0b:28:38:53:81:5c:ea:b0:15: 7c:3e:42:bc:ab:39:c8:17:51:18:fb:2b:e5:db:13: b1:27:2f:45:08:5d:c8:72:48:4b:f0:fd:82:cb:62: 44:73:1a:2b:e5:4f:c4:79:28:b1:7d:2a:e7:da:d8: 90:57:c1:b6:61:66:eb:fb:73:ad:a3:20:59:e4:b7: 33:3e:5c:bb:d9:27:25:38:af:83:d8:8d:b3:e1:1f: 71:b4:e9:60:ef:58:12:4c:5a:8e:e3:7d:90:b0:b3: 01:d3:3c:e1:81:71:75:45:a3:63:5e:f5:b0:a2:3e: 5a:23:1b:4b:3e:26:a7:ed:bf:4c:88:f3:3d:ac:06: bd:65:2a:ce:93:b5:86:3d:a0:e2:fa:4a:22:33:89: 88:55:81:2a:12:0c:8d:9f:17:be:15:ab:a6:f8:30: 4b:a0:f8:c8:a5:22:25:2a:ba:8e:ed:23:ff:8a:9d: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:4C:39:E7:2D:D9:8E:76:7A:1D:62:AC:C4:64:E3:B5:3B:02:70 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3a:01:db:30:4e:c5:c5:14:9d:84:98:93:52:26:7c:3b:b0: 26:38:84:fe:b0:d3:f9:02:0e:e4:72:f0:a0:dc:52:6e:51:3f: 6f:cb:37:45:b9:86:85:7e:fc:d0:0b:1a:de:69:ab:ec:bf:5c: f4:14:b8:b4:85:69:07:22:cf:9b:39:37:63:e2:c5:a7:ce:92: db:df:4b:b6:d8:96:24:19:ee:30:79:ab:97:1f:20:fe:9d:76: 2d:0c:9d:5e:29:d8:95:53:2e:3e:9e:98:12:0b:20:71:ee:aa: d1:c2:45:b0:f8:48:24:c8:24:c5:e5:6f:ae:d8:65:fd:64:df: af:e9:2b:ea:71:f5:bc:3b:3a:b1:1a:2f:3f:d3:7a:78:25:a7: 29:ac:9c:5b:9a:08:2f:de:82:d9:9f:92:fe:2a:e6:d5:01:0c: 92:83:4b:38:96:c7:f6:f9:74:a1:9e:8d:9a:49:92:3c:3d:93: 70:78:6d:80:74:67:5a:d5:3c:2f:f5:46:14:f9:64:41:f1:c7: 5b:3d:d1:ff:e5:c4:c0:cb:3a:6d:12:6f:66:33:fd:0c:5a:d2: 5d:0f:38:54:a8:89:42:68:c4:40:95:58:8a:78:62:16:fc:e9: 8e:e7:54:25:03:ae:c0:14:4d:a3:93:5a:5c:c3:75:e5:81:bf: 15:5a:b9:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYxMDI4MTcxODEwWhcNMjYxMTA0MTcxODEwWjAYMRYwFAYD VQQDEw02YWUyMmU1Mi05MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXis1QV8UcsHvH6CYq/mtUj/N44DKjf3KbcLpKgUancpaO32Te2qAxpbGmVI ctpJ6emFVtpH003aZ1iCuo9waLdZR5fYoxLhwykrNomTKlsLKDhTgVzqsBV8PkK8 qznIF1EY+yvl2xOxJy9FCF3IckhL8P2Cy2JEcxor5U/EeSixfSrn2tiQV8G2YWbr +3OtoyBZ5LczPly72SclOK+D2I2z4R9xtOlg71gSTFqO432QsLMB0zzhgXF1RaNj XvWwoj5aIxtLPian7b9MiPM9rAa9ZSrOk7WGPaDi+koiM4mIVYEqEgyNnxe+Faum +DBLoPjIpSIlKrqO7SP/ip3aMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVmTDnn LdmOdnodYqzEZOO1OwJwMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKzoB2zBOxcUUnYSYk1ImfDuwJjiE/rDT+QIO5HLwoNxSblE/b8s3RbmGhX78 0Asa3mmr7L9c9BS4tIVpByLPmzk3Y+LFp86S299LttiWJBnuMHmrlx8g/p12LQyd XinYlVMuPp6YEgsgce6q0cJFsPhIJMgkxeVvrthl/WTfr+kr6nH1vDs6sRovP9N6 eCWnKaycW5oIL96C2Z+S/irm1QEMkoNLOJbH9vl0oZ6NmkmSPD2TcHhtgHRnWtU8 L/VGFPlkQfHHWz3R/+XEwMs6bRJvZjP9DFrSXQ84VKiJQmjEQJVYinhiFvzpjudU JQOuwBRNo5NaXMN15YG/FVq5dg== -----END CERTIFICATE-----Generated at Fri Oct 30 18:14:40 2026 by rpki-client