$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft File: 5ufJDHY2LUCc0cpsRLrINSTV8C4.mft (raw, json) Hash identifier: uoZQPRTj/VUxZXpisZ6zBMGOwYUjGudYB8CVI6r4H+g= Subject key identifier: 83:D2:B0:2E:5D:0E:45:5E:25:2B:B5:C9:9B:D7:F5:04:4E:AB:3C:3F Authority key identifier: E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E Certificate issuer: /CN=A9111C7F/serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft Manifest number: 28 Signing time: Sat 17 Oct 2026 09:32:28 +0000 Manifest this update: Sat 17 Oct 2026 09:32:28 +0000 Manifest next update: Sat 24 Oct 2026 09:32:28 +0000 Files and hashes: 1: 5ufJDHY2LUCc0cpsRLrINSTV8C4.crl (hash: jK9ZM7owN+6o+rI41YHgnjIMMExkzmU8cGeDPRyZaXc=) 2: 17ECE94A90EE11F18648EF8E4A11F970.roa (hash: oJfoZuTJOnL94a9OsvOMa2PCtBJV8NSsIokiHbMr0uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C7F, serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E Validity Not Before: Oct 17 09:32:28 2026 GMT Not After : Oct 24 09:32:28 2026 GMT Subject: CN=6ad340ac-89f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:42:c1:0e:ec:d3:12:50:da:08:3a:78:fe: 6e:dd:d0:14:6e:1f:39:bb:d2:92:d0:5c:ce:99:f5: dd:fb:00:46:f0:ad:6a:de:54:7d:6d:24:80:da:55: 88:cc:c5:9e:89:fd:f4:ba:13:1a:ef:a9:78:5a:de: 44:48:5a:3a:b0:ff:59:e2:78:f7:6f:f8:a6:98:da: e2:a4:38:56:96:14:2b:cf:dd:47:ec:70:bd:9a:74: a4:68:f2:c8:90:ae:60:d5:74:10:e0:be:ae:3e:89: 66:97:67:59:f2:dd:08:60:c4:77:d7:aa:19:83:e4: 22:46:23:00:7d:8e:cb:c3:d4:80:44:ea:c6:f2:10: 84:32:fa:7d:04:72:b2:cf:51:5d:4c:90:bb:4d:da: f7:b3:9a:1d:f1:56:5d:05:e8:58:cf:79:d5:5a:07: 57:d5:24:65:a6:b4:64:85:46:9e:ba:01:40:cf:37: 83:9a:8e:7d:3f:09:d5:2b:ee:6f:5b:c8:db:8e:e4: d0:81:ed:75:d6:6b:b9:2b:08:65:18:80:81:76:d3: bd:cc:8f:2d:ff:79:12:f5:0f:05:db:25:50:e8:b0: 00:72:b8:90:5d:94:a1:01:0d:25:e6:9d:d9:78:2c: 11:82:a1:ed:3d:29:40:f2:3d:71:d0:85:4a:e4:6d: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D2:B0:2E:5D:0E:45:5E:25:2B:B5:C9:9B:D7:F5:04:4E:AB:3C:3F X509v3 Authority Key Identifier: keyid:E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:75:b1:75:d9:83:19:09:6d:f1:02:11:a6:89:43:d9:f8:26: 11:54:0b:bf:67:c0:b3:14:47:3b:63:98:b7:ec:62:0e:52:5d: 68:21:26:e7:b5:c4:48:10:4a:77:60:5c:1e:37:3a:35:38:46: 9a:a0:ae:14:2b:a1:e1:83:ce:89:34:d2:6c:7f:a5:7b:29:b7: 75:68:d9:86:b8:91:3d:e5:80:1d:40:bf:3f:fe:08:72:85:59: 8f:2a:97:39:7e:73:26:68:7c:68:ba:e7:5c:31:3f:d9:80:eb: f2:a8:ac:41:75:c1:23:91:3b:80:5a:44:fd:8c:c2:60:50:14: 99:0d:1c:37:b8:7f:58:f7:fa:c3:7a:bb:81:19:e4:73:82:e6: 4c:4b:ed:ad:92:46:bd:87:61:56:d8:ca:ff:a0:11:fd:35:c1: 0d:07:95:ac:5c:c5:12:e6:a7:d5:b8:27:75:aa:d7:52:34:06: 1c:46:90:53:80:4a:d2:98:5b:75:3e:43:41:ae:4f:f5:7a:d3: 95:37:08:e8:dd:21:64:38:7e:52:69:13:89:36:e2:ed:66:58: 6a:51:b0:2a:ab:59:b2:93:1b:80:98:dc:3a:d6:83:67:a1:59: ec:76:b5:7e:7c:b7:bf:5b:54:95:56:aa:e4:56:1e:59:20:de: 64:95:46:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUM3RjExMC8GA1UEBRMoRTZFN0M5MEM3NjM2MkQ0MDlDRDFDQTZDNDRCQUM4MzUy NEQ1RjAyRTAeFw0yNjEwMTcwOTMyMjhaFw0yNjEwMjQwOTMyMjhaMBgxFjAUBgNV BAMTDTZhZDM0MGFjLTg5ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAK0LBDuzTElDaCDp4/m7d0BRuHzm70pLQXM6Z9d37AEbwrWreVH1tJIDaVYjM xZ6J/fS6ExrvqXha3kRIWjqw/1niePdv+KaY2uKkOFaWFCvP3UfscL2adKRo8siQ rmDVdBDgvq4+iWaXZ1ny3QhgxHfXqhmD5CJGIwB9jsvD1IBE6sbyEIQy+n0EcrLP UV1MkLtN2vezmh3xVl0F6FjPedVaB1fVJGWmtGSFRp66AUDPN4Oajn0/CdUr7m9b yNuO5NCB7XXWa7krCGUYgIF2073Mjy3/eRL1DwXbJVDosAByuJBdlKEBDSXmndl4 LBGCoe09KUDyPXHQhUrkbbU/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUg9KwLl0O RV4lK7XJm9f1BE6rPD8wHwYDVR0jBBgwFoAU5ufJDHY2LUCc0cpsRLrINSTV8C4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExQzdGLzFDMzFGNUYwOTBF RDExRjE5MDMzNjM4NzRBMTFGOTcwLzV1ZkpESFkyTFVDYzBjcHNSTHJJTlNUVjhD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXVmSkRIWTJMVUNjMGNwc1JMcklOU1RWOEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx QzdGLzFDMzFGNUYwOTBFRDExRjE5MDMzNjM4NzRBMTFGOTcwLzV1ZkpESFkyTFVD YzBjcHNSTHJJTlNUVjhDNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCadbF12YMZCW3xAhGmiUPZ+CYRVAu/Z8CzFEc7Y5i37GIOUl1oISbntcRIEEp3 YFweNzo1OEaaoK4UK6Hhg86JNNJsf6V7Kbd1aNmGuJE95YAdQL8//ghyhVmPKpc5 fnMmaHxouudcMT/ZgOvyqKxBdcEjkTuAWkT9jMJgUBSZDRw3uH9Y9/rDeruBGeRz guZMS+2tkka9h2FW2Mr/oBH9NcENB5WsXMUS5qfVuCd1qtdSNAYcRpBTgErSmFt1 PkNBrk/1etOVNwjo3SFkOH5SaROJNuLtZlhqUbAqq1mykxuAmNw61oNnoVnsdrV+ fLe/W1SVVqrkVh5ZIN5klUat -----END CERTIFICATE-----Generated at Sun Oct 18 07:08:23 2026 by rpki-client