$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: KSUvQYx5RlJH/U6dzKRKR94hnurUEKwRRi65c2UryaI= Subject key identifier: 5C:84:94:48:CC:CA:B9:CD:E2:6A:B4:16:B5:00:39:00:F5:0E:40:6E Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: A8 Signing time: Wed 21 Oct 2026 06:18:30 +0000 Manifest this update: Wed 21 Oct 2026 06:18:30 +0000 Manifest next update: Wed 28 Oct 2026 06:18:30 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: DhJlKXqXSJVG4A0uc+idgQhakxgi3IaORy5I0GSK0Ek=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=) 4: 828D0130B71911F18A35C1CA6C11F970.roa (hash: UkCQ9gv6ic/KKPT0IIpRmrPJG7QCTlStC/0d7bvnzHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Oct 21 06:18:30 2026 GMT Not After : Oct 28 06:18:30 2026 GMT Subject: CN=6ad85936-ff52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:10:0f:9a:08:08:9c:04:50:16:37:ab:98:43: dd:0c:1b:32:a9:75:b9:60:cd:d2:b6:47:c0:8b:1a: b9:e9:6e:79:1e:e3:19:bf:d3:b1:47:9f:16:c0:65: 65:32:0b:5d:f5:5a:f2:a9:3e:6c:01:cb:0d:62:c6: cd:a3:f6:83:47:db:21:82:a5:20:2a:41:54:a1:33: 1b:0c:6c:88:17:4f:89:df:e7:85:c7:b7:14:3a:ee: b5:20:0a:0c:7c:af:1d:f5:fc:e2:7c:59:a1:49:6b: f6:30:b8:45:bf:37:0b:64:57:3e:ec:c1:a6:1c:08: 8a:4c:41:4d:23:2b:18:e3:6f:f9:4a:3e:71:25:f6: 3d:2f:f2:1a:c2:71:41:e1:87:46:37:09:a0:e5:ee: dd:7d:b6:ce:d0:e2:13:57:0e:71:68:4d:a5:2f:63: 2f:d5:95:85:51:47:68:f2:6e:0a:b3:17:e3:57:78: 1e:b7:3a:41:bb:7f:cf:74:9c:ec:16:ed:10:07:e2: db:72:15:bd:98:42:5e:24:e5:5a:76:f8:cf:2e:b7: 61:9e:f1:d3:9d:ed:88:6f:d2:2b:c9:bd:f5:52:e5: 44:d7:93:db:7a:4c:de:95:5f:92:f1:a8:89:e3:97: 7a:6f:fa:16:b1:76:4a:f9:55:be:f7:2d:c4:23:a2: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:84:94:48:CC:CA:B9:CD:E2:6A:B4:16:B5:00:39:00:F5:0E:40:6E X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ff:f0:89:eb:ab:81:a3:19:d1:46:bf:61:ee:b7:c5:7c:76: 06:8f:66:59:12:db:fe:fb:29:ec:50:32:32:25:96:a2:86:20: d3:b4:69:39:0d:c0:a2:2c:b2:cb:74:c4:3f:42:32:08:34:69: 8d:19:28:cd:e9:8b:a8:86:ab:e7:b7:03:2f:e1:39:0a:6e:82: 92:76:13:7b:a6:a7:3b:64:f6:07:d4:b9:7e:12:0c:d0:ac:ca: 8b:f3:c8:d0:d1:07:4f:5d:fe:f0:95:c7:ac:4d:78:0d:4d:73: 0f:1f:82:41:86:e3:46:d2:0c:57:36:f0:4a:6b:7d:b1:43:4f: b4:ba:9f:5d:60:69:c5:b1:1b:2e:46:47:6e:2a:73:d8:b7:79: 76:4e:1e:5d:2d:73:bb:ae:e1:e4:ed:82:fa:6d:f1:11:d8:37: 65:c8:4c:b1:0a:64:a8:22:3d:96:50:3d:87:88:c3:68:a6:07: 2c:83:d6:56:ca:47:c1:08:9e:e6:06:e7:c5:58:f4:5b:d0:7a: da:c0:59:b6:bf:4f:89:8e:01:9b:9b:09:e3:c7:ca:cd:ed:84: e8:91:ea:5f:41:fc:5e:0b:cd:64:eb:9a:10:a0:f5:a9:a2:18: 6d:35:47:b2:cc:91:a5:de:13:02:a0:10:51:a5:06:b2:fe:b8: 28:61:4c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDBDNThDNjk2OUVFNjRDNDE5MUFBQjY2OTYzRjQwOUQ0 NUFFQUY2OTgwHhcNMjYxMDIxMDYxODMwWhcNMjYxMDI4MDYxODMwWjAYMRYwFAYD VQQDEw02YWQ4NTkzNi1mZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hAPmggInARQFjermEPdDBsyqXW5YM3StkfAixq56W55HuMZv9OxR58WwGVl Mgtd9VryqT5sAcsNYsbNo/aDR9shgqUgKkFUoTMbDGyIF0+J3+eFx7cUOu61IAoM fK8d9fzifFmhSWv2MLhFvzcLZFc+7MGmHAiKTEFNIysY42/5Sj5xJfY9L/IawnFB 4YdGNwmg5e7dfbbO0OITVw5xaE2lL2Mv1ZWFUUdo8m4KsxfjV3getzpBu3/PdJzs Fu0QB+LbchW9mEJeJOVadvjPLrdhnvHTne2Ib9Iryb31UuVE15PbekzelV+S8aiJ 45d6b/oWsXZK+VW+9y3EI6LL9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyElEjM yrnN4mq0FrUAOQD1DkBuMB8GA1UdIwQYMBaAFAxYxpae5kxBkaq2aWP0CdRa6vaY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GQjI4RDlGMERD OUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRFR1JxclpwWV9RSjFGcnE5 cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GQjI4RDlGMERDOUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRF R1JxclpwWV9RSjFGcnE5cGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABv/wieurgaMZ0Ua/Ye63xXx2Bo9mWRLb/vsp7FAyMiWWooYg07RpOQ3Aoiyy y3TEP0IyCDRpjRkozemLqIar57cDL+E5Cm6CknYTe6anO2T2B9S5fhIM0KzKi/PI 0NEHT13+8JXHrE14DU1zDx+CQYbjRtIMVzbwSmt9sUNPtLqfXWBpxbEbLkZHbipz 2Ld5dk4eXS1zu67h5O2C+m3xEdg3ZchMsQpkqCI9llA9h4jDaKYHLIPWVspHwQie 5gbnxVj0W9B62sBZtr9PiY4Bm5sJ48fKze2E6JHqX0H8XgvNZOuaEKD1qaIYbTVH ssyRpd4TAqAQUaUGsv64KGFM/w== -----END CERTIFICATE-----Generated at Wed Oct 21 21:20:59 2026 by rpki-client