$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json) Hash identifier: u278mec93wUZTr95x/vPMBtsjeDbHIKNRGJ/rKBUmO0= Subject key identifier: DC:F7:5E:E3:1B:4B:EA:1F:AE:3F:14:CE:FC:89:8F:B7:E0:9A:60:10 Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft Manifest number: 8E Signing time: Wed 07 Oct 2026 08:05:32 +0000 Manifest this update: Wed 07 Oct 2026 08:05:32 +0000 Manifest next update: Wed 14 Oct 2026 08:05:32 +0000 Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: BS+dqPrPbZKXEnk6T6lWPjF5s0QYqq3NDPasxQ3IcYE=) 2: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=) 3: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 08:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Validity Not Before: Oct 7 08:05:32 2026 GMT Not After : Oct 14 08:05:32 2026 GMT Subject: CN=6ac5fd4c-7529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:bc:4a:4a:d7:ab:f7:bb:b2:cd:1f:9c:b0: bc:0e:7c:2c:7b:44:06:fa:eb:f8:76:12:cc:27:f1: b3:70:59:cb:57:f3:66:21:f7:4e:45:10:69:8d:d2: 48:3f:ae:99:36:95:09:ff:61:f3:ed:0c:1b:a5:c4: fd:b7:18:bd:aa:37:1c:0a:2e:f6:dd:a1:ad:e4:56: a9:b3:26:d1:0c:19:11:fe:7c:f5:3b:52:e5:ad:56: 53:3c:f1:1e:6f:5a:6e:c0:c0:01:a7:43:6a:6a:e7: e2:e5:55:21:ee:47:7c:9c:a3:79:9a:2f:00:1a:73: a1:b5:eb:b6:1b:00:a0:a9:cc:72:f9:f9:8d:cb:fc: 94:aa:c5:bc:ac:fb:36:28:45:6e:de:85:61:1c:33: f9:4b:1b:5f:12:1a:49:86:0f:4d:f4:59:9f:b1:56: 43:86:24:e8:36:d1:0f:f9:c8:89:79:d5:5e:aa:21: 41:23:72:32:2a:0f:d6:6b:21:e4:2c:25:f9:80:be: 90:f1:b7:39:29:3c:35:c6:2f:05:33:b4:7f:f3:c5: bd:75:d7:e3:61:f6:78:fa:59:c7:ff:c1:a8:9d:3b: d8:b4:7c:a0:45:8d:97:20:69:8c:d0:2b:99:5b:df: 97:c1:e1:f4:24:69:2b:d3:a4:e3:57:0f:82:4b:b8: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:5E:E3:1B:4B:EA:1F:AE:3F:14:CE:FC:89:8F:B7:E0:9A:60:10 X509v3 Authority Key Identifier: keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:50:fd:d6:02:57:d9:f3:6f:0b:10:ba:97:ad:28:7d:b6:41: a9:1e:99:07:be:cd:69:89:76:7d:08:68:0c:f0:af:02:57:83: aa:57:1f:d5:83:3f:fe:be:66:b3:b3:09:3b:49:6b:25:56:ec: 69:c5:c9:cc:cc:e1:e2:7f:9d:f4:6a:a7:3a:07:8e:2f:e8:c0: 5e:92:0e:c1:d9:8b:6e:eb:7c:de:a1:32:12:9d:68:a0:a4:c4: 80:68:c6:a1:28:6a:09:ca:21:2e:c4:bc:55:e4:4d:f6:0c:4a: f2:fa:e8:d0:43:1b:ea:2e:36:80:09:0f:75:2e:07:5c:8b:58: c7:30:50:e1:1c:2c:f0:5d:49:2e:f2:ff:1b:32:05:71:87:9c: fb:38:8d:00:69:f5:44:9e:e9:5b:42:4d:d8:4b:4a:6d:56:ac: a7:92:1c:d4:5c:e0:af:00:4c:0e:16:19:88:69:5e:1f:79:69: 2b:a9:16:9a:39:70:b7:bf:89:19:65:3b:82:f4:99:6f:f4:ed: 6e:de:f5:76:fd:b7:80:4e:4d:6d:0a:ee:88:69:ad:c9:37:b6: f0:3d:00:7c:f5:af:2e:d0:2b:de:1b:45:65:dc:4c:07:98:7f: 2d:f6:51:1f:9e:b7:31:a7:71:19:9b:35:8f:64:e5:0c:a2:e1: b1:d8:6c:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCMEMxMTAvBgNVBAUTKEQ1QjE2NzY4OTE0QTgwQzkzMTI0NjI5NjEwQ0M0MDUw MkFBRUQwRTkwHhcNMjYxMDA3MDgwNTMyWhcNMjYxMDE0MDgwNTMyWjAYMRYwFAYD VQQDEw02YWM1ZmQ0Yy03NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8y8SkrXq/e7ss0fnLC8Dnwse0QG+uv4dhLMJ/GzcFnLV/NmIfdORRBpjdJI P66ZNpUJ/2Hz7QwbpcT9txi9qjccCi723aGt5FapsybRDBkR/nz1O1LlrVZTPPEe b1puwMABp0Nqaufi5VUh7kd8nKN5mi8AGnOhteu2GwCgqcxy+fmNy/yUqsW8rPs2 KEVu3oVhHDP5SxtfEhpJhg9N9FmfsVZDhiToNtEP+ciJedVeqiFBI3IyKg/WayHk LCX5gL6Q8bc5KTw1xi8FM7R/88W9ddfjYfZ4+lnH/8GonTvYtHygRY2XIGmM0CuZ W9+XweH0JGkr06TjVw+CS7ghIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNz3XuMb S+ofrj8UzvyJj7fgmmAQMB8GA1UdIwQYMBaAFNWxZ2iRSoDJMSRilhDMQFAqrtDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkIwQy9CNjEzODZFNkYx MUMxMUYwQTM4RjI4NDc0RDZGNTZCQy8xYkZuYUpGS2dNa3hKR0tXRU14QVVDcXUw T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiRm5hSkZLZ01reEpHS1dFTXhBVUNxdTBPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkIwQy9CNjEzODZFNkYxMUMxMUYwQTM4RjI4NDc0RDZGNTZCQy8xYkZuYUpGS2dN a3hKR0tXRU14QVVDcXUwT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1D91gJX2fNvCxC6l60ofbZBqR6ZB77NaYl2fQhoDPCvAleDqlcf1YM//r5m s7MJO0lrJVbsacXJzMzh4n+d9GqnOgeOL+jAXpIOwdmLbut83qEyEp1ooKTEgGjG oShqCcohLsS8VeRN9gxK8vro0EMb6i42gAkPdS4HXItYxzBQ4Rws8F1JLvL/GzIF cYec+ziNAGn1RJ7pW0JN2EtKbVasp5Ic1FzgrwBMDhYZiGleH3lpK6kWmjlwt7+J GWU7gvSZb/Ttbt71dv23gE5NbQruiGmtyTe28D0AfPWvLtAr3htFZdxMB5h/LfZR H563MadxGZs1j2TlDKLhsdhs5A== -----END CERTIFICATE-----Generated at Wed Oct 7 17:49:23 2026 by rpki-client