$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft File: _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json) Hash identifier: 5XXfO8VB/OHwGuz4BjeQrrpxJ6UFS6XRnt0VWnqqbxY= Subject key identifier: 61:16:F2:30:C4:BF:29:6E:BA:71:8E:57:5C:74:96:AB:C6:1A:FC:BA Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft Manifest number: 9A Signing time: Mon 05 Oct 2026 07:52:58 +0000 Manifest this update: Mon 05 Oct 2026 07:52:57 +0000 Manifest next update: Mon 12 Oct 2026 07:52:57 +0000 Files and hashes: 1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: b/zhFXaYfguPT0bFsmOL6xNcyc1Gl0I+suIgvHkIOt8=) 2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Validity Not Before: Oct 5 07:52:57 2026 GMT Not After : Oct 12 07:52:57 2026 GMT Subject: CN=6ac3575a-dc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:67:97:4b:cb:26:f5:9c:e1:55:6d:26:eb: 16:e0:44:0c:0f:34:b3:13:66:e1:c2:52:54:82:32: b8:c1:cc:bd:df:f3:b9:79:6c:88:a7:cd:8f:68:02: 9a:61:b1:64:a3:96:1f:ce:34:f0:79:c8:81:a8:bd: 17:0f:5d:a1:43:0f:04:59:db:78:2f:d8:57:61:f0: ac:4a:2e:35:83:2f:af:21:49:0a:6f:6f:61:21:cc: f6:1a:f7:b6:ab:d3:62:ed:3b:7f:3f:ee:4f:52:08: c4:70:dd:a5:df:c6:16:a3:51:97:3b:ba:3b:a5:2a: b1:1d:6f:01:c4:18:bb:c3:db:7a:70:bb:0b:a1:f3: b1:4e:ef:8a:9c:bd:42:81:5c:e8:1c:b1:3f:a7:7a: 39:26:02:89:cb:5f:66:d4:60:c6:83:9c:be:13:85: 0e:6e:1c:4c:14:b7:56:35:e4:7f:89:fc:c7:26:77: f9:24:f5:bf:ba:95:fd:87:53:06:a4:d9:23:d1:76: ea:4f:e8:30:66:47:ba:d3:e1:10:42:f8:c4:5d:46: 4c:f8:fa:22:3d:58:7b:f2:f8:f1:3d:4d:d2:3b:3c: ad:b0:3e:9b:8a:35:a5:1b:bf:43:e7:73:62:2e:7f: 6c:1f:4e:49:9c:2b:55:92:46:28:79:b0:71:81:88: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:16:F2:30:C4:BF:29:6E:BA:71:8E:57:5C:74:96:AB:C6:1A:FC:BA X509v3 Authority Key Identifier: keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c6:40:c3:79:c6:3e:50:bf:a7:89:42:fb:57:83:9f:0f:f3: 68:9c:10:9a:9d:01:6c:cb:6d:50:5a:aa:d3:24:12:99:e9:9c: 22:55:f3:7f:87:ca:a9:1b:8c:db:64:60:19:aa:6b:11:71:ac: a6:87:95:8b:f9:1f:82:d5:df:6c:b0:ac:e5:d6:7b:58:d6:23: 46:5a:69:5e:4a:2f:50:5f:7c:bb:59:19:07:03:41:5d:6a:da: ee:23:71:3d:16:b6:f3:1c:c1:0f:d6:d4:09:5f:f2:0e:a4:50: 61:ee:6f:43:3a:ab:de:4b:cb:77:c2:0c:30:45:90:5b:20:ce: 58:14:53:11:59:3b:50:26:21:55:00:63:a0:6e:fb:88:b8:bf: cb:e9:c5:d8:93:4f:be:02:47:95:6e:5c:85:2a:a5:ba:09:ce: 98:cd:aa:43:4f:83:d7:09:b8:cc:dc:fc:46:c0:46:70:bf:9b: 1a:88:fd:02:05:87:50:16:ae:b9:67:c5:29:09:ea:5b:76:93: d5:6c:5d:f3:96:ba:e0:8f:da:b2:77:e7:48:9a:34:f5:fd:e7: 15:f4:f0:44:66:94:df:d2:cb:bd:55:2b:21:e0:d2:ec:ab:fd: 70:a9:1d:59:3f:6d:86:21:84:17:54:92:7d:47:dc:e8:cf:46: ea:ac:63:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQTIxMTAvBgNVBAUTKEZFOTk4QUJCQjEzNEI5M0MxQ0U3Rjg0RThCOUZCRTFE REE5QjY0QTkwHhcNMjYxMDA1MDc1MjU3WhcNMjYxMDEyMDc1MjU3WjAYMRYwFAYD VQQDEw02YWMzNTc1YS1kYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNxnl0vLJvWc4VVtJusW4EQMDzSzE2bhwlJUgjK4wcy93/O5eWyIp82PaAKa YbFko5YfzjTweciBqL0XD12hQw8EWdt4L9hXYfCsSi41gy+vIUkKb29hIcz2Gve2 q9Ni7Tt/P+5PUgjEcN2l38YWo1GXO7o7pSqxHW8BxBi7w9t6cLsLofOxTu+KnL1C gVzoHLE/p3o5JgKJy19m1GDGg5y+E4UObhxMFLdWNeR/ifzHJnf5JPW/upX9h1MG pNkj0XbqT+gwZke60+EQQvjEXUZM+PoiPVh78vjxPU3SOzytsD6bijWlG79D53Ni Ln9sH05JnCtVkkYoebBxgYi9wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGEW8jDE vyluunGOV1x0lqvGGvy6MB8GA1UdIwQYMBaAFP6ZiruxNLk8HOf4Toufvh3am2Sp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJBMi9CNDQzNjBDOEUx NzQxMUYwQTU0MUQwMkQzRTZGNTZCQy9fcG1LdTdFMHVUd2M1X2hPaTUtLUhkcWJa S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19wbUt1N0UwdVR3YzVfaE9pNS0tSGRxYlpLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJBMi9CNDQzNjBDOEUxNzQxMUYwQTU0MUQwMkQzRTZGNTZCQy9fcG1LdTdFMHVU d2M1X2hPaTUtLUhkcWJaS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO8ZAw3nGPlC/p4lC+1eDnw/zaJwQmp0BbMttUFqq0yQSmemcIlXzf4fKqRuM 22RgGaprEXGspoeVi/kfgtXfbLCs5dZ7WNYjRlppXkovUF98u1kZBwNBXWra7iNx PRa28xzBD9bUCV/yDqRQYe5vQzqr3kvLd8IMMEWQWyDOWBRTEVk7UCYhVQBjoG77 iLi/y+nF2JNPvgJHlW5chSqlugnOmM2qQ0+D1wm4zNz8RsBGcL+bGoj9AgWHUBau uWfFKQnqW3aT1Wxd85a64I/asnfnSJo09f3nFfTwRGaU39LLvVUrIeDS7Kv9cKkd WT9thiGEF1SSfUfc6M9G6qxjbQ== -----END CERTIFICATE-----Generated at Tue Oct 6 19:56:57 2026 by rpki-client