$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: z/MQp8F360JjHY16G8auVDUpldPt2hizYQLahBq+qTw= Subject key identifier: 0F:FE:EE:B1:4B:BC:7C:67:47:A8:8E:CE:FB:95:E9:55:DB:7C:83:62 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 02CD Signing time: Fri 09 Oct 2026 01:39:59 +0000 Manifest this update: Fri 09 Oct 2026 01:39:59 +0000 Manifest next update: Fri 16 Oct 2026 01:39:59 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: W0EFALqOjsr16ri+GY8bgIymPvxKVixu0hAHp8esnOQ=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: yfzx4N8e3wjfsr320pF+EFitreK6BjvCPZ0wmG/4y/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 01:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Oct 9 01:39:59 2026 GMT Not After : Oct 16 01:39:59 2026 GMT Subject: CN=6ac845ef-230f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:03:be:d2:90:54:75:fe:aa:e6:7c:49:dd: 5d:12:0c:75:46:b0:3d:12:79:c5:3c:e7:6a:15:c0: f3:bf:1c:5e:9f:0d:39:13:1f:3d:cd:0c:cf:2d:cf: 91:56:93:49:dd:24:6e:63:0f:9c:1e:be:ea:19:60: df:9e:30:06:a0:4f:7c:11:1c:0b:28:42:7a:f9:43: 1c:37:4d:80:26:08:a5:57:9b:80:2c:57:50:69:60: 8f:18:cd:97:17:7e:ef:90:43:20:d8:bf:cc:d5:b8: e7:6f:97:b4:24:40:eb:bb:3a:ee:e7:3f:dc:8d:ca: c0:d0:0d:0f:ed:e9:b2:0d:95:fc:64:12:20:28:6e: 68:e1:41:87:5e:f1:f7:f4:bc:c9:0a:b5:f1:48:d5: 7f:b4:24:5e:4a:ff:1e:3c:18:af:54:c1:ce:a9:d9: 9e:e1:45:62:ea:4a:cb:a4:52:14:79:5b:54:8b:e5: 0f:f6:13:66:94:f1:dc:7f:58:c7:17:2e:43:c1:5e: 29:59:9b:3b:72:7d:e8:19:3a:f5:72:86:b5:f9:40: a9:68:72:bc:0d:25:19:23:60:e0:5e:ae:b6:0b:25: 00:45:2d:25:e6:cf:cc:b9:02:85:69:d1:1f:f4:0a: b5:af:ce:6b:7a:58:fb:dd:ae:45:4e:88:a7:4d:e0: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FE:EE:B1:4B:BC:7C:67:47:A8:8E:CE:FB:95:E9:55:DB:7C:83:62 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:38:15:88:2f:4a:3f:df:19:d2:ee:bf:4d:0b:c5:68:0d:72: 4a:94:32:0f:b6:2a:2b:3c:75:6b:50:c0:a1:36:19:10:a0:c2: f2:b9:6f:90:05:bc:cb:d3:1f:61:b8:cd:7a:fd:72:d5:72:45: 32:ba:78:28:e2:e8:96:28:01:53:6f:28:71:fe:36:21:1e:3a: 6b:97:a6:5d:63:b8:0f:ea:8a:8a:94:c1:50:7f:a6:36:d5:f1: 55:13:22:d2:0c:51:36:54:58:be:9a:ab:99:2f:81:9a:80:f0: b5:2d:da:ef:78:4a:85:d7:f8:41:1c:ed:0d:0b:98:37:03:d9: f0:9f:ab:17:9d:5f:35:25:8c:6b:c7:c0:28:27:57:8e:33:78: c8:e1:d8:cb:c4:0c:77:3c:50:59:36:c2:ee:55:4f:9e:4e:e6: 2d:b3:ec:02:b0:50:08:fc:ff:36:bb:10:27:fe:6d:cb:bd:ae: 93:8e:2f:47:b7:54:f8:63:c9:b8:2a:10:97:bf:d3:8c:2d:42: c7:eb:50:02:7a:27:ff:c7:e2:3e:32:bb:f8:c3:e9:ca:a6:7c: 3b:a9:83:7c:05:85:01:47:31:26:dc:39:88:34:d0:73:d0:b9: 65:8c:d8:03:cf:ff:ab:d0:2b:8e:a5:9e:1a:0e:8f:2b:4d:85: 3a:93:1e:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjYxMDA5MDEzOTU5WhcNMjYxMDE2MDEzOTU5WjAYMRYwFAYD VQQDEw02YWM4NDVlZi0yMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw74DvtKQVHX+quZ8Sd1dEgx1RrA9EnnFPOdqFcDzvxxenw05Ex89zQzPLc+R VpNJ3SRuYw+cHr7qGWDfnjAGoE98ERwLKEJ6+UMcN02AJgilV5uALFdQaWCPGM2X F37vkEMg2L/M1bjnb5e0JEDruzru5z/cjcrA0A0P7emyDZX8ZBIgKG5o4UGHXvH3 9LzJCrXxSNV/tCReSv8ePBivVMHOqdme4UVi6krLpFIUeVtUi+UP9hNmlPHcf1jH Fy5DwV4pWZs7cn3oGTr1coa1+UCpaHK8DSUZI2DgXq62CyUARS0l5s/MuQKFadEf 9Aq1r85relj73a5FToinTeCa8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/+7rFL vHxnR6iOzvuV6VXbfINiMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANTgViC9KP98Z0u6/TQvFaA1ySpQyD7YqKzx1a1DAoTYZEKDC8rlvkAW8y9Mf YbjNev1y1XJFMrp4KOLoligBU28ocf42IR46a5emXWO4D+qKipTBUH+mNtXxVRMi 0gxRNlRYvpqrmS+BmoDwtS3a73hKhdf4QRztDQuYNwPZ8J+rF51fNSWMa8fAKCdX jjN4yOHYy8QMdzxQWTbC7lVPnk7mLbPsArBQCPz/NrsQJ/5ty72uk44vR7dU+GPJ uCoQl7/TjC1Cx+tQAnon/8fiPjK7+MPpyqZ8O6mDfAWFAUcxJtw5iDTQc9C5ZYzY A8//q9ArjqWeGg6PK02FOpMeGw== -----END CERTIFICATE-----Generated at Sat Oct 10 00:38:35 2026 by rpki-client