$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft File: _cdKKiafD6n8KnMlb6ydv4E4Opc.mft (raw, json) Hash identifier: a9VfPYnXhD2aYGh7qAKaPi2Yr4pVNGuKb31XqPBiKkk= Subject key identifier: A6:A5:DC:53:F0:ED:13:5A:65:B7:A6:2F:FD:B3:B2:B4:44:B0:F5:91 Authority key identifier: FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97 Certificate issuer: /CN=A911CCA8/serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft Manifest number: 0A Signing time: Tue 06 Oct 2026 07:17:27 +0000 Manifest this update: Tue 06 Oct 2026 07:17:26 +0000 Manifest next update: Tue 13 Oct 2026 07:17:26 +0000 Files and hashes: 1: _cdKKiafD6n8KnMlb6ydv4E4Opc.crl (hash: D7tDQ+issdFqBlmqu9OCbRzAYGPKNAPaBkRagUvCm20=) 2: E821F266B68411F18DFEAAE13C11F970.roa (hash: 3xucjeONyRZhZBoCVmTeWg8bAEUTlhhckWOpYl5wYT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 07:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CCA8, serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97 Validity Not Before: Oct 6 07:17:26 2026 GMT Not After : Oct 13 07:17:26 2026 GMT Subject: CN=6ac4a086-5a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:4e:09:02:41:7f:7e:5a:8e:27:d8:ea:f2: 33:97:16:42:f9:47:e9:b7:aa:b5:80:38:51:3d:3d: a1:e9:58:d0:5c:b6:2b:be:dd:5a:57:aa:8c:2b:a7: 87:41:46:d4:ba:ec:bc:90:95:6f:c2:41:ce:5d:e8: 70:d9:1c:e8:cd:37:1a:57:a3:ea:10:d6:5e:42:7f: 3a:96:71:fd:84:0a:ed:57:9c:91:7b:7d:d7:e6:81: 7d:a4:1e:18:34:20:39:3d:90:8d:98:19:e6:0f:bb: 61:6e:e5:91:d2:4d:05:64:89:95:de:be:f2:1d:88: bc:44:d6:c9:90:81:92:2b:af:d8:10:f2:a5:a0:9b: 77:39:62:54:2f:db:72:f8:a4:f8:fb:9f:7c:71:7a: 60:fa:9c:d2:02:d0:d2:03:c6:a1:6a:bb:34:ca:87: ac:7b:e4:34:30:e9:5f:10:51:73:d4:84:9c:2f:3e: f1:8a:57:9c:f0:7c:48:21:47:e2:ed:3c:ad:78:ff: f2:05:81:71:35:f6:4b:fd:09:c3:60:66:ab:3e:5d: 2b:9e:20:28:16:57:ef:b4:f8:88:30:ff:e8:9c:7d: 94:9f:02:31:b7:a5:b3:36:c8:d4:f9:e5:82:8a:ae: 43:20:27:09:8b:c4:ee:3a:b0:e1:e8:e9:7f:51:d7: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:DC:53:F0:ED:13:5A:65:B7:A6:2F:FD:B3:B2:B4:44:B0:F5:91 X509v3 Authority Key Identifier: keyid:FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:43:40:c3:b0:23:6a:df:d8:ea:a7:6e:49:a0:b5:71:11:66: 99:2e:a1:08:21:85:bd:79:38:ba:24:c4:85:3a:34:df:62:dd: 8a:33:e3:72:61:a3:21:49:5e:fe:7f:0a:b2:0f:d2:bd:fa:5e: d0:bf:5f:4e:32:7f:64:01:65:43:23:d7:9d:45:43:81:d3:d7: 39:13:5a:c6:da:bc:eb:77:16:97:a6:86:4d:c9:77:44:64:60: 4d:85:12:9c:94:89:77:09:bc:25:06:72:21:45:ef:46:48:62: f5:f6:83:3a:39:b6:65:10:7a:b6:ba:1a:62:a9:31:53:21:e8: f2:48:f9:4b:fc:3a:c4:37:4a:0b:8d:1d:fc:0b:c4:7d:c3:3e: 61:81:fb:97:1f:87:ee:2a:5f:5e:63:b0:0f:3c:b3:83:00:34: e5:f8:b9:8d:b7:f7:25:9b:35:c9:6e:64:2a:ea:4a:de:e2:a8: 50:5b:24:59:d3:f6:35:35:ff:09:03:cd:9a:56:3f:ac:ff:c6: 93:1d:45:37:6d:92:b1:99:31:38:a2:cc:d5:33:a0:40:bd:e6: e1:27:a1:d9:a7:87:9d:61:c4:c0:a1:c8:c1:92:4a:79:c2:a6: 71:6b:b1:76:ea:b2:d2:10:3a:45:58:ca:52:37:95:ad:c8:f1: ea:e2:06:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0NBODExMC8GA1UEBRMoRkRDNzRBMkEyNjlGMEZBOUZDMkE3MzI1NkZBQzlEQkY4 MTM4M0E5NzAeFw0yNjEwMDYwNzE3MjZaFw0yNjEwMTMwNzE3MjZaMBgxFjAUBgNV BAMTDTZhYzRhMDg2LTVhNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6pk4JAkF/flqOJ9jq8jOXFkL5R+m3qrWAOFE9PaHpWNBctiu+3VpXqowrp4dB RtS67LyQlW/CQc5d6HDZHOjNNxpXo+oQ1l5CfzqWcf2ECu1XnJF7fdfmgX2kHhg0 IDk9kI2YGeYPu2Fu5ZHSTQVkiZXevvIdiLxE1smQgZIrr9gQ8qWgm3c5YlQv23L4 pPj7n3xxemD6nNIC0NIDxqFquzTKh6x75DQw6V8QUXPUhJwvPvGKV5zwfEghR+Lt PK14//IFgXE19kv9CcNgZqs+XSueICgWV++0+Igw/+icfZSfAjG3pbM2yNT55YKK rkMgJwmLxO46sOHo6X9R1wcTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpqXcU/Dt E1plt6Yv/bOytESw9ZEwHwYDVR0jBBgwFoAU/cdKKiafD6n8KnMlb6ydv4E4Opcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQ0E4LzRFQTFBOTNFQjY4 MzExRjE5MEMyQkY2QTNDMTFGOTcwL19jZEtLaWFmRDZuOEtuTWxiNnlkdjRFNE9w Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2NkS0tpYWZENm44S25NbGI2eWR2NEU0T3BjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD Q0E4LzRFQTFBOTNFQjY4MzExRjE5MEMyQkY2QTNDMTFGOTcwL19jZEtLaWFmRDZu OEtuTWxiNnlkdjRFNE9wYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDEQ0DDsCNq39jqp25JoLVxEWaZLqEIIYW9eTi6JMSFOjTfYt2KM+NyYaMhSV7+ fwqyD9K9+l7Qv19OMn9kAWVDI9edRUOB09c5E1rG2rzrdxaXpoZNyXdEZGBNhRKc lIl3CbwlBnIhRe9GSGL19oM6ObZlEHq2uhpiqTFTIejySPlL/DrEN0oLjR38C8R9 wz5hgfuXH4fuKl9eY7APPLODADTl+LmNt/clmzXJbmQq6kre4qhQWyRZ0/Y1Nf8J A82aVj+s/8aTHUU3bZKxmTE4oszVM6BAvebhJ6HZp4edYcTAocjBkkp5wqZxa7F2 6rLSEDpFWMpSN5WtyPHq4gac -----END CERTIFICATE-----Generated at Tue Oct 6 20:05:10 2026 by rpki-client