$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: 6dHv7PI2r+Q1dRMG6jed4HxZPs9+friTKY8XJHZ1IFM= Subject key identifier: 5F:2E:46:5D:5C:22:AE:D4:C5:A7:40:94:07:A0:2B:4E:61:AE:3E:9A Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 0102 Signing time: Sat 19 Sep 2026 06:16:42 +0000 Manifest this update: Sat 19 Sep 2026 06:16:42 +0000 Manifest next update: Sat 26 Sep 2026 06:16:42 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: 1Vz94XQbgxNg95Uha543Mi7lwdD6zYOul8xDw3OkDRs=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: juMHvZUG78CclBXRyslR4dpbF0KFYZrW0WvDaAAud4k=) 3: CA5B991430E111F09B76D311C4F9AE02.roa (hash: eRx8bbJu6in61S4okIsK48ZlBXinhwSR62SelJS9cC8=) 4: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: sY7EBkThUecrfKfG+kSCpuHCSj6wPtVy9PUYEZdqikI=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: iU6Wj2L6dhe3grsmDUQsEWobs2LTk0gYMSSAmstcjt8=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: 4VQy2uTuYmBTt5p4bl4BylIiGQ88q1IjeeXSwehmuI0=) 7: 570B12E0562611F09F085F44C4F9AE02.roa (hash: /sJ2zjbBJwvHhohFygkIyei7pdLWS58sUBWjkvmnlA4=) 8: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: is4OaleIvjgTfkRN81esClK4/HDDPHdtSZTyTH+9VPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Sep 19 06:16:42 2026 GMT Not After : Sep 26 06:16:42 2026 GMT Subject: CN=6aae28ca-e38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:fd:92:d6:ba:b3:25:b1:4d:49:a7:b4:30: a3:91:b3:88:9e:61:e8:88:fd:eb:24:11:c1:2b:b5: d5:6b:64:bd:5f:85:74:0f:35:64:27:ae:ce:db:ee: 88:e4:70:51:46:65:b9:8c:fa:ac:b6:24:25:0f:59: f6:79:20:7b:66:d2:b0:ec:41:98:fb:2c:40:24:0a: 71:64:aa:9d:a4:c0:55:81:84:e3:af:5c:93:31:d1: 4b:de:ba:0d:07:76:cc:7f:8c:15:ba:51:2d:20:69: df:93:78:2b:56:85:b9:34:a4:9a:45:c2:aa:ad:c5: 0a:5b:f1:95:ff:cf:57:e4:6b:72:ee:ad:72:fb:68: 92:9d:bd:46:3d:11:ee:d1:5a:93:0e:2e:54:93:74: 86:bb:48:2c:eb:c9:73:40:d2:41:34:7e:6f:6c:ef: 29:4f:36:28:76:ca:b6:99:d9:6b:27:48:9f:65:04: 6b:67:e1:3d:08:7e:36:ed:92:3e:d4:42:78:d9:ee: 8c:00:28:c0:6e:c5:cd:94:e7:57:2e:08:a3:23:42: df:51:36:b1:d2:e6:66:6c:6b:d5:f2:cd:29:ed:1b: c6:3f:a5:bd:71:92:6c:5f:a1:03:06:29:82:1e:5f: 5b:89:34:9b:aa:76:2e:30:18:c3:05:11:24:e9:f1: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:46:5D:5C:22:AE:D4:C5:A7:40:94:07:A0:2B:4E:61:AE:3E:9A X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9a:16:4f:1c:1f:48:59:1b:e6:ba:ff:29:ce:77:21:4b:a3: a0:ca:45:c5:3a:c8:a5:a2:d4:c4:9d:4f:94:f6:93:ce:e6:38: 8c:29:74:47:97:e6:bc:9b:16:35:b7:c6:ba:71:63:32:9a:d6: d3:ba:d2:72:b6:fb:b0:02:12:ae:d4:3f:d7:b9:0f:5e:c4:29: 97:f6:c4:01:82:78:4e:db:08:96:e2:5b:c1:b6:b2:4c:f6:95: c3:2b:3d:ac:b2:9b:08:75:ae:a5:3b:74:ce:3d:fd:a1:08:5c: a6:6d:70:71:10:18:a5:73:d4:d8:09:b8:8c:06:fc:83:d1:9e: 14:84:a3:68:f8:63:6c:22:3e:50:a6:48:38:e5:30:76:2f:ec: 12:e6:eb:2a:7d:ed:3e:9c:59:4a:37:65:05:79:6e:f3:78:5e: 8c:5b:78:2e:e6:91:e9:85:8b:06:f8:b6:80:cc:1e:91:db:68: 29:23:64:cb:a9:4e:6a:3d:99:93:2f:76:dc:c8:cf:16:7f:f4: b1:40:a5:51:85:87:6a:26:d2:62:12:b4:14:31:e0:89:1c:af: 9d:7b:e9:12:08:8e:d8:26:66:dd:49:98:23:50:9b:26:af:76: 6e:09:d6:3e:ea:26:ed:dc:ef:7d:90:59:0a:5e:b3:00:e0:ea: ba:62:59:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwOTE5MDYxNjQyWhcNMjYwOTI2MDYxNjQyWjAYMRYwFAYD VQQDEw02YWFlMjhjYS1lMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLT9kta6syWxTUmntDCjkbOInmHoiP3rJBHBK7XVa2S9X4V0DzVkJ67O2+6I 5HBRRmW5jPqstiQlD1n2eSB7ZtKw7EGY+yxAJApxZKqdpMBVgYTjr1yTMdFL3roN B3bMf4wVulEtIGnfk3grVoW5NKSaRcKqrcUKW/GV/89X5Gty7q1y+2iSnb1GPRHu 0VqTDi5Uk3SGu0gs68lzQNJBNH5vbO8pTzYodsq2mdlrJ0ifZQRrZ+E9CH427ZI+ 1EJ42e6MACjAbsXNlOdXLgijI0LfUTax0uZmbGvV8s0p7RvGP6W9cZJsX6EDBimC Hl9biTSbqnYuMBjDBREk6fE5vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8uRl1c Iq7UxadAlAegK05hrj6aMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgZoWTxwfSFkb5rr/Kc53IUujoMpFxTrIpaLUxJ1PlPaTzuY4jCl0R5fmvJsW NbfGunFjMprW07rScrb7sAISrtQ/17kPXsQpl/bEAYJ4TtsIluJbwbayTPaVwys9 rLKbCHWupTt0zj39oQhcpm1wcRAYpXPU2Am4jAb8g9GeFISjaPhjbCI+UKZIOOUw di/sEubrKn3tPpxZSjdlBXlu83hejFt4LuaR6YWLBvi2gMwekdtoKSNky6lOaj2Z ky923MjPFn/0sUClUYWHaibSYhK0FDHgiRyvnXvpEgiO2CZm3UmYI1CbJq92bgnW Puom7dzvfZBZCl6zAODqumJZgg== -----END CERTIFICATE-----Generated at Sun Sep 20 00:22:12 2026 by rpki-client