$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json) Hash identifier: 3EiBjBukw389fvG5BaztAP3O5FJAb3gBd36Nh3QXppk= Subject key identifier: 62:7E:3A:49:27:86:65:35:62:96:43:88:A0:4C:DA:48:B6:7B:F6:3E Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft Manifest number: 0167 Signing time: Sun 25 Oct 2026 05:25:10 +0000 Manifest this update: Sun 25 Oct 2026 05:25:10 +0000 Manifest next update: Sun 01 Nov 2026 05:25:10 +0000 Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: tW8pbSur1SUOkfPywNNewdu1zhQL75Bzi5weqyj7elg=) 2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Validity Not Before: Oct 25 05:25:10 2026 GMT Not After : Nov 1 05:25:10 2026 GMT Subject: CN=6add92b6-404a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:57:43:05:bb:5a:57:cb:37:2a:15:25:81: a1:00:e3:5a:89:7c:38:1f:10:1a:ba:3a:e7:9b:42: e7:85:c4:e1:f0:6a:22:e8:33:f0:6f:07:8d:96:35: a8:94:48:4b:34:3a:53:a3:dd:fa:14:ae:cf:5a:7b: 74:10:c2:e2:11:a8:80:15:72:d1:7e:ff:98:97:31: 0b:14:5d:dc:e9:4a:63:bd:7f:7b:66:c7:3d:15:e3: 8e:cb:67:1e:1b:21:0d:48:58:28:d7:dd:64:7e:8b: e0:b3:83:e3:44:6c:5b:d1:f0:e9:2b:b2:da:aa:80: 4b:77:06:bb:db:fd:4b:c6:58:83:c1:61:12:af:46: 17:3a:cd:83:ae:db:e5:4d:db:c2:d4:1a:b5:58:d7: de:0c:17:c6:80:9b:88:45:af:23:88:86:03:6a:e4: f1:e0:26:20:12:10:e0:d2:d3:ee:f4:9e:b3:80:d8: 50:cd:d7:d0:0a:8e:88:99:13:ab:fc:a2:35:32:40: 11:a4:93:36:b4:e9:6c:68:25:13:dc:bb:51:06:38: ca:ca:28:5d:05:ad:00:a1:13:8e:3b:2c:b6:79:c8: df:30:79:4b:5a:f8:92:2f:bc:ea:02:0f:54:e2:24: ac:43:9b:53:d5:95:02:ef:da:b5:2d:9e:25:7f:5e: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7E:3A:49:27:86:65:35:62:96:43:88:A0:4C:DA:48:B6:7B:F6:3E X509v3 Authority Key Identifier: keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:43:30:ab:b8:57:91:cc:66:fa:9c:ef:2b:b9:ab:ff:09:59: 96:33:ce:a5:3f:38:16:22:76:a1:7c:bc:ef:8a:1c:ae:9e:0f: ec:e8:25:8b:5e:e2:fa:c7:ef:a3:8c:5d:b8:52:4e:f0:f3:c6: 63:9e:a2:e4:21:45:de:6b:cf:30:f4:c5:04:e4:1b:3e:80:7f: fc:56:5f:21:2e:e2:56:91:4c:50:b1:d4:0a:00:f8:d7:60:46: 28:e1:d6:6b:04:11:6d:6f:56:5a:95:97:4b:25:75:b7:c5:b7: 83:aa:63:63:e8:e5:f7:ed:76:0f:2a:11:34:2f:a9:46:e3:32: 69:ca:83:3a:cf:60:6a:af:e9:f5:e7:a8:25:6e:d1:45:f5:d8: 35:be:33:07:fa:71:00:9c:5f:63:22:26:f9:ba:d4:a1:2a:db: bf:2c:0a:d4:6a:d5:dd:26:9d:40:28:77:5f:a1:de:56:30:72: e1:9d:1a:e7:94:2d:86:83:89:13:e4:60:06:88:f6:59:b0:88: b9:02:74:85:58:cd:3d:45:7e:86:bf:5b:4a:9a:04:89:f2:de: f0:9b:01:b2:04:e2:94:ee:27:53:3e:f3:bb:7a:65:2e:fd:76: 67:9e:9f:bb:5a:70:e1:0d:f0:c8:bd:01:46:91:ec:15:bc:97: 3e:b5:85:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC NjcxRjg2RjMwHhcNMjYxMDI1MDUyNTEwWhcNMjYxMTAxMDUyNTEwWjAYMRYwFAYD VQQDEw02YWRkOTJiNi00MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncBXQwW7WlfLNyoVJYGhAONaiXw4HxAaujrnm0LnhcTh8Goi6DPwbweNljWo lEhLNDpTo936FK7PWnt0EMLiEaiAFXLRfv+YlzELFF3c6UpjvX97Zsc9FeOOy2ce GyENSFgo191kfovgs4PjRGxb0fDpK7LaqoBLdwa72/1LxliDwWESr0YXOs2Drtvl TdvC1Bq1WNfeDBfGgJuIRa8jiIYDauTx4CYgEhDg0tPu9J6zgNhQzdfQCo6ImROr /KI1MkARpJM2tOlsaCUT3LtRBjjKyihdBa0AoROOOyy2ecjfMHlLWviSL7zqAg9U 4iSsQ5tT1ZUC79q1LZ4lf15HaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJ+Okkn hmU1YpZDiKBM2ki2e/Y+MB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9FOTY0ODlBRUFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhB dkpua1cxbDFUX2UyY2Zodk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbUMwq7hXkcxm+pzvK7mr/wlZljPOpT84FiJ2oXy874ocrp4P7Ogli17i+sfv o4xduFJO8PPGY56i5CFF3mvPMPTFBOQbPoB//FZfIS7iVpFMULHUCgD412BGKOHW awQRbW9WWpWXSyV1t8W3g6pjY+jl9+12DyoRNC+pRuMyacqDOs9gaq/p9eeoJW7R RfXYNb4zB/pxAJxfYyIm+brUoSrbvywK1GrV3SadQCh3X6HeVjBy4Z0a55QthoOJ E+RgBoj2WbCIuQJ0hVjNPUV+hr9bSpoEifLe8JsBsgTilO4nUz7zu3plLv12Z56f u1pw4Q3wyL0BRpHsFbyXPrWFEQ== -----END CERTIFICATE-----Generated at Mon Oct 26 08:58:57 2026 by rpki-client