$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft File: ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft (raw, json) Hash identifier: wscHswnXqL5I4vkYPKClQFM0zsoC0orLjP6g3H6PAy8= Subject key identifier: B1:6C:44:92:D6:1B:BC:64:FE:55:2B:10:61:D9:0E:54:77:92:3F:02 Authority key identifier: 7A:12:4F:EE:B7:C5:CF:31:F4:49:8F:E4:D8:C1:1D:04:9B:43:8D:8D Certificate issuer: /CN=A911F4E6/serialNumber=7A124FEEB7C5CF31F4498FE4D8C11D049B438D8D Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft Manifest number: 08 Signing time: Wed 07 Oct 2026 09:52:23 +0000 Manifest this update: Wed 07 Oct 2026 09:52:23 +0000 Manifest next update: Wed 14 Oct 2026 09:52:23 +0000 Files and hashes: 1: ehJP7rfFzzH0SY_k2MEdBJtDjY0.crl (hash: fj75Ho+jLcf38mgLdb3SNlEPe8vsiILXASGJZsGiYY0=) 2: 8D6FCCF0B89411F19B3D06F05E11F970.roa (hash: BpgxC8vKKSSu92+gZlF5y9BC+cA+SxlbGNdRhsfEoVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.crl rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F4E6, serialNumber=7A124FEEB7C5CF31F4498FE4D8C11D049B438D8D Validity Not Before: Oct 7 09:52:23 2026 GMT Not After : Oct 14 09:52:23 2026 GMT Subject: CN=6ac61657-3f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:79:75:62:10:12:88:20:5d:d6:03:37:47: 73:17:19:de:1f:3e:84:eb:93:4e:6d:b0:2b:f7:60: 1b:15:16:23:3b:cd:3c:32:95:5a:e5:c9:28:2b:3f: 5d:9a:72:b7:9d:c3:b6:38:bf:bc:d6:8a:c0:ba:6b: 67:c7:be:37:98:b0:95:29:8c:3c:b8:2e:cb:67:3d: 19:be:54:ff:fe:cb:62:36:7b:9c:d0:c8:d6:de:5d: b4:74:a3:9c:56:d2:02:94:88:1e:de:df:ef:cc:9e: f6:dc:3c:fc:40:fd:6b:e6:78:e4:6e:8f:6f:75:b4: 6f:de:ff:16:d8:b6:18:1f:03:be:74:76:81:a1:c9: 73:82:5a:3c:95:37:b7:ac:e7:95:74:67:a0:1e:9f: f1:51:44:a7:e4:16:f7:18:b7:48:c6:83:a8:2b:a8: 5f:13:6b:15:c2:5c:05:83:62:02:a1:32:05:d0:56: 4e:b8:92:97:67:ec:53:94:9c:b3:89:4b:2a:ee:c3: 1d:91:79:da:f4:fe:f3:fd:23:9e:2d:70:52:c0:88: 41:e1:06:50:c1:bd:33:ae:a1:bf:3c:fe:48:ba:be: da:cb:36:33:07:48:7f:0f:fd:4b:ac:d9:32:9b:99: 03:4b:43:cd:ac:bc:e8:8d:66:b1:49:c4:b2:f2:3e: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6C:44:92:D6:1B:BC:64:FE:55:2B:10:61:D9:0E:54:77:92:3F:02 X509v3 Authority Key Identifier: keyid:7A:12:4F:EE:B7:C5:CF:31:F4:49:8F:E4:D8:C1:1D:04:9B:43:8D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:af:6f:41:4a:3b:a6:cb:3c:b6:8a:b0:84:80:ea:d9:6e:9d: 0e:cb:0a:fc:c4:7b:36:59:f9:29:83:f9:50:34:94:33:f3:fa: 9b:1f:87:25:1f:ff:b4:ca:84:62:fd:4a:89:ac:69:5c:12:c1: bb:63:38:2f:17:94:5e:7f:c1:3a:74:0b:22:2b:80:54:fa:a1: 26:c7:67:bf:a9:91:8f:be:b1:a4:8e:34:b2:4f:d4:e3:a4:9e: f9:53:75:f4:6f:21:0c:ca:e8:bb:fe:4c:61:01:0c:58:4a:fd: 10:ae:5f:19:b2:d5:d3:69:07:f7:1a:3d:bf:45:6e:d7:6e:63: 11:db:85:ee:b7:b4:7f:85:38:2e:de:e0:28:a5:d9:3d:cd:c3: a9:b8:76:ea:f9:1d:e9:36:57:da:69:c2:02:6c:da:14:40:9e: bd:47:11:2d:8a:83:2e:8e:92:66:36:0c:a0:09:5e:c5:a3:7e: f1:5c:c5:59:4e:e7:85:b1:64:0b:f6:42:0f:78:7b:4e:a6:88: 38:cd:42:c5:90:ab:33:88:c1:e8:8e:a6:28:a4:74:ee:8d:79: 39:3e:a5:bd:e7:3d:9b:ad:12:f4:a7:ee:15:22:46:73:ee:00: 80:d7:77:16:ec:a3:d7:16:68:4e:0b:5c:57:02:10:32:7d:e9: 27:f6:37:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjRFNjExMC8GA1UEBRMoN0ExMjRGRUVCN0M1Q0YzMUY0NDk4RkU0RDhDMTFEMDQ5 QjQzOEQ4RDAeFw0yNjEwMDcwOTUyMjNaFw0yNjEwMTQwOTUyMjNaMBgxFjAUBgNV BAMTDTZhYzYxNjU3LTNmOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOwHl1YhASiCBd1gM3R3MXGd4fPoTrk05tsCv3YBsVFiM7zTwylVrlySgrP12a credw7Y4v7zWisC6a2fHvjeYsJUpjDy4LstnPRm+VP/+y2I2e5zQyNbeXbR0o5xW 0gKUiB7e3+/MnvbcPPxA/WvmeORuj291tG/e/xbYthgfA750doGhyXOCWjyVN7es 55V0Z6Aen/FRRKfkFvcYt0jGg6grqF8TaxXCXAWDYgKhMgXQVk64kpdn7FOUnLOJ Syruwx2Redr0/vP9I54tcFLAiEHhBlDBvTOuob88/ki6vtrLNjMHSH8P/Uus2TKb mQNLQ82svOiNZrFJxLLyPgpPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsWxEktYb vGT+VSsQYdkOVHeSPwIwHwYDVR0jBBgwFoAUehJP7rfFzzH0SY/k2MEdBJtDjY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNEU2LzQ5MzQ2QjE4Qjg5 NDExRjE5Njc5RjhEQTVFMTFGOTcwL2VoSlA3cmZGenpIMFNZX2syTUVkQkp0RGpZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWhKUDdyZkZ6ekgwU1lfazJNRWRCSnREalkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NEU2LzQ5MzQ2QjE4Qjg5NDExRjE5Njc5RjhEQTVFMTFGOTcwL2VoSlA3cmZGenpI MFNZX2syTUVkQkp0RGpZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAor29BSjumyzy2irCEgOrZbp0Oywr8xHs2Wfkpg/lQNJQz8/qbH4clH/+0yoRi /UqJrGlcEsG7YzgvF5Ref8E6dAsiK4BU+qEmx2e/qZGPvrGkjjSyT9TjpJ75U3X0 byEMyui7/kxhAQxYSv0Qrl8ZstXTaQf3Gj2/RW7XbmMR24Xut7R/hTgu3uAopdk9 zcOpuHbq+R3pNlfaacICbNoUQJ69RxEtioMujpJmNgygCV7Fo37xXMVZTueFsWQL 9kIPeHtOpog4zULFkKsziMHojqYopHTujXk5PqW95z2brRL0p+4VIkZz7gCA13cW 7KPXFmhOC1xXAhAyfekn9je6 -----END CERTIFICATE-----Generated at Thu Oct 8 16:49:30 2026 by rpki-client