$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: +0x70mXx0JUW1oPkrr3nHNqj1TPnG9vb94scj3Dq7DU= Subject key identifier: 0F:56:5B:3B:44:66:16:07:80:96:F5:06:0E:7E:31:6F:8C:DB:C5:F1 Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 05B9 Signing time: Thu 22 Oct 2026 23:12:03 +0000 Manifest this update: Thu 22 Oct 2026 23:12:02 +0000 Manifest next update: Thu 29 Oct 2026 23:12:02 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: UbW+ZZwISmgyiiLC1JfqTeDGKTiCoRgf76hZMvsq7T0=) 2: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=) 3: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=) 4: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Oct 22 23:12:02 2026 GMT Not After : Oct 29 23:12:02 2026 GMT Subject: CN=6ada9842-d80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:50:9b:d5:8f:55:49:84:fc:dc:3a:dc:6d: e8:50:b0:af:d0:28:b5:05:b0:46:08:ad:3f:85:52: ba:f5:fb:09:95:da:42:8f:63:82:7b:b4:5d:6a:bb: 91:52:d6:60:8b:d5:82:de:76:6e:4c:c2:a0:b4:20: 97:71:de:ff:41:a4:cc:5a:fa:b8:b5:52:26:bb:84: c6:2f:72:db:5a:4c:a1:6c:ea:6c:01:f9:d0:b5:3e: 8b:13:4e:7b:23:70:40:1b:71:9f:62:51:4f:cd:af: 87:4d:b6:05:a4:1f:94:e2:a7:d7:93:35:e0:8f:5b: 4e:6c:4a:e6:05:20:3e:be:7f:fb:42:b9:bc:a2:f1: e4:41:4e:82:6a:e1:b9:c6:6c:1e:9e:63:2c:71:64: 76:ad:4a:c1:8f:8a:e2:fe:5a:b8:d7:f2:a8:e2:70: 03:c6:8b:fa:b2:1e:26:9b:17:48:ce:47:fc:f0:10: 65:9e:c7:45:2f:c9:24:7d:4e:60:78:bc:7c:22:32: f0:54:76:f4:57:f1:08:09:09:af:19:c6:e9:c1:7a: 48:8f:26:f3:1b:67:6f:20:96:96:e8:5f:09:41:ae: 8b:b6:4e:c7:cb:ca:55:62:e1:3a:2a:ff:3e:ef:29: 55:20:fd:2d:3a:16:16:a3:75:0b:26:cb:88:66:b7: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:56:5B:3B:44:66:16:07:80:96:F5:06:0E:7E:31:6F:8C:DB:C5:F1 X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2a:b5:b3:cf:3c:fe:2c:68:9d:73:e3:f4:d6:86:08:58:7d: a4:12:f9:aa:d2:e9:99:65:5d:2c:bb:e7:eb:37:0c:a4:a4:0d: 03:bc:a7:99:46:3f:72:51:7f:34:90:50:9f:0b:62:7f:1c:52: 12:d2:c8:66:14:e7:03:75:6f:69:ae:19:d8:bd:f0:38:16:a2: fe:8f:0d:12:17:c4:6f:ce:e8:57:32:93:68:e8:45:c6:9b:fd: 35:ec:19:46:a7:d4:01:01:34:b4:be:de:b8:94:2f:01:e9:1d: ed:e3:e3:cc:08:6a:93:6c:cf:97:e6:55:12:1f:cb:d0:1a:af: a2:3a:10:6a:da:53:28:02:fb:80:a9:aa:23:bf:28:dc:7d:0b: 68:54:dc:c8:8a:ab:14:f1:68:29:c0:25:60:84:63:aa:50:6f: 23:e7:69:28:6b:7d:1e:74:43:e8:42:ab:46:ac:ae:cd:ad:4d: 55:4c:37:1a:03:06:c3:a9:84:a7:d3:cd:5c:e9:cb:25:43:b4: dc:35:31:cc:24:5c:ce:83:3e:16:04:6e:84:04:ac:c8:fb:6f: 61:f4:86:96:31:a3:bb:a2:53:01:3a:9c:fc:b5:bf:34:a1:53: bd:58:b6:85:70:ba:91:79:2f:79:b0:e3:bc:95:da:30:6f:6b: c2:e2:81:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYxMDIyMjMxMjAyWhcNMjYxMDI5MjMxMjAyWjAYMRYwFAYD VQQDEw02YWRhOTg0Mi1kODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXZQm9WPVUmE/Nw63G3oULCv0Ci1BbBGCK0/hVK69fsJldpCj2OCe7RdaruR UtZgi9WC3nZuTMKgtCCXcd7/QaTMWvq4tVImu4TGL3LbWkyhbOpsAfnQtT6LE057 I3BAG3GfYlFPza+HTbYFpB+U4qfXkzXgj1tObErmBSA+vn/7Qrm8ovHkQU6CauG5 xmwenmMscWR2rUrBj4ri/lq41/Ko4nADxov6sh4mmxdIzkf88BBlnsdFL8kkfU5g eLx8IjLwVHb0V/EICQmvGcbpwXpIjybzG2dvIJaW6F8JQa6Ltk7Hy8pVYuE6Kv8+ 7ylVIP0tOhYWo3ULJsuIZrfXEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9WWztE ZhYHgJb1Bg5+MW+M28XxMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACiq1s888/ixonXPj9NaGCFh9pBL5qtLpmWVdLLvn6zcMpKQNA7ynmUY/clF/ NJBQnwtifxxSEtLIZhTnA3Vvaa4Z2L3wOBai/o8NEhfEb87oVzKTaOhFxpv9NewZ RqfUAQE0tL7euJQvAekd7ePjzAhqk2zPl+ZVEh/L0BqvojoQatpTKAL7gKmqI78o 3H0LaFTcyIqrFPFoKcAlYIRjqlBvI+dpKGt9HnRD6EKrRqyuza1NVUw3GgMGw6mE p9PNXOnLJUO03DUxzCRczoM+FgRuhASsyPtvYfSGljGju6JTATqc/LW/NKFTvVi2 hXC6kXkvebDjvJXaMG9rwuKBlw== -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:50 2026 by rpki-client