$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: RMMlVpROnUEtSSzOK04GfZLBGFbU5m5YLbQCOGgctA0= Subject key identifier: 3C:E2:68:5E:BB:8E:57:93:BD:DD:DF:95:01:71:16:3F:FC:0A:71:70 Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0CA2 Signing time: Tue 06 Oct 2026 18:44:08 +0000 Manifest this update: Tue 06 Oct 2026 18:44:08 +0000 Manifest next update: Tue 13 Oct 2026 18:44:08 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: 1aOmwBP7+NF3uOBYR4RQUq8hEswgXHdMGKV7++4Kamc=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: BtTQvQkkCMyORN0/OniWB7TxZ5Yt0iEdn/t0KB8XF1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Oct 6 18:44:08 2026 GMT Not After : Oct 13 18:44:08 2026 GMT Subject: CN=6ac54178-612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:70:c2:c8:6c:5c:ca:53:69:83:29:ea:a2:a5: 4b:9f:cd:37:63:4c:b1:f9:3f:ec:da:b9:12:ad:f9: 3c:03:18:7e:1d:7f:71:80:25:40:03:69:7a:2d:31: 3e:0f:10:5f:55:fa:7f:49:95:87:d9:ed:ca:01:bd: 81:f1:aa:fb:30:b1:1a:13:e5:97:73:7e:a8:db:f7: e3:f3:47:d7:de:0e:21:48:be:d7:fa:17:a9:38:42: bf:9e:ff:d1:7f:d0:a8:cd:c8:c5:23:66:2f:35:b7: 82:09:67:63:56:df:a9:90:53:a2:28:56:5f:0d:0f: ed:b3:c3:d7:7b:a6:12:ba:33:ec:22:74:eb:95:38: c7:1b:29:29:58:a7:4d:64:36:b2:00:2a:85:07:93: 45:80:a0:b0:d6:66:e6:04:c6:cf:0a:63:ec:c4:dd: 44:83:c4:98:8f:5b:94:e9:4e:3f:c5:90:34:dc:2f: 17:d4:91:f3:b7:16:33:d0:17:f8:9e:5f:70:bc:ff: 46:89:bb:95:46:a2:90:81:a9:13:ac:c3:31:7a:64: 32:aa:c1:cd:78:8b:da:37:82:7a:5b:66:c6:ed:4a: 82:07:27:63:bc:5a:0a:bc:a0:9b:44:12:d1:38:4a: 5c:de:99:57:cf:d3:ca:71:34:d3:21:98:3b:74:cc: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E2:68:5E:BB:8E:57:93:BD:DD:DF:95:01:71:16:3F:FC:0A:71:70 X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a8:b4:25:ed:96:9a:40:15:c8:cb:b8:90:fe:e9:e6:85:6b: 5e:40:4b:20:9a:e4:4a:5d:84:93:52:0b:93:d7:78:af:a9:bd: c7:d0:ea:0a:c2:b3:ca:f6:82:18:c0:a5:22:25:02:cd:a7:1a: f4:37:51:80:a3:69:94:14:e1:5c:52:c7:84:ff:bb:b7:1c:cd: b3:da:5b:6c:42:fc:3e:47:9a:92:c7:28:9e:af:15:c9:7c:7a: 1d:6b:a2:cb:ea:a2:6c:12:36:65:32:c8:33:26:99:eb:40:43: 36:73:44:a7:99:c8:90:3a:e4:28:a7:11:52:34:68:bf:76:27: 3e:99:49:70:8c:f9:ae:de:7a:78:28:4b:f3:e0:d8:f4:cc:7a: 17:42:ab:79:f8:df:cf:e5:cd:40:e1:71:9b:23:54:ef:ea:2f: d5:57:9a:69:da:72:fe:2f:1c:2f:aa:dd:e3:30:fc:65:28:1a: b5:da:2f:35:d9:d4:34:e9:6c:85:ed:c3:d1:64:50:29:93:b2: e4:84:4c:30:d5:d2:f1:5d:38:4f:19:5c:19:5e:3a:c4:47:78: 01:ac:11:cf:fb:f2:cc:5c:59:a7:84:8b:5a:2b:15:14:57:9d: ce:56:a9:da:74:54:f2:1b:52:e1:94:85:bd:53:7f:54:92:e3: 86:fb:72:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjYxMDA2MTg0NDA4WhcNMjYxMDEzMTg0NDA4WjAYMRYwFAYD VQQDEw02YWM1NDE3OC02MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93DCyGxcylNpgynqoqVLn803Y0yx+T/s2rkSrfk8Axh+HX9xgCVAA2l6LTE+ DxBfVfp/SZWH2e3KAb2B8ar7MLEaE+WXc36o2/fj80fX3g4hSL7X+hepOEK/nv/R f9CozcjFI2YvNbeCCWdjVt+pkFOiKFZfDQ/ts8PXe6YSujPsInTrlTjHGykpWKdN ZDayACqFB5NFgKCw1mbmBMbPCmPsxN1Eg8SYj1uU6U4/xZA03C8X1JHztxYz0Bf4 nl9wvP9GibuVRqKQgakTrMMxemQyqsHNeIvaN4J6W2bG7UqCBydjvFoKvKCbRBLR OEpc3plXz9PKcTTTIZg7dMwRCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDziaF67 jleTvd3flQFxFj/8CnFwMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZai0Je2WmkAVyMu4kP7p5oVrXkBLIJrkSl2Ek1ILk9d4r6m9x9DqCsKzyvaC GMClIiUCzaca9DdRgKNplBThXFLHhP+7txzNs9pbbEL8Pkeaksconq8VyXx6HWui y+qibBI2ZTLIMyaZ60BDNnNEp5nIkDrkKKcRUjRov3YnPplJcIz5rt56eChL8+DY 9Mx6F0Krefjfz+XNQOFxmyNU7+ov1Veaadpy/i8cL6rd4zD8ZSgatdovNdnUNOls he3D0WRQKZOy5IRMMNXS8V04TxlcGV46xEd4AawRz/vyzFxZp4SLWisVFFedzlap 2nRU8htS4ZSFvVN/VJLjhvty+w== -----END CERTIFICATE-----Generated at Thu Oct 8 20:24:56 2026 by rpki-client