$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: EId0rABIeQR3krYXlSAzH7wme5mNgxCv+Syd1btYEK4= Subject key identifier: 01:93:76:B4:BC:70:09:3C:08:9D:39:06:8B:0A:C5:27:18:82:12:93 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0B6D Signing time: Mon 26 Oct 2026 19:12:06 +0000 Manifest this update: Mon 26 Oct 2026 19:12:06 +0000 Manifest next update: Mon 02 Nov 2026 19:12:06 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: M4x2geR8hfD7G9uczwZybcJHgFbxUHdeXslys+ajez8=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: PkmkD7mdfkW5Gdlzs6boJTRQrLzRKhSTB7UEhNNKa3U=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: JbKFPnuRth/AddBiK55OMld90fiS3Vh4UaoSsZlNznM=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: op4065DriIrThsHVWYDHZ/6L/WyU67kbQnQ0mDq/Nro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Oct 26 19:12:06 2026 GMT Not After : Nov 2 19:12:06 2026 GMT Subject: CN=6adfa606-970f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:f6:34:fa:5c:0a:3b:ad:a8:a1:e1:50:77: ce:07:e6:35:8c:07:a8:1d:a5:ac:35:6a:70:93:f1: 9d:8e:84:1e:cb:44:e1:cc:b3:17:45:ec:c3:11:9a: 1c:21:a9:42:11:f5:2e:8f:a4:55:66:17:f8:13:07: 8d:a8:00:80:2f:00:93:15:dc:25:51:30:0a:cf:d4: 61:d3:6d:90:f3:e4:93:fc:8e:13:b4:f3:82:22:47: e1:a0:5e:66:3d:8d:96:0c:92:68:10:d5:e9:8a:0e: a1:64:c9:a2:9f:51:97:b3:31:c7:58:f1:c8:11:13: 82:00:dd:ac:c6:d2:9d:c3:36:af:0e:79:38:ea:14: 65:00:40:6e:00:5b:7f:29:b2:62:b9:f5:5d:19:59: 42:09:cf:d2:6d:ad:4a:25:ca:0a:f3:c9:35:e8:7e: b4:4d:fc:19:fe:28:73:7c:ff:b3:fa:9e:6d:03:b4: 47:0b:75:82:01:e0:53:73:a0:35:2c:1f:16:66:00: a1:2f:6d:b3:0f:1d:94:0c:db:58:be:ff:3f:49:78: d2:6a:93:2b:94:ea:a1:67:0b:df:2e:9c:99:53:27: 3a:d2:36:af:3f:18:be:4a:8f:bd:5e:a5:24:7c:c2: 93:83:8a:3f:08:05:ab:2b:56:55:75:3b:dd:02:0e: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:76:B4:BC:70:09:3C:08:9D:39:06:8B:0A:C5:27:18:82:12:93 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:10:b1:12:14:5a:a1:96:80:58:8a:34:9a:ce:28:bb:3b:6d: f8:3e:4d:ab:8d:ce:d3:5b:1f:f9:39:2f:c8:d6:1c:bc:03:10: 7c:97:0d:eb:23:03:08:e7:cd:09:24:4a:52:cb:7b:84:32:12: d7:fa:72:b1:13:4e:b9:11:0f:af:4b:76:23:6f:51:3b:db:13: 83:fb:c3:ad:8e:91:5d:28:86:19:49:e6:b5:e9:b5:f8:00:f6: fe:ac:ee:5e:97:a0:59:9b:43:c4:e0:94:c4:f5:50:e0:d4:13: 6a:2b:fb:16:fe:a7:e3:f5:9d:ce:3e:0b:e4:e7:12:51:65:05: 6f:89:da:d5:f0:47:77:f1:1a:1f:b0:cf:14:1f:59:1b:b3:ce: d4:00:62:58:7b:09:60:21:b2:2b:47:87:2d:d6:ed:f7:3b:4b: 7d:fd:f3:49:7d:4a:37:78:2a:5b:95:10:5e:34:b0:48:dd:4e: d4:26:af:1d:ff:69:fa:fa:67:35:96:b5:10:8e:f1:c2:1d:9a: c9:82:66:56:28:f0:79:2c:65:d6:db:f1:d6:e4:01:66:ee:f4: 17:47:5b:58:93:09:43:59:f0:fb:a4:18:67:52:b6:82:ab:48: be:1e:cf:7e:4b:0f:9f:3f:39:7c:bf:3c:04:fb:13:f2:e3:f4: b1:a4:f2:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjYxMDI2MTkxMjA2WhcNMjYxMTAyMTkxMjA2WjAYMRYwFAYD VQQDEw02YWRmYTYwNi05NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+X2NPpcCjutqKHhUHfOB+Y1jAeoHaWsNWpwk/GdjoQey0ThzLMXRezDEZoc IalCEfUuj6RVZhf4EweNqACALwCTFdwlUTAKz9Rh022Q8+ST/I4TtPOCIkfhoF5m PY2WDJJoENXpig6hZMmin1GXszHHWPHIEROCAN2sxtKdwzavDnk46hRlAEBuAFt/ KbJiufVdGVlCCc/Sba1KJcoK88k16H60TfwZ/ihzfP+z+p5tA7RHC3WCAeBTc6A1 LB8WZgChL22zDx2UDNtYvv8/SXjSapMrlOqhZwvfLpyZUyc60javPxi+So+9XqUk fMKTg4o/CAWrK1ZVdTvdAg7s5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGTdrS8 cAk8CJ05BosKxScYghKTMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPBCxEhRaoZaAWIo0ms4ouztt+D5Nq43O01sf+TkvyNYcvAMQfJcN6yMDCOfN CSRKUst7hDIS1/pysRNOuREPr0t2I29RO9sTg/vDrY6RXSiGGUnmtem1+AD2/qzu XpegWZtDxOCUxPVQ4NQTaiv7Fv6n4/Wdzj4L5OcSUWUFb4na1fBHd/EaH7DPFB9Z G7PO1ABiWHsJYCGyK0eHLdbt9ztLff3zSX1KN3gqW5UQXjSwSN1O1CavHf9p+vpn NZa1EI7xwh2ayYJmVijweSxl1tvx1uQBZu70F0dbWJMJQ1nw+6QYZ1K2gqtIvh7P fksPnz85fL88BPsT8uP0saTyGg== -----END CERTIFICATE-----Generated at Wed Oct 28 18:18:33 2026 by rpki-client