$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft File: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft (raw, json) Hash identifier: m8VlvI3yRxrQtTtU91zgY+x7l+gBxX/T8w26OQ/x00E= Subject key identifier: 42:7E:D1:AC:17:A6:7E:77:C0:8A:0D:95:A2:9D:14:4C:B5:A1:5C:8D Authority key identifier: CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 Certificate issuer: /CN=A9124C06/serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft Manifest number: 23 Signing time: Wed 21 Oct 2026 09:31:26 +0000 Manifest this update: Wed 21 Oct 2026 09:31:25 +0000 Manifest next update: Wed 28 Oct 2026 09:31:25 +0000 Files and hashes: 1: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl (hash: y1FMui7JIFeUqWhRnlrqvYTaWRMsx1yr2p3yoCg70/0=) 2: 8597EE8AA4E011F1A0ADAD456711F970.roa (hash: DV23XeE7JQliptVufUxF5lM38uYKhAPS5yKJOSyijiE=) 3: EF2CC9E0A29911F1827177C63211F970.roa (hash: HJA/q04RDyl2JEG0dRoW3kH0vkMNWEvJkvC8X6wdzMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124C06, serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Validity Not Before: Oct 21 09:31:25 2026 GMT Not After : Oct 28 09:31:25 2026 GMT Subject: CN=6ad8866e-3521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ba:99:5b:cc:f8:c0:ce:96:5f:78:3a:82:e9: ad:51:ae:c8:1d:98:9a:77:48:70:c2:8e:31:37:5b: 4e:f0:28:31:fe:89:39:84:04:94:7d:2f:92:c3:7d: 44:57:e0:c6:d4:db:ad:53:64:da:f6:c3:09:23:08: ee:0a:98:97:f5:94:8c:d1:7a:f3:53:87:e0:53:9e: 37:f5:ea:1a:81:41:b9:be:49:00:91:8c:2a:8c:20: d7:2a:ea:92:5a:dc:91:2e:d6:6c:fd:d9:7c:ec:c4: 58:ab:07:d2:cf:b6:b9:1e:09:d2:d5:b7:da:74:68: 64:4b:1a:73:9e:30:45:d9:92:1f:06:67:b1:9e:50: cd:ed:42:8e:08:c5:27:c9:f2:86:a1:ed:87:31:e7: 24:08:3b:5b:02:c1:ac:da:06:e6:6d:47:23:7d:09: 7b:ec:ab:a5:b4:2b:5a:e4:20:6f:4b:5d:2e:3e:20: af:8a:6a:14:5f:06:54:c4:5b:b3:47:b2:02:25:16: 1e:b6:fb:10:77:d6:49:89:e3:0d:90:10:11:27:88: 47:ad:c0:0c:72:c9:24:30:d8:79:c4:f3:7e:c6:3f: ee:45:1a:02:55:e6:72:34:d7:64:a7:32:32:d1:69: 99:5a:08:d3:3c:ba:e3:fd:08:bc:77:71:e2:b9:2f: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7E:D1:AC:17:A6:7E:77:C0:8A:0D:95:A2:9D:14:4C:B5:A1:5C:8D X509v3 Authority Key Identifier: keyid:CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:e4:ce:51:2b:00:83:42:1f:46:b5:49:c5:9d:aa:77:63: cb:72:ea:31:cd:c9:58:61:64:30:93:19:67:6e:e7:52:a9:e9: cb:71:be:91:db:b7:7b:af:d1:e1:33:b0:40:f3:75:f4:43:59: ef:aa:38:95:fe:c8:48:64:7d:eb:e2:4f:c1:f5:43:95:f2:06: ff:6f:cd:cc:1f:72:9a:d5:22:d2:8b:9c:bd:0f:38:7d:47:64: 0c:06:a5:09:f0:05:01:9b:9d:98:a5:7e:b1:55:ff:dc:95:ca: 0f:e6:51:e6:7b:ea:f1:3e:f7:94:b4:d7:3e:10:fb:6e:27:2c: 62:2e:b0:48:04:90:86:2c:3a:30:f7:c7:42:ff:bf:20:ca:5d: ce:6a:0a:cc:16:d8:ab:de:1d:d5:56:7e:4f:02:ef:76:3b:e7: 13:ef:03:eb:52:d4:d5:a0:01:29:c3:70:cc:01:04:c0:8f:41: 29:15:ee:f8:2d:3e:ca:5b:77:dd:ab:91:77:3e:9d:01:48:4a: db:0d:04:dd:f5:4c:d2:c0:9d:41:24:7b:1d:cb:20:2c:e0:fe: 56:e7:75:a6:d7:3d:cf:e8:a6:61:2e:36:6e:78:d6:01:7d:d1: 6d:36:10:5b:c2:8a:f6:df:4e:fa:88:3b:51:20:61:a4:80:98: 09:69:06:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NEMwNjExMC8GA1UEBRMoQ0MyQkNBRUM1NzNERkU1NDI4RUMzMzc1QzZGQTVENzBD NUVBMzU3MDAeFw0yNjEwMjEwOTMxMjVaFw0yNjEwMjgwOTMxMjVaMBgxFjAUBgNV BAMTDTZhZDg4NjZlLTM1MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvuplbzPjAzpZfeDqC6a1RrsgdmJp3SHDCjjE3W07wKDH+iTmEBJR9L5LDfURX 4MbU261TZNr2wwkjCO4KmJf1lIzRevNTh+BTnjf16hqBQbm+SQCRjCqMINcq6pJa 3JEu1mz92XzsxFirB9LPtrkeCdLVt9p0aGRLGnOeMEXZkh8GZ7GeUM3tQo4IxSfJ 8oah7Ycx5yQIO1sCwazaBuZtRyN9CXvsq6W0K1rkIG9LXS4+IK+KahRfBlTEW7NH sgIlFh62+xB31kmJ4w2QEBEniEetwAxyySQw2HnE837GP+5FGgJV5nI012SnMjLR aZlaCNM8uuP9CLx3ceK5LycxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQn7RrBem fnfAig2Vop0UTLWhXI0wHwYDVR0jBBgwFoAUzCvK7Fc9/lQo7DN1xvpdcMXqNXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0QzA2LzcxRkNDNjI4QTFD QzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xRbzdETjF4dnBkY01YcU5Y QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekN2SzdGYzlfbFFvN0ROMXh2cGRjTVhxTlhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 QzA2LzcxRkNDNjI4QTFDQzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xR bzdETjF4dnBkY01YcU5YQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB48+TOUSsAg0IfRrVJxZ2qd2PLcuoxzclYYWQwkxlnbudSqenLcb6R27d7r9Hh M7BA83X0Q1nvqjiV/shIZH3r4k/B9UOV8gb/b83MH3Ka1SLSi5y9Dzh9R2QMBqUJ 8AUBm52YpX6xVf/clcoP5lHme+rxPveUtNc+EPtuJyxiLrBIBJCGLDow98dC/78g yl3OagrMFtir3h3VVn5PAu92O+cT7wPrUtTVoAEpw3DMAQTAj0EpFe74LT7KW3fd q5F3Pp0BSErbDQTd9UzSwJ1BJHsdyyAs4P5W53Wm1z3P6KZhLjZueNYBfdFtNhBb wor23076iDtRIGGkgJgJaQYN -----END CERTIFICATE-----Generated at Thu Oct 22 14:52:53 2026 by rpki-client