$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft File: SAzQQM6QucENq4TppH0Bd7fEO8w.mft (raw, json) Hash identifier: MZwT7aJ1QOQoYwaVsqC3TLu78NT+uMm/P3AgIPIPuDg= Subject key identifier: 46:AB:FF:75:0C:1F:7E:EA:36:23:B5:42:58:66:0F:A7:31:DB:44:1E Authority key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC Certificate issuer: /CN=A9125AAB/serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft Manifest number: 1F Signing time: Wed 21 Oct 2026 09:36:07 +0000 Manifest this update: Wed 21 Oct 2026 09:36:06 +0000 Manifest next update: Wed 28 Oct 2026 09:36:06 +0000 Files and hashes: 1: SAzQQM6QucENq4TppH0Bd7fEO8w.crl (hash: h/puF9B/qMjtE+aYWgYPu2OYm/fBD5AYYItYEf0tyn4=) 2: B3DE083CBE9011F196E0CE2D3C11F970.roa (hash: 3m0YrPkkjOWHqxNcp3W36Q+CLPfJ0wKfkEe7etWVrUA=) 3: 3CD5799CA81411F1ACF783166C11F970.roa (hash: k73Ngvm1ezkdKpCRSRtbpY3GE9dGVk7FjtJUuQJyN5Y=) 4: 371683BAA81511F1A2613F346C11F970.roa (hash: ZvobOfSHvKfkS0iZ8xobG9gfo4X0d2AGnndJbzDUNME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC Validity Not Before: Oct 21 09:36:06 2026 GMT Not After : Oct 28 09:36:06 2026 GMT Subject: CN=6ad88787-8357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:ac:b9:da:3b:3d:41:db:62:6b:fc:a1:77: 49:ec:25:e5:50:5b:ad:f9:0a:2b:47:eb:64:0a:de: 5b:bb:e4:5e:6f:d6:a2:8f:14:ff:bc:d8:31:d1:34: 08:e3:cb:70:9e:e4:2d:70:65:ec:6e:50:3d:e1:4f: a9:86:30:f2:f9:60:70:5b:13:3d:a2:22:c3:3d:5c: 02:21:69:54:51:90:d0:55:fb:71:6f:3d:56:6c:a5: af:80:b7:7e:3c:97:b1:b1:a4:6e:ee:1d:e4:43:93: 22:15:e1:87:83:0d:30:b5:da:4e:88:2a:84:28:0f: de:9b:15:23:93:08:ea:e6:d3:c7:0a:65:53:3a:21: 6f:ee:c4:b6:30:5b:8e:57:0a:a1:ed:74:77:80:b6: 56:08:56:f5:f6:dc:c7:11:93:dd:23:70:f0:5d:b5: d5:40:35:52:01:f2:26:54:64:e9:40:c4:05:85:3a: fe:f6:19:76:7e:dc:3a:36:02:9e:53:eb:c2:53:18: f3:37:52:5e:02:7d:5c:0b:5f:e8:16:7e:87:4e:92: 9b:df:00:2c:2e:49:c2:65:9d:c1:5c:52:d3:7f:a5: 85:65:58:91:2d:cc:3f:4c:7b:23:af:6f:04:9e:9e: d2:1d:fa:e2:1d:f4:a3:aa:f5:33:6b:4b:30:f5:52: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:FF:75:0C:1F:7E:EA:36:23:B5:42:58:66:0F:A7:31:DB:44:1E X509v3 Authority Key Identifier: keyid:48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0b:dd:81:9c:da:9d:4b:f3:01:54:d3:4b:2c:6f:81:a6:df: e3:07:c1:80:82:bd:92:c9:c3:f4:a1:5a:bd:72:17:9e:6b:03: e3:6f:84:df:d8:72:67:11:94:a2:af:b4:2f:3c:48:db:68:66: 1e:a9:13:b2:29:44:7c:7c:be:24:57:eb:63:1a:2d:47:68:7e: 06:84:39:d3:ba:9d:c3:94:45:f5:e7:b9:55:6f:5b:b5:ca:1a: 29:1b:c4:ba:91:9d:bf:2e:8d:d7:97:40:ac:00:b9:8d:8b:17: 16:79:a2:6a:c9:86:72:1e:a2:5f:3f:7f:c9:5d:d5:f8:85:98: af:4c:a1:cb:8d:6d:d6:5a:e0:a6:cf:ee:b6:89:93:08:97:c5: 15:45:61:64:bf:b2:25:8f:bf:7d:d4:d9:c0:e9:11:9b:72:c4: 2b:7e:bb:1a:b3:92:12:f9:15:c2:f1:34:32:d0:df:aa:63:2b: 0d:5a:a1:dd:b2:c2:2e:7c:56:eb:5a:83:e6:7b:7c:4e:8d:d2: b9:e6:38:9a:ea:72:65:56:a1:17:64:8d:7d:31:3b:88:0a:07: 0b:74:16:a0:d5:39:18:c1:21:fc:4c:21:10:e6:2e:de:8f:7b: 06:02:5a:9b:cb:74:98:9b:ff:b3:4e:f6:a2:be:c8:76:2e:27: fd:5b:01:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUFBQjExMC8GA1UEBRMoNDgwQ0QwNDBDRTkwQjlDMTBEQUI4NEU5QTQ3RDAxNzdC N0M0M0JDQzAeFw0yNjEwMjEwOTM2MDZaFw0yNjEwMjgwOTM2MDZaMBgxFjAUBgNV BAMTDTZhZDg4Nzg3LTgzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsvqy52js9Qdtia/yhd0nsJeVQW635CitH62QK3lu75F5v1qKPFP+82DHRNAjj y3Ce5C1wZexuUD3hT6mGMPL5YHBbEz2iIsM9XAIhaVRRkNBV+3FvPVZspa+At348 l7GxpG7uHeRDkyIV4YeDDTC12k6IKoQoD96bFSOTCOrm08cKZVM6IW/uxLYwW45X CqHtdHeAtlYIVvX23McRk90jcPBdtdVANVIB8iZUZOlAxAWFOv72GXZ+3Do2Ap5T 68JTGPM3Ul4CfVwLX+gWfodOkpvfACwuScJlncFcUtN/pYVlWJEtzD9MeyOvbwSe ntId+uId9KOq9TNrSzD1UnOhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURqv/dQwf fuo2I7VCWGYPpzHbRB4wHwYDVR0jBBgwFoAUSAzQQM6QucENq4TppH0Bd7fEO8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QUFCLzBDN0FDNUYyQTdF OTExRjFCNkFEMUE0QkE2RUU1MjhFL1NBelFRTTZRdWNFTnE0VHBwSDBCZDdmRU84 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0F6UVFNNlF1Y0VOcTRUcHBIMEJkN2ZFTzh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QUFCLzBDN0FDNUYyQTdFOTExRjFCNkFEMUE0QkE2RUU1MjhFL1NBelFRTTZRdWNF TnE0VHBwSDBCZDdmRU84dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLC92BnNqdS/MBVNNLLG+Bpt/jB8GAgr2SycP0oVq9cheeawPjb4Tf2HJnEZSi r7QvPEjbaGYeqROyKUR8fL4kV+tjGi1HaH4GhDnTup3DlEX157lVb1u1yhopG8S6 kZ2/Lo3Xl0CsALmNixcWeaJqyYZyHqJfP3/JXdX4hZivTKHLjW3WWuCmz+62iZMI l8UVRWFkv7Ilj7991NnA6RGbcsQrfrsas5IS+RXC8TQy0N+qYysNWqHdssIufFbr WoPme3xOjdK55jia6nJlVqEXZI19MTuICgcLdBag1TkYwSH8TCEQ5i7ej3sGAlqb y3SYm/+zTvaivsh2Lif9WwGM -----END CERTIFICATE-----Generated at Thu Oct 22 11:58:01 2026 by rpki-client