$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: twARXvtOUVdSUQhuNrUIvRAeE27RO7ZzpRuXLMmBzZA= Subject key identifier: C5:BC:B8:EF:71:A7:D3:CE:FD:15:80:A3:7D:DF:AF:3A:71:30:E5:9E Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 0150 Signing time: Wed 07 Oct 2026 05:45:22 +0000 Manifest this update: Wed 07 Oct 2026 05:45:21 +0000 Manifest next update: Wed 14 Oct 2026 05:45:21 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: VyWG7uqyILbyvo6LP3U8WJhk2JcufaHKBelbdLtNA3E=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Oct 7 05:45:21 2026 GMT Not After : Oct 14 05:45:21 2026 GMT Subject: CN=6ac5dc71-ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:d9:22:b6:2f:9f:a1:78:3c:4b:86:74:9e: 1e:80:db:36:12:bb:5c:fa:bc:b1:ca:ee:d9:a6:97: 68:6f:82:15:de:5f:c2:c0:c5:3e:00:00:dd:83:d0: 16:0e:35:68:b5:63:df:1c:5f:c6:7e:85:39:dd:4c: d9:32:d7:d1:7a:95:25:87:ca:f4:62:92:bd:e5:11: c1:61:e2:b7:69:cc:1a:8e:8b:4f:bf:f4:2e:60:51: f4:ba:74:8d:71:db:43:e0:57:56:1f:66:ae:a8:f2: 57:3f:7f:7c:38:49:7a:19:78:e6:ff:3a:33:dc:88: b5:e2:ca:6c:19:7b:3f:30:0d:1e:86:4f:13:2e:53: c3:ff:85:03:95:7b:3d:f9:19:11:25:e1:04:fb:87: 65:39:3e:d6:2d:5e:a4:8a:89:20:b4:2a:25:b1:1f: 1f:ac:0b:f1:8e:68:cc:2c:06:62:a6:16:82:34:77: 20:e5:96:48:a7:68:ff:33:b5:34:a2:27:01:7c:29: 2e:17:02:6f:eb:67:46:a4:87:c0:8e:0a:e6:4c:12: 2f:0d:3c:ad:07:ca:7e:2f:45:e6:1e:52:ab:06:77: c5:32:e3:ac:bc:b0:b6:13:53:93:d2:4f:5d:17:c1: 29:a1:1e:cf:5b:fa:e6:98:6a:0f:ca:0d:91:4a:03: 6b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:B8:EF:71:A7:D3:CE:FD:15:80:A3:7D:DF:AF:3A:71:30:E5:9E X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:95:33:2d:ae:2c:60:71:db:49:a8:e7:92:40:89:d8:1b:da: f3:7d:88:ed:cf:15:f6:37:9d:41:f4:eb:9f:33:d2:e2:96:2b: 3a:4b:af:08:d2:4c:48:b9:b1:10:fb:e1:cb:7b:8a:32:44:2a: b1:3e:bd:ca:05:31:3f:5b:7b:95:c2:20:6e:31:58:b0:80:a8: 2c:04:f2:54:3d:f7:2e:65:5f:4a:16:f7:37:cf:8f:25:dd:ce: fb:80:4e:e7:6e:14:f1:a1:70:8e:f2:7e:a1:8c:81:51:29:ab: 47:8a:52:14:28:16:a6:7a:73:71:89:42:5d:ed:f2:86:43:b2: 4c:b9:e5:55:6f:48:37:66:5b:5d:63:e1:97:2f:4b:85:d6:1c: 22:5d:50:11:19:20:4a:80:ab:47:06:a9:85:4c:15:30:16:1a: 57:9e:1c:b5:b5:97:71:f6:d1:84:76:e2:1e:59:6b:67:b3:35: 55:21:8f:3d:62:f7:6c:8a:7d:57:9f:e2:2c:56:c0:9f:1f:ec: 73:c9:6d:5e:3d:16:c5:8c:6f:8c:cf:1e:3e:92:ad:63:db:3d: f0:8f:83:e4:cc:ed:8e:46:2d:4b:0e:7c:14:8c:2f:0b:b0:46: b0:d1:39:c4:40:7a:5b:d8:fb:0c:a5:37:24:37:8d:7b:e5:09: c5:37:94:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBM0MxMTAvBgNVBAUTKDk3QjAzREEyRkI0NUY1NkUzRjU4MjE2M0RGN0JEOTUw NjkzOTk5NDQwHhcNMjYxMDA3MDU0NTIxWhcNMjYxMDE0MDU0NTIxWjAYMRYwFAYD VQQDEw02YWM1ZGM3MS1lZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAzZIrYvn6F4PEuGdJ4egNs2Ertc+ryxyu7Zppdob4IV3l/CwMU+AADdg9AW DjVotWPfHF/GfoU53UzZMtfRepUlh8r0YpK95RHBYeK3acwajotPv/QuYFH0unSN cdtD4FdWH2auqPJXP398OEl6GXjm/zoz3Ii14spsGXs/MA0ehk8TLlPD/4UDlXs9 +RkRJeEE+4dlOT7WLV6kiokgtColsR8frAvxjmjMLAZiphaCNHcg5ZZIp2j/M7U0 oicBfCkuFwJv62dGpIfAjgrmTBIvDTytB8p+L0XmHlKrBnfFMuOsvLC2E1OT0k9d F8EpoR7PW/rmmGoPyg2RSgNrrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMW8uO9x p9PO/RWAo33frzpxMOWeMB8GA1UdIwQYMBaAFJewPaL7RfVuP1ghY9972VBpOZlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83MzkwQjM0QUM2 QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlXNF9XQ0ZqMzN2WlVHazVt VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83MzkwQjM0QUM2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlX NF9XQ0ZqMzN2WlVHazVtVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtZUzLa4sYHHbSajnkkCJ2Bva832I7c8V9jedQfTrnzPS4pYrOkuvCNJMSLmx EPvhy3uKMkQqsT69ygUxP1t7lcIgbjFYsICoLATyVD33LmVfShb3N8+PJd3O+4BO 524U8aFwjvJ+oYyBUSmrR4pSFCgWpnpzcYlCXe3yhkOyTLnlVW9IN2ZbXWPhly9L hdYcIl1QERkgSoCrRwaphUwVMBYaV54ctbWXcfbRhHbiHllrZ7M1VSGPPWL3bIp9 V5/iLFbAnx/sc8ltXj0WxYxvjM8ePpKtY9s98I+D5MztjkYtSw58FIwvC7BGsNE5 xEB6W9j7DKU3JDeNe+UJxTeUZA== -----END CERTIFICATE-----Generated at Wed Oct 7 16:08:15 2026 by rpki-client