$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft File: imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft (raw, json) Hash identifier: riNXEhLAgabdNI/psp4UArKQj0cwjsTrdzs1N71e4aQ= Subject key identifier: 28:A9:A7:75:B1:7F:10:E0:FC:2D:1F:AE:2A:A4:B6:EA:BD:06:1B:13 Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft Manifest number: 2E31 Signing time: Mon 12 Oct 2026 15:31:00 +0000 Manifest this update: Mon 12 Oct 2026 15:31:00 +0000 Manifest next update: Mon 19 Oct 2026 15:31:00 +0000 Files and hashes: 1: imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl (hash: VlbCF5BpenCnv0q/Y2XOXgpt0hhhq9X2i9XK9MYdRps=) 2: 3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (hash: +3lZRj5cQoC2f80Jdz3PedzGlyd7zDkVmgDK6wStnBg=) 3: 4221CE240EC211EB9F6B1914C4F9AE02.roa (hash: CpHAAkqB1wNBvhbq3EYTPjBYpKmeFz1ZtAWsV7UQbEU=) 4: EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (hash: 3Kf0HbTrEj7/jWo4wAe5ManP2yeiLnNOYjEerE/jexE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11960 (0x2eb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Oct 12 15:31:00 2026 GMT Not After : Oct 19 15:31:00 2026 GMT Subject: CN=6accfd34-f9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:3b:b4:d4:a1:50:c7:73:7b:a6:3a:96:8f: fb:7f:5f:47:14:c0:01:49:19:91:3c:02:81:13:f1: e1:6d:a1:4d:78:d8:a4:44:68:38:8c:cf:45:76:29: 4f:c6:53:1c:00:e3:ae:5b:b0:59:f0:06:66:a5:4c: e8:40:75:58:b2:d3:59:a7:a9:8a:b1:c8:40:c7:92: 86:b7:ac:9f:47:33:b1:cf:c6:1f:b6:3e:34:46:dc: c2:b8:75:3c:55:38:5b:ec:75:af:c2:ab:29:49:51: 38:c7:38:8e:21:45:c9:35:8c:b9:b4:e8:ea:47:c4: 6b:24:79:a3:f0:ea:97:97:c7:ce:64:6e:a0:95:cf: 61:c2:ac:7e:0d:04:2b:35:4d:a2:aa:5e:c5:0a:38: 37:9a:f0:4f:b8:09:33:d1:ab:7d:f3:39:d7:2f:a5: 2e:c6:4f:5b:1c:54:ac:86:a3:d2:89:6f:ae:fe:a1: 4a:7e:05:b0:1e:58:ca:57:15:30:77:64:e6:a3:c9: b4:f5:f2:21:59:23:10:74:2d:d9:fa:b7:98:d7:5c: 2d:d2:09:bc:3b:a0:27:60:ae:a9:61:2d:ce:3d:89: c3:81:c0:a8:2f:7f:92:3f:f4:2f:34:2f:01:63:37: 16:a7:77:c9:c8:7a:ab:c8:1e:7a:dd:21:01:1b:e5: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:A7:75:B1:7F:10:E0:FC:2D:1F:AE:2A:A4:B6:EA:BD:06:1B:13 X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9f:bb:e3:8c:b4:6b:26:ff:64:88:ce:59:01:22:ab:39:89: 21:28:0f:82:3c:ca:b0:4b:07:31:f2:69:57:af:b1:d5:a7:27: be:bc:57:12:3a:15:8f:5d:fc:dd:32:7e:58:7c:8f:4c:35:5b: 9f:f5:ba:2f:79:f0:7d:0e:8d:ef:79:47:dd:91:eb:f9:f3:f6: 34:c4:e6:c7:c8:8c:56:f5:ae:c1:9b:1e:9e:aa:1e:87:99:f6: 9c:2b:db:b9:f0:70:a7:0d:76:7b:fa:c6:71:ee:25:ba:71:d3: df:b2:9d:f4:63:64:f9:6c:e0:fc:1d:40:69:4b:72:0c:25:3d: e5:c1:98:52:18:8c:bd:f9:da:ff:bd:7b:4e:f7:d1:19:49:e1: 1a:4b:1e:35:e3:4b:96:56:f8:7c:5c:57:e4:df:43:a0:d8:23: d1:9a:ff:13:8d:eb:a0:30:77:24:d7:51:2c:2e:ef:4b:32:06: df:07:35:f6:9f:cf:33:1f:c1:9f:dd:0f:da:0c:41:e6:e5:7f: 97:71:d1:66:ec:46:3e:78:4d:86:24:48:e1:30:55:39:6b:97: 04:e2:dc:23:d8:11:39:b9:b1:ab:05:28:76:17:85:19:e4:6e: 86:6c:07:e3:40:b4:3e:f3:5c:21:8c:61:f8:a4:f1:8c:29:bd: 10:77:90:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjYxMDEyMTUzMTAwWhcNMjYxMDE5MTUzMTAwWjAYMRYwFAYD VQQDEw02YWNjZmQzNC1mOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5A7tNShUMdze6Y6lo/7f19HFMABSRmRPAKBE/HhbaFNeNikRGg4jM9FdilP xlMcAOOuW7BZ8AZmpUzoQHVYstNZp6mKschAx5KGt6yfRzOxz8Yftj40RtzCuHU8 VThb7HWvwqspSVE4xziOIUXJNYy5tOjqR8RrJHmj8OqXl8fOZG6glc9hwqx+DQQr NU2iql7FCjg3mvBPuAkz0at98znXL6Uuxk9bHFSshqPSiW+u/qFKfgWwHljKVxUw d2Tmo8m09fIhWSMQdC3Z+reY11wt0gm8O6AnYK6pYS3OPYnDgcCoL3+SP/QvNC8B YzcWp3fJyHqryB563SEBG+WYzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCipp3Wx fxDg/C0friqktuq9BhsTMB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzUyMy8xMkI5OTdFODlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01k RDBkanBOdmRYVXpBSDlaTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZZ+744y0ayb/ZIjOWQEiqzmJISgPgjzKsEsHMfJpV6+x1acnvrxXEjoVj138 3TJ+WHyPTDVbn/W6L3nwfQ6N73lH3ZHr+fP2NMTmx8iMVvWuwZsenqoeh5n2nCvb ufBwpw12e/rGce4lunHT37Kd9GNk+Wzg/B1AaUtyDCU95cGYUhiMvfna/717TvfR GUnhGkseNeNLllb4fFxX5N9DoNgj0Zr/E43roDB3JNdRLC7vSzIG3wc19p/PMx/B n90P2gxB5uV/l3HRZuxGPnhNhiRI4TBVOWuXBOLcI9gRObmxqwUodheFGeRuhmwH 40C0PvNcIYxh+KTxjCm9EHeQ2g== -----END CERTIFICATE-----Generated at Tue Oct 13 17:00:15 2026 by rpki-client