$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft File: YmQpIWRWytXkhBRODGZqKZO5bck.mft (raw, json) Hash identifier: 9ZeRfi0iad4vDythAYd6UHBy6DED0SxwAGpnB6vbDRY= Subject key identifier: D9:36:4D:68:8D:2F:6B:84:20:36:59:54:E8:4A:CB:41:2F:8B:9A:D0 Authority key identifier: 62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9 Certificate issuer: /CN=A9128478/serialNumber=626429216456CAD5E484144E0C666A2993B96DC9 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft Manifest number: 12 Signing time: Mon 19 Oct 2026 09:53:16 +0000 Manifest this update: Mon 19 Oct 2026 09:53:16 +0000 Manifest next update: Mon 26 Oct 2026 09:53:16 +0000 Files and hashes: 1: YmQpIWRWytXkhBRODGZqKZO5bck.crl (hash: kRd8PalCDW0aC7+79bS3ZuDZ+pqSI8da22YZDpf8E/o=) 2: 352C6794B29D11F1A4273C704011F970.roa (hash: al3KXuExaaHNnj+0UoiIH+aSoilqvKVflzH0TtjjoRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.crl rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128478, serialNumber=626429216456CAD5E484144E0C666A2993B96DC9 Validity Not Before: Oct 19 09:53:16 2026 GMT Not After : Oct 26 09:53:16 2026 GMT Subject: CN=6ad5e88c-de54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:84:34:5b:68:76:96:4f:d5:48:e7:2f:04: be:71:36:cd:ab:01:8f:84:e6:5f:2c:e6:92:53:ee: b9:44:d4:58:2c:92:16:d4:3b:b8:d2:5b:2d:4b:b9: af:85:8f:5b:65:94:c9:d6:61:a3:45:03:47:9e:50: 80:76:f4:19:08:43:49:59:09:95:b5:86:74:65:97: c3:6a:7e:95:31:82:0d:bc:91:f0:1a:8f:41:eb:da: 36:4c:bc:ed:df:52:c1:a3:28:a1:13:bb:7f:36:e5: 10:ea:f9:fa:df:ff:57:45:b0:d0:a8:ca:1f:8b:7b: a5:5b:f7:36:3e:0c:37:a8:05:b1:3e:0e:1c:39:42: 67:32:a2:57:6d:1a:cc:7e:ef:df:d9:b6:0c:18:7e: a1:08:b0:36:4b:9b:ee:12:17:07:fd:9f:36:e2:fd: 7a:cd:40:a0:6b:51:09:62:c8:e1:cc:86:1b:d3:24: 80:43:75:81:d4:e9:ab:3d:36:85:92:97:de:16:05: 04:46:4f:bc:4f:00:13:1e:ba:f5:d7:62:f2:4c:54: 28:35:23:88:ef:8c:52:16:a0:01:e7:62:d2:d2:b7: f8:35:a0:a6:a6:bc:00:98:5a:13:a6:08:f2:0e:81: 9b:ef:36:34:d4:f6:4b:09:52:65:0e:2c:60:89:d6: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:36:4D:68:8D:2F:6B:84:20:36:59:54:E8:4A:CB:41:2F:8B:9A:D0 X509v3 Authority Key Identifier: keyid:62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ce:b0:ce:b4:d5:cd:7c:16:0c:72:7a:48:06:50:19:01:e6: 6a:38:39:19:29:3a:22:8a:7e:70:79:c4:1b:6c:82:ee:2d:03: fb:ce:54:b9:c5:f9:a5:79:a0:e1:5f:aa:78:8d:26:c4:4e:e4: 13:87:b8:03:cb:eb:b0:a8:e9:03:fc:20:fc:92:32:85:d7:d9: 38:64:a2:6b:45:ed:b1:ab:f8:82:92:60:95:46:fc:16:f8:77: a4:e8:d0:2d:19:35:be:88:17:62:4d:22:c2:f5:de:f3:ce:23: 95:77:bc:d1:96:82:13:a5:11:bb:55:eb:d8:ed:55:4e:14:13: e7:b6:0f:d0:23:61:39:8a:2a:3a:34:82:ae:10:0b:46:b0:0c: 0e:ef:d7:d0:05:44:83:06:0e:94:ba:cc:b5:bc:21:f8:33:a0: 8a:76:cc:1a:ec:0d:d2:35:f9:49:1e:8d:bb:65:38:b6:24:bf: af:0c:90:a8:d8:55:5e:29:ca:bf:4f:74:7c:28:6f:59:ac:e0: 78:2c:a1:f2:19:bd:e0:a6:6c:2d:44:d0:94:78:c5:aa:f7:19: c9:c4:05:74:ae:07:89:1f:d9:9d:c0:1d:52:76:42:b9:68:3c: ac:34:fa:72:6a:c0:30:c8:b2:0a:f6:d8:08:e4:46:c5:c7:26: 55:eb:5b:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODQ3ODExMC8GA1UEBRMoNjI2NDI5MjE2NDU2Q0FENUU0ODQxNDRFMEM2NjZBMjk5 M0I5NkRDOTAeFw0yNjEwMTkwOTUzMTZaFw0yNjEwMjYwOTUzMTZaMBgxFjAUBgNV BAMTDTZhZDVlODhjLWRlNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ0oQ0W2h2lk/VSOcvBL5xNs2rAY+E5l8s5pJT7rlE1FgskhbUO7jSWy1Lua+F j1tllMnWYaNFA0eeUIB29BkIQ0lZCZW1hnRll8NqfpUxgg28kfAaj0Hr2jZMvO3f UsGjKKETu3825RDq+frf/1dFsNCoyh+Le6Vb9zY+DDeoBbE+Dhw5QmcyoldtGsx+ 79/ZtgwYfqEIsDZLm+4SFwf9nzbi/XrNQKBrUQliyOHMhhvTJIBDdYHU6as9NoWS l94WBQRGT7xPABMeuvXXYvJMVCg1I4jvjFIWoAHnYtLSt/g1oKamvACYWhOmCPIO gZvvNjTU9ksJUmUOLGCJ1uDpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2TZNaI0v a4QgNllU6ErLQS+LmtAwHwYDVR0jBBgwFoAUYmQpIWRWytXkhBRODGZqKZO5bckw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NDc4LzQ3RUE5NDFBQjI5 QzExRjE5MzM5RUEzMTQwMTFGOTcwL1ltUXBJV1JXeXRYa2hCUk9ER1pxS1pPNWJj ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWW1RcElXUld5dFhraEJST0RHWnFLWk81YmNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NDc4LzQ3RUE5NDFBQjI5QzExRjE5MzM5RUEzMTQwMTFGOTcwL1ltUXBJV1JXeXRY a2hCUk9ER1pxS1pPNWJjay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBczrDOtNXNfBYMcnpIBlAZAeZqODkZKToiin5wecQbbILuLQP7zlS5xfmleaDh X6p4jSbETuQTh7gDy+uwqOkD/CD8kjKF19k4ZKJrRe2xq/iCkmCVRvwW+Hek6NAt GTW+iBdiTSLC9d7zziOVd7zRloITpRG7VevY7VVOFBPntg/QI2E5iio6NIKuEAtG sAwO79fQBUSDBg6Uusy1vCH4M6CKdswa7A3SNflJHo27ZTi2JL+vDJCo2FVeKcq/ T3R8KG9ZrOB4LKHyGb3gpmwtRNCUeMWq9xnJxAV0rgeJH9mdwB1SdkK5aDysNPpy asAwyLIK9tgI5EbFxyZV61v/ -----END CERTIFICATE-----Generated at Tue Oct 20 08:11:10 2026 by rpki-client