$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: 2TJ7tNZpelC9O5v9rJQe+wqjvB7FEgUSIWBtxsHl4LM= Subject key identifier: 12:8C:8E:E9:52:27:1D:73:89:27:2C:F4:5E:9E:60:92:E5:E2:4D:68 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0A1B Signing time: Sun 04 Oct 2026 19:51:32 +0000 Manifest this update: Sun 04 Oct 2026 19:51:32 +0000 Manifest next update: Sun 11 Oct 2026 19:51:32 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: CMz250ikVEGCK5so64Y1F52Ik/5YI1i1bBEd/M3tklE=) 2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: HMqZBNwrxTcuMmYlLGxAR+N05VWqUTaNNhb33k53Zd0=) 3: 0A72D294006511F1BE07F947566F56BC.roa (hash: fALHbk4s+uu2eJh0Tk0SmYbcN0rfX679Zr6cFC8y0ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Oct 4 19:51:32 2026 GMT Not After : Oct 11 19:51:32 2026 GMT Subject: CN=6ac2ae44-7d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:c1:18:63:b5:a3:98:a9:3a:b3:36:97:5e: eb:0d:01:a4:0b:d8:8b:b7:22:c1:27:55:83:39:df: d5:d8:2e:d9:97:4b:06:5a:c0:d2:53:41:d9:9f:a6: 83:4c:1e:ec:5c:48:05:0e:7e:ae:d4:79:97:bf:9b: bc:96:ca:c6:ac:b9:b9:87:a0:4e:b2:4f:54:55:cc: e9:97:14:b6:26:11:9f:86:2c:ee:06:a5:a3:b8:05: fd:5d:eb:8d:f3:47:17:b4:38:4d:0a:23:db:9c:cc: b2:3d:eb:f5:af:22:97:03:95:41:91:71:d9:db:07: 9d:49:0e:dd:ff:96:fb:fe:60:0a:23:49:90:96:9c: 8c:6b:3d:80:1a:33:db:53:1c:22:a1:0f:b8:eb:96: 70:87:c0:1f:da:82:dd:9d:85:fb:37:e1:10:dc:0c: 52:b8:fe:b9:f3:b2:0c:43:cf:76:0a:03:5f:56:f3: f8:3d:26:1a:63:77:31:2c:8f:f9:0f:7b:ca:ed:36: d2:b5:c3:88:80:7b:ea:c1:18:8b:f2:ca:c5:8e:c7: 43:bd:38:3a:a6:88:37:08:e4:db:c1:0c:ae:5d:4e: e6:ca:52:2b:69:cf:3e:55:dc:b8:7a:89:a1:bd:04: 39:d2:84:95:be:81:2c:b4:1b:b0:c2:69:ad:d2:d2: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8C:8E:E9:52:27:1D:73:89:27:2C:F4:5E:9E:60:92:E5:E2:4D:68 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:1a:4a:cd:e4:42:0d:6b:65:66:a8:24:53:df:1a:66:39:e8: 0c:46:2f:d5:89:ca:94:0e:43:f5:66:da:5c:e3:ee:8a:b0:f9: a6:b0:00:3a:14:6e:36:5a:b0:a1:f3:5d:da:0d:36:d2:3c:6a: 36:cf:ac:1d:98:ce:2d:7d:e0:30:07:19:42:7d:f3:9d:d6:b7: 28:f9:ef:99:6f:00:46:71:e1:be:20:1c:89:e2:53:0b:7b:da: 68:48:1b:e9:1f:5b:7f:5a:3a:6d:be:5f:d9:8a:a0:7a:46:5a: e8:36:8d:61:02:a1:92:b3:9f:cc:40:87:5d:17:1f:f8:3d:73: 51:7c:1e:8f:da:8d:3f:db:0a:c0:ee:a8:07:f7:df:d1:a2:22: 1e:a2:36:32:c9:56:db:79:24:ac:2e:8a:7a:58:c5:5d:59:3c: 07:d5:48:49:b7:38:43:de:23:00:97:4a:19:2e:0b:89:cc:39: 4b:05:34:bf:c0:f0:06:6d:c1:7f:64:c2:3c:a0:c8:12:c6:fa: 21:2b:5d:06:e6:1d:db:b3:ff:f0:78:d8:ca:2f:ab:4d:12:c7: 3e:32:43:b5:74:2a:67:ec:fe:bf:53:ec:e1:34:22:5b:95:6e: 40:41:b7:96:41:6d:4f:6e:f4:2d:d1:0d:86:d5:8f:d9:3c:73: 8c:82:a0:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjYxMDA0MTk1MTMyWhcNMjYxMDExMTk1MTMyWjAYMRYwFAYD VQQDEw02YWMyYWU0NC03ZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+bBGGO1o5ipOrM2l17rDQGkC9iLtyLBJ1WDOd/V2C7Zl0sGWsDSU0HZn6aD TB7sXEgFDn6u1HmXv5u8lsrGrLm5h6BOsk9UVczplxS2JhGfhizuBqWjuAX9XeuN 80cXtDhNCiPbnMyyPev1ryKXA5VBkXHZ2wedSQ7d/5b7/mAKI0mQlpyMaz2AGjPb UxwioQ+465Zwh8Af2oLdnYX7N+EQ3AxSuP6587IMQ892CgNfVvP4PSYaY3cxLI/5 D3vK7TbStcOIgHvqwRiL8srFjsdDvTg6pog3COTbwQyuXU7mylIrac8+Vdy4eomh vQQ50oSVvoEstBuwwmmt0tKLXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKMjulS Jx1ziScs9F6eYJLl4k1oMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASRpKzeRCDWtlZqgkU98aZjnoDEYv1YnKlA5D9WbaXOPuirD5prAAOhRuNlqw ofNd2g020jxqNs+sHZjOLX3gMAcZQn3znda3KPnvmW8ARnHhviAcieJTC3vaaEgb 6R9bf1o6bb5f2YqgekZa6DaNYQKhkrOfzECHXRcf+D1zUXwej9qNP9sKwO6oB/ff 0aIiHqI2MslW23kkrC6KeljFXVk8B9VISbc4Q94jAJdKGS4Licw5SwU0v8DwBm3B f2TCPKDIEsb6IStdBuYd27P/8HjYyi+rTRLHPjJDtXQqZ+z+v1Ps4TQiW5VuQEG3 lkFtT270LdENhtWP2TxzjIKgaA== -----END CERTIFICATE-----Generated at Mon Oct 5 06:58:12 2026 by rpki-client