$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json) Hash identifier: lfLBOecNbg4+dg3PHdIW2TvMDfFFxOurEfa+qFr3RpY= Subject key identifier: 8A:37:E9:81:72:B3:8A:A2:51:B5:EC:3A:98:78:E6:33:84:6C:1D:CB Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft Manifest number: 0889 Signing time: Sat 10 Oct 2026 20:54:04 +0000 Manifest this update: Sat 10 Oct 2026 20:54:03 +0000 Manifest next update: Sat 17 Oct 2026 20:54:03 +0000 Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: QcfrAURelebRTDszpLi2BqWhFmQNSMxc8LAXYh6Mlz0=) 2: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=) 3: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=) 4: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Validity Not Before: Oct 10 20:54:03 2026 GMT Not After : Oct 17 20:54:03 2026 GMT Subject: CN=6acaa5ec-c54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:5f:c0:d4:85:13:2b:81:50:5c:ba:ea:29: 58:9c:d3:6e:8f:d9:8b:c5:9d:c8:66:26:06:7b:5e: 42:00:f3:04:a7:1d:ae:1f:2d:bf:3e:74:ff:09:4b: 77:ec:e4:43:9b:a8:4c:d8:97:0b:7b:62:d8:55:70: 90:d6:a8:30:cb:e2:e0:bd:46:b1:7f:08:00:2c:d6: 32:57:0a:b9:d5:cf:39:66:9b:b7:ab:af:07:8d:7a: 54:4c:61:7e:4d:57:a0:1a:d4:9d:98:fe:59:27:a8: 7f:c8:fb:12:ba:9d:d0:91:9b:ae:df:64:60:45:f5: f3:40:cb:eb:db:d9:a2:5d:8d:8c:5b:16:83:1e:ae: 0d:6c:5c:b9:c4:0e:b7:93:d1:18:58:e5:04:97:84: 43:33:d8:f8:ac:08:cb:65:70:14:90:79:e3:89:7a: 6a:5c:f1:b4:c4:59:f5:20:ea:c6:f5:2e:75:d0:d9: ab:ef:6b:5e:a8:15:f2:97:3a:5f:cf:21:fa:00:62: de:b0:90:ca:50:28:f7:b7:17:3b:4a:7b:5c:fa:53: ae:65:fd:14:5a:87:3c:2d:e1:8a:7c:19:12:68:f3: cb:e3:cb:52:73:a1:30:72:6a:2c:bd:c3:ef:96:2f: 54:76:75:15:90:86:e7:06:27:5c:a1:ca:b7:0f:f3: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:E9:81:72:B3:8A:A2:51:B5:EC:3A:98:78:E6:33:84:6C:1D:CB X509v3 Authority Key Identifier: keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:11:8f:9f:4f:de:4b:84:e8:ca:f5:e5:c9:e0:32:4a:c4:02: 7a:18:97:89:3c:5b:c5:0e:ed:f2:2d:ee:ed:3c:1c:e5:b6:8a: 7b:cf:9a:dd:4b:c1:b6:8e:f4:0b:c0:2b:48:01:52:7d:79:f8: 31:ec:e4:73:4b:9b:09:a7:7f:51:a8:55:5f:4b:95:51:0b:47: e2:f5:d7:46:d4:d6:ae:0d:64:3f:65:fe:37:c7:70:a6:bb:9d: ac:03:18:31:6f:42:d5:d0:02:cd:92:48:aa:5b:36:e0:80:9b: ed:d1:d6:e0:b1:f4:fd:41:1c:ce:8d:83:51:d2:d3:cd:f7:9c: bd:16:50:ff:d5:be:5b:c7:45:01:73:f5:a1:25:06:9d:91:62: 3b:ac:01:e7:e5:ba:68:fc:55:2b:b7:dd:f1:da:0e:e8:64:24: 6c:ef:a0:7e:60:0d:81:e8:dc:a8:15:a5:0c:af:2b:7f:e8:61: 49:6f:2f:b8:32:43:79:2c:6c:c6:8e:da:17:76:95:6f:a5:ab: 73:41:68:78:be:36:9d:54:c7:7f:de:03:2e:2f:f8:7c:9b:4a: 80:20:7d:91:07:cc:b3:bd:3e:22:16:d5:da:4b:20:f5:95:c8: 0f:b7:b3:2b:94:f7:ca:06:25:e8:18:ff:5c:ef:05:b0:98:eb: e4:79:e0:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2 RjM2MkU4MEYwHhcNMjYxMDEwMjA1NDAzWhcNMjYxMDE3MjA1NDAzWjAYMRYwFAYD VQQDEw02YWNhYTVlYy1jNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDdfwNSFEyuBUFy66ilYnNNuj9mLxZ3IZiYGe15CAPMEpx2uHy2/PnT/CUt3 7ORDm6hM2JcLe2LYVXCQ1qgwy+LgvUaxfwgALNYyVwq51c85Zpu3q68HjXpUTGF+ TVegGtSdmP5ZJ6h/yPsSup3QkZuu32RgRfXzQMvr29miXY2MWxaDHq4NbFy5xA63 k9EYWOUEl4RDM9j4rAjLZXAUkHnjiXpqXPG0xFn1IOrG9S510Nmr72teqBXylzpf zyH6AGLesJDKUCj3txc7Sntc+lOuZf0UWoc8LeGKfBkSaPPL48tSc6EwcmosvcPv li9UdnUVkIbnBidcocq3D/PL7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIo36YFy s4qiUbXsOph45jOEbB3LMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0 Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDM5NS9FQjY3MjI2NDE0Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25s RHVfV2JEVW9pMkJ2Tmk2QTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyBGPn0/eS4ToyvXlyeAySsQCehiXiTxbxQ7t8i3u7Twc5baKe8+a3UvBto70 C8ArSAFSfXn4Mezkc0ubCad/UahVX0uVUQtH4vXXRtTWrg1kP2X+N8dwprudrAMY MW9C1dACzZJIqls24ICb7dHW4LH0/UEczo2DUdLTzfecvRZQ/9W+W8dFAXP1oSUG nZFiO6wB5+W6aPxVK7fd8doO6GQkbO+gfmANgejcqBWlDK8rf+hhSW8vuDJDeSxs xo7aF3aVb6Wrc0FoeL42nVTHf94DLi/4fJtKgCB9kQfMs70+IhbV2ksg9ZXID7ez K5T3ygYl6Bj/XO8FsJjr5HngAQ== -----END CERTIFICATE-----Generated at Sun Oct 11 17:17:41 2026 by rpki-client