$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: TwegUwM+xLwODtcepkkLk8LMdUdUYmbbDUDJ7tFPmes= Subject key identifier: 54:07:57:AE:23:31:BB:62:D2:AA:C1:9C:89:A0:C7:28:07:3C:AA:83 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 011A Signing time: Wed 07 Oct 2026 06:24:31 +0000 Manifest this update: Wed 07 Oct 2026 06:24:31 +0000 Manifest next update: Wed 14 Oct 2026 06:24:31 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: EbFiWiXjXsANeFUwHW44xDi5c2ntr15D5LQ6a1QftvM=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: qJYle22nAvJ+p2ibV/d5kSSNiEDnFiKaArPFKlzPrbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Oct 7 06:24:31 2026 GMT Not After : Oct 14 06:24:31 2026 GMT Subject: CN=6ac5e59f-b5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:94:d8:7d:da:cc:31:f0:f3:56:69:fd:80: 10:2c:07:5f:3a:b8:d3:89:31:e1:45:3a:9e:64:23: 85:bf:65:00:9e:d2:31:d3:02:c1:37:11:a7:db:73: ce:37:fa:2d:0b:51:f6:3a:50:86:76:f6:4d:1d:7e: 50:04:94:82:37:71:3d:a6:c5:61:3f:9f:b8:00:b3: d0:03:74:eb:2c:e6:af:71:10:63:b0:28:70:e4:92: 97:42:63:2a:a8:75:d8:a1:c1:5a:43:3a:73:12:ae: 06:5b:08:78:55:7d:b1:7e:bb:65:95:aa:64:38:23: 02:b3:27:0d:30:06:7a:63:17:5b:a3:b0:f6:64:36: 3a:59:96:5a:f4:46:d0:bd:cc:27:1f:c8:cd:6a:27: 1d:c8:7f:4d:40:d7:fc:3f:44:75:f2:69:2e:db:e3: 6f:2e:01:aa:26:1d:a5:f2:13:40:2d:73:6a:dc:38: 4c:f7:1a:df:5a:22:15:7c:d2:35:8a:1f:37:6a:45: 51:7f:39:13:ee:e5:87:1f:7d:5d:c7:c1:75:00:af: 1c:5c:74:35:e8:92:92:dc:54:89:3b:6c:bd:bf:0e: cc:90:d2:83:78:c7:e0:c6:f4:37:6e:3d:44:3b:68: c6:85:56:e1:18:a9:da:4b:5c:02:70:8f:e3:df:3b: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:57:AE:23:31:BB:62:D2:AA:C1:9C:89:A0:C7:28:07:3C:AA:83 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:33:c1:12:69:57:5d:24:d9:4c:b1:48:01:e3:15:7f:1b:f7: 25:a1:3b:c6:5d:1f:4c:7f:92:c7:6c:ae:b7:46:09:7f:29:c5: 37:6c:3d:ac:31:80:28:89:61:e7:17:07:ae:33:e1:56:88:86: af:98:09:a1:9c:f6:0b:4a:fb:b7:be:5c:00:f3:f0:88:58:c9: 53:51:7b:af:c2:7d:d1:aa:33:f2:f8:ff:e3:44:0c:66:44:a7: 9d:65:71:ca:47:2c:b5:a7:93:9d:ab:39:9a:f5:33:1c:1c:90: f8:60:0d:ec:fc:33:31:0f:9a:b9:e7:a4:9e:cd:c6:d8:b2:56: 56:18:3e:11:1a:29:5b:ef:f0:11:c7:a7:3a:f0:fe:75:91:82: 7e:f0:14:09:22:97:cc:a7:fb:13:be:bc:18:02:97:3f:97:d2: 2b:b8:77:7e:23:49:08:ee:a4:bd:0d:b3:21:46:d8:5e:ed:8d: 6c:c4:09:47:53:e3:78:93:35:d4:48:bc:36:e6:96:f9:d3:ad: cf:3d:ac:bc:02:de:2c:3f:e0:91:26:1f:36:6b:3b:d3:86:eb: b2:8c:32:9b:0f:26:a5:80:ca:1c:9a:d4:ea:07:93:75:5e:3b: 64:fb:79:b5:b2:30:bb:63:d3:84:22:ec:5c:85:60:b4:07:df: 8b:08:0a:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGMjExMTAvBgNVBAUTKDcwRDI2MDFDQjBEMEZBNEY5QzVGMEUwMjg2RDhCNkFG RDkyMzVBMDYwHhcNMjYxMDA3MDYyNDMxWhcNMjYxMDE0MDYyNDMxWjAYMRYwFAYD VQQDEw02YWM1ZTU5Zi1iNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hqU2H3azDHw81Zp/YAQLAdfOrjTiTHhRTqeZCOFv2UAntIx0wLBNxGn23PO N/otC1H2OlCGdvZNHX5QBJSCN3E9psVhP5+4ALPQA3TrLOavcRBjsChw5JKXQmMq qHXYocFaQzpzEq4GWwh4VX2xfrtllapkOCMCsycNMAZ6Yxdbo7D2ZDY6WZZa9EbQ vcwnH8jNaicdyH9NQNf8P0R18mku2+NvLgGqJh2l8hNALXNq3DhM9xrfWiIVfNI1 ih83akVRfzkT7uWHH31dx8F1AK8cXHQ16JKS3FSJO2y9vw7MkNKDeMfgxvQ3bj1E O2jGhVbhGKnaS1wCcI/j3zvsDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQHV64j Mbti0qrBnImgxygHPKqDMB8GA1UdIwQYMBaAFHDSYByw0PpPnF8OAobYtq/ZI1oG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEYyMS84NTE3RkIwODE0 MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1rLWNYdzRDaHRpMnI5a2pX Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOSmdITERRLWstY1h3NENodGkycjlraldnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEYyMS84NTE3RkIwODE0MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1r LWNYdzRDaHRpMnI5a2pXZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOTPBEmlXXSTZTLFIAeMVfxv3JaE7xl0fTH+Sx2yut0YJfynFN2w9rDGAKIlh 5xcHrjPhVoiGr5gJoZz2C0r7t75cAPPwiFjJU1F7r8J90aoz8vj/40QMZkSnnWVx ykcstaeTnas5mvUzHByQ+GAN7PwzMQ+aueekns3G2LJWVhg+ERopW+/wEcenOvD+ dZGCfvAUCSKXzKf7E768GAKXP5fSK7h3fiNJCO6kvQ2zIUbYXu2NbMQJR1PjeJM1 1Ei8NuaW+dOtzz2svALeLD/gkSYfNms704brsowymw8mpYDKHJrU6geTdV47ZPt5 tbIwu2PThCLsXIVgtAffiwgKjg== -----END CERTIFICATE-----Generated at Thu Oct 8 11:00:02 2026 by rpki-client