$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: 31JfJZEa28ty3NbHUOypy8UVp6qVqPLwOqPyxWyvjug= Subject key identifier: 39:8D:0B:0C:ED:8B:9D:F1:89:F5:52:99:A5:E8:E0:9A:8D:89:6D:52 Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 17E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 17C7 Signing time: Fri 02 Oct 2026 16:42:35 +0000 Manifest this update: Fri 02 Oct 2026 16:42:34 +0000 Manifest next update: Fri 09 Oct 2026 16:42:34 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: NL0UvG5gNgBEb1l389jaw1mtZ95QW8b0Vl6B+hWFw8g=) 2: E7Zlv4JAgi2bE6CiIgHeSYx2UPs.asa (hash: eOyuon//OYiLjB99/ZiqBK05C+GSz1TvdDls33eBOK0=) 3: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: uK14L6szXso9y/ayZJafpdIZkYO3iKXSZfPpTPuyD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6116 (0x17e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: Oct 2 16:42:34 2026 GMT Not After : Oct 9 16:42:34 2026 GMT Subject: CN=6abfdefa-99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:37:4a:8a:2f:01:f1:92:b5:3c:dd:db:eb: e9:b4:62:67:34:ba:db:89:4c:8c:5a:7f:04:65:58: 04:68:64:7f:45:25:26:cd:ff:61:47:b0:14:ee:5c: 71:ec:90:91:63:a9:83:8f:ee:31:ca:4e:62:14:06: 91:77:f8:a5:6c:77:c0:65:5d:01:bb:58:44:c3:e0: 8a:fc:49:65:7c:87:82:20:d6:d1:f9:71:08:1b:2f: b0:30:89:7e:bd:cf:8b:9b:9c:25:4c:c3:dd:96:a3: d5:f2:51:c9:a3:51:e1:02:60:c7:1a:c9:e6:b6:71: fc:a1:df:d4:2c:b5:37:82:00:b7:e7:79:83:71:1b: a3:78:69:24:8f:e8:9e:a6:9f:1f:66:85:6e:2e:1f: c3:c0:fa:fb:e0:0f:2f:33:2a:52:ea:7c:e8:39:68: 9d:ce:f3:44:02:d3:9a:b3:1d:d7:1c:d4:b4:40:e4: 10:de:4c:8b:ed:16:f6:e2:47:dd:ef:25:b2:c6:65: ed:eb:5c:2b:db:3e:33:48:14:38:4f:4d:be:96:73: c2:98:4d:56:e3:d5:81:bc:85:b5:20:f8:1a:ba:cb: ec:80:aa:07:a0:ab:80:23:6e:17:0a:00:96:9a:51: 2d:d6:d7:09:1d:45:af:bd:a7:bf:ad:3c:37:62:6e: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8D:0B:0C:ED:8B:9D:F1:89:F5:52:99:A5:E8:E0:9A:8D:89:6D:52 X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a3:ac:e8:b8:f1:c9:fb:83:ca:d4:d9:06:7e:94:6a:f1:40: 85:f1:17:a3:2c:3c:d6:b1:dc:97:bf:1c:c6:74:4a:66:65:82: 88:bd:09:96:74:d1:17:36:e2:c3:b7:95:55:67:79:d3:fc:90: 41:82:58:ab:8c:91:03:59:bc:fa:f1:68:80:a1:38:92:f3:7a: 5e:38:94:a6:0b:db:61:0d:bb:1b:21:44:6f:df:f0:49:9b:15: 01:f1:67:0e:0e:d4:8e:4a:c7:fb:27:e7:1a:64:86:d3:a7:15: c5:b8:76:1b:97:4c:88:bf:0e:b0:55:6c:89:2e:ae:e9:0e:73: 6d:48:dc:be:4b:35:15:d9:b2:98:ea:8a:b6:fb:7b:84:26:e1: 3d:96:69:53:31:c0:13:33:11:dc:7c:95:c8:f8:fe:2c:11:34: 05:de:50:d8:51:ed:14:88:34:9f:5f:b2:5c:23:f2:c3:b2:f3: 23:7c:56:a6:ee:b7:ad:61:ef:ff:6f:31:05:15:2d:dc:6c:ef: af:58:ed:e0:c6:43:ed:dd:31:3a:d1:f8:91:27:4a:d3:c4:17: d7:7c:79:0a:66:6c:b1:37:e6:8e:97:40:41:35:ed:19:b6:06: 69:92:97:01:07:d2:6c:ad:aa:69:27:f2:11:e4:33:03:c8:64: 77:24:b8:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjYxMDAyMTY0MjM0WhcNMjYxMDA5MTY0MjM0WjAYMRYwFAYD VQQDEw02YWJmZGVmYS05OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOU3SoovAfGStTzd2+vptGJnNLrbiUyMWn8EZVgEaGR/RSUmzf9hR7AU7lxx 7JCRY6mDj+4xyk5iFAaRd/ilbHfAZV0Bu1hEw+CK/EllfIeCINbR+XEIGy+wMIl+ vc+Lm5wlTMPdlqPV8lHJo1HhAmDHGsnmtnH8od/ULLU3ggC353mDcRujeGkkj+ie pp8fZoVuLh/DwPr74A8vMypS6nzoOWidzvNEAtOasx3XHNS0QOQQ3kyL7Rb24kfd 7yWyxmXt61wr2z4zSBQ4T02+lnPCmE1W49WBvIW1IPgausvsgKoHoKuAI24XCgCW mlEt1tcJHUWvvae/rTw3Ym5NOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmNCwzt i53xifVSmaXo4JqNiW1SMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiqOs6LjxyfuDytTZBn6UavFAhfEXoyw81rHcl78cxnRKZmWCiL0JlnTRFzbi w7eVVWd50/yQQYJYq4yRA1m8+vFogKE4kvN6XjiUpgvbYQ27GyFEb9/wSZsVAfFn Dg7UjkrH+yfnGmSG06cVxbh2G5dMiL8OsFVsiS6u6Q5zbUjcvks1FdmymOqKtvt7 hCbhPZZpUzHAEzMR3HyVyPj+LBE0Bd5Q2FHtFIg0n1+yXCPyw7LzI3xWpu63rWHv /28xBRUt3Gzvr1jt4MZD7d0xOtH4kSdK08QX13x5CmZssTfmjpdAQTXtGbYGaZKX AQfSbK2qaSfyEeQzA8hkdyS4jA== -----END CERTIFICATE-----Generated at Sun Oct 4 09:42:31 2026 by rpki-client