$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json) Hash identifier: dhjQ6w/zqDlOccsuvYyiXD3oQ4oYpb4lnG+SaTNMgHw= Subject key identifier: 35:97:9E:42:86:C3:84:CC:2B:15:AE:FE:9D:CE:48:15:DC:82:9E:33 Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft Manifest number: 02CA Signing time: Sat 03 Oct 2026 01:53:30 +0000 Manifest this update: Sat 03 Oct 2026 01:53:30 +0000 Manifest next update: Sat 10 Oct 2026 01:53:30 +0000 Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: i7Qc5ZgQKTddEb0aJn8+UDCzhVrXeKlK+9D7yrA3kpc=) 2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: ZZZ9fBv/ymPhUilT+b7u+jHJy78yDtecTBcF5lQprHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Validity Not Before: Oct 3 01:53:30 2026 GMT Not After : Oct 10 01:53:30 2026 GMT Subject: CN=6ac0601a-8906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:d2:93:fd:15:cd:b7:be:cf:20:81:e2:07: ae:32:25:30:a1:e1:3b:a4:d2:b5:48:b6:23:6e:fb: 0a:0d:5b:67:98:53:86:2f:f7:25:c9:3d:a3:b3:38: af:80:88:8d:b2:e3:42:39:ee:e7:86:01:1e:c6:20: 08:6f:d8:b5:d7:77:7a:cd:96:75:1a:c8:95:2b:48: a8:60:c5:7d:3f:0f:8b:74:ad:a4:96:34:a3:80:89: 8a:af:1b:91:dc:ab:dc:17:b8:0b:b0:5d:98:cf:5b: 01:44:f1:6c:3c:77:b4:14:30:00:16:d5:2f:a0:d1: 93:9a:b0:24:75:2f:39:2c:1f:42:25:7a:17:71:c1: 71:2d:8f:45:41:a1:2d:b4:a3:9c:57:d5:57:2d:40: 0f:85:f0:f1:f9:40:de:9f:c2:22:be:ac:92:53:75: ba:c7:bb:18:da:6c:41:23:f8:55:46:f7:00:73:9d: 92:db:97:33:03:f6:c1:f9:cd:c1:d7:2b:94:8a:e1: 25:88:b2:05:80:b5:a7:0f:da:3e:b8:b2:35:39:0c: 32:29:e7:a7:c1:99:53:61:a6:ae:46:61:d1:53:ec: 19:c1:8a:1a:68:5d:be:82:97:db:73:69:2a:ee:6b: 26:31:f3:32:b2:3a:c1:f4:06:03:5a:57:b1:1e:73: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:97:9E:42:86:C3:84:CC:2B:15:AE:FE:9D:CE:48:15:DC:82:9E:33 X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:55:44:7e:76:bd:7f:92:d4:3b:d1:d7:30:d8:6a:1b:33:f6: 8e:93:84:a4:9d:78:81:6a:d6:9f:d2:71:34:a5:98:b3:a1:68: cc:66:cb:60:13:45:22:9f:b2:65:eb:99:d7:83:d1:4b:4e:dd: 13:a6:14:bb:57:38:f5:4a:8c:f0:55:eb:29:3e:fa:72:8d:66: b7:51:1a:25:fc:8b:8f:88:74:da:7f:6b:53:97:68:a0:bc:1a: be:0d:a4:78:7a:3e:4c:a8:ac:df:8a:0e:44:2e:1b:45:17:10: 0a:20:59:96:be:46:b4:e6:70:ba:82:e8:fb:ee:de:28:19:fc: 51:18:47:03:8f:fd:2e:58:17:85:ea:5d:d6:97:b3:bf:9e:9f: db:81:d6:eb:c5:6a:c2:a1:5e:64:55:d3:b5:83:84:42:1c:54: 24:65:20:6a:00:48:30:bc:a5:ed:4b:dc:1b:bb:6f:6a:c1:f2: b2:da:f8:40:8a:7b:14:fc:51:fc:a8:17:34:ad:09:b9:ec:89: bf:cb:ad:ec:cd:9c:80:8c:6f:f5:5f:74:23:a7:48:8d:7c:02: 9c:49:34:46:4b:35:b4:85:eb:d7:d9:bc:5f:72:65:1c:18:91: 7e:72:cc:e9:f3:91:7f:69:8a:97:93:74:d4:5a:91:ff:63:85: 85:e9:fe:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjYxMDAzMDE1MzMwWhcNMjYxMDEwMDE1MzMwWjAYMRYwFAYD VQQDEw02YWMwNjAxYS04OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzLSk/0Vzbe+zyCB4geuMiUwoeE7pNK1SLYjbvsKDVtnmFOGL/clyT2jsziv gIiNsuNCOe7nhgEexiAIb9i113d6zZZ1GsiVK0ioYMV9Pw+LdK2kljSjgImKrxuR 3KvcF7gLsF2Yz1sBRPFsPHe0FDAAFtUvoNGTmrAkdS85LB9CJXoXccFxLY9FQaEt tKOcV9VXLUAPhfDx+UDen8IivqySU3W6x7sY2mxBI/hVRvcAc52S25czA/bB+c3B 1yuUiuEliLIFgLWnD9o+uLI1OQwyKeenwZlTYaauRmHRU+wZwYoaaF2+gpfbc2kq 7msmMfMysjrB9AYDWlexHnMn6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWXnkKG w4TMKxWu/p3OSBXcgp4zMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEIyRC8wMzFGNDUxRTgzN0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRn UnNFOG9OZjEwaU5TX2FXTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYFVEfna9f5LUO9HXMNhqGzP2jpOEpJ14gWrWn9JxNKWYs6FozGbLYBNFIp+y ZeuZ14PRS07dE6YUu1c49UqM8FXrKT76co1mt1EaJfyLj4h02n9rU5dooLwavg2k eHo+TKis34oORC4bRRcQCiBZlr5GtOZwuoLo++7eKBn8URhHA4/9LlgXhepd1pez v56f24HW68VqwqFeZFXTtYOEQhxUJGUgagBIMLyl7UvcG7tvasHystr4QIp7FPxR /KgXNK0JueyJv8ut7M2cgIxv9V90I6dIjXwCnEk0Rks1tIXr19m8X3JlHBiRfnLM 6fORf2mKl5N01FqR/2OFhen+fg== -----END CERTIFICATE-----Generated at Sun Oct 4 10:23:48 2026 by rpki-client