$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft File: D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft (raw, json) Hash identifier: KSXGLgE9esVtt8SyY+jY5YUKRfm465VSneXq5EixhkU= Subject key identifier: 19:76:FC:DA:D3:41:4C:26:51:E8:40:D0:25:A2:0B:91:C7:8B:6B:CD Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft Manifest number: 026D Signing time: Sat 03 Oct 2026 02:41:40 +0000 Manifest this update: Sat 03 Oct 2026 02:41:39 +0000 Manifest next update: Sat 10 Oct 2026 02:41:39 +0000 Files and hashes: 1: D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl (hash: q9+p2STAhd56ttpHbdH2e1STXHPOz8xnGtP3AzbQCV0=) 2: 075B4CC80AC511EEB25A152AC4F9AE02.roa (hash: +UwT5EuzqCMtcr13ivyOvHZ5BUB5y0RPoEF85OdZpKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Validity Not Before: Oct 3 02:41:39 2026 GMT Not After : Oct 10 02:41:39 2026 GMT Subject: CN=6ac06b63-3f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:f0:af:9b:5c:41:b0:7b:7b:26:34:03:29: 63:84:5d:2b:64:34:0a:d9:51:19:2e:63:85:c8:e5: c6:6f:1a:f4:5b:79:05:41:e5:25:f7:c8:bc:21:43: cf:6d:d3:b3:f7:40:34:01:9c:4a:21:7f:f4:57:0a: c8:ae:eb:8e:08:b0:a1:54:03:38:29:91:2a:c2:19: 1f:97:01:ad:46:f0:a1:d1:d3:a9:11:43:62:7b:eb: b6:72:f6:cc:42:67:cd:4d:8b:ad:a1:82:be:be:dc: 14:66:14:71:73:2b:96:9e:68:d2:21:26:e9:76:8f: 88:3d:c4:3f:97:17:01:c5:bd:6f:05:80:12:8a:ce: d5:b0:86:50:6a:f1:f7:21:96:59:51:fb:c1:49:c0: 7b:db:3e:c9:c1:b7:35:6d:78:47:eb:29:39:30:b4: d7:4a:b3:79:91:f6:0f:f8:d1:b7:b2:22:cd:1c:53: 42:88:e1:d3:f3:2e:98:48:47:1c:ad:99:2d:ba:63: 5b:43:f4:18:de:da:22:d9:6f:45:94:cb:4d:b6:e1: 5b:64:7f:a5:64:f8:6e:bc:24:a6:7b:c5:45:46:95: 92:f7:4b:c0:2b:36:3b:79:9a:6d:1d:c8:eb:af:e3: ed:b8:82:03:d4:7e:2b:8c:35:7c:c8:29:1e:97:d7: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:FC:DA:D3:41:4C:26:51:E8:40:D0:25:A2:0B:91:C7:8B:6B:CD X509v3 Authority Key Identifier: keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:6c:f4:5e:e8:90:f2:ff:dd:c0:c4:4d:1f:7d:c1:06:18:ea: 95:21:ac:3a:43:06:d4:9e:89:71:7e:2c:20:b8:c6:1e:7e:71: 3a:c4:40:4d:8a:e2:d9:65:61:6d:d5:fa:8f:f2:64:f2:37:fa: 1e:54:1a:8f:df:d7:89:b6:89:df:f7:ce:91:53:6f:35:b1:10: de:e4:74:ed:f7:f6:af:85:7d:33:95:c0:5f:cd:45:b6:5a:a5: 6e:7d:d5:a4:67:66:aa:cc:64:ce:ac:16:68:19:35:c4:a7:f9: 84:66:30:19:48:26:e9:05:6e:77:81:94:01:55:12:94:d1:06: 88:66:77:4c:0e:06:62:66:ce:0b:e2:30:32:63:16:d2:a2:30: 9f:8d:91:39:c8:f7:96:f3:bc:48:68:30:07:00:ed:8e:c9:6a: 6a:d3:da:af:32:3b:b8:2e:40:d3:b6:8f:1a:30:6d:1b:88:c3: 94:58:f6:b6:70:58:93:99:da:2c:d4:58:d4:0b:59:1a:16:48: 65:cf:ce:45:76:ac:5b:d3:04:20:a6:9b:75:da:d1:f0:aa:32: 4a:84:25:22:2b:da:58:15:ee:17:1c:a1:de:d1:c6:08:cd:ee: 5e:b8:5b:a2:05:bf:5a:3b:34:9a:4b:aa:ba:3c:71:18:d0:0c: f6:c5:bc:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCQjAxMTAvBgNVBAUTKDBGNjE0MkFFNDE2OERGMEIxODA1RkE1ODFEMjAzOTQ3 NjdBQTIyNTgwHhcNMjYxMDAzMDI0MTM5WhcNMjYxMDEwMDI0MTM5WjAYMRYwFAYD VQQDEw02YWMwNmI2My0zZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Lwr5tcQbB7eyY0AyljhF0rZDQK2VEZLmOFyOXGbxr0W3kFQeUl98i8IUPP bdOz90A0AZxKIX/0VwrIruuOCLChVAM4KZEqwhkflwGtRvCh0dOpEUNie+u2cvbM QmfNTYutoYK+vtwUZhRxcyuWnmjSISbpdo+IPcQ/lxcBxb1vBYASis7VsIZQavH3 IZZZUfvBScB72z7Jwbc1bXhH6yk5MLTXSrN5kfYP+NG3siLNHFNCiOHT8y6YSEcc rZktumNbQ/QY3toi2W9FlMtNtuFbZH+lZPhuvCSme8VFRpWS90vAKzY7eZptHcjr r+PtuIID1H4rjDV8yCkel9fTLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBl2/NrT QUwmUehA0CWiC5HHi2vNMB8GA1UdIwQYMBaAFA9hQq5BaN8LGAX6WB0gOUdnqiJY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEJCMC9ERDQ3MzhFMDBB QkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3c1lCZnBZSFNBNVIyZXFJ bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QyRkNya0ZvM3dzWUJmcFlIU0E1UjJlcUlsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEJCMC9ERDQ3MzhFMDBBQkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3 c1lCZnBZSFNBNVIyZXFJbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq2z0XuiQ8v/dwMRNH33BBhjqlSGsOkMG1J6JcX4sILjGHn5xOsRATYri2WVh bdX6j/Jk8jf6HlQaj9/XibaJ3/fOkVNvNbEQ3uR07ff2r4V9M5XAX81Ftlqlbn3V pGdmqsxkzqwWaBk1xKf5hGYwGUgm6QVud4GUAVUSlNEGiGZ3TA4GYmbOC+IwMmMW 0qIwn42ROcj3lvO8SGgwBwDtjslqatParzI7uC5A07aPGjBtG4jDlFj2tnBYk5na LNRY1AtZGhZIZc/ORXasW9MEIKabddrR8KoySoQlIivaWBXuFxyh3tHGCM3uXrhb ogW/Wjs0mkuqujxxGNAM9sW8Nw== -----END CERTIFICATE-----Generated at Sun Oct 4 09:37:03 2026 by rpki-client