$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft File: COwCa3IBEF3wGNr4ULcZELpYAwY.mft (raw, json) Hash identifier: VCY2M4ZeWepphMAxvP4YolHnancPWVorAaoJALgikhU= Subject key identifier: 16:AB:A0:D2:17:36:06:4E:92:78:26:43:1A:EF:A9:66:5F:5B:05:9E Authority key identifier: 08:EC:02:6B:72:01:10:5D:F0:18:DA:F8:50:B7:19:10:BA:58:03:06 Certificate issuer: /CN=A9134CD9/serialNumber=08EC026B7201105DF018DAF850B71910BA580306 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft Manifest number: 17 Signing time: Tue 29 Sep 2026 09:42:01 +0000 Manifest this update: Tue 29 Sep 2026 09:42:00 +0000 Manifest next update: Tue 06 Oct 2026 09:42:00 +0000 Files and hashes: 1: COwCa3IBEF3wGNr4ULcZELpYAwY.crl (hash: uT6DuWj8T7vlEaadJkiU/YB+o6QTLfMHyop2BCcAt68=) 2: 346015149FAA11F18A4BD64D4911F970.roa (hash: xMDQ0XhWAWaoanvZWQtN3I67/HGwd3Ohi7M3HcKd728=) 3: 493783609FA911F1B2ACC7364911F970.roa (hash: lO9x2oeRHMKI3wOMQDLPu/lHsoPi+cw5eRdb+A72Kqk=) 4: 0YuCPb2TW_3Nq6dJ1ZDnoLovBLw.asa (hash: KAYwvPMcGr7oM0tvftAF7gZaGAm623uX2PgfoGx/NOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.crl rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 09:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CD9, serialNumber=08EC026B7201105DF018DAF850B71910BA580306 Validity Not Before: Sep 29 09:42:00 2026 GMT Not After : Oct 6 09:42:00 2026 GMT Subject: CN=6abb87e9-4bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:c7:ed:74:71:5d:e3:f9:48:64:79:fc:e3: dd:2d:9b:d7:5a:00:b7:8f:f3:e9:c5:22:f3:27:9a: d2:96:8f:d4:f4:ad:7b:fd:4a:92:22:93:49:d8:a2: 67:6f:4d:c0:97:2c:e5:f3:75:83:7b:9a:bb:13:75: 9e:a0:f0:4a:c5:d1:0f:c7:a0:b7:14:cc:c0:7f:e9: 50:a1:6d:68:49:bb:22:76:2c:fc:a7:72:1a:92:13: 44:91:51:53:05:2d:fd:0c:c2:c4:e3:2c:14:56:7a: 02:31:f5:29:eb:76:50:fd:65:fa:84:d9:53:65:84: 88:86:de:01:2d:5b:a6:9d:5a:e2:59:0d:5d:af:ca: 36:47:8c:09:62:10:30:d8:5e:7a:eb:96:63:a7:95: 9f:7e:c2:f0:ca:ae:2b:12:51:51:ac:90:8b:4d:7f: b5:a8:c9:88:c9:5c:bf:dd:49:44:bc:f8:df:32:22: 79:f0:ea:0e:89:69:b8:6e:58:bf:e9:a6:a8:eb:d6: 51:65:f7:31:0b:ed:9f:72:ce:22:4b:f5:bd:cf:7a: 0d:7f:1e:aa:f5:89:c8:c6:66:df:f0:a5:ff:27:4e: a8:0e:e2:94:70:3f:82:1b:f1:b0:31:fd:15:11:82: d1:a2:21:73:a7:5a:47:25:fd:a4:0d:6a:b1:fa:84: c3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:A0:D2:17:36:06:4E:92:78:26:43:1A:EF:A9:66:5F:5B:05:9E X509v3 Authority Key Identifier: keyid:08:EC:02:6B:72:01:10:5D:F0:18:DA:F8:50:B7:19:10:BA:58:03:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ed:fa:c8:b7:19:4d:fe:d5:ee:be:da:bf:f0:31:29:db:7c: 98:89:d0:f4:b9:7d:2f:75:71:63:bc:8d:8a:0b:38:09:ff:c4: e6:f9:a3:61:de:d9:dc:10:33:32:4a:be:8c:d7:39:be:12:f7: 14:93:bb:1e:20:1a:1a:ca:53:d0:69:ee:c1:ff:e4:f2:34:27: a1:41:68:8b:5d:28:01:9d:bb:63:26:82:5b:a4:c1:ac:64:17: 37:fd:be:df:5d:c2:2e:e1:0c:a4:b3:3b:04:66:25:7f:ae:60: 03:73:3d:ae:d0:69:40:15:f0:eb:5a:fe:3f:b2:ae:81:72:02: 67:d9:bf:cb:cc:13:c7:a1:96:87:43:e5:ce:e3:e0:59:4d:18: 7f:6e:bc:d2:46:40:13:df:5f:d8:ab:18:46:74:cb:b0:66:b9: 89:c3:d4:d0:21:39:11:d7:7c:96:f5:97:a1:71:1b:1c:8c:4b: 04:f2:f9:9a:bb:8e:c8:91:ab:6b:c2:c2:f2:75:44:74:d8:a8: 39:6b:1e:a2:4b:04:37:3a:51:2d:dd:5c:57:63:9a:32:70:71: cf:cc:b9:af:7c:8c:b3:10:90:97:90:c2:6d:eb:1e:4d:08:3a: 76:a2:26:f3:13:e5:7b:4d:48:df:37:6f:a9:22:4b:7f:db:04: 97:a0:6d:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NENEOTExMC8GA1UEBRMoMDhFQzAyNkI3MjAxMTA1REYwMThEQUY4NTBCNzE5MTBC QTU4MDMwNjAeFw0yNjA5MjkwOTQyMDBaFw0yNjEwMDYwOTQyMDBaMBgxFjAUBgNV BAMTDTZhYmI4N2U5LTRiZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJScftdHFd4/lIZHn8490tm9daALeP8+nFIvMnmtKWj9T0rXv9SpIik0nYomdv TcCXLOXzdYN7mrsTdZ6g8ErF0Q/HoLcUzMB/6VChbWhJuyJ2LPynchqSE0SRUVMF Lf0MwsTjLBRWegIx9SnrdlD9ZfqE2VNlhIiG3gEtW6adWuJZDV2vyjZHjAliEDDY XnrrlmOnlZ9+wvDKrisSUVGskItNf7WoyYjJXL/dSUS8+N8yInnw6g6JabhuWL/p pqjr1lFl9zEL7Z9yziJL9b3Peg1/Hqr1icjGZt/wpf8nTqgO4pRwP4Ib8bAx/RUR gtGiIXOnWkcl/aQNarH6hMP9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFqug0hc2 Bk6SeCZDGu+pZl9bBZ4wHwYDVR0jBBgwFoAUCOwCa3IBEF3wGNr4ULcZELpYAwYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Q0Q5L0U3ODQ5NTkwOUZB ODExRjE4NjQzOEMxOTQ5MTFGOTcwL0NPd0NhM0lCRUYzd0dOcjRVTGNaRUxwWUF3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ093Q2EzSUJFRjN3R05yNFVMY1pFTHBZQXdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 Q0Q5L0U3ODQ5NTkwOUZBODExRjE4NjQzOEMxOTQ5MTFGOTcwL0NPd0NhM0lCRUYz d0dOcjRVTGNaRUxwWUF3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBu7frItxlN/tXuvtq/8DEp23yYidD0uX0vdXFjvI2KCzgJ/8Tm+aNh3tncEDMy Sr6M1zm+EvcUk7seIBoaylPQae7B/+TyNCehQWiLXSgBnbtjJoJbpMGsZBc3/b7f XcIu4QykszsEZiV/rmADcz2u0GlAFfDrWv4/sq6BcgJn2b/LzBPHoZaHQ+XO4+BZ TRh/brzSRkAT31/YqxhGdMuwZrmJw9TQITkR13yW9ZehcRscjEsE8vmau47Ikatr wsLydUR02Kg5ax6iSwQ3OlEt3VxXY5oycHHPzLmvfIyzEJCXkMJt6x5NCDp2oibz E+V7TUjfN2+pIkt/2wSXoG0O -----END CERTIFICATE-----Generated at Thu Oct 1 08:00:12 2026 by rpki-client