$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft File: d5yg0JVwhQFufQNaTsuieBq3xQ8.mft (raw, json) Hash identifier: ls+XZplVT67Jp8ICtRJjSpKGyJhpoTMjwqwx00nzXdM= Subject key identifier: 0F:12:22:07:BE:3A:0E:85:81:41:A5:E5:A3:31:30:98:68:07:60:2A Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F Certificate issuer: /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft Manifest number: 87 Signing time: Tue 27 Oct 2026 07:59:02 +0000 Manifest this update: Tue 27 Oct 2026 07:59:02 +0000 Manifest next update: Tue 03 Nov 2026 07:59:02 +0000 Files and hashes: 1: d5yg0JVwhQFufQNaTsuieBq3xQ8.crl (hash: oB3RXrmps4jI8FQoC05X/9negC8Ax+f7BEZhEZGzG2M=) 2: 9AAB80560BD511F1920C67C12E3D8C67.roa (hash: 7MrcBRtrM3i0RslsHky1Cdr7mamN7Fo1uDMcDW+7UiA=) 3: 55C25D260BD911F1B73B6397303D8C67.roa (hash: rdz1gfwbX0jq2TD9cfgavgz+Dublp64Dbpc4uLKUPL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Validity Not Before: Oct 27 07:59:02 2026 GMT Not After : Nov 3 07:59:02 2026 GMT Subject: CN=6ae059c6-1b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:c2:d1:32:91:28:ce:28:06:3f:72:56:56: 96:13:69:b0:88:be:d0:f7:ec:cc:9e:15:85:6d:72: ec:f2:ce:15:83:10:ee:b9:b2:3e:6a:f2:3f:26:54: 36:85:72:48:a3:ea:e0:d0:7c:7c:68:73:b6:ce:6d: 13:10:9d:c6:45:f0:78:2f:fa:2d:01:55:a3:0a:a4: ea:ac:59:d0:ed:ed:82:56:0d:ef:6c:20:9a:5e:b1: 29:15:0f:1a:02:d1:8f:3a:60:7d:a8:5e:07:42:c1: 38:94:69:ee:9f:ba:23:51:86:55:26:51:2d:f2:69: 03:a5:3d:97:49:3d:95:ce:a8:1e:8c:8f:4b:2f:48: 3b:8d:76:7c:c7:19:0b:89:2d:7d:03:ba:ec:19:24: b7:17:8e:ce:7b:cc:50:8d:44:e1:e8:f4:b1:79:bb: f5:7a:20:7c:b0:fd:79:f2:cc:09:1d:64:a3:94:04: 14:a2:bc:bc:8e:38:97:13:37:8d:c4:ca:5f:d9:5d: 7c:50:72:24:bb:14:dd:39:4e:99:99:2b:f6:da:0d: 1a:67:bd:dd:4e:68:ba:d5:8c:20:2e:a3:cd:fb:c2: 2a:69:ce:9f:e4:71:4b:d1:a8:2c:14:dd:bf:ac:8e: e3:b7:87:df:19:84:d9:31:b9:e9:5d:8a:53:9e:9d: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:22:07:BE:3A:0E:85:81:41:A5:E5:A3:31:30:98:68:07:60:2A X509v3 Authority Key Identifier: keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:70:0f:9b:be:d9:81:e7:5a:f3:cd:86:2b:84:f7:21:6a:f0: 3c:33:ed:f1:c9:c0:1e:c4:57:92:83:90:36:55:6e:a8:f2:87: ce:70:0b:03:9d:52:cf:24:ee:f4:eb:18:aa:53:32:45:3c:cd: 10:a3:11:ed:e4:f5:3a:f7:94:dc:21:6e:bf:a3:97:b8:ab:bd: 67:11:e5:99:a3:47:3a:e2:a8:e0:20:96:1b:eb:a9:6b:63:fa: f7:07:bb:1e:f5:29:c3:49:11:e0:05:f8:24:ec:17:6a:d0:f8: de:4e:b8:57:e1:8a:dd:7f:ee:49:33:4b:64:52:3e:bb:65:49: 5d:50:bb:ad:e6:d9:ee:78:ef:cb:cc:77:fe:09:4f:16:5b:98: 6c:74:f7:4e:90:a5:85:a4:47:0d:3b:96:53:3a:0f:40:56:28: c2:62:a0:27:59:4b:db:a0:00:fe:39:09:9c:a0:70:01:1d:7b: 85:d9:fe:66:cc:d6:37:a1:6c:86:09:28:9d:3e:65:bd:77:c8: 9c:61:28:b0:59:07:f1:65:0a:4d:8f:7f:b3:40:da:71:78:53: 26:3a:e6:1d:92:09:be:ca:85:c5:43:68:91:94:88:fb:d5:ae: fb:fd:dc:fe:e2:0f:bd:57:06:2f:7c:05:69:42:fc:54:19:62: e6:1f:e6:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxNTcxMTAvBgNVBAUTKDc3OUNBMEQwOTU3MDg1MDE2RTdEMDM1QTRFQ0JBMjc4 MUFCN0M1MEYwHhcNMjYxMDI3MDc1OTAyWhcNMjYxMTAzMDc1OTAyWjAYMRYwFAYD VQQDEw02YWUwNTljNi0xYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVDC0TKRKM4oBj9yVlaWE2mwiL7Q9+zMnhWFbXLs8s4VgxDuubI+avI/JlQ2 hXJIo+rg0Hx8aHO2zm0TEJ3GRfB4L/otAVWjCqTqrFnQ7e2CVg3vbCCaXrEpFQ8a AtGPOmB9qF4HQsE4lGnun7ojUYZVJlEt8mkDpT2XST2VzqgejI9LL0g7jXZ8xxkL iS19A7rsGSS3F47Oe8xQjUTh6PSxebv1eiB8sP158swJHWSjlAQUory8jjiXEzeN xMpf2V18UHIkuxTdOU6ZmSv22g0aZ73dTmi61YwgLqPN+8Iqac6f5HFL0agsFN2/ rI7jt4ffGYTZMbnpXYpTnp1+EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8SIge+ Og6FgUGl5aMxMJhoB2AqMB8GA1UdIwQYMBaAFHecoNCVcIUBbn0DWk7Longat8UP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzE1Ny82NUI4OEI5QzBC Q0YxMUYxQkJEMUZFREEyQzNEOEM2Ny9kNXlnMEpWd2hRRnVmUU5hVHN1aWVCcTN4 UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1eWcwSlZ3aFFGdWZRTmFUc3VpZUJxM3hROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzE1Ny82NUI4OEI5QzBCQ0YxMUYxQkJEMUZFREEyQzNEOEM2Ny9kNXlnMEpWd2hR RnVmUU5hVHN1aWVCcTN4UTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB3APm77Zgeda882GK4T3IWrwPDPt8cnAHsRXkoOQNlVuqPKHznALA51SzyTu 9OsYqlMyRTzNEKMR7eT1OveU3CFuv6OXuKu9ZxHlmaNHOuKo4CCWG+upa2P69we7 HvUpw0kR4AX4JOwXatD43k64V+GK3X/uSTNLZFI+u2VJXVC7rebZ7njvy8x3/glP FluYbHT3TpClhaRHDTuWUzoPQFYowmKgJ1lL26AA/jkJnKBwAR17hdn+ZszWN6Fs hgkonT5lvXfInGEosFkH8WUKTY9/s0DacXhTJjrmHZIJvsqFxUNokZSI+9Wu+/3c /uIPvVcGL3wFaUL8VBli5h/mmQ== -----END CERTIFICATE-----Generated at Tue Oct 27 16:45:04 2026 by rpki-client