$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: DQU/7DxoePZJ68YZiHnFsBiGwe7VA57ta5j8JtWCCOI= Subject key identifier: A8:CE:97:2F:FF:3C:8A:84:EF:EF:2F:8F:FA:88:DF:EC:15:54:D0:D5 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 08AF Signing time: Fri 02 Oct 2026 20:51:12 +0000 Manifest this update: Fri 02 Oct 2026 20:51:12 +0000 Manifest next update: Fri 09 Oct 2026 20:51:12 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: gV2QqTQisGwpzitKcwFRdiWy1DMCnfZlrgw4DimSPj0=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: XH4VYu53iAjrrjdTY4lzAuAVa7gNtCanU3skjDFNBQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: Oct 2 20:51:12 2026 GMT Not After : Oct 9 20:51:12 2026 GMT Subject: CN=6ac01940-f02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2d:36:3e:8d:2b:7f:e1:4b:d9:ac:d2:2c:8d: 8c:80:35:ee:a4:7a:29:73:da:50:0e:ed:db:32:d8: 87:fd:34:47:a2:5d:cf:84:a0:20:eb:70:8f:0e:e5: 9b:a0:dc:34:21:8e:c8:1b:0d:2d:68:60:c7:93:b5: f6:aa:34:93:4b:e5:b0:eb:ef:4d:2e:18:bc:17:46: b3:56:56:18:4c:59:dd:a8:1c:5b:c1:16:d9:35:37: ba:a5:81:f5:a2:d7:b7:c8:b5:5a:81:c4:0f:e6:1a: 64:4a:6b:97:87:0e:43:a1:52:b4:0b:a2:49:38:05: 71:ac:3c:82:68:8b:47:ea:34:ef:28:cf:38:20:9c: d3:81:0f:a3:d6:4e:f7:bf:7e:51:87:89:c2:bd:4c: b0:f2:29:24:1a:ab:28:ec:7b:e6:05:74:97:a7:aa: b2:aa:f0:4c:9f:cd:16:8a:03:5c:fe:30:bb:ef:b9: dd:0e:61:f2:78:a4:78:99:c9:7a:02:96:ad:10:3d: 47:b1:ac:44:4b:b6:1c:30:e5:01:40:5d:48:77:d1: d4:cd:ab:f7:5a:be:48:2d:52:ca:03:c0:a8:3b:a3: 13:3d:d1:d7:21:45:89:69:09:98:61:33:1f:26:8f: 64:b1:b7:e3:92:2c:23:35:3f:1a:49:72:9a:cb:83: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:97:2F:FF:3C:8A:84:EF:EF:2F:8F:FA:88:DF:EC:15:54:D0:D5 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:63:bb:7c:53:57:3a:10:59:09:96:f3:b8:2b:b2:0a:90:05: 64:f1:d1:d9:dd:c7:b6:5f:18:ca:bf:1c:10:fb:16:bc:6b:a6: 07:1e:3d:97:fa:28:46:56:7c:e6:c1:a1:1c:b1:e2:c0:f0:82: c8:fc:73:7d:20:cc:6c:ce:7e:cb:0f:48:df:e2:c3:b3:ca:f6: 05:5d:1b:58:f0:ad:dd:7f:08:b2:77:3b:cf:cc:2f:02:d8:23: c3:59:a8:bd:32:2f:8a:e9:fd:05:b5:e5:bb:66:e7:0a:f1:65: e4:6d:5f:30:1d:31:61:55:ff:37:2f:1d:64:79:2e:46:e5:28: a7:95:51:31:af:4e:c8:9b:46:15:c1:1c:76:21:55:3f:2e:cb: 9f:d1:46:31:c1:71:f0:4a:b0:02:30:90:a9:8f:ae:e0:76:53: 5a:19:ac:bb:c1:ac:96:83:a8:4d:e9:83:ba:bf:85:cd:1f:71: 1f:20:01:58:b1:e9:aa:57:5f:4b:34:39:8e:75:ca:9f:82:ed: d1:d7:e6:9c:81:7c:84:73:cc:7b:aa:64:39:92:01:00:37:8e: 05:29:c8:26:eb:3d:20:01:3b:31:cc:d7:7e:d8:91:f9:34:cc: e5:8e:50:61:03:47:25:e4:0e:c6:7a:e4:50:24:29:5c:82:57: a2:31:cd:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjYxMDAyMjA1MTEyWhcNMjYxMDA5MjA1MTEyWjAYMRYwFAYD VQQDEw02YWMwMTk0MC1mMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i02Po0rf+FL2azSLI2MgDXupHopc9pQDu3bMtiH/TRHol3PhKAg63CPDuWb oNw0IY7IGw0taGDHk7X2qjSTS+Ww6+9NLhi8F0azVlYYTFndqBxbwRbZNTe6pYH1 ote3yLVagcQP5hpkSmuXhw5DoVK0C6JJOAVxrDyCaItH6jTvKM84IJzTgQ+j1k73 v35Rh4nCvUyw8ikkGqso7HvmBXSXp6qyqvBMn80WigNc/jC777ndDmHyeKR4mcl6 ApatED1HsaxES7YcMOUBQF1Id9HUzav3Wr5ILVLKA8CoO6MTPdHXIUWJaQmYYTMf Jo9ksbfjkiwjNT8aSXKay4Or8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjOly// PIqE7+8vj/qI3+wVVNDVMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlGO7fFNXOhBZCZbzuCuyCpAFZPHR2d3Htl8Yyr8cEPsWvGumBx49l/ooRlZ8 5sGhHLHiwPCCyPxzfSDMbM5+yw9I3+LDs8r2BV0bWPCt3X8Isnc7z8wvAtgjw1mo vTIviun9BbXlu2bnCvFl5G1fMB0xYVX/Ny8dZHkuRuUop5VRMa9OyJtGFcEcdiFV Py7Ln9FGMcFx8EqwAjCQqY+u4HZTWhmsu8GsloOoTemDur+FzR9xHyABWLHpqldf SzQ5jnXKn4Lt0dfmnIF8hHPMe6pkOZIBADeOBSnIJus9IAE7MczXftiR+TTM5Y5Q YQNHJeQOxnrkUCQpXIJXojHNdw== -----END CERTIFICATE-----Generated at Sun Oct 4 21:58:10 2026 by rpki-client