$ rpki-client -vvvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json) Hash identifier: sVKeLD70Wq9ceTE+EtVBWsc+YE+bs4GiTs8KvLlpios= Subject key identifier: 74:D2:F8:D2:F2:AB:45:73:64:C9:EC:64:E1:3A:DE:BB:18:08:CB:F7 Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Certificate serial: 138E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft Manifest number: 1385 Signing time: Wed 28 Oct 2026 17:00:51 +0000 Manifest this update: Wed 28 Oct 2026 17:00:50 +0000 Manifest next update: Wed 04 Nov 2026 17:00:50 +0000 Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: y7toq86g45K+aR0INNVxi4gcGqrlBWyo8rJVaP6OIcQ=) 2: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: TXksggudhoYnYZG8XJQZOjMGiQeEQ88l8YGg9Asd64Y=) 3: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: sFjuCeK0cCGXi+GkdmGnHvDeHOKZWdP9M+7beoSSfAw=) 4: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: qokabZtBOAlQ/LOtlITa957LjkcWQQzpeDyYnXOKXSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5006 (0x138e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Validity Not Before: Oct 28 17:00:50 2026 GMT Not After : Nov 4 17:00:50 2026 GMT Subject: CN=6ae22a43-beb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:6c:a7:17:4e:97:a4:77:d1:2c:02:ef:4e: 4a:2f:bc:13:a9:eb:1e:22:a5:b2:57:9c:a0:8c:ba: 6c:bf:37:5f:7d:34:57:d0:54:98:14:fb:16:30:fb: 0e:e9:52:f9:7f:d4:b2:fd:e4:cc:74:35:72:f5:ea: 36:b6:7c:28:27:87:82:f0:48:e7:b7:94:07:9f:f8: 53:bd:9e:55:e2:d0:7b:5e:9a:02:25:f0:83:37:10: cc:55:84:41:87:ec:cf:35:46:16:6c:45:f7:b8:4d: b8:40:b1:55:cb:ad:27:e3:f0:41:04:42:9c:a6:a9: 1a:4f:3b:7b:11:20:98:0e:f5:3f:4d:dc:a3:93:4c: 14:de:74:a0:e5:1e:a6:c6:21:a7:b1:fe:ff:e8:04: 9d:9f:b3:48:b2:2f:16:2f:16:a9:48:ac:54:7f:94: f2:62:f6:40:4b:3a:9f:fa:98:ff:4c:61:97:e1:50: 97:7d:b2:fd:11:ca:87:d8:f2:ac:57:1f:55:5e:1b: cf:ce:7a:88:fb:bb:0c:f3:28:3a:6f:8c:a3:50:fe: 31:28:60:da:e8:ea:98:e1:19:ec:a5:1b:e6:0c:7c: 7e:98:21:0c:a4:a1:92:91:c6:f2:44:6d:f9:aa:bf: 92:33:e9:da:06:1e:ee:75:7c:64:35:95:75:c1:3b: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:F8:D2:F2:AB:45:73:64:C9:EC:64:E1:3A:DE:BB:18:08:CB:F7 X509v3 Authority Key Identifier: keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d3:15:ad:2b:a2:8f:7b:23:fa:f2:d8:69:1a:33:44:0e:07: db:f9:f0:81:7a:c9:c2:ab:5d:60:77:41:8f:2d:7e:4f:b6:a8: 65:da:b7:80:1f:01:37:bc:74:42:7f:e3:f4:f6:c0:9f:63:c0: 5b:bd:46:1b:ac:be:21:96:da:e8:60:aa:16:b4:de:4f:0e:62: 0a:03:7d:d5:77:67:5d:e7:fb:ba:9c:e5:d7:81:de:b2:93:1d: 46:41:cb:83:57:42:df:0a:25:d7:03:d7:32:de:97:cf:b6:01: 2f:98:9b:35:ed:fa:84:cc:6c:37:81:e1:7f:67:ee:39:1b:5c: 73:01:b7:b8:af:7f:e8:3d:92:2b:dd:fd:fe:d8:52:f3:db:1a: a5:46:28:0f:a5:48:f5:b6:99:24:e9:4e:f4:fc:3a:f1:af:e1: ab:0b:e0:2a:08:17:77:34:58:84:d4:24:7c:60:04:94:af:e9: 77:97:97:50:6c:05:24:38:d9:09:4a:8c:0c:75:60:73:ef:5b: c8:3b:e4:b3:dc:9c:dc:f5:0a:9a:88:bb:e5:4a:28:a3:e0:37: f4:09:37:2c:5d:6e:9c:7b:86:a4:d9:1c:82:03:3d:34:0e:2f: 4a:fb:0e:0c:20:de:ad:3c:d0:79:7f:36:0a:49:d3:33:43:dc: 81:89:73:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF QkJEMjhEOTcwHhcNMjYxMDI4MTcwMDUwWhcNMjYxMTA0MTcwMDUwWjAYMRYwFAYD VQQDEw02YWUyMmE0My1iZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4lspxdOl6R30SwC705KL7wTqeseIqWyV5ygjLpsvzdffTRX0FSYFPsWMPsO 6VL5f9Sy/eTMdDVy9eo2tnwoJ4eC8Ejnt5QHn/hTvZ5V4tB7XpoCJfCDNxDMVYRB h+zPNUYWbEX3uE24QLFVy60n4/BBBEKcpqkaTzt7ESCYDvU/Tdyjk0wU3nSg5R6m xiGnsf7/6ASdn7NIsi8WLxapSKxUf5TyYvZASzqf+pj/TGGX4VCXfbL9EcqH2PKs Vx9VXhvPznqI+7sM8yg6b4yjUP4xKGDa6OqY4RnspRvmDHx+mCEMpKGSkcbyRG35 qr+SM+naBh7udXxkNZV1wTudCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTS+NLy q0VzZMnsZOE63rsYCMv3MB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1 TTI4eVRETExwVmpydlNqWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZdMVrSuij3sj+vLYaRozRA4H2/nwgXrJwqtdYHdBjy1+T7aoZdq3gB8BN7x0 Qn/j9PbAn2PAW71GG6y+IZba6GCqFrTeTw5iCgN91XdnXef7upzl14HespMdRkHL g1dC3wol1wPXMt6Xz7YBL5ibNe36hMxsN4Hhf2fuORtccwG3uK9/6D2SK939/thS 89sapUYoD6VI9baZJOlO9Pw68a/hqwvgKggXdzRYhNQkfGAElK/pd5eXUGwFJDjZ CUqMDHVgc+9byDvks9yc3PUKmoi75Uooo+A39Ak3LF1unHuGpNkcggM9NA4vSvsO DCDerTzQeX82CknTM0PcgYlzAw== -----END CERTIFICATE-----Generated at Thu Oct 29 17:08:16 2026 by rpki-client