$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft File: 1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft (raw, json) Hash identifier: OWqdguTMZNmqoKXOP/3Wg73AHLoO/Y/rY5WcNLl4PfI= Subject key identifier: CB:32:61:44:09:09:D9:75:66:DF:32:D0:84:E4:B8:D1:50:2C:25:DF Authority key identifier: D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34 Certificate issuer: /CN=A9151AA8/serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft Manifest number: 21 Signing time: Tue 27 Oct 2026 09:12:05 +0000 Manifest this update: Tue 27 Oct 2026 09:12:04 +0000 Manifest next update: Tue 03 Nov 2026 09:12:04 +0000 Files and hashes: 1: 1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl (hash: lu2HbSslr6NGamyVm6ELNbSkp658wodq1OpbX2Na93Y=) 2: B4BF1A1AA26C11F1A3A3B52B6511F970.roa (hash: UjcljmSpnML+q/8xs5PLqM53w0DosDMz4oMFTLvMaDM=) 3: B57A8048A26C11F1A3A3B52B6511F970.roa (hash: y2OHT/vLbiEsNPPOfmN97tHiYH0EfOmp/p0s1bJo294=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AA8, serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34 Validity Not Before: Oct 27 09:12:04 2026 GMT Not After : Nov 3 09:12:04 2026 GMT Subject: CN=6ae06ae4-ccc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:2f:37:88:86:26:a3:da:ea:2f:29:4e:7d: 50:3a:92:e9:b5:6c:48:55:da:b9:8e:f1:1f:e9:12: 43:40:74:5c:12:39:14:c5:86:85:48:58:b1:1d:86: b9:3c:d2:2f:af:08:94:fb:c7:db:c4:54:80:4d:9f: b0:3a:b4:4e:88:ce:4b:a7:e4:da:72:77:81:86:ad: 46:a6:f3:a4:c0:06:77:8b:da:d1:c9:5b:c9:27:db: 32:6c:2e:4a:c4:18:f4:ac:f7:16:b2:2c:80:8c:a2: 7f:af:99:1c:f2:9b:e0:a6:54:a7:97:97:60:47:c2: ef:07:dc:53:93:72:f9:0d:b9:f2:7f:60:2b:a7:2a: b2:bc:2f:76:b6:14:e1:a0:96:09:46:a3:cd:a0:49: 7d:62:33:88:39:be:be:64:16:0d:c1:22:12:eb:87: 48:cf:b6:95:e1:23:8a:60:4d:55:dc:a1:4e:f5:5d: 86:c1:72:7f:13:c1:21:c5:03:42:af:fe:a2:80:ca: 50:80:ce:23:69:09:de:13:21:b0:b8:8e:35:71:c1: e6:d0:f7:ef:7f:ed:24:ae:f3:34:72:af:24:36:03: d0:0f:c8:a5:a1:75:72:3d:a1:0e:f1:bf:11:3f:00: a6:c4:55:d3:c6:2e:b1:27:7d:b0:97:66:17:02:7c: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:61:44:09:09:D9:75:66:DF:32:D0:84:E4:B8:D1:50:2C:25:DF X509v3 Authority Key Identifier: keyid:D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:4d:d7:27:af:b7:ab:2e:22:c4:e8:c1:94:95:17:86:3a:c1: 86:a0:ff:9c:42:27:46:8b:c1:66:86:06:c3:0f:1d:58:52:57: c5:5b:62:03:9e:36:b1:ad:55:d0:9d:19:b8:8a:41:50:ee:1f: 20:cc:32:8a:3f:a7:0e:51:a2:29:30:6b:ba:a5:d0:a0:47:97: d2:bd:f4:c0:8c:3e:0f:20:2f:f6:2a:e4:a1:71:7e:23:38:6e: 53:3c:bc:77:0c:d3:1c:5f:16:c8:56:0f:c3:c1:84:a5:7f:ae: 5e:6b:0c:0a:1b:6b:0a:04:09:79:b3:c8:e3:56:8b:55:1f:9c: 68:1d:cf:e0:93:9d:30:01:ca:be:f6:35:06:c0:2b:a7:6c:4d: 7e:b7:f7:c0:31:27:6a:5e:0f:c0:d8:c9:89:3c:7c:2f:03:28: e2:b1:48:59:a2:2f:94:36:f4:61:27:73:5e:19:44:20:c8:18: db:bf:26:09:9e:6f:c4:a5:19:53:40:fa:f6:ba:96:0b:1d:47: d0:d4:4a:5c:eb:fc:8d:d6:66:d8:4d:b3:8b:85:23:56:38:1a: 72:a9:de:1d:33:bd:ee:64:bc:75:f9:28:bd:a5:b8:4b:3a:a3: 1a:52:70:86:78:e2:ed:e0:da:a2:e1:fe:c0:01:2d:fd:b2:6a: d5:e3:79:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUFBODExMC8GA1UEBRMoRDRERjYzMEE0NDFFREVGQUU1M0MyNUQ5RDY2QUFCNDM4 MjIxNkYzNDAeFw0yNjEwMjcwOTEyMDRaFw0yNjExMDMwOTEyMDRaMBgxFjAUBgNV BAMTDTZhZTA2YWU0LWNjYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGWy83iIYmo9rqLylOfVA6kum1bEhV2rmO8R/pEkNAdFwSORTFhoVIWLEdhrk8 0i+vCJT7x9vEVIBNn7A6tE6Izkun5Npyd4GGrUam86TABneL2tHJW8kn2zJsLkrE GPSs9xayLICMon+vmRzym+CmVKeXl2BHwu8H3FOTcvkNufJ/YCunKrK8L3a2FOGg lglGo82gSX1iM4g5vr5kFg3BIhLrh0jPtpXhI4pgTVXcoU71XYbBcn8TwSHFA0Kv /qKAylCAziNpCd4TIbC4jjVxwebQ9+9/7SSu8zRyryQ2A9APyKWhdXI9oQ7xvxE/ AKbEVdPGLrEnfbCXZhcCfM/DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyzJhRAkJ 2XVm3zLQhOS40VAsJd8wHwYDVR0jBBgwFoAU1N9jCkQe3vrlPCXZ1mqrQ4IhbzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQUE4LzIyMkMyMDk0QTI2 QzExRjE4RjI5QkE0MzY0MTFGOTcwLzFOOWpDa1FlM3ZybFBDWFoxbXFyUTRJaGJ6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMU45akNrUWUzdnJsUENYWjFtcXJRNEloYnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx QUE4LzIyMkMyMDk0QTI2QzExRjE4RjI5QkE0MzY0MTFGOTcwLzFOOWpDa1FlM3Zy bFBDWFoxbXFyUTRJaGJ6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCwTdcnr7erLiLE6MGUlReGOsGGoP+cQidGi8FmhgbDDx1YUlfFW2IDnjaxrVXQ nRm4ikFQ7h8gzDKKP6cOUaIpMGu6pdCgR5fSvfTAjD4PIC/2KuShcX4jOG5TPLx3 DNMcXxbIVg/DwYSlf65eawwKG2sKBAl5s8jjVotVH5xoHc/gk50wAcq+9jUGwCun bE1+t/fAMSdqXg/A2MmJPHwvAyjisUhZoi+UNvRhJ3NeGUQgyBjbvyYJnm/EpRlT QPr2upYLHUfQ1Epc6/yN1mbYTbOLhSNWOBpyqd4dM73uZLx1+Si9pbhLOqMaUnCG eOLt4Nqi4f7AAS39smrV43k/ -----END CERTIFICATE-----Generated at Wed Oct 28 11:23:37 2026 by rpki-client