$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.mft File: -oumwW9mdvCEDuvkwrJeGUzfaXw.mft (raw, json) Hash identifier: NZtQruuFVEfRk2tOsb6QfJjaNZzOP7wCfo2Gzsf8wBs= Subject key identifier: CC:92:C8:C1:4E:73:BA:29:5B:58:F8:18:9D:4F:5C:62:63:93:05:A6 Authority key identifier: FA:8B:A6:C1:6F:66:76:F0:84:0E:EB:E4:C2:B2:5E:19:4C:DF:69:7C Certificate issuer: /CN=A9151CB1/serialNumber=FA8BA6C16F6676F0840EEBE4C2B25E194CDF697C Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oumwW9mdvCEDuvkwrJeGUzfaXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.mft Manifest number: 05 Signing time: Mon 05 Oct 2026 09:46:22 +0000 Manifest this update: Mon 05 Oct 2026 09:46:21 +0000 Manifest next update: Mon 12 Oct 2026 09:46:21 +0000 Files and hashes: 1: -oumwW9mdvCEDuvkwrJeGUzfaXw.crl (hash: UKn9hvX/swDXGTmA1tjWctLHtqW34IEY2C18fSxHN5s=) 2: CB294B74BD6811F1A0CF111C6311F970.roa (hash: 7YtUMPY0BMzW/YApFdmy21gxHlg0xlr/SpcejgaxP1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.crl rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oumwW9mdvCEDuvkwrJeGUzfaXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151CB1, serialNumber=FA8BA6C16F6676F0840EEBE4C2B25E194CDF697C Validity Not Before: Oct 5 09:46:21 2026 GMT Not After : Oct 12 09:46:21 2026 GMT Subject: CN=6ac371ee-bf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:31:2a:c5:53:0c:74:37:77:60:30:fc:88: cd:ac:0c:e7:b7:23:15:70:9d:ff:76:b5:d9:6f:95: 75:7d:a3:f8:76:61:58:73:1c:c0:90:15:99:4b:86: c8:34:e4:65:f6:dc:0e:6e:8e:70:d0:37:e7:ea:fd: 4c:40:c7:26:89:64:2c:ec:d5:f2:e2:35:f5:c5:06: d8:f9:89:c0:f4:26:b0:d4:a3:c2:d6:98:72:60:6d: 11:f4:02:7d:a8:fc:de:d3:07:dd:2a:e4:71:fc:19: f3:72:9a:17:99:e7:38:23:7c:10:8a:82:30:ee:9e: 1c:f6:08:06:9d:bb:85:ec:75:d7:a1:f1:15:a7:8c: d8:cd:99:0c:84:c6:a9:c6:d9:97:7c:57:a9:ef:52: 02:b5:6a:c0:17:0e:10:99:29:ca:67:d9:6c:a9:ba: 46:e2:63:fd:05:d0:ac:63:3d:6a:c3:0f:83:3f:41: 8a:1d:e6:8c:0c:e0:aa:a5:c1:c1:39:ca:94:1f:21: d9:7a:51:59:24:91:71:fc:7a:f9:75:e9:f2:9f:44: 21:73:08:c8:e3:70:bc:0a:db:1e:a5:3e:be:73:2b: d9:95:d7:e3:4c:6f:8d:86:3f:4c:19:b1:d3:69:06: ea:77:7b:20:61:8a:b2:56:9b:3b:49:a5:f6:74:f6: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:92:C8:C1:4E:73:BA:29:5B:58:F8:18:9D:4F:5C:62:63:93:05:A6 X509v3 Authority Key Identifier: keyid:FA:8B:A6:C1:6F:66:76:F0:84:0E:EB:E4:C2:B2:5E:19:4C:DF:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oumwW9mdvCEDuvkwrJeGUzfaXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5b:4e:a9:ac:c2:5e:43:c4:51:9b:02:cb:25:bf:4d:e5:e9: 72:86:02:a4:05:2a:8c:fe:98:e4:1b:2a:74:29:a4:ec:e1:ea: 61:0c:ef:90:cc:f3:1f:06:53:91:db:d1:52:a8:19:8d:76:44: f2:f6:ac:9e:2b:ad:b2:6e:99:ac:41:c9:68:89:2f:f5:87:90: ae:82:cd:9f:14:33:9b:51:e1:38:38:f6:0f:be:99:3d:ae:7d: bf:0a:a9:58:de:4a:39:e6:c1:a9:99:d6:d1:41:4b:9d:94:e2: 7c:0a:27:b2:51:fe:f8:cf:85:18:3d:f1:f8:36:9a:16:7b:58: 4f:8d:df:cf:3d:d3:cb:83:ae:b8:a4:22:bd:00:ab:17:81:f7: 8e:e8:11:ba:fd:f2:e7:2d:12:75:5c:80:6d:f0:4f:67:7f:92: 11:eb:06:49:e9:95:cb:23:87:d5:e8:ce:1a:03:f0:85:45:4b: b0:bb:d0:ea:b5:c0:d6:46:34:33:1b:e6:5c:50:4a:18:98:b7: ae:97:87:0b:da:6b:58:d7:a4:ff:75:a6:f2:64:bc:ae:84:c6: 64:59:1f:3e:0c:b0:ef:5e:02:9f:1b:42:e2:6b:49:8c:87:e6: ec:fc:0a:ae:13:0a:98:cf:46:2a:5e:76:ce:bb:9b:e1:51:5e: 43:93:f8:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUNCMTExMC8GA1UEBRMoRkE4QkE2QzE2RjY2NzZGMDg0MEVFQkU0QzJCMjVFMTk0 Q0RGNjk3QzAeFw0yNjEwMDUwOTQ2MjFaFw0yNjEwMTIwOTQ2MjFaMBgxFjAUBgNV BAMTDTZhYzM3MWVlLWJmOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChnjEqxVMMdDd3YDD8iM2sDOe3IxVwnf92tdlvlXV9o/h2YVhzHMCQFZlLhsg0 5GX23A5ujnDQN+fq/UxAxyaJZCzs1fLiNfXFBtj5icD0JrDUo8LWmHJgbRH0An2o /N7TB90q5HH8GfNymheZ5zgjfBCKgjDunhz2CAadu4Xsddeh8RWnjNjNmQyExqnG 2Zd8V6nvUgK1asAXDhCZKcpn2WypukbiY/0F0KxjPWrDD4M/QYod5owM4KqlwcE5 ypQfIdl6UVkkkXH8evl16fKfRCFzCMjjcLwK2x6lPr5zK9mV1+NMb42GP0wZsdNp Bup3eyBhirJWmztJpfZ09jr9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzJLIwU5z uilbWPgYnU9cYmOTBaYwHwYDVR0jBBgwFoAU+oumwW9mdvCEDuvkwrJeGUzfaXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQ0IxL0ExQTU5QjI4QkQ2 NzExRjFBNjMwOTJGMjYyMTFGOTcwLy1vdW13VzltZHZDRUR1dmt3ckplR1V6ZmFY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW91bXdXOW1kdkNFRHV2a3dySmVHVXpmYVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx Q0IxL0ExQTU5QjI4QkQ2NzExRjFBNjMwOTJGMjYyMTFGOTcwLy1vdW13VzltZHZD RUR1dmt3ckplR1V6ZmFYdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdW06prMJeQ8RRmwLLJb9N5elyhgKkBSqM/pjkGyp0KaTs4ephDO+QzPMfBlOR 29FSqBmNdkTy9qyeK62ybpmsQcloiS/1h5Cugs2fFDObUeE4OPYPvpk9rn2/CqlY 3ko55sGpmdbRQUudlOJ8CieyUf74z4UYPfH4NpoWe1hPjd/PPdPLg664pCK9AKsX gfeO6BG6/fLnLRJ1XIBt8E9nf5IR6wZJ6ZXLI4fV6M4aA/CFRUuwu9DqtcDWRjQz G+ZcUEoYmLeul4cL2mtY16T/dabyZLyuhMZkWR8+DLDvXgKfG0Lia0mMh+bs/Aqu EwqYz0YqXnbOu5vhUV5Dk/iL -----END CERTIFICATE-----Generated at Mon Oct 5 16:38:50 2026 by rpki-client