$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft File: iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft (raw, json) Hash identifier: xoEHtYUNlhoOPKERNH6cX4JeFJAtDmetMJSAux/zyLs= Subject key identifier: 55:30:B5:AC:18:89:2D:22:53:6F:5E:86:DF:91:C3:ED:E9:27:42:47 Authority key identifier: 88:E7:A6:C0:AA:93:E5:9A:5C:3D:6B:55:5C:34:C8:68:CD:14:94:43 Certificate issuer: /CN=A9153A9D/serialNumber=88E7A6C0AA93E59A5C3D6B555C34C868CD149443 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOemwKqT5ZpcPWtVXDTIaM0UlEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft Manifest number: 1E Signing time: Mon 05 Oct 2026 09:23:46 +0000 Manifest this update: Mon 05 Oct 2026 09:23:45 +0000 Manifest next update: Mon 12 Oct 2026 09:23:45 +0000 Files and hashes: 1: iOemwKqT5ZpcPWtVXDTIaM0UlEM.crl (hash: 1FB7o9cwqoT+WGo9kMWBBhlbSPvmmbsfcICPvzmlHWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.crl rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOemwKqT5ZpcPWtVXDTIaM0UlEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A9D, serialNumber=88E7A6C0AA93E59A5C3D6B555C34C868CD149443 Validity Not Before: Oct 5 09:23:45 2026 GMT Not After : Oct 12 09:23:45 2026 GMT Subject: CN=6ac36ca2-14e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:a3:b9:22:36:77:55:d5:f7:28:f9:31:6c: e5:17:96:c5:fd:ba:1d:c3:fb:43:3f:c3:7f:7e:f7: 0e:e8:45:d1:44:e1:dc:91:24:6f:45:cf:e8:ed:40: d3:18:0c:4c:97:c7:44:38:f7:1a:b1:c0:ab:5a:e6: 18:03:3a:bf:bd:e7:91:0e:c2:c8:dc:4e:be:1b:2a: 80:10:a8:0f:29:88:a4:9a:c1:5b:bc:64:d2:20:ac: 41:e0:1b:e0:98:fa:1c:d1:9b:34:34:bd:ed:71:7b: a3:14:16:51:c7:07:6d:4a:e3:b2:9e:ab:2d:22:9e: 04:0f:a3:01:d4:18:7c:94:1e:0e:4f:83:33:15:f0: 16:6e:33:54:9c:ef:14:ac:5f:7d:42:2d:29:ec:a3: 0e:65:5f:54:ee:1a:42:7f:9b:ea:75:6d:ca:59:29: f9:c2:d1:42:0a:29:95:ab:d3:fa:5d:c9:2b:51:46: d3:b8:c9:11:c4:82:a1:b4:eb:f2:0a:de:c9:71:7c: d7:93:68:6f:3c:d9:3e:41:b4:8e:7a:28:4f:b4:b1: 36:38:67:37:2c:6f:6f:30:ff:af:79:43:c6:1b:34: 2b:3e:48:a5:ea:03:90:62:6b:fd:15:86:22:1b:5b: f1:28:5d:1b:fc:0c:cb:cc:5a:2e:be:d4:ec:0d:07: 96:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:30:B5:AC:18:89:2D:22:53:6F:5E:86:DF:91:C3:ED:E9:27:42:47 X509v3 Authority Key Identifier: keyid:88:E7:A6:C0:AA:93:E5:9A:5C:3D:6B:55:5C:34:C8:68:CD:14:94:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOemwKqT5ZpcPWtVXDTIaM0UlEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:62:da:e9:c4:84:ca:09:30:92:9e:cb:8d:5f:45:9c:81:24: 2c:7b:70:b4:e1:70:26:5a:11:bf:e2:10:cd:22:85:0f:f4:68: a7:ab:d8:c6:c3:e1:a1:63:39:f1:2a:2e:d4:36:b5:04:a2:51: 4c:e3:12:03:3d:66:48:57:cd:44:69:87:2a:02:de:e1:b3:1d: 85:45:08:94:e0:3e:7e:2e:96:fa:1e:a9:e5:2d:b6:ef:55:51: 5f:92:6b:ef:58:8a:3d:b8:fa:fc:a8:4f:01:6f:c9:7c:88:b2: f6:31:db:d8:b7:6d:8d:d5:6e:31:09:e1:6f:8c:d9:b7:bb:b9: 25:62:14:ff:6f:42:f0:cb:13:19:72:b8:58:af:ff:26:e6:98: a2:63:7d:0c:af:b1:ae:b5:0c:48:03:76:ce:ea:c9:7c:fa:07: 7e:13:ba:38:3f:17:0c:98:1e:5f:30:6d:fe:c4:63:75:52:64: f3:fd:7f:0c:1a:2e:13:18:ab:d6:45:e1:d1:55:6e:b9:54:68: b0:fe:15:70:cb:c1:a0:38:c6:c9:f8:9a:08:37:f2:25:13:a3: 9b:fb:fa:e1:b4:28:e1:7a:c9:91:89:a7:f6:9e:31:7a:b3:ae: 09:35:d3:ab:6b:2b:21:ce:03:93:6f:22:bf:e5:81:dc:e9:f2: 74:64:3c:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0E5RDExMC8GA1UEBRMoODhFN0E2QzBBQTkzRTU5QTVDM0Q2QjU1NUMzNEM4NjhD RDE0OTQ0MzAeFw0yNjEwMDUwOTIzNDVaFw0yNjEwMTIwOTIzNDVaMBgxFjAUBgNV BAMTDTZhYzM2Y2EyLTE0ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfQqO5IjZ3VdX3KPkxbOUXlsX9uh3D+0M/w39+9w7oRdFE4dyRJG9Fz+jtQNMY DEyXx0Q49xqxwKta5hgDOr+955EOwsjcTr4bKoAQqA8piKSawVu8ZNIgrEHgG+CY +hzRmzQ0ve1xe6MUFlHHB21K47Keqy0ingQPowHUGHyUHg5PgzMV8BZuM1Sc7xSs X31CLSnsow5lX1TuGkJ/m+p1bcpZKfnC0UIKKZWr0/pdyStRRtO4yRHEgqG06/IK 3slxfNeTaG882T5BtI56KE+0sTY4Zzcsb28w/695Q8YbNCs+SKXqA5Bia/0VhiIb W/EoXRv8DMvMWi6+1OwNB5a5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVTC1rBiJ LSJTb16G35HD7eknQkcwHwYDVR0jBBgwFoAUiOemwKqT5ZpcPWtVXDTIaM0UlEMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzQTlELzAyMjZFRDAyOTU0 QjExRjFCNzVCOEI1MDYxMTFGOTcwL2lPZW13S3FUNVpwY1BXdFZYRFRJYU0wVWxF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaU9lbXdLcVQ1WnBjUFd0VlhEVElhTTBVbEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz QTlELzAyMjZFRDAyOTU0QjExRjFCNzVCOEI1MDYxMTFGOTcwL2lPZW13S3FUNVpw Y1BXdFZYRFRJYU0wVWxFTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADYtrpxITKCTCSnsuNX0WcgSQse3C04XAmWhG/4hDNIoUP9Ginq9jGw+GhYznx Ki7UNrUEolFM4xIDPWZIV81EaYcqAt7hsx2FRQiU4D5+Lpb6HqnlLbbvVVFfkmvv WIo9uPr8qE8Bb8l8iLL2MdvYt22N1W4xCeFvjNm3u7klYhT/b0LwyxMZcrhYr/8m 5piiY30Mr7GutQxIA3bO6sl8+gd+E7o4PxcMmB5fMG3+xGN1UmTz/X8MGi4TGKvW ReHRVW65VGiw/hVwy8GgOMbJ+JoIN/IlE6Ob+/rhtCjhesmRiaf2njF6s64JNdOr ayshzgOTbyK/5YHc6fJ0ZDzY -----END CERTIFICATE-----Generated at Mon Oct 5 16:38:55 2026 by rpki-client