$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json) Hash identifier: XoVu0YHgImi76rr5P7MiHWUu1/rq6YTLZAqjcxaclh4= Subject key identifier: 0C:64:F7:29:A0:1F:DF:1E:C2:71:32:3C:BE:16:F5:88:74:A9:18:1A Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft Manifest number: 72 Signing time: Sun 11 Oct 2026 08:31:35 +0000 Manifest this update: Sun 11 Oct 2026 08:31:35 +0000 Manifest next update: Sun 18 Oct 2026 08:31:35 +0000 Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: zIlshbugOHrliCSWRktnNU0er7IpeJfDFXV/cP3/2Ao=) 2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: Ln2S+wJ8y0nN9Ehuf580iL5liKxjlD5bK/WsoPCx1Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: Oct 11 08:31:35 2026 GMT Not After : Oct 18 08:31:35 2026 GMT Subject: CN=6acb4967-2e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:16:fa:6c:56:ea:0a:2e:ee:c1:b9:00:8c: e5:92:74:04:28:f5:0b:2f:6d:1f:92:80:29:b6:59: 30:dc:bf:25:3d:3d:a7:8c:28:8c:ac:0a:84:46:7a: 03:29:7d:24:7d:90:ea:75:aa:80:bd:c1:0c:2e:49: 92:d4:b0:9e:a9:37:e9:2c:01:26:17:df:80:96:31: 88:0b:6f:e8:da:1f:6f:f5:34:1d:53:37:e8:0c:fd: 7d:43:a2:9e:04:40:23:d2:95:dc:0e:71:a1:aa:38: 09:77:b6:13:cb:e7:60:87:b6:6a:38:d5:ba:49:02: d3:11:f7:c3:86:58:61:8b:26:9b:3a:bc:71:ce:be: ff:25:24:d0:01:40:20:9d:58:08:c4:d3:df:c6:0a: 52:99:d0:c2:c0:4c:86:b2:f4:b8:90:f3:37:5a:b8: f7:bb:1f:6a:0b:20:2d:a5:d4:91:88:36:b6:90:38: e6:de:8c:54:99:29:e9:c1:2d:60:21:62:17:ff:c8: 2a:4c:0e:ee:09:85:7c:42:8a:ad:57:7a:be:99:46: 9d:ad:5a:19:fa:de:74:ec:23:0a:58:93:43:fa:4a: 39:22:f3:43:c0:55:71:22:4a:10:fd:53:33:b5:eb: 2d:c2:1f:67:82:41:7d:ef:59:5f:f3:1c:ca:ef:fd: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:64:F7:29:A0:1F:DF:1E:C2:71:32:3C:BE:16:F5:88:74:A9:18:1A X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:66:a5:32:5e:6b:81:95:e4:3b:d6:88:bc:1f:02:7c:b5: e5:1c:0d:44:f4:a8:4a:c9:d2:4a:f2:0e:d8:dd:a1:37:53:f8: c8:00:37:b9:f6:9c:f7:e9:39:10:cf:32:a3:15:98:b0:e9:16: f5:58:d4:4f:0f:3c:8c:ac:c9:33:48:bf:82:90:65:38:58:12: e7:4a:60:08:a6:e2:4b:90:88:c0:05:c5:80:65:49:40:88:bb: 77:21:6c:90:44:c5:85:79:89:2f:2a:f7:43:53:f2:aa:7b:e8: bf:cc:5b:d5:94:d6:ff:2e:f9:bc:d5:cf:44:92:6c:2f:69:e4: 3f:a6:a8:24:67:d1:42:cb:ff:6d:c1:24:ae:e0:5f:9f:7b:f1: ba:2d:5b:15:b4:83:ba:8a:60:9e:02:ca:98:e3:78:40:25:55: 08:1b:c2:40:f0:f2:a2:7a:cb:e5:45:19:c9:0e:46:4d:41:eb: c5:7b:e8:e1:43:cf:01:48:69:82:00:72:cf:0d:3d:5b:75:60: 79:95:41:82:5f:fe:cf:8a:2f:4b:80:eb:23:62:99:d8:8c:56: 18:df:23:80:d6:5a:0b:29:9a:3c:35:4a:4e:0b:47:59:40:27: da:ed:cc:7c:e8:0c:1c:e1:dc:62:5a:36:d0:3f:27:a4:51:57: 47:32:f9:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjEwMTEwODMxMzVaFw0yNjEwMTgwODMxMzVaMBgxFjAUBgNV BAMTDTZhY2I0OTY3LTJlNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb8hb6bFbqCi7uwbkAjOWSdAQo9QsvbR+SgCm2WTDcvyU9PaeMKIysCoRGegMp fSR9kOp1qoC9wQwuSZLUsJ6pN+ksASYX34CWMYgLb+jaH2/1NB1TN+gM/X1Dop4E QCPSldwOcaGqOAl3thPL52CHtmo41bpJAtMR98OGWGGLJps6vHHOvv8lJNABQCCd WAjE09/GClKZ0MLATIay9LiQ8zdauPe7H2oLIC2l1JGINraQOObejFSZKenBLWAh Yhf/yCpMDu4JhXxCiq1Xer6ZRp2tWhn63nTsIwpYk0P6Sjki80PAVXEiShD9UzO1 6y3CH2eCQX3vWV/zHMrv/SUFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDGT3KaAf 3x7CcTI8vhb1iHSpGBowHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwRWalMl5rgZXkO9aIvB8CfLXlHA1E9KhKydJK8g7Y3aE3U/jIADe59pz36TkQ zzKjFZiw6Rb1WNRPDzyMrMkzSL+CkGU4WBLnSmAIpuJLkIjABcWAZUlAiLt3IWyQ RMWFeYkvKvdDU/Kqe+i/zFvVlNb/Lvm81c9EkmwvaeQ/pqgkZ9FCy/9twSSu4F+f e/G6LVsVtIO6imCeAsqY43hAJVUIG8JA8PKiesvlRRnJDkZNQevFe+jhQ88BSGmC AHLPDT1bdWB5lUGCX/7Pii9LgOsjYpnYjFYY3yOA1loLKZo8NUpOC0dZQCfa7cx8 6Awc4dxiWjbQPyekUVdHMvkE -----END CERTIFICATE-----Generated at Mon Oct 12 19:10:23 2026 by rpki-client