$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json) Hash identifier: 7MSEtnEvZryo65TNH5enr+pLTb6sTM6/EviESFRjWTY= Subject key identifier: C5:10:11:83:02:BC:71:C0:30:26:27:C9:07:9C:54:A1:5F:52:17:FD Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft Manifest number: 0149 Signing time: Mon 05 Oct 2026 05:41:46 +0000 Manifest this update: Mon 05 Oct 2026 05:41:46 +0000 Manifest next update: Mon 12 Oct 2026 05:41:46 +0000 Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: BDVFYxJQAF4XL3vZM0/GND7vxRryIDQcRFpqOOfshCw=) 2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Validity Not Before: Oct 5 05:41:46 2026 GMT Not After : Oct 12 05:41:46 2026 GMT Subject: CN=6ac3389a-fe2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:12:52:45:e1:42:c0:5d:88:cd:cb:b7:58: 26:99:ad:d9:a9:ee:75:f4:7b:e1:18:12:2e:d5:1a: 70:19:d2:58:15:0f:62:17:6d:ba:d8:88:52:8c:6f: 8a:b4:98:bd:7a:07:54:8e:9c:c2:cc:ed:7a:14:53: 88:ac:c5:59:7f:a6:a0:98:03:83:78:6c:00:5a:46: 97:e1:81:37:95:e2:43:07:ad:8f:b6:03:ea:3b:15: 13:37:08:70:44:80:23:25:98:52:02:95:24:eb:8d: a0:1d:c3:3c:b4:89:4b:35:ae:fd:01:6b:ae:35:35: 0f:6b:ce:95:d7:d2:dd:c7:b5:d4:15:24:04:65:31: 1c:91:ad:f8:f4:12:03:fc:63:64:59:41:eb:48:7f: fd:58:37:ac:dd:05:a7:e7:fb:04:8b:28:12:e3:14: 59:95:61:79:77:c2:af:dd:bf:46:8a:50:48:1c:0c: a4:d4:7c:69:a8:2c:fa:4b:ac:b1:2f:87:18:cc:c6: 07:0e:67:d2:28:d1:ce:cc:bb:93:50:f8:35:58:88: 99:cf:d0:bd:8f:8f:6c:e3:be:e2:e7:2e:b9:6b:69: 91:e7:29:49:79:14:b7:d2:23:9f:bc:94:71:0f:b1: 13:28:34:77:8d:90:a7:5f:4f:c4:41:12:56:96:bc: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:10:11:83:02:BC:71:C0:30:26:27:C9:07:9C:54:A1:5F:52:17:FD X509v3 Authority Key Identifier: keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5c:fa:7c:f9:96:b0:53:ca:62:7c:fd:b2:af:98:49:7c:ea: cf:bb:d4:2f:24:fa:1f:83:f8:6d:b3:32:86:a5:89:14:02:40: 76:73:19:c9:97:e8:3c:ea:a1:d0:69:bc:14:1b:fd:f3:7e:f2: ee:62:48:b6:aa:98:2b:a9:8c:16:d1:a8:e7:29:1e:82:23:12: c4:29:6d:9d:b8:00:d4:2d:ab:43:27:f7:c0:7d:a4:d4:26:db: cb:c2:37:bc:07:5b:80:54:fc:45:e1:91:6c:a9:e2:a3:a6:85: 11:d1:8a:0f:19:bd:1d:c6:5c:21:a8:22:43:4d:04:bb:2b:dd: 43:31:9e:41:bd:55:7f:65:3f:f6:6e:d7:90:7f:93:a6:8e:f2: 50:34:ea:cf:eb:85:a1:5d:82:46:90:10:47:29:77:84:e7:75: 30:62:0b:ab:78:75:b6:b3:d4:1d:be:04:00:f2:53:d2:23:79: 87:ac:7d:ca:28:80:58:c6:0f:4b:82:7e:42:40:74:3e:5e:87: 78:77:67:cb:ea:c9:60:c5:e0:bc:17:ac:d2:6d:ba:19:87:33: de:7c:29:25:5e:7c:72:af:4f:72:73:5a:d3:6a:f4:fd:59:d9: 54:b1:c8:07:3e:01:7a:4c:81:81:02:53:ff:0a:02:a9:8f:e9: fc:aa:ec:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4NTQxMTAvBgNVBAUTKDZEQTc0ODFFMzk2MzJEMzM4MDM2NjkwRjdCNDNBMkM0 ODM2M0RCNjgwHhcNMjYxMDA1MDU0MTQ2WhcNMjYxMDEyMDU0MTQ2WjAYMRYwFAYD VQQDEw02YWMzMzg5YS1mZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwgSUkXhQsBdiM3Lt1gmma3Zqe519HvhGBIu1RpwGdJYFQ9iF2262IhSjG+K tJi9egdUjpzCzO16FFOIrMVZf6agmAODeGwAWkaX4YE3leJDB62PtgPqOxUTNwhw RIAjJZhSApUk642gHcM8tIlLNa79AWuuNTUPa86V19Ldx7XUFSQEZTEcka349BID /GNkWUHrSH/9WDes3QWn5/sEiygS4xRZlWF5d8Kv3b9GilBIHAyk1HxpqCz6S6yx L4cYzMYHDmfSKNHOzLuTUPg1WIiZz9C9j49s477i5y65a2mR5ylJeRS30iOfvJRx D7ETKDR3jZCnX0/EQRJWlrwJKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUQEYMC vHHAMCYnyQecVKFfUhf9MB8GA1UdIwQYMBaAFG2nSB45Yy0zgDZpD3tDosSDY9to MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ERDkwQzNDMENC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxUT0FObWtQZTBPaXhJTmoy MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhZElIamxqTFRPQU5ta1BlME9peElOajIyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ERDkwQzNDMENCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxU T0FObWtQZTBPaXhJTmoyMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIFz6fPmWsFPKYnz9sq+YSXzqz7vULyT6H4P4bbMyhqWJFAJAdnMZyZfoPOqh 0Gm8FBv9837y7mJItqqYK6mMFtGo5ykegiMSxCltnbgA1C2rQyf3wH2k1Cbby8I3 vAdbgFT8ReGRbKnio6aFEdGKDxm9HcZcIagiQ00EuyvdQzGeQb1Vf2U/9m7XkH+T po7yUDTqz+uFoV2CRpAQRyl3hOd1MGILq3h1trPUHb4EAPJT0iN5h6x9yiiAWMYP S4J+QkB0Pl6HeHdny+rJYMXgvBes0m26GYcz3nwpJV58cq9PcnNa02r0/VnZVLHI Bz4BekyBgQJT/woCqY/p/KrsBA== -----END CERTIFICATE-----Generated at Tue Oct 6 08:48:44 2026 by rpki-client