$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: /1hT3zM4oQ+40OYlsN1pis48hliBAmklpOyNH5cdPfA= Subject key identifier: 28:A1:2A:8C:88:39:C8:2B:20:4D:A4:C8:78:D6:C7:A7:A6:CF:9B:74 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 0131 Signing time: Wed 07 Oct 2026 06:07:14 +0000 Manifest this update: Wed 07 Oct 2026 06:07:13 +0000 Manifest next update: Wed 14 Oct 2026 06:07:13 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: Cb7aqATS5qL6hzTeohdi1Hb0gWkG/wfU21gUc6F5Zp0=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: q11CNL+t4x5Vwq5rP/tYmXtfqpTGYiz7uq25DLAZUOc=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: zH79Pg4ZQIEeTl4Pd39EmE15gNeuVouP/IuZpHLtxZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Oct 7 06:07:13 2026 GMT Not After : Oct 14 06:07:13 2026 GMT Subject: CN=6ac5e191-dfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:fa:03:eb:89:51:a4:73:0d:56:67:75:5d: 55:02:41:e2:be:ab:8e:13:f3:5e:d9:bc:d3:9a:3b: 4f:b6:dc:78:83:d2:20:35:00:48:4a:a6:ad:bf:65: 62:1f:83:64:13:64:71:18:cb:7f:39:6d:cf:bf:d2: f0:f8:c4:c5:16:fc:ca:21:d5:ce:53:e4:12:28:4b: bf:62:f1:b1:3a:8f:0d:40:b5:1e:2f:da:e9:bf:3b: a3:a2:25:10:1a:39:66:b1:0a:27:eb:9b:67:52:4d: 09:ea:c9:54:11:49:bf:6d:7a:26:7f:70:4b:1f:4f: ea:09:97:59:51:ed:e7:cc:a9:53:67:98:a9:c6:1f: 0c:fa:0d:36:7f:e5:ad:61:84:34:de:ee:ef:ad:c3: b5:26:ba:67:3c:1b:42:82:d7:d7:3d:2c:bc:42:5c: 05:ba:e1:87:e4:c4:cf:d7:4c:6e:25:b6:3f:0a:b0: ef:9f:ef:9b:9a:8d:70:7f:fa:d4:4c:02:97:a0:4e: 3f:b5:cc:bd:97:dc:57:8f:7a:de:d1:f5:63:4c:41: ad:8a:be:14:8a:bb:5e:62:99:e2:b7:75:86:2d:31: f2:d4:22:f4:18:b1:33:94:45:5c:7b:9c:3a:82:94: d9:85:bc:6d:0d:ea:56:ad:7a:42:20:5f:94:c9:2e: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A1:2A:8C:88:39:C8:2B:20:4D:A4:C8:78:D6:C7:A7:A6:CF:9B:74 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:86:7d:fd:19:96:2c:3a:1f:2b:84:40:ae:98:b1:46:f7:2d: e6:58:12:4e:77:ba:07:54:03:81:a8:21:34:d8:f4:33:77:1f: 62:0b:db:e7:87:fd:0f:78:ab:03:ee:1b:5b:35:6c:22:a6:2b: 32:a7:2e:02:c9:06:81:7e:6a:0d:9b:0c:36:83:69:fc:c7:07: 35:07:1a:8f:eb:0a:ab:8a:31:d1:43:fd:c5:8c:5b:17:38:3e: b6:8f:48:5a:50:5b:f2:aa:47:76:31:e6:cc:8b:41:fb:ff:57: 5b:49:26:1a:72:e2:35:8b:17:f4:48:9f:6a:c4:7d:39:76:99: e0:cb:fa:5e:0d:8f:be:fa:4f:d4:9d:01:4e:87:c4:ef:21:34: 0c:db:d7:f7:45:f0:9a:6e:36:85:fe:e9:88:59:45:20:35:ee: e1:4c:c6:a5:39:34:e5:26:0e:8a:5f:f6:b8:63:b9:17:86:47: b9:78:92:70:ad:ca:af:d0:fc:0d:47:6b:f7:b2:2c:1c:64:ec: 6f:d3:03:2c:c5:02:5a:1e:b7:30:8e:3f:77:d2:37:7e:db:04: df:4e:1e:c3:db:5c:92:e9:59:ff:21:09:9d:b8:35:bb:9c:ee: 07:0c:f2:71:3f:63:bc:b4:7c:ca:19:34:e8:b6:d0:7b:13:57: ff:92:d9:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjYxMDA3MDYwNzEzWhcNMjYxMDE0MDYwNzEzWjAYMRYwFAYD VQQDEw02YWM1ZTE5MS1kZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr636A+uJUaRzDVZndV1VAkHivquOE/Ne2bzTmjtPttx4g9IgNQBISqatv2Vi H4NkE2RxGMt/OW3Pv9Lw+MTFFvzKIdXOU+QSKEu/YvGxOo8NQLUeL9rpvzujoiUQ GjlmsQon65tnUk0J6slUEUm/bXomf3BLH0/qCZdZUe3nzKlTZ5ipxh8M+g02f+Wt YYQ03u7vrcO1JrpnPBtCgtfXPSy8QlwFuuGH5MTP10xuJbY/CrDvn++bmo1wf/rU TAKXoE4/tcy9l9xXj3re0fVjTEGtir4UirteYpnit3WGLTHy1CL0GLEzlEVce5w6 gpTZhbxtDepWrXpCIF+UyS6L+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCihKoyI OcgrIE2kyHjWx6emz5t0MB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ4Z9/RmWLDofK4RArpixRvct5lgSTne6B1QDgaghNNj0M3cfYgvb54f9D3ir A+4bWzVsIqYrMqcuAskGgX5qDZsMNoNp/McHNQcaj+sKq4ox0UP9xYxbFzg+to9I WlBb8qpHdjHmzItB+/9XW0kmGnLiNYsX9EifasR9OXaZ4Mv6Xg2PvvpP1J0BTofE 7yE0DNvX90Xwmm42hf7piFlFIDXu4UzGpTk05SYOil/2uGO5F4ZHuXiScK3Kr9D8 DUdr97IsHGTsb9MDLMUCWh63MI4/d9I3ftsE304ew9tckulZ/yEJnbg1u5zuBwzy cT9jvLR8yhk06LbQexNX/5LZoA== -----END CERTIFICATE-----Generated at Thu Oct 8 09:04:34 2026 by rpki-client