$ rpki-client -vvvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: z0h39QCGH4WNzxAqdvZdEYLAkrAI7BXJzKWZNOYtk2Y= Subject key identifier: 78:C9:1C:91:24:E3:0B:92:D6:3A:43:B6:69:95:F0:75:EA:52:84:EE Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 18E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 18DE Signing time: Tue 06 Oct 2026 16:29:44 +0000 Manifest this update: Tue 06 Oct 2026 16:29:43 +0000 Manifest next update: Tue 13 Oct 2026 16:29:43 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: TYF5AcKYF/t4AQ/2DX+b0f2QUmLQV+LhaN6Cx0q3kbw=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: kAlL657G1w2cDSecYlSMX1FGlZCqDv6UlaT/sim3FTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6376 (0x18e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Oct 6 16:29:43 2026 GMT Not After : Oct 13 16:29:43 2026 GMT Subject: CN=6ac521f8-8ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:a8:33:e8:c5:58:fe:58:a7:06:a2:2e:9f: fd:6c:6a:be:5f:d2:dd:20:01:28:2f:c7:72:a3:ec: f4:80:39:a3:c9:9e:0a:20:d3:c5:9e:94:db:a2:19: 99:78:ad:10:ea:c3:6c:18:9f:35:17:39:a6:30:52: 09:fa:00:9c:9b:d4:1a:23:cb:e7:00:9c:85:0a:22: 7e:85:c9:6f:d3:bc:a0:d4:06:6b:c9:70:2d:ce:5e: ee:d5:da:21:ad:37:78:53:d9:8d:82:65:26:c1:95: 85:82:29:e8:2d:e4:c8:04:13:b8:2f:c3:f5:09:b7: 8a:aa:c0:41:90:1e:9b:13:c4:eb:52:37:25:89:d0: 51:3f:69:e6:82:0a:0b:8d:2a:69:ac:e6:16:15:7b: af:00:14:05:4a:6c:ad:84:7d:06:d1:2e:b0:ff:04: 02:86:7e:26:ce:2f:77:ce:41:dd:cd:11:c8:ef:13: 4c:16:2e:11:39:f5:61:fd:e5:f9:9e:a7:28:26:d3: 91:ec:98:64:28:21:1f:83:fd:d2:1f:35:77:27:ed: 2d:c3:78:0e:27:b6:be:e2:cd:bc:b9:11:d6:eb:b4: d4:87:4e:54:68:1d:f0:1d:fd:3d:07:68:31:a7:97: bb:d4:2c:83:76:99:d2:36:20:fb:db:ab:31:65:bb: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C9:1C:91:24:E3:0B:92:D6:3A:43:B6:69:95:F0:75:EA:52:84:EE X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:c5:44:41:9a:4f:44:9a:83:be:0a:16:5e:53:38:02:5a: 25:4b:49:85:42:45:9d:f1:0f:37:b3:e0:8a:89:44:14:28:12: e6:df:52:5b:41:7c:9a:74:9c:f4:77:24:44:12:17:44:7d:e4: 77:cb:cd:4d:1e:40:f8:91:9b:d3:91:91:89:27:1a:f7:9b:3e: db:bb:dd:92:7e:69:47:94:c1:69:4e:bb:33:bd:eb:60:e9:64: 71:2b:3f:12:59:fd:7c:4b:99:0a:a2:b5:ab:d9:2a:29:e7:d4: 4c:98:a6:f0:6d:f0:7e:66:08:ba:0a:ea:7c:5d:3f:98:51:1a: 6f:cd:3e:f7:46:43:ee:ac:d9:6d:f3:d8:a6:77:d1:e1:e1:05: e0:05:cf:3b:f5:d0:1f:d3:a6:03:e8:0d:ad:de:57:ef:31:14: 58:d0:6d:c7:93:4f:f6:a9:3f:d3:f0:d4:63:fb:cf:7b:61:d8: 30:0f:ae:25:05:86:32:ef:30:d0:01:96:6d:bf:04:72:fc:5d: 0c:e4:9d:23:73:6f:68:48:19:2f:65:6b:1d:72:0e:a5:d1:9e: 15:4a:c0:51:96:5a:d8:63:32:bb:0d:b5:57:8f:93:b5:a0:86: b9:2e:68:8c:38:f5:4a:cc:f9:d2:bc:87:01:72:13:d7:0d:94: a7:89:ac:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjYxMDA2MTYyOTQzWhcNMjYxMDEzMTYyOTQzWjAYMRYwFAYD VQQDEw02YWM1MjFmOC04YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoqoM+jFWP5YpwaiLp/9bGq+X9LdIAEoL8dyo+z0gDmjyZ4KINPFnpTbohmZ eK0Q6sNsGJ81FzmmMFIJ+gCcm9QaI8vnAJyFCiJ+hclv07yg1AZryXAtzl7u1doh rTd4U9mNgmUmwZWFginoLeTIBBO4L8P1CbeKqsBBkB6bE8TrUjclidBRP2nmggoL jSpprOYWFXuvABQFSmythH0G0S6w/wQChn4mzi93zkHdzRHI7xNMFi4ROfVh/eX5 nqcoJtOR7JhkKCEfg/3SHzV3J+0tw3gOJ7a+4s28uRHW67TUh05UaB3wHf09B2gx p5e71CyDdpnSNiD726sxZbtqSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjJHJEk 4wuS1jpDtmmV8HXqUoTuMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAelDFREGaT0Sag74KFl5TOAJaJUtJhUJFnfEPN7PgiolEFCgS5t9SW0F8mnSc 9HckRBIXRH3kd8vNTR5A+JGb05GRiSca95s+27vdkn5pR5TBaU67M73rYOlkcSs/ Eln9fEuZCqK1q9kqKefUTJim8G3wfmYIugrqfF0/mFEab80+90ZD7qzZbfPYpnfR 4eEF4AXPO/XQH9OmA+gNrd5X7zEUWNBtx5NP9qk/0/DUY/vPe2HYMA+uJQWGMu8w 0AGWbb8EcvxdDOSdI3NvaEgZL2VrHXIOpdGeFUrAUZZa2GMyuw21V4+TtaCGuS5o jDj1Ssz50ryHAXIT1w2Up4mslw== -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:33 2026 by rpki-client