$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: 1CNFZ7dPbbeCz8OrWIBNPfY4j8tBeE/dnKOs6mk17SU= Subject key identifier: B7:31:8F:99:F3:C2:AB:82:85:CD:E1:AD:70:70:7C:58:F8:9F:FA:E4 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0DD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0DB0 Signing time: Wed 28 Oct 2026 18:01:01 +0000 Manifest this update: Wed 28 Oct 2026 18:01:00 +0000 Manifest next update: Wed 04 Nov 2026 18:01:00 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: aU+iYaDxAFMJvSkyMmKA2IKxTF+/jGo0Spz7P+HkCq8=) 2: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=) 3: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=) 4: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=) 5: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Oct 28 18:01:00 2026 GMT Not After : Nov 4 18:01:00 2026 GMT Subject: CN=6ae2385d-842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:f3:28:96:dc:8d:d0:7b:52:86:30:76:22: 6d:77:7d:d5:bf:6d:93:ed:24:74:c1:a9:07:67:f6: ce:b5:a5:44:08:5f:0a:e6:85:ec:d7:8f:a1:a2:d5: 70:32:06:69:77:34:44:47:db:92:b2:25:42:c6:a7: 04:b0:e3:c2:02:c0:88:82:30:db:82:ba:61:e8:05: 83:a6:3d:38:23:54:6b:39:86:7d:f1:65:9a:7c:d0: 58:24:6f:73:3a:dc:8d:01:50:7a:de:da:00:e8:2d: 7b:79:d3:5f:b2:ff:9a:f5:60:8c:a0:a8:54:48:a7: bb:02:2c:6b:ef:24:d8:e7:35:ec:a3:68:61:58:a0: 6d:d4:4f:05:a2:99:43:25:21:ef:1b:a7:5e:b7:70: f9:df:ed:59:33:38:fd:85:3e:da:51:87:86:d4:60: b5:b8:70:02:37:52:95:7f:21:3a:aa:af:43:4b:8d: aa:14:1c:2c:93:77:1e:20:cb:dc:7d:23:fb:04:79: 3c:5a:00:41:1e:98:ff:91:16:26:96:5f:44:0a:34: 1e:a9:00:56:0b:9b:0d:24:5e:6e:0a:42:ca:94:31: 6f:0e:c2:b4:5b:24:a3:7e:68:d4:ef:90:7c:f2:a9: 55:22:56:d2:de:eb:5c:31:e6:67:ea:af:e2:32:57: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:8F:99:F3:C2:AB:82:85:CD:E1:AD:70:70:7C:58:F8:9F:FA:E4 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fe:42:6a:e9:79:dd:9f:72:ae:a0:65:50:45:77:88:75:1f: a7:fc:ba:1d:6a:68:d9:cf:c0:f4:f6:cb:20:fd:61:4c:46:9f: 3a:b4:91:50:cc:97:f3:0a:99:8a:5f:32:c3:c5:07:7e:8e:67: 50:5a:3d:06:73:5a:ce:28:89:cc:cd:fa:82:80:a4:4b:b7:9e: 87:b0:5b:42:31:9b:e0:a5:2e:a2:f7:5f:48:9a:bc:4f:c8:2a: 9a:5b:95:b5:ed:1d:44:51:7c:b0:2b:40:16:91:80:cb:f6:6e: 17:9c:94:6a:04:2e:56:2a:23:00:31:3c:b9:8a:c7:e0:a7:05: 7a:d8:d5:5f:4b:d3:37:da:13:ee:b5:1b:c3:ba:0c:2b:27:4c: dc:70:8d:28:60:8f:3f:cb:5e:86:9b:cd:84:f3:19:5b:fc:f2: 37:65:50:b5:7f:db:73:9e:23:a1:ad:b6:9c:c4:1d:fd:f9:53: 96:2e:4f:2c:b9:2c:d7:35:13:00:cb:8c:70:c3:b7:b7:f4:bd: cc:e1:c3:16:96:2a:c0:9b:33:0b:9f:6b:5d:c4:a5:55:35:eb: a2:1f:d3:ab:67:92:e9:e4:33:2e:83:82:64:fa:d7:89:12:c0: 36:23:92:f9:82:ed:de:d5:34:9c:95:76:f6:ff:6e:97:77:64: 2b:18:45:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjYxMDI4MTgwMTAwWhcNMjYxMTA0MTgwMTAwWjAYMRYwFAYD VQQDEw02YWUyMzg1ZC04NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnl/zKJbcjdB7UoYwdiJtd33Vv22T7SR0wakHZ/bOtaVECF8K5oXs14+hotVw MgZpdzRER9uSsiVCxqcEsOPCAsCIgjDbgrph6AWDpj04I1RrOYZ98WWafNBYJG9z OtyNAVB63toA6C17edNfsv+a9WCMoKhUSKe7Aixr7yTY5zXso2hhWKBt1E8FoplD JSHvG6det3D53+1ZMzj9hT7aUYeG1GC1uHACN1KVfyE6qq9DS42qFBwsk3ceIMvc fSP7BHk8WgBBHpj/kRYmll9ECjQeqQBWC5sNJF5uCkLKlDFvDsK0WySjfmjU75B8 8qlVIlbS3utcMeZn6q/iMldd+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcxj5nz wquChc3hrXBwfFj4n/rkMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASf5Caul53Z9yrqBlUEV3iHUfp/y6HWpo2c/A9PbLIP1hTEafOrSRUMyX8wqZ il8yw8UHfo5nUFo9BnNaziiJzM36goCkS7eeh7BbQjGb4KUuovdfSJq8T8gqmluV te0dRFF8sCtAFpGAy/ZuF5yUagQuViojADE8uYrH4KcFetjVX0vTN9oT7rUbw7oM KydM3HCNKGCPP8tehpvNhPMZW/zyN2VQtX/bc54joa22nMQd/flTli5PLLks1zUT AMuMcMO3t/S9zOHDFpYqwJszC59rXcSlVTXroh/Tq2eS6eQzLoOCZPrXiRLANiOS +YLt3tU0nJV29v9ul3dkKxhFgw== -----END CERTIFICATE-----Generated at Thu Oct 29 03:25:26 2026 by rpki-client