$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft File: SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json) Hash identifier: j8vZ/T0xL8jFbLuprr2gV+DL+kIYel70zoIT4YdlVi4= Subject key identifier: 0D:70:EA:5B:74:05:C0:13:02:9D:D6:15:DF:53:CC:44:15:43:3F:3C Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft Manifest number: 020F Signing time: Mon 05 Oct 2026 03:20:27 +0000 Manifest this update: Mon 05 Oct 2026 03:20:26 +0000 Manifest next update: Mon 12 Oct 2026 03:20:26 +0000 Files and hashes: 1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: BbhwOi881P0L07XyKDPNhBdKWSB+G7q6bZ1jGGnxnHs=) 2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: cPLdFGXiXR/WYDO7jUKAWbiNRii4uYKJ6ALY5+hpRWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Validity Not Before: Oct 5 03:20:26 2026 GMT Not After : Oct 12 03:20:26 2026 GMT Subject: CN=6ac3177b-7f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:66:78:03:e9:38:3f:e7:13:1d:15:05:23: 5f:58:15:8b:e3:95:fa:c8:c9:09:27:64:5b:df:12: 00:d8:31:96:cc:a1:94:26:18:d6:c1:6a:87:cc:1d: 6f:cf:3c:77:09:f5:0f:d9:70:3b:cb:32:a4:62:33: 55:25:06:13:da:80:be:a1:8c:73:37:50:f0:36:d9: 63:5c:82:8b:9c:70:fc:b9:ad:01:71:eb:6c:5e:d8: 30:db:9c:43:5f:d6:55:c2:c5:8e:2e:cd:f1:d1:a7: 65:46:b7:b4:3d:ac:4d:4a:31:9c:0e:4e:8a:6b:83: 17:fa:e6:5f:77:98:72:24:6d:f3:bb:40:b3:60:0e: bd:9f:cb:ae:57:f2:1c:32:fd:56:d1:e0:4f:8f:01: 2c:4a:32:72:d6:2d:b2:a9:98:51:4d:b7:d3:01:5f: 62:e2:d8:9e:cc:d5:c4:32:a4:90:5f:5f:65:1f:91: 21:75:9a:be:0d:4b:22:9a:d9:6b:1b:69:65:b2:08: 8f:c4:48:3e:78:40:a4:49:c9:2f:b9:2a:0e:4f:c9: 7e:63:43:f7:c4:c6:27:f5:f3:f1:0e:88:45:a2:92: 92:99:1b:38:ea:33:f2:a7:1a:9a:60:c0:5d:49:05: 82:27:8c:0c:83:07:4c:f3:c8:8f:db:6b:1e:90:e4: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:EA:5B:74:05:C0:13:02:9D:D6:15:DF:53:CC:44:15:43:3F:3C X509v3 Authority Key Identifier: keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2d:53:5d:a1:ab:da:ad:59:e0:65:e6:fc:8f:2b:51:f3:ce: c4:53:dc:fc:dc:53:4d:74:3b:24:20:eb:b7:6d:b7:95:38:67: a3:ab:f7:2f:21:83:f8:09:d1:79:c0:c4:9d:b3:7c:44:98:71: f6:f3:e7:77:25:2a:12:a7:09:05:34:36:88:cb:5b:b1:46:70: 72:28:3f:97:25:2b:0e:f6:f8:ea:2e:dd:e2:0b:b1:b8:e7:f1: da:6d:69:a5:88:e0:55:91:c5:ba:a2:03:b1:a1:ed:e4:4e:b0: 06:66:78:06:06:04:f3:b9:ff:86:16:28:63:5b:10:bd:a0:7d: b2:63:4e:9e:7f:8a:99:96:05:89:48:6b:8b:21:4f:71:00:17: b8:f8:b1:99:eb:4c:23:4a:3d:a3:2e:e4:18:7f:a4:b3:6a:7e: f6:79:bd:46:88:38:83:42:5a:dd:d5:da:db:2e:0e:91:cc:54: 2f:80:05:cc:30:e6:49:0d:d4:c7:00:07:18:5a:aa:03:d9:29: e2:28:20:d6:f0:4b:10:08:3e:fc:7f:ae:c6:2f:a0:56:21:ef: 89:dd:c6:63:b2:7a:6a:45:b9:e0:cb:34:69:51:a3:16:1d:a5: 28:38:35:76:a5:68:4e:2f:87:29:9d:1e:b4:30:13:59:85:5c: cf:26:94:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw MzM5NUY2NTkwHhcNMjYxMDA1MDMyMDI2WhcNMjYxMDEyMDMyMDI2WjAYMRYwFAYD VQQDEw02YWMzMTc3Yi03ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9hmeAPpOD/nEx0VBSNfWBWL45X6yMkJJ2Rb3xIA2DGWzKGUJhjWwWqHzB1v zzx3CfUP2XA7yzKkYjNVJQYT2oC+oYxzN1DwNtljXIKLnHD8ua0BcetsXtgw25xD X9ZVwsWOLs3x0adlRre0PaxNSjGcDk6Ka4MX+uZfd5hyJG3zu0CzYA69n8uuV/Ic Mv1W0eBPjwEsSjJy1i2yqZhRTbfTAV9i4tiezNXEMqSQX19lH5EhdZq+DUsimtlr G2llsgiPxEg+eECkSckvuSoOT8l+Y0P3xMYn9fPxDohFopKSmRs46jPypxqaYMBd SQWCJ4wMgwdM88iP22sekOSLwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1w6lt0 BcATAp3WFd9TzEQVQz88MB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3 QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4 SUl3R2NWSk9DT2tET1Y5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmC1TXaGr2q1Z4GXm/I8rUfPOxFPc/NxTTXQ7JCDrt223lThno6v3LyGD+AnR ecDEnbN8RJhx9vPndyUqEqcJBTQ2iMtbsUZwcig/lyUrDvb46i7d4guxuOfx2m1p pYjgVZHFuqIDsaHt5E6wBmZ4BgYE87n/hhYoY1sQvaB9smNOnn+KmZYFiUhriyFP cQAXuPixmetMI0o9oy7kGH+ks2p+9nm9Rog4g0Ja3dXa2y4OkcxUL4AFzDDmSQ3U xwAHGFqqA9kp4igg1vBLEAg+/H+uxi+gViHvid3GY7J6akW54Ms0aVGjFh2lKDg1 dqVoTi+HKZ0etDATWYVczyaUoQ== -----END CERTIFICATE-----Generated at Tue Oct 6 13:18:10 2026 by rpki-client