$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: 8aNVHHgXThhAUI/3iGZMg5QJyb3L8dEYSUTsIT/pso0= Subject key identifier: 3E:DB:5E:7D:7B:99:2D:47:58:AB:72:0C:4E:8F:C2:D1:9B:E1:F2:CC Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 35BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 3594 Signing time: Sun 04 Oct 2026 15:16:59 +0000 Manifest this update: Sun 04 Oct 2026 15:16:59 +0000 Manifest next update: Sun 11 Oct 2026 15:16:59 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: n/4I+7u6r4h7UAMN5jyDBpu0rO98vltDKk+4vW87CiY=) 2: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=) 3: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=) 4: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13754 (0x35ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Oct 4 15:16:59 2026 GMT Not After : Oct 11 15:16:59 2026 GMT Subject: CN=6ac26deb-c95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:59:2e:f2:33:32:9b:7e:80:d5:03:ea:2d: 3d:20:b5:89:d7:51:43:6c:45:ad:95:8f:0b:12:1a: ae:75:5a:df:97:a8:52:bf:1b:f9:5f:40:31:39:90: ce:7d:8d:e0:cf:d0:68:f7:e7:b3:34:48:7a:30:fd: ce:c0:7f:0d:9c:73:cd:e1:b5:c0:53:86:f0:09:28: 52:7d:91:85:cd:b3:93:48:ba:38:e2:1e:67:f9:af: 7a:45:47:3b:04:d0:70:9b:10:87:04:b0:69:00:3f: f3:1f:44:ad:79:e2:50:58:af:80:0a:59:bf:7d:b8: 13:9b:81:bf:26:82:49:d8:12:04:a4:d2:78:0f:58: 0d:69:9d:e9:f2:ba:21:16:74:02:ab:ef:50:e6:cf: 4c:96:a3:5d:68:f9:aa:28:ab:47:c8:3b:42:c6:0e: 24:46:30:80:4b:c0:58:9d:d6:7e:fb:45:a0:42:54: cf:50:ea:50:51:23:71:96:d7:49:0b:f9:ff:29:a5: 3e:75:7a:f5:48:da:d9:87:40:7d:ba:d2:df:c2:c1: 62:51:89:c0:66:fe:0a:3c:f0:3d:dc:b1:56:d5:78: 8a:70:38:65:b3:ae:67:65:a7:27:c3:98:ab:22:74: 4b:bf:8e:2c:69:60:8c:a2:68:ad:e8:cd:0c:28:b6: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DB:5E:7D:7B:99:2D:47:58:AB:72:0C:4E:8F:C2:D1:9B:E1:F2:CC X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:ca:dc:c7:35:22:7d:00:53:54:c5:50:c8:2e:4f:06:d0: a5:0b:ee:0e:d9:c4:5a:8b:9c:52:c7:40:fe:62:21:8b:3e:d4: dd:5c:22:c7:ea:dd:8a:28:cb:1f:5f:8f:7f:6e:a2:4a:de:c3: 3e:8d:d1:ee:31:3e:23:a9:70:a5:6f:4a:ee:c9:0e:59:5e:61: 85:d4:e5:c3:f8:09:37:b7:e8:4a:8d:e0:9e:f7:33:a0:f9:a8: 03:68:a5:75:71:93:b1:fc:26:29:74:0a:9e:9c:9f:f6:46:0b: fb:a2:d2:e6:60:65:00:6c:f2:69:f5:0a:e7:63:fb:35:dc:6e: c5:fc:1f:3e:cb:6b:b4:fd:2d:24:bb:fa:80:f4:40:69:c4:16: c1:fe:3e:3e:5f:ce:da:07:99:c4:f9:b0:df:5d:f8:ab:27:fb: 16:12:0d:3a:49:bc:0d:4a:b1:84:57:86:20:dd:51:ce:1a:3c: 63:4a:a6:e9:8d:53:45:55:7c:57:85:24:8c:1b:46:36:84:e8: 48:9c:78:05:92:5b:4b:bc:fb:7a:dc:dc:55:dd:32:87:72:8d: c2:03:0d:21:71:55:95:25:78:ae:7a:d8:85:15:ac:08:82:80: ba:05:80:49:e5:d2:17:0c:ee:59:35:43:3a:33:38:60:65:6c: 76:a4:3c:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjYxMDA0MTUxNjU5WhcNMjYxMDExMTUxNjU5WjAYMRYwFAYD VQQDEw02YWMyNmRlYi1jOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXVZLvIzMpt+gNUD6i09ILWJ11FDbEWtlY8LEhqudVrfl6hSvxv5X0AxOZDO fY3gz9Bo9+ezNEh6MP3OwH8NnHPN4bXAU4bwCShSfZGFzbOTSLo44h5n+a96RUc7 BNBwmxCHBLBpAD/zH0SteeJQWK+AClm/fbgTm4G/JoJJ2BIEpNJ4D1gNaZ3p8roh FnQCq+9Q5s9MlqNdaPmqKKtHyDtCxg4kRjCAS8BYndZ++0WgQlTPUOpQUSNxltdJ C/n/KaU+dXr1SNrZh0B9utLfwsFiUYnAZv4KPPA93LFW1XiKcDhls65nZacnw5ir InRLv44saWCMomit6M0MKLZFKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7bXn17 mS1HWKtyDE6PwtGb4fLMMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHWrK3Mc1In0AU1TFUMguTwbQpQvuDtnEWoucUsdA/mIhiz7U3Vwix+rdiijL H1+Pf26iSt7DPo3R7jE+I6lwpW9K7skOWV5hhdTlw/gJN7foSo3gnvczoPmoA2il dXGTsfwmKXQKnpyf9kYL+6LS5mBlAGzyafUK52P7NdxuxfwfPstrtP0tJLv6gPRA acQWwf4+Pl/O2geZxPmw3134qyf7FhINOkm8DUqxhFeGIN1Rzho8Y0qm6Y1TRVV8 V4UkjBtGNoToSJx4BZJbS7z7etzcVd0yh3KNwgMNIXFVlSV4rnrYhRWsCIKAugWA SeXSFwzuWTVDOjM4YGVsdqQ85w== -----END CERTIFICATE-----Generated at Mon Oct 5 16:42:56 2026 by rpki-client