$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: KT18GW7liL1Q6UMSwygryRwNIWcIxi0XdIaYHt1o+vQ= Subject key identifier: 78:B8:DF:EA:2E:D3:0D:91:09:BE:9B:18:31:4B:9B:D4:D5:60:23:EE Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: A5 Signing time: Fri 23 Oct 2026 07:53:38 +0000 Manifest this update: Fri 23 Oct 2026 07:53:38 +0000 Manifest next update: Fri 30 Oct 2026 07:53:38 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: Z9B5cFvfdlLOdFQ4Kv8jJnv4HDzibqgk97Okm5XUgKs=) 2: 32024D1A6D4511F1A099DD6B7447A888.roa (hash: ukb9hjFJ1eESRePT76kluMTncWiap8Lmbsf2j/BGakc=) 3: 8CD89B6A6E0B11F18E1C163B6CA30FBC.roa (hash: ODcN04nvm1op9jk/kK2I+MGQlFGVTO3t6jC01S03434=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 07:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Oct 23 07:53:38 2026 GMT Not After : Oct 30 07:53:38 2026 GMT Subject: CN=6adb1282-6efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:e6:fa:e2:78:44:7d:88:45:18:0c:7a:74: 07:b3:c5:73:c2:6e:ae:68:11:31:35:ef:c3:28:d3: 7f:46:c1:6d:a0:fa:57:59:01:87:67:4d:c3:59:96: ba:94:a9:99:4b:b2:a4:b8:0f:c6:d1:7d:14:ac:3b: 5e:9a:17:7c:e5:89:2f:4f:cb:10:c9:72:a8:5f:45: 73:1f:f0:5b:15:80:ff:ab:9a:8f:1a:5a:4f:0d:76: b1:e9:81:4b:ec:ef:99:d7:48:f1:f8:34:86:4c:ef: c5:af:0e:9a:ea:23:9a:bf:5e:f9:e2:d7:62:01:10: fa:0a:00:d0:c4:16:0f:73:a2:42:a8:53:02:69:c2: 4e:ce:0f:10:05:56:8e:0a:c0:e8:31:b9:a7:34:90: 5d:e4:fb:ef:c6:3c:af:bb:dc:74:e3:22:16:4e:b1: 63:9f:90:8d:95:f2:e8:e4:78:f9:d5:86:db:aa:c0: fc:8f:11:25:3c:51:0e:5e:f9:d7:21:3a:86:cf:df: e4:d6:e7:86:dd:48:3a:62:b3:d5:cb:5d:cd:6d:8d: d9:a8:d5:53:c5:57:fa:c4:bc:63:83:3d:0d:fd:0c: 2e:4a:10:d3:b2:89:a7:2b:75:1b:53:d8:5b:ef:8a: 18:1e:61:42:99:3a:f1:d9:f5:fb:4b:68:e1:fe:5b: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B8:DF:EA:2E:D3:0D:91:09:BE:9B:18:31:4B:9B:D4:D5:60:23:EE X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e6:80:f2:43:d3:d5:30:d1:7f:70:23:b4:6b:fa:00:a2:ce: 2c:ac:41:c2:3a:3a:8f:86:02:26:77:8d:90:4e:38:7a:d3:12: 74:18:4c:89:77:09:e7:41:c1:c8:c7:9b:a7:64:a4:b8:ef:4c: aa:44:f9:55:e9:92:9e:5d:ee:a8:07:37:76:ae:ff:b8:d3:db: 73:a3:76:8c:4a:18:75:b0:a7:cd:e5:3f:3e:03:f7:18:0a:dc: 4f:b9:2b:45:cb:30:9e:b4:72:ad:ae:29:a2:ba:6a:fe:8f:98: 80:7e:45:09:97:4d:de:18:83:06:4b:c8:9e:70:aa:b8:33:ed: 41:f5:61:ea:44:9f:15:e2:5c:4e:b7:49:68:6e:3f:b4:74:60: 25:a0:03:ba:44:cb:b6:8e:e3:ae:e6:e3:db:e9:a0:b1:51:41: 8a:5f:68:5d:cf:2b:9c:66:72:6b:e1:c3:9e:50:8b:af:34:81: 56:ee:8e:a2:66:6f:7d:b0:b6:52:7f:20:9f:e4:24:bd:da:fe: d1:ae:43:38:1c:06:e0:f6:ec:c5:ef:4c:b6:ad:49:1c:a4:57: f8:9e:0a:06:68:a5:06:be:5e:8b:b1:e5:86:86:d4:e6:2d:e6: a1:8d:b0:43:e7:cb:cf:be:85:b9:d4:07:98:53:d8:7c:4e:81: a3:95:01:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwNjIxMTAvBgNVBAUTKDQ3RDdERkY2QjQxQkQ0NjhDMUYwQzlEMDRDNUU4NUUw QzMzRjlGQUIwHhcNMjYxMDIzMDc1MzM4WhcNMjYxMDMwMDc1MzM4WjAYMRYwFAYD VQQDEw02YWRiMTI4Mi02ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY3m+uJ4RH2IRRgMenQHs8Vzwm6uaBExNe/DKNN/RsFtoPpXWQGHZ03DWZa6 lKmZS7KkuA/G0X0UrDtemhd85YkvT8sQyXKoX0VzH/BbFYD/q5qPGlpPDXax6YFL 7O+Z10jx+DSGTO/Frw6a6iOav1754tdiARD6CgDQxBYPc6JCqFMCacJOzg8QBVaO CsDoMbmnNJBd5Pvvxjyvu9x04yIWTrFjn5CNlfLo5Hj51YbbqsD8jxElPFEOXvnX ITqGz9/k1ueG3Ug6YrPVy13NbY3ZqNVTxVf6xLxjgz0N/QwuShDTsomnK3UbU9hb 74oYHmFCmTrx2fX7S2jh/lttgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHi43+ou 0w2RCb6bGDFLm9TVYCPuMB8GA1UdIwQYMBaAFEfX3/a0G9RowfDJ0ExeheDDP5+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDA2Mi9CMUI4QkVBNkRC OTkxMUYwOTBBNEJDRDE2NkQzNjQxRC9SOWZmOXJRYjFHakI4TW5RVEY2RjRNTV9u NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDA2Mi9CMUI4QkVBNkRCOTkxMUYwOTBBNEJDRDE2NkQzNjQxRC9SOWZmOXJRYjFH akI4TW5RVEY2RjRNTV9uNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmOaA8kPT1TDRf3AjtGv6AKLOLKxBwjo6j4YCJneNkE44etMSdBhMiXcJ50HB yMebp2SkuO9MqkT5VemSnl3uqAc3dq7/uNPbc6N2jEoYdbCnzeU/PgP3GArcT7kr RcswnrRyra4porpq/o+YgH5FCZdN3hiDBkvInnCquDPtQfVh6kSfFeJcTrdJaG4/ tHRgJaADukTLto7jrubj2+mgsVFBil9oXc8rnGZya+HDnlCLrzSBVu6OomZvfbC2 Un8gn+Qkvdr+0a5DOBwG4Pbsxe9Mtq1JHKRX+J4KBmilBr5ei7HlhobU5i3moY2w Q+fLz76FudQHmFPYfE6Bo5UBRw== -----END CERTIFICATE-----Generated at Sat Oct 24 18:51:23 2026 by rpki-client