$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft File: Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft (raw, json) Hash identifier: OfybeL7JG+r/UMchxP2ytMrmo9QF6wCc7g6i2qygw7Q= Subject key identifier: 26:1D:CC:56:B6:9D:84:CE:30:35:58:D2:C0:F2:48:02:10:C3:96:59 Authority key identifier: 0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44 Certificate issuer: /CN=A915D584/serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft Manifest number: 0E Signing time: Mon 05 Oct 2026 09:38:39 +0000 Manifest this update: Mon 05 Oct 2026 09:38:39 +0000 Manifest next update: Mon 12 Oct 2026 09:38:39 +0000 Files and hashes: 1: Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl (hash: k+9Dl1T9K1wB/jvDU4R1p4Pz9xlkC6OMpkmSc1/tA+c=) 2: 872AD682B01011F1B04156A36C11F970.roa (hash: jm/+G31po+MJ2sktkg8jDrLvytQSl9uDM6fJdHyue+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D584, serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844 Validity Not Before: Oct 5 09:38:39 2026 GMT Not After : Oct 12 09:38:39 2026 GMT Subject: CN=6ac3701f-2e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:91:ea:cc:4d:3d:36:7f:86:cf:89:6c:29: 4f:06:be:65:74:2d:a8:c5:eb:4a:d5:0d:8e:31:d6: 6a:0b:57:44:50:9f:ba:aa:26:d4:a8:a2:99:0a:d1: 8e:c1:b8:e0:4a:b8:1c:9b:df:37:29:00:b7:a6:5e: be:bf:23:8e:78:17:13:18:5d:d5:e6:bb:c5:9a:eb: d4:87:33:91:3d:4c:c6:6e:24:f0:37:bd:87:2b:bd: ea:06:dc:9a:54:21:cd:d4:1f:ba:6e:5f:cb:5e:5d: 4e:17:e2:a3:66:81:e9:85:61:6a:1d:58:7b:87:2c: 7e:ac:53:cd:56:ca:e4:72:fd:3c:b1:5e:72:e9:3b: 01:1d:32:12:d4:2b:ea:68:8a:90:97:34:3f:d3:92: 64:e7:bc:26:18:f8:da:91:0f:ee:b9:3f:09:e2:20: 93:45:f6:81:26:78:ae:51:d3:86:2f:88:8f:8a:4f: a2:ea:23:63:55:36:90:4b:9d:f7:2a:1f:e3:59:06: 94:85:d0:43:d5:02:63:b9:4b:04:95:f7:57:9c:8a: 55:31:b5:7d:b5:88:eb:a6:91:06:e8:8c:31:39:75: a7:43:6a:f5:81:2e:53:ea:26:47:f9:e1:bd:e0:0c: a2:89:03:7d:c9:25:29:b9:41:cc:89:e3:99:5f:f9: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1D:CC:56:B6:9D:84:CE:30:35:58:D2:C0:F2:48:02:10:C3:96:59 X509v3 Authority Key Identifier: keyid:0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c0:7e:6d:67:94:db:70:93:ff:20:f8:01:ae:46:c6:46:ce: 06:47:c4:41:a4:88:e4:88:c5:cf:bb:ea:1d:52:33:84:df:a3: 40:27:99:4f:8b:a0:a7:90:c9:f2:f3:c4:c2:5a:da:45:0f:16: 90:e2:9f:e5:b6:0f:f7:5c:98:f8:a4:c0:6a:f9:31:de:28:90: 7e:73:9e:fd:da:4c:f0:7b:31:80:15:4e:e5:17:24:7d:af:7b: 60:64:bb:fe:4d:d3:39:7e:d8:e2:5f:ec:27:c3:b0:8b:89:7a: 08:91:68:eb:49:a4:4c:a6:be:93:a5:c9:bd:80:3b:5d:1a:54: d1:9d:ce:f5:e3:68:f9:0e:3c:bb:aa:d4:95:5a:73:3d:93:c9: 47:5b:2e:89:f9:32:a1:4e:10:7b:98:a6:d7:8e:f4:95:87:b2: 73:41:e4:3f:61:09:5a:b9:3b:de:9d:af:07:7c:c6:2d:58:03: 4a:2f:c7:f3:c1:2a:69:2f:cd:7d:ae:22:56:b4:ec:2a:21:a4: 80:95:fe:59:85:c6:ac:16:1b:56:a3:d8:56:2b:5f:59:eb:b1: be:9f:4f:09:ab:8a:dd:4f:0e:79:72:52:7a:c9:50:f5:45:d2: 1e:82:8f:eb:9e:03:10:52:dd:ed:a0:95:1d:05:d8:77:2d:80: 73:70:47:3c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDU4NDExMC8GA1UEBRMoMEVDRTMzRjNDMjgxNjY2RDAxRTI4QjkyNzg5NUMyRERG NkFDRDg0NDAeFw0yNjEwMDUwOTM4MzlaFw0yNjEwMTIwOTM4MzlaMBgxFjAUBgNV BAMTDTZhYzM3MDFmLTJlMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPoJHqzE09Nn+Gz4lsKU8GvmV0LajF60rVDY4x1moLV0RQn7qqJtSoopkK0Y7B uOBKuByb3zcpALemXr6/I454FxMYXdXmu8Wa69SHM5E9TMZuJPA3vYcrveoG3JpU Ic3UH7puX8teXU4X4qNmgemFYWodWHuHLH6sU81WyuRy/TyxXnLpOwEdMhLUK+po ipCXND/TkmTnvCYY+NqRD+65PwniIJNF9oEmeK5R04YviI+KT6LqI2NVNpBLnfcq H+NZBpSF0EPVAmO5SwSV91ecilUxtX21iOumkQbojDE5dadDavWBLlPqJkf54b3g DKKJA33JJSm5QcyJ45lf+ZaPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJh3MVrad hM4wNVjSwPJIAhDDllkwHwYDVR0jBBgwFoAUDs4z88KBZm0B4ouSeJXC3fas2EQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVENTg0LzM2Njg3RjhFQjAw RjExRjFBQzM1MDEwMjZDMTFGOTcwL0RzNHo4OEtCWm0wQjRvdVNlSlhDM2ZhczJF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHM0ejg4S0JabTBCNG91U2VKWEMzZmFzMkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE NTg0LzM2Njg3RjhFQjAwRjExRjFBQzM1MDEwMjZDMTFGOTcwL0RzNHo4OEtCWm0w QjRvdVNlSlhDM2ZhczJFUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPwH5tZ5TbcJP/IPgBrkbGRs4GR8RBpIjkiMXPu+odUjOE36NAJ5lPi6CnkMny 88TCWtpFDxaQ4p/ltg/3XJj4pMBq+THeKJB+c5792kzwezGAFU7lFyR9r3tgZLv+ TdM5ftjiX+wnw7CLiXoIkWjrSaRMpr6Tpcm9gDtdGlTRnc7142j5Djy7qtSVWnM9 k8lHWy6J+TKhThB7mKbXjvSVh7JzQeQ/YQlauTvena8HfMYtWANKL8fzwSppL819 riJWtOwqIaSAlf5ZhcasFhtWo9hWK19Z67G+n08Jq4rdTw55clJ6yVD1RdIego/r ngMQUt3toJUdBdh3LYBzcEc8 -----END CERTIFICATE-----Generated at Tue Oct 6 20:05:15 2026 by rpki-client