$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: 81S0m8QFnuLnG2Ekrg6kB997v6rJpwdkJ6SsNB36+BI= Subject key identifier: BD:2A:C1:38:DD:86:69:21:19:C0:C8:F5:ED:32:84:AE:7F:1E:24:DA Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 0139 Signing time: Sun 25 Oct 2026 05:56:11 +0000 Manifest this update: Sun 25 Oct 2026 05:56:10 +0000 Manifest next update: Sun 01 Nov 2026 05:56:10 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: tg9vo5CRTh3V2QvYRM7B0NX8cIz+fTRmZW8CjoXKYj8=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Oct 25 05:56:10 2026 GMT Not After : Nov 1 05:56:10 2026 GMT Subject: CN=6add99fa-d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:2e:55:46:5b:b4:c0:6c:c2:e7:9c:50:15: 73:d5:69:a9:1d:e7:c3:b7:b6:2f:ea:bb:d5:cd:f1: 0e:02:97:c5:c1:a3:81:85:72:1d:ac:4f:14:84:6f: 60:b3:82:28:2a:f0:e1:4a:ec:2f:3a:0f:90:18:5a: e2:e5:df:2d:a0:65:94:92:cc:0d:4c:b0:b8:b2:f4: 26:c9:da:3e:73:99:85:05:ce:00:2c:41:71:50:de: 33:34:ff:4a:f4:66:96:48:6e:f0:a4:df:02:a6:c0: ab:b0:34:32:0a:07:d6:b0:4d:1e:a7:44:71:b5:53: 39:d7:68:03:85:47:e4:04:f5:11:dc:76:55:24:25: c6:be:8d:6b:a1:f8:f1:3a:fd:6f:64:af:6f:12:57: 43:c5:71:a1:74:ce:4d:18:13:43:41:18:b1:f1:fe: 53:e8:3f:e0:d7:83:23:35:6a:85:7c:d3:11:d8:23: 8a:0a:2d:53:93:5b:fd:b0:f8:cd:8e:70:a0:13:a6: e9:84:9b:f5:b9:4e:dc:27:e8:94:a7:0d:ca:7c:b9: 92:d6:8e:02:5c:9f:8c:70:6f:3f:37:bc:35:14:0b: 97:36:2d:10:6e:de:ca:d3:03:69:fe:e0:fd:f1:99: db:ea:7b:52:7c:c3:69:0e:2c:71:fc:84:19:9b:a5: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:C1:38:DD:86:69:21:19:C0:C8:F5:ED:32:84:AE:7F:1E:24:DA X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1a:b0:cb:1c:ee:89:93:ca:8e:a3:f0:e9:af:e8:58:a0:d5: a9:bf:b5:f5:3f:86:94:b1:10:47:62:14:5a:42:cd:bc:c9:42: b2:31:ba:20:42:9d:e6:84:7e:86:41:3e:2e:4a:fd:ce:48:5d: 15:9c:80:3e:14:d1:35:4a:b8:47:50:05:05:62:7c:8f:8c:a2: 30:be:67:1b:94:7b:d8:c9:a8:13:bf:26:49:b9:d6:53:df:66: 49:3d:df:c1:8d:d0:6b:a1:4a:9b:cc:e8:5d:c5:04:90:84:e7: d9:9b:5b:9a:58:14:01:25:02:b3:03:3a:62:7b:ca:f5:76:91: 64:57:b9:ea:40:39:b1:81:8a:57:8e:72:db:c7:49:44:90:98: 0d:0a:cf:3a:d6:47:6c:22:a8:c0:15:fc:be:ec:5d:d3:bf:9f: d9:fb:db:4b:63:6a:ba:54:c5:ea:b3:89:60:80:b6:fc:93:50: 92:db:f5:23:96:e2:ff:1d:e7:27:e5:e9:5c:03:36:e1:2f:91: b8:be:06:76:37:74:ed:a1:1f:4a:e9:56:07:ca:4f:86:4f:67: 98:01:f7:af:12:da:0b:2c:ec:c2:a7:f3:50:9f:df:d3:d1:18: 07:c2:a3:15:b2:3c:1c:be:84:67:ec:e6:9a:68:0c:88:ee:3d: df:a5:46:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2 N0I3NzU1MjYwHhcNMjYxMDI1MDU1NjEwWhcNMjYxMTAxMDU1NjEwWjAYMRYwFAYD VQQDEw02YWRkOTlmYS1kNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGguVUZbtMBswuecUBVz1WmpHefDt7Yv6rvVzfEOApfFwaOBhXIdrE8UhG9g s4IoKvDhSuwvOg+QGFri5d8toGWUkswNTLC4svQmydo+c5mFBc4ALEFxUN4zNP9K 9GaWSG7wpN8CpsCrsDQyCgfWsE0ep0RxtVM512gDhUfkBPUR3HZVJCXGvo1rofjx Ov1vZK9vEldDxXGhdM5NGBNDQRix8f5T6D/g14MjNWqFfNMR2COKCi1Tk1v9sPjN jnCgE6bphJv1uU7cJ+iUpw3KfLmS1o4CXJ+McG8/N7w1FAuXNi0Qbt7K0wNp/uD9 8Znb6ntSfMNpDixx/IQZm6W51wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0qwTjd hmkhGcDI9e0yhK5/HiTaMB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs TDdZY3BCdHFUOEZudDNWU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaBqwyxzuiZPKjqPw6a/oWKDVqb+19T+GlLEQR2IUWkLNvMlCsjG6IEKd5oR+ hkE+Lkr9zkhdFZyAPhTRNUq4R1AFBWJ8j4yiML5nG5R72MmoE78mSbnWU99mST3f wY3Qa6FKm8zoXcUEkITn2ZtbmlgUASUCswM6YnvK9XaRZFe56kA5sYGKV45y28dJ RJCYDQrPOtZHbCKowBX8vuxd07+f2fvbS2NqulTF6rOJYIC2/JNQktv1I5bi/x3n J+XpXAM24S+RuL4Gdjd07aEfSulWB8pPhk9nmAH3rxLaCyzswqfzUJ/f09EYB8Kj FbI8HL6EZ+zmmmgMiO4936VGjA== -----END CERTIFICATE-----Generated at Sun Oct 25 18:05:47 2026 by rpki-client