$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: hbEpYsp74PopJFP6Tfo1IACUETwPpw3sTH8dbOr8eOo= Subject key identifier: 61:D3:A2:FC:C8:5B:BD:B8:DC:9D:BB:D3:EC:EE:AA:E8:FC:23:D4:C9 Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 0138 Signing time: Fri 23 Oct 2026 06:06:00 +0000 Manifest this update: Fri 23 Oct 2026 06:06:00 +0000 Manifest next update: Fri 30 Oct 2026 06:06:00 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: LngZri21HBsBiFwN+q19CYQpAqO+No3N1hDqBkOhwrU=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 06:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Oct 23 06:06:00 2026 GMT Not After : Oct 30 06:06:00 2026 GMT Subject: CN=6adaf948-71b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:c2:fe:c7:e3:7c:c2:da:80:f7:be:0f:65: f9:e3:f7:5a:16:c8:6d:e2:65:9a:ef:8d:52:96:ec: ab:0c:ed:df:68:e2:73:62:87:3a:d8:7a:9a:97:5e: f0:04:de:63:23:10:6e:cf:a7:bc:56:2c:3f:03:be: 50:4a:b8:68:5e:93:37:aa:de:65:cd:8c:68:32:a0: 23:c8:3b:1b:0e:b0:b0:d9:a4:a5:8b:77:2f:79:58: 31:ee:72:98:c3:ac:70:fd:b0:dc:fb:48:9a:31:ea: 0b:39:e3:3c:3f:11:25:ff:3b:e0:6b:56:ca:e3:49: 39:c0:53:a9:50:59:6c:4b:7b:0b:8c:78:c8:20:38: 48:c7:f8:7b:4a:89:02:94:73:c2:52:1c:ce:f7:d8: a9:c4:42:04:3a:4f:f7:f1:9c:90:44:ce:cb:03:a1: d8:6f:34:3a:2a:ea:c7:91:a7:29:24:82:9f:cf:c3: 45:8f:e9:20:80:08:a0:13:d6:cb:f5:a4:7c:34:87: 48:9a:02:f8:fa:7e:ad:26:3c:20:46:1e:01:50:69: d1:67:3c:b8:0b:5c:44:2a:4d:1b:29:2d:67:4a:e6: 66:7a:aa:12:6b:12:38:8b:27:db:f8:ed:49:4d:2f: 20:c6:01:84:51:a4:80:c3:82:a3:6f:b8:22:04:89: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:A2:FC:C8:5B:BD:B8:DC:9D:BB:D3:EC:EE:AA:E8:FC:23:D4:C9 X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:41:43:cf:2f:9e:e1:41:38:be:70:c7:2e:f4:f0:14:5e:a8: 32:97:3a:35:b8:ce:d9:53:43:73:76:8c:81:76:33:95:10:1e: 22:9e:a6:ed:98:54:99:38:92:e7:d9:ba:42:80:82:0a:94:13: 6b:22:98:4e:d8:7a:8c:62:e9:3b:96:dd:8d:82:0a:a2:5a:1b: c1:87:e1:4d:90:a1:c0:39:6d:d2:c2:2f:63:ae:f2:c0:1f:48: 0f:c3:d5:5d:a6:32:37:c9:fa:f7:26:c6:1f:74:d4:7a:cd:bb: 9d:94:97:e6:4a:89:d7:19:60:3a:af:40:59:3e:f0:2e:8e:eb: 9b:56:18:d6:5e:5f:9e:80:eb:d3:3a:73:9e:e8:75:bf:4c:f1: 07:80:86:4d:f9:f4:c2:3f:2c:12:87:c9:52:6f:d6:e0:46:b7: a4:0a:0b:80:c4:7e:f5:26:a6:65:74:28:70:0b:cc:e8:c7:ca: da:12:fe:55:7e:cf:1d:a9:1e:1a:70:2d:ba:66:79:f2:bb:f2: e1:27:4c:b1:fc:de:dd:c4:5a:72:46:91:ab:ff:51:78:3a:5f: d3:51:7c:31:44:96:89:8e:48:2c:4a:06:eb:18:44:17:f9:92: 7d:fa:f7:f7:2a:63:cd:88:06:ed:77:fe:99:3f:3e:d1:44:3a: c1:8f:13:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2 N0I3NzU1MjYwHhcNMjYxMDIzMDYwNjAwWhcNMjYxMDMwMDYwNjAwWjAYMRYwFAYD VQQDEw02YWRhZjk0OC03MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMnC/sfjfMLagPe+D2X54/daFsht4mWa741SluyrDO3faOJzYoc62Hqal17w BN5jIxBuz6e8Viw/A75QSrhoXpM3qt5lzYxoMqAjyDsbDrCw2aSli3cveVgx7nKY w6xw/bDc+0iaMeoLOeM8PxEl/zvga1bK40k5wFOpUFlsS3sLjHjIIDhIx/h7SokC lHPCUhzO99ipxEIEOk/38ZyQRM7LA6HYbzQ6KurHkacpJIKfz8NFj+kggAigE9bL 9aR8NIdImgL4+n6tJjwgRh4BUGnRZzy4C1xEKk0bKS1nSuZmeqoSaxI4iyfb+O1J TS8gxgGEUaSAw4Kjb7giBInCKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHTovzI W7243J270+zuquj8I9TJMB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs TDdZY3BCdHFUOEZudDNWU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ0FDzy+e4UE4vnDHLvTwFF6oMpc6NbjO2VNDc3aMgXYzlRAeIp6m7ZhUmTiS 59m6QoCCCpQTayKYTth6jGLpO5bdjYIKolobwYfhTZChwDlt0sIvY67ywB9ID8PV XaYyN8n69ybGH3TUes27nZSX5kqJ1xlgOq9AWT7wLo7rm1YY1l5fnoDr0zpznuh1 v0zxB4CGTfn0wj8sEofJUm/W4Ea3pAoLgMR+9SamZXQocAvM6MfK2hL+VX7PHake GnAtumZ58rvy4SdMsfze3cRackaRq/9ReDpf01F8MUSWiY5ILEoG6xhEF/mSffr3 9ypjzYgG7Xf+mT8+0UQ6wY8TNA== -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:45 2026 by rpki-client