$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft File: CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft (raw, json) Hash identifier: 2RE+k4lEG3bWuVRheZv/r+2iSU2DOn+9QMHZCJT3B0I= Subject key identifier: EF:A0:C1:DB:8D:D1:D6:B9:49:A2:02:F4:EF:45:48:DB:14:5F:92:DB Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89 Certificate issuer: /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft Manifest number: 02A1 Signing time: Wed 07 Oct 2026 02:03:16 +0000 Manifest this update: Wed 07 Oct 2026 02:03:16 +0000 Manifest next update: Wed 14 Oct 2026 02:03:16 +0000 Files and hashes: 1: CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl (hash: IMvB7SoO/Pq1uNawUebLLyvqxB6TQ01IB7c2Q+NKjA8=) 2: 63789A466F6311F1806CB0D05CA30FBC.roa (hash: T0VRJUqSDGXNXNzgzt6t13n6DnE9IjtHXKIHKZXv3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168C73, serialNumber=0A6152834E1299C11CF6E07865F765B238656389 Validity Not Before: Oct 7 02:03:16 2026 GMT Not After : Oct 14 02:03:16 2026 GMT Subject: CN=6ac5a864-e058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:7e:61:71:2f:c3:54:e5:f4:81:27:6a:0a: 19:79:59:ad:b9:67:42:8c:53:7d:7c:6e:3f:68:5c: aa:c3:c4:45:86:59:66:8c:27:3f:17:37:6d:ad:72: 91:96:5f:38:35:a3:0e:86:22:fc:14:d0:4b:32:df: 6e:6e:dd:2f:0d:de:86:d6:88:e0:f0:81:2c:2d:ed: 31:84:06:b0:da:51:d8:54:98:de:b2:88:2e:c9:16: e9:e7:6b:4d:4c:dd:65:88:14:1f:b4:56:67:b6:72: b0:89:ff:f1:6b:f2:73:2d:63:c0:b2:f7:31:c4:c5: 63:e6:87:70:3f:77:2f:e1:3c:fd:fd:9b:9c:58:f3: ad:3c:f7:40:61:b6:19:f9:ff:5c:16:d9:c5:8a:f1: fd:39:ea:cd:8f:b8:d5:16:16:d9:c0:c0:59:50:43: e1:db:ac:1c:e3:03:8e:52:70:71:ed:f7:1f:ec:48: 3d:9e:f7:be:39:33:42:ee:25:f8:7c:49:26:5a:5c: 29:5a:79:ac:f0:38:de:1a:b1:5e:22:d2:7d:64:1d: 02:c5:00:17:e4:43:e5:09:c9:d8:7d:75:96:e0:49: 6f:aa:91:41:ce:43:af:77:5f:f0:6e:1a:16:51:43: c9:31:80:dc:3b:95:1a:ba:34:2e:e5:5b:af:e0:00: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A0:C1:DB:8D:D1:D6:B9:49:A2:02:F4:EF:45:48:DB:14:5F:92:DB X509v3 Authority Key Identifier: keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ee:5e:1f:cb:e4:8b:1c:fa:7b:fa:8f:2e:8c:44:7a:73:b7: 70:ff:c7:b4:c0:01:9a:6c:24:35:b7:41:5a:7e:09:0d:01:b0: 24:21:9a:cd:1f:71:14:86:d0:f3:83:05:bc:6c:c8:d6:63:5d: 4e:41:81:12:9e:14:89:09:aa:98:a1:03:3d:f4:8a:7f:d2:59: 27:11:f7:05:1b:ed:00:e2:fb:fa:e9:44:6f:07:38:d7:3a:c1: 53:7c:e9:be:c7:81:8c:7c:36:b4:eb:e0:65:4e:44:3d:bb:6f: fc:77:78:9e:91:77:fe:36:76:7f:b6:b8:9a:22:bb:a6:c8:b2: d3:56:7f:bd:62:b7:f3:bf:dc:01:0c:99:ce:86:98:44:cd:f1: d5:7d:7d:df:db:c8:aa:8b:ae:a8:c3:e5:1a:13:2b:ae:5c:d0: 43:7c:b6:83:04:29:5c:f4:e4:53:cc:c4:17:ae:54:5f:04:06: f2:8d:0f:ee:4d:43:af:07:26:8d:c5:67:86:08:d6:4f:47:e0: d6:16:d8:bd:47:06:dd:73:01:46:89:ac:88:a9:e6:7f:f3:73: 9a:69:29:00:3b:4a:ed:b5:44:5d:97:e7:8b:e0:0c:89:f0:ae: bc:36:de:1e:28:50:f0:85:64:e3:a6:2f:1a:cb:96:03:73:a2: 28:c9:c9:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhDNzMxMTAvBgNVBAUTKDBBNjE1MjgzNEUxMjk5QzExQ0Y2RTA3ODY1Rjc2NUIy Mzg2NTYzODkwHhcNMjYxMDA3MDIwMzE2WhcNMjYxMDE0MDIwMzE2WjAYMRYwFAYD VQQDEw02YWM1YTg2NC1lMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8p+YXEvw1Tl9IEnagoZeVmtuWdCjFN9fG4/aFyqw8RFhllmjCc/FzdtrXKR ll84NaMOhiL8FNBLMt9ubt0vDd6G1ojg8IEsLe0xhAaw2lHYVJjesoguyRbp52tN TN1liBQftFZntnKwif/xa/JzLWPAsvcxxMVj5odwP3cv4Tz9/ZucWPOtPPdAYbYZ +f9cFtnFivH9OerNj7jVFhbZwMBZUEPh26wc4wOOUnBx7fcf7Eg9nve+OTNC7iX4 fEkmWlwpWnms8DjeGrFeItJ9ZB0CxQAX5EPlCcnYfXWW4ElvqpFBzkOvd1/wbhoW UUPJMYDcO5UaujQu5Vuv4AD81QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+gwduN 0da5SaIC9O9FSNsUX5LbMB8GA1UdIwQYMBaAFAphUoNOEpnBHPbgeGX3ZbI4ZWOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEM3My84RTVDOUNDMEMz MTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21jRWM5dUI0WmZkbHNqaGxZ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtRlNnMDRTbWNFYzl1QjRaZmRsc2pobFk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEM3My84RTVDOUNDMEMzMTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21j RWM5dUI0WmZkbHNqaGxZNGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEu5eH8vkixz6e/qPLoxEenO3cP/HtMABmmwkNbdBWn4JDQGwJCGazR9xFIbQ 84MFvGzI1mNdTkGBEp4UiQmqmKEDPfSKf9JZJxH3BRvtAOL7+ulEbwc41zrBU3zp vseBjHw2tOvgZU5EPbtv/Hd4npF3/jZ2f7a4miK7psiy01Z/vWK387/cAQyZzoaY RM3x1X1939vIqouuqMPlGhMrrlzQQ3y2gwQpXPTkU8zEF65UXwQG8o0P7k1Drwcm jcVnhgjWT0fg1hbYvUcG3XMBRomsiKnmf/NzmmkpADtK7bVEXZfni+AMifCuvDbe HihQ8IVk46YvGsuWA3OiKMnJMw== -----END CERTIFICATE-----Generated at Wed Oct 7 07:49:04 2026 by rpki-client