$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft File: D7ep-f-5NrdU2MC2yClQpAHeosc.mft (raw, json) Hash identifier: OeyDEuDuuBbEck3xurCwTmUsvC1cDGD9R/8fn59YaVg= Subject key identifier: A5:A7:0E:A3:0C:50:8C:FC:B2:8F:34:36:C9:49:0F:0F:E7:11:6F:01 Authority key identifier: 0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7 Certificate issuer: /CN=A9168E98/serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft Manifest number: 28 Signing time: Mon 28 Sep 2026 20:32:36 +0000 Manifest this update: Mon 28 Sep 2026 20:32:35 +0000 Manifest next update: Mon 05 Oct 2026 20:32:35 +0000 Files and hashes: 1: D7ep-f-5NrdU2MC2yClQpAHeosc.crl (hash: hhcWRaNwU8+biRBQE7+Mo1EJ2Ddd/DVUksxawV80xQI=) 2: AA50EC82898C11F1B30FA3E93511F970.roa (hash: dCAofxmjq+gN+1coMHJnW6APvE8MfHQ8av7LqWQp00Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7 Validity Not Before: Sep 28 20:32:35 2026 GMT Not After : Oct 5 20:32:35 2026 GMT Subject: CN=6abacee4-d192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:a9:49:d0:14:ab:7a:20:43:77:59:74:56: 36:9e:8c:b1:b3:47:6e:86:cc:98:b2:e5:0b:ee:35: e4:00:06:08:d7:29:21:5d:ad:ee:b9:f1:02:29:af: 5c:47:c5:2a:08:bf:23:fa:a6:fa:51:04:13:bd:9f: 7c:4d:5d:33:a9:a1:df:ce:5e:13:b4:19:fb:ff:2a: ec:bc:47:e1:52:f2:d1:67:e6:05:56:5e:56:11:7a: 9b:ba:3e:a8:18:9c:1c:d2:fc:c4:12:e9:18:56:fe: 75:cf:67:e5:ae:16:91:3e:87:01:d2:1c:24:22:8f: 5e:05:c4:e8:9f:48:bf:e5:c9:41:80:ea:7c:42:53: b9:0e:38:63:f0:dc:83:ec:47:0b:30:9d:51:7a:2f: 8a:84:3f:64:eb:cf:40:d7:78:0e:3b:08:7f:84:54: f3:46:49:12:39:ae:34:4e:36:e3:68:8a:71:8c:1b: 21:bf:d7:f3:aa:d0:f1:1d:30:d5:eb:f5:90:98:98: 56:3d:5d:b0:50:a7:10:5c:78:db:e5:63:2d:67:2b: bb:11:8f:a0:1b:f2:ac:27:f6:25:30:2b:4f:32:57: 4a:1b:8b:5e:f7:5f:94:44:cb:37:d4:b8:04:f5:2f: c7:2d:15:f2:33:35:08:aa:10:25:23:49:41:26:14: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A7:0E:A3:0C:50:8C:FC:B2:8F:34:36:C9:49:0F:0F:E7:11:6F:01 X509v3 Authority Key Identifier: keyid:0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:64:84:c1:09:df:99:f0:0d:cf:28:1a:bd:e0:34:49:28: 9e:1f:ee:5f:c8:03:ca:99:3c:0c:ce:4b:6f:3e:38:60:58:21: ee:14:14:b2:65:2c:0e:19:1f:fd:5d:1b:5c:de:51:f2:10:2c: 22:cf:9a:ad:3a:b8:77:df:50:c7:76:3b:34:af:72:c4:c6:0c: d0:23:8e:6e:80:b8:76:e3:2c:40:b6:af:bd:11:c3:e3:b0:b5: 9f:ab:29:92:34:8c:ef:e9:0a:d3:ed:b7:47:00:1b:96:ac:18: 38:9b:5d:a0:60:d8:6c:67:86:51:fe:86:ca:34:ee:6f:04:6b: 54:00:a9:55:14:99:eb:ad:13:59:88:3f:48:71:05:44:d7:ef: d0:3e:3e:e4:d6:e2:ee:05:c2:f2:bf:aa:05:0f:84:4f:bd:81: 6d:46:f1:77:45:5d:2c:04:4d:e5:c5:40:fe:8c:8d:51:a9:1f: 08:ca:55:7e:b5:d0:a2:cf:13:15:fd:bf:fd:1d:68:4c:6b:39: 55:9c:c9:99:67:cc:84:be:c4:af:5e:a4:14:8e:71:99:3a:f5: 70:d7:97:cd:3a:41:68:f0:ca:a6:d3:b6:3f:d6:54:89:e2:6d: f3:90:ad:fd:fb:91:36:03:33:d9:e2:c8:2a:93:cb:8c:4a:80: d0:0e:7b:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEU5ODExMC8GA1UEBRMoMEZCN0E5RjlGRkI5MzZCNzU0RDhDMEI2QzgyOTUwQTQw MURFQTJDNzAeFw0yNjA5MjgyMDMyMzVaFw0yNjEwMDUyMDMyMzVaMBgxFjAUBgNV BAMTDTZhYmFjZWU0LWQxOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPrqlJ0BSreiBDd1l0VjaejLGzR26GzJiy5QvuNeQABgjXKSFdre658QIpr1xH xSoIvyP6pvpRBBO9n3xNXTOpod/OXhO0Gfv/Kuy8R+FS8tFn5gVWXlYRepu6PqgY nBzS/MQS6RhW/nXPZ+WuFpE+hwHSHCQij14FxOifSL/lyUGA6nxCU7kOOGPw3IPs RwswnVF6L4qEP2Trz0DXeA47CH+EVPNGSRI5rjRONuNoinGMGyG/1/Oq0PEdMNXr 9ZCYmFY9XbBQpxBceNvlYy1nK7sRj6Ab8qwn9iUwK08yV0obi173X5REyzfUuAT1 L8ctFfIzNQiqECUjSUEmFJn3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpacOowxQ jPyyjzQ2yUkPD+cRbwEwHwYDVR0jBBgwFoAUD7ep+f+5NrdU2MC2yClQpAHeoscw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RTk4LzY4Qjk1REYwODk3 QzExRjFCNDU2MjM0NzcwMTFGOTcwL0Q3ZXAtZi01TnJkVTJNQzJ5Q2xRcEFIZW9z Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDdlcC1mLTVOcmRVMk1DMnlDbFFwQUhlb3NjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RTk4LzY4Qjk1REYwODk3QzExRjFCNDU2MjM0NzcwMTFGOTcwL0Q3ZXAtZi01TnJk VTJNQzJ5Q2xRcEFIZW9zYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhm2SEwQnfmfANzygaveA0SSieH+5fyAPKmTwMzktvPjhgWCHuFBSyZSwOGR/9 XRtc3lHyECwiz5qtOrh331DHdjs0r3LExgzQI45ugLh24yxAtq+9EcPjsLWfqymS NIzv6QrT7bdHABuWrBg4m12gYNhsZ4ZR/obKNO5vBGtUAKlVFJnrrRNZiD9IcQVE 1+/QPj7k1uLuBcLyv6oFD4RPvYFtRvF3RV0sBE3lxUD+jI1RqR8IylV+tdCizxMV /b/9HWhMazlVnMmZZ8yEvsSvXqQUjnGZOvVw15fNOkFo8Mqm07Y/1lSJ4m3zkK39 +5E2AzPZ4sgqk8uMSoDQDnvl -----END CERTIFICATE-----Generated at Tue Sep 29 09:47:12 2026 by rpki-client