$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: r6koqNGydhrsJInlCOX4gbdXwksBNGF9Mhw+eSJN28c= Subject key identifier: F7:4C:B0:57:6A:EB:48:61:E7:42:22:87:FF:FC:76:4E:DB:5D:74:92 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0CAB Signing time: Wed 28 Oct 2026 18:43:52 +0000 Manifest this update: Wed 28 Oct 2026 18:43:51 +0000 Manifest next update: Wed 04 Nov 2026 18:43:51 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: GSwc7R/jl/UT+t3f5/a71VhgGAvjYEmzgglU0G7dPeQ=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Oct 28 18:43:51 2026 GMT Not After : Nov 4 18:43:51 2026 GMT Subject: CN=6ae24268-3297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:d1:3f:b8:de:26:28:d7:d8:93:61:56:11: aa:63:8f:f1:93:70:96:23:47:6d:02:30:51:78:77: 8b:20:99:31:70:b8:b4:26:1e:dd:fd:d8:47:b3:e2: 49:61:01:06:b1:68:b4:00:69:76:27:43:48:bc:49: 8b:dc:82:39:a2:a0:81:13:d9:c0:0c:7d:5e:b4:ba: 33:7f:ea:d7:87:96:96:c1:77:e9:31:6d:b8:3d:0b: 58:fb:f5:8e:13:b3:2a:b2:06:b2:19:55:f5:b9:b0: 00:2f:2f:7b:28:bd:a4:de:a9:1d:70:31:38:c6:4e: 33:df:04:ea:18:46:47:0c:e5:9c:36:ef:ff:d6:e6: 10:23:8d:80:f2:03:99:6e:a2:aa:56:7a:a7:ec:0d: 41:0e:a6:01:85:bb:14:d7:0f:06:98:b9:34:3e:5c: d4:64:b7:d5:de:3c:a5:3d:30:0d:fd:13:d4:cb:66: 6e:2a:6b:97:e7:d6:d0:12:01:4c:37:04:01:40:87: 6a:d4:4f:3a:77:87:71:8d:d7:23:55:fe:9a:66:ae: e9:60:e8:41:67:45:54:13:89:34:fe:94:07:c9:6d: 5e:46:69:ee:6d:24:97:d1:4f:11:c1:e0:d8:ad:a2: 06:e3:77:ff:d4:9d:ee:df:ee:7f:9c:48:84:b8:17: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4C:B0:57:6A:EB:48:61:E7:42:22:87:FF:FC:76:4E:DB:5D:74:92 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:de:ca:86:15:88:18:f1:77:7d:65:0d:f4:1c:3e:ca:8a:24: a9:6a:a6:13:2a:a0:a2:46:01:01:38:57:47:ab:5d:16:94:06: de:2d:3a:2e:0a:04:07:1b:30:a2:a8:95:7d:0b:a6:f7:f8:e7: 70:49:54:2c:ac:ce:f4:a4:42:b5:79:b4:c9:e5:df:d0:7e:77: f8:a1:a9:7e:d0:48:77:d8:26:1f:b2:bb:c2:5a:01:1b:05:c0: 60:86:7f:73:7a:ab:5b:ed:2f:26:1a:c4:2c:0d:14:ed:81:47: 66:2b:15:cf:d0:56:39:b9:49:da:fd:8f:e5:c2:9d:6d:d7:1e: 64:16:fe:63:24:ab:7a:15:ff:56:7a:3a:95:28:21:13:cb:bc: 61:a1:a5:8d:d5:37:47:a2:43:f1:1f:fa:14:09:c1:52:31:21: e4:e6:98:33:68:80:58:86:8e:09:28:cd:a7:e0:55:b2:1b:fd: 1d:e0:f0:5a:2b:2c:c9:c6:4c:d0:1a:b4:46:6c:9a:69:55:d9: 93:aa:d8:bb:b0:0e:98:de:69:38:e0:0a:c2:6d:2e:fb:bb:b3: 1d:da:85:63:80:25:0a:b0:ee:68:08:ac:a5:91:02:f4:98:44: 44:9f:76:ba:b5:69:ac:f2:35:4d:70:39:48:79:7f:2e:5c:f1: 22:ee:14:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjYxMDI4MTg0MzUxWhcNMjYxMTA0MTg0MzUxWjAYMRYwFAYD VQQDEw02YWUyNDI2OC0zMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyObRP7jeJijX2JNhVhGqY4/xk3CWI0dtAjBReHeLIJkxcLi0Jh7d/dhHs+JJ YQEGsWi0AGl2J0NIvEmL3II5oqCBE9nADH1etLozf+rXh5aWwXfpMW24PQtY+/WO E7MqsgayGVX1ubAALy97KL2k3qkdcDE4xk4z3wTqGEZHDOWcNu//1uYQI42A8gOZ bqKqVnqn7A1BDqYBhbsU1w8GmLk0PlzUZLfV3jylPTAN/RPUy2ZuKmuX59bQEgFM NwQBQIdq1E86d4dxjdcjVf6aZq7pYOhBZ0VUE4k0/pQHyW1eRmnubSSX0U8RweDY raIG43f/1J3u3+5/nEiEuBfoYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdMsFdq 60hh50Iih//8dk7bXXSSMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApt7KhhWIGPF3fWUN9Bw+yookqWqmEyqgokYBAThXR6tdFpQG3i06LgoEBxsw oqiVfQum9/jncElULKzO9KRCtXm0yeXf0H53+KGpftBId9gmH7K7wloBGwXAYIZ/ c3qrW+0vJhrELA0U7YFHZisVz9BWOblJ2v2P5cKdbdceZBb+YySrehX/Vno6lSgh E8u8YaGljdU3R6JD8R/6FAnBUjEh5OaYM2iAWIaOCSjNp+BVshv9HeDwWissycZM 0Bq0RmyaaVXZk6rYu7AOmN5pOOAKwm0u+7uzHdqFY4AlCrDuaAispZEC9JhERJ92 urVprPI1TXA5SHl/LlzxIu4Uzw== -----END CERTIFICATE-----Generated at Thu Oct 29 13:53:43 2026 by rpki-client