$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft File: cI8eBxM4VcgHTu1fjIO0RmpgesI.mft (raw, json) Hash identifier: 9mqopwyyXxRQpg3rwf+4Vtxrj2YRfGTB+Bj1Nzz9SZo= Subject key identifier: FD:5F:DE:D2:AC:ED:72:43:8B:C4:85:3B:DB:FC:5B:37:DD:BA:01:68 Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2 Certificate issuer: /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft Manifest number: 0210 Signing time: Wed 21 Oct 2026 03:33:21 +0000 Manifest this update: Wed 21 Oct 2026 03:33:21 +0000 Manifest next update: Wed 28 Oct 2026 03:33:21 +0000 Files and hashes: 1: cI8eBxM4VcgHTu1fjIO0RmpgesI.crl (hash: VnxQ4LaBTF/YjrufuTm3wsnw5g1s8/7J5ZHepzxpSiA=) 2: BFC0298670DC11EF8B65D95AC4F9AE02.roa (hash: kzX0teoGqCYcrXmXpjad2Lv+QKDn7uXbylM76fvPiSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 03:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2 Validity Not Before: Oct 21 03:33:21 2026 GMT Not After : Oct 28 03:33:21 2026 GMT Subject: CN=6ad83281-aab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:49:bc:7f:54:08:49:66:24:cc:c8:3d:24: 9b:a5:24:b0:ad:d4:17:f4:13:fe:1a:4c:5a:80:d2: d9:cf:ed:a1:98:ee:f5:72:11:df:31:10:75:d7:f1: 01:83:83:8d:5b:e1:74:8b:a5:f8:e9:cd:2d:76:80: 4a:90:41:21:b6:86:a5:9f:80:9d:50:3a:30:ed:98: cb:26:ed:89:a5:6f:55:ad:f5:62:c3:63:d5:56:27: 18:cc:05:5a:cd:c2:40:7a:41:b2:f1:0a:8e:22:50: d1:5e:32:21:9e:a8:1b:e7:ff:95:13:de:c1:08:6c: f5:9c:7b:1a:85:68:0b:81:9a:87:ce:f0:25:e6:dd: 92:ec:bd:14:3a:fb:1a:52:48:e1:b3:ef:18:e8:92: e6:f0:15:d5:a8:1c:33:60:69:7d:65:46:f7:64:3a: 05:f9:02:06:91:9c:24:d6:a7:c8:78:ae:ce:93:9e: a9:f6:a4:ea:97:6c:6c:03:01:77:ee:89:71:c9:54: 41:39:9b:f4:d8:0c:73:75:b4:81:5c:58:98:82:14: 93:36:9b:0d:bf:80:9e:0c:d6:bf:49:a4:d0:4c:91: 69:dd:5c:ac:d3:0d:1c:71:c7:c5:4c:26:a9:91:39: 09:2f:7b:28:a1:26:ae:29:a7:58:d4:6b:be:1f:a1: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:DE:D2:AC:ED:72:43:8B:C4:85:3B:DB:FC:5B:37:DD:BA:01:68 X509v3 Authority Key Identifier: keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1d:4c:bc:45:a3:dc:d1:83:99:ef:74:8f:84:70:d2:18:b2: 08:5e:71:b0:28:27:06:5c:6d:1a:be:a7:4b:4f:d3:e4:b2:1b: 33:db:06:2c:0d:b7:72:4a:8b:02:5a:06:1d:8a:b0:a4:bd:b4: 6d:5e:2a:fe:8c:79:36:4d:9a:dd:52:e7:06:f5:84:52:e3:7c: 62:b5:a9:fc:42:83:50:81:a9:4f:90:77:b0:f6:b4:c3:93:0f: 1e:aa:59:22:c0:ef:62:cf:7e:4c:ce:0f:0a:6c:a0:22:f3:14: e6:5e:9e:44:f0:fc:37:a5:76:7f:af:cd:23:6a:ce:6a:0d:e9: fd:39:e7:89:7c:24:95:51:46:51:2a:ce:de:27:b8:09:1b:01: d2:31:4c:9c:84:7f:54:45:0a:83:aa:55:d2:90:e2:8a:0f:11: 78:fd:9b:fc:04:a4:79:e2:b0:94:ce:61:c1:75:e9:50:72:8f: c9:41:d4:ea:ef:55:f5:00:38:2c:0d:97:f7:3c:98:73:c0:7c: 22:be:90:f9:78:38:ed:7f:50:08:92:00:5b:c2:27:a3:42:00: af:84:8e:39:b7:35:fa:8c:2f:da:e4:72:3b:c1:95:af:7c:73: b1:3e:64:fa:a1:d6:d1:4a:41:b3:1b:4f:7e:6a:4f:90:53:11: 1e:65:18:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDcwOEYxRTA3MTMzODU1QzgwNzRFRUQ1RjhDODNCNDQ2 NkE2MDdBQzIwHhcNMjYxMDIxMDMzMzIxWhcNMjYxMDI4MDMzMzIxWjAYMRYwFAYD VQQDEw02YWQ4MzI4MS1hYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N9JvH9UCElmJMzIPSSbpSSwrdQX9BP+GkxagNLZz+2hmO71chHfMRB11/EB g4ONW+F0i6X46c0tdoBKkEEhtoaln4CdUDow7ZjLJu2JpW9VrfViw2PVVicYzAVa zcJAekGy8QqOIlDRXjIhnqgb5/+VE97BCGz1nHsahWgLgZqHzvAl5t2S7L0UOvsa Ukjhs+8Y6JLm8BXVqBwzYGl9ZUb3ZDoF+QIGkZwk1qfIeK7Ok56p9qTql2xsAwF3 7olxyVRBOZv02AxzdbSBXFiYghSTNpsNv4CeDNa/SaTQTJFp3Vys0w0cccfFTCap kTkJL3sooSauKadY1Gu+H6Ft8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1f3tKs 7XJDi8SFO9v8WzfdugFoMB8GA1UdIwQYMBaAFHCPHgcTOFXIB07tX4yDtEZqYHrC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82NTZEMTdBOEFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9jSThlQnhNNFZjZ0hUdTFmaklPMFJtcGdl c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NJOGVCeE00VmNnSFR1MWZqSU8wUm1wZ2VzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82NTZEMTdBOEFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9jSThlQnhNNFZj Z0hUdTFmaklPMFJtcGdlc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnR1MvEWj3NGDme90j4Rw0hiyCF5xsCgnBlxtGr6nS0/T5LIbM9sGLA23ckqL AloGHYqwpL20bV4q/ox5Nk2a3VLnBvWEUuN8YrWp/EKDUIGpT5B3sPa0w5MPHqpZ IsDvYs9+TM4PCmygIvMU5l6eRPD8N6V2f6/NI2rOag3p/TnniXwklVFGUSrO3ie4 CRsB0jFMnIR/VEUKg6pV0pDiig8ReP2b/ASkeeKwlM5hwXXpUHKPyUHU6u9V9QA4 LA2X9zyYc8B8Ir6Q+Xg47X9QCJIAW8Ino0IAr4SOObc1+owv2uRyO8GVr3xzsT5k +qHW0UpBsxtPfmpPkFMRHmUYgw== -----END CERTIFICATE-----Generated at Thu Oct 22 11:54:46 2026 by rpki-client