$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: KeDtU0bAiJpoB8JLbdma+/2nSnerTPcPVQNAFMuUioE= Subject key identifier: 65:97:4F:44:A1:97:78:A6:46:5E:B4:37:AA:7C:6F:CD:F4:80:E6:01 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0D35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0D0C Signing time: Thu 08 Oct 2026 18:30:40 +0000 Manifest this update: Thu 08 Oct 2026 18:30:40 +0000 Manifest next update: Thu 15 Oct 2026 18:30:40 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: v42eWjZfCnTze4rQ5HoJvo31VvbRiHYZshk/pz/fQRg=) 2: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: IYK0qSzEebuE0KBmbImZms3PEASi26kf8B/z+PvBOXQ=) 3: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: 3bDomSWxzZmFd9K4NUh5rneQ95kaPkOYk8YbxDfqyvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Oct 8 18:30:40 2026 GMT Not After : Oct 15 18:30:40 2026 GMT Subject: CN=6ac7e150-e196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:74:d2:c3:c3:ab:77:31:77:ec:00:5a:ff: c5:ac:28:c3:0f:e8:a2:ac:52:4a:f8:0c:c6:30:93: d9:0e:93:6e:62:64:8d:62:a3:44:03:1c:e5:c9:6b: 75:2f:57:12:c4:3f:3b:b7:d1:38:3b:0c:f4:50:ca: 0b:cb:40:16:64:d4:02:7a:16:d1:b8:67:e3:d3:9d: 1b:a9:bf:f0:a3:39:ce:f7:ad:56:62:fc:10:3b:83: 4e:ba:37:44:a9:93:59:01:cd:2d:ff:47:e2:58:35: 17:f8:b3:b6:bc:46:54:99:58:01:0d:1c:8f:3d:70: f5:07:d8:b0:ca:54:1c:8f:a3:62:d8:93:2c:bd:95: 87:17:10:97:23:6e:ae:53:37:54:9e:f0:87:98:70: e5:61:b1:84:bf:89:e5:fd:70:9d:69:8c:a7:4e:0b: 48:35:f4:07:84:8b:0a:63:24:0d:10:47:72:7f:68: 40:21:88:82:ab:98:51:b5:c1:fa:c4:46:3a:3f:8d: ae:27:6c:0b:8e:6f:64:7b:a5:5c:e0:12:e7:91:92: b4:90:1b:e6:e7:13:c2:61:fb:be:6f:e2:41:49:d0: c5:8e:13:1f:d7:e5:65:bc:c7:4b:87:db:25:b1:e4: ad:eb:9c:15:a7:3f:2b:16:07:f3:b7:3b:70:ce:4b: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:4F:44:A1:97:78:A6:46:5E:B4:37:AA:7C:6F:CD:F4:80:E6:01 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4e:72:45:e4:f5:53:32:ef:68:49:22:84:a0:45:62:ad:08: 7f:10:ed:ac:0a:15:a2:4f:91:16:e0:80:72:fc:37:40:45:58: 77:47:58:6a:2d:df:37:60:59:13:22:af:91:04:50:13:d9:80: c1:82:ff:0b:28:80:a6:42:c0:ab:31:7f:2e:07:76:13:db:21: 12:8b:8f:b8:57:8a:49:c2:08:b4:f5:96:a0:e1:0c:21:a1:4b: ce:e1:99:e1:14:a9:3a:b1:99:ab:61:3a:88:01:05:68:14:96: 23:5b:5c:58:7d:09:1d:1c:b7:52:4a:9a:97:8f:df:1a:e0:11: bb:bb:f9:aa:4b:8a:de:26:09:58:83:6b:dc:cc:c8:84:d8:50: 20:77:79:9b:83:ef:16:a3:68:c4:54:72:b1:8d:b1:fa:a0:6e: 78:19:cb:8c:6c:67:61:6d:e2:47:ec:c7:77:80:ae:fb:73:cc: 90:d4:97:27:62:81:8a:e4:98:64:31:ff:7b:40:80:33:ea:3d: a3:5e:0f:20:d9:8d:40:35:7e:ee:5a:75:b8:d1:ab:4f:4e:73: b7:15:50:12:55:df:69:fd:2e:6f:20:b0:4b:fe:fa:6a:db:12: 2d:20:29:58:c2:39:74:3c:fe:03:b0:33:7f:83:23:48:e1:f2: 93:30:4b:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjYxMDA4MTgzMDQwWhcNMjYxMDE1MTgzMDQwWjAYMRYwFAYD VQQDEw02YWM3ZTE1MC1lMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpN00sPDq3cxd+wAWv/FrCjDD+iirFJK+AzGMJPZDpNuYmSNYqNEAxzlyWt1 L1cSxD87t9E4Owz0UMoLy0AWZNQCehbRuGfj050bqb/woznO961WYvwQO4NOujdE qZNZAc0t/0fiWDUX+LO2vEZUmVgBDRyPPXD1B9iwylQcj6Ni2JMsvZWHFxCXI26u UzdUnvCHmHDlYbGEv4nl/XCdaYynTgtINfQHhIsKYyQNEEdyf2hAIYiCq5hRtcH6 xEY6P42uJ2wLjm9ke6Vc4BLnkZK0kBvm5xPCYfu+b+JBSdDFjhMf1+VlvMdLh9sl seSt65wVpz8rFgfztztwzksgnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWXT0Sh l3imRl60N6p8b830gOYBMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX05yReT1UzLvaEkihKBFYq0IfxDtrAoVok+RFuCAcvw3QEVYd0dYai3fN2BZ EyKvkQRQE9mAwYL/CyiApkLAqzF/Lgd2E9shEouPuFeKScIItPWWoOEMIaFLzuGZ 4RSpOrGZq2E6iAEFaBSWI1tcWH0JHRy3Ukqal4/fGuARu7v5qkuK3iYJWINr3MzI hNhQIHd5m4PvFqNoxFRysY2x+qBueBnLjGxnYW3iR+zHd4Cu+3PMkNSXJ2KBiuSY ZDH/e0CAM+o9o14PINmNQDV+7lp1uNGrT05ztxVQElXfaf0ubyCwS/76atsSLSAp WMI5dDz+A7Azf4MjSOHykzBL9g== -----END CERTIFICATE-----Generated at Fri Oct 9 04:33:06 2026 by rpki-client