$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: 0c0mSa5AhCVXoJ5KoudsBCDrBxZnZzB2I54FGrY6ruM= Subject key identifier: 4E:1F:8A:4F:03:E2:F9:54:E6:FB:1F:0F:DD:EB:F4:07:B2:82:69:3E Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: FA Signing time: Sat 03 Oct 2026 06:56:24 +0000 Manifest this update: Sat 03 Oct 2026 06:56:23 +0000 Manifest next update: Sat 10 Oct 2026 06:56:23 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: WoH9NohCpGY/OCxI6vx0euI3bj8K1c5xC5EJZPQZJds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Oct 3 06:56:23 2026 GMT Not After : Oct 10 06:56:23 2026 GMT Subject: CN=6ac0a718-26e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:3a:c5:c8:d8:77:12:a2:f0:46:02:0e:f0: 5c:fe:f6:1b:9b:3e:1a:d7:ce:6b:c5:7e:f2:07:25: 96:44:76:aa:9a:2e:1d:2c:b2:5b:3f:6c:51:6c:54: c9:a5:32:b3:1b:8f:40:84:84:69:40:a8:cd:47:19: 6b:6e:ce:b1:d6:2e:ab:e7:78:f3:ce:04:4b:45:d7: 0c:18:ae:ec:7b:0a:01:e2:90:a9:80:af:e0:fc:91: 59:21:ea:d3:d7:cf:52:cb:41:f0:fe:c6:ad:2e:02: 3a:b0:2a:a6:80:2a:4a:3a:a1:f7:9c:72:67:fc:44: f7:f2:79:e8:33:07:44:5b:9e:a9:44:51:16:2a:f5: df:1d:10:d6:2f:fa:7a:b5:c9:1b:be:42:2f:04:7d: c8:31:9b:0d:5b:b8:01:7e:65:5b:9f:66:b4:9a:f6: 0f:92:d7:f4:13:8b:9c:5b:18:37:15:a6:6b:54:69: 84:cb:d4:8e:9e:7e:18:c5:f0:01:7e:0c:f8:ea:96: 72:b1:ff:d2:55:6e:55:a6:28:31:a3:0f:89:03:73: ba:a6:a9:73:40:04:f7:73:61:52:e7:36:56:b7:c0: 34:6f:e4:17:12:9b:a3:71:b6:ec:47:64:16:e9:79: 7d:68:c7:b0:65:a2:e6:3b:61:3d:a0:e0:a1:e9:44: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:8A:4F:03:E2:F9:54:E6:FB:1F:0F:DD:EB:F4:07:B2:82:69:3E X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5b:ca:8a:ad:ca:b7:96:e5:29:1a:4e:b6:ba:41:ff:8c:90: 60:23:08:58:4c:e7:c7:4a:82:32:de:59:19:74:59:95:5b:37: 4e:85:b4:dc:bd:41:3b:78:42:bd:21:d4:cb:f3:bf:06:bb:94: 05:7d:1d:ab:b8:9c:1f:c0:20:4d:72:3b:7d:0f:57:62:17:3a: e3:df:34:44:dc:c5:cb:8c:4d:00:ac:82:f0:05:8d:fb:8e:9a: 84:bb:96:a8:b1:72:b8:6f:ae:e6:02:2f:1f:e0:0d:cd:e2:9f: 70:78:b2:73:81:17:d3:68:96:72:da:ab:cb:a1:47:41:68:65: 99:4f:9e:e4:c4:e6:a4:52:f6:1e:61:f3:97:43:70:7b:0b:bf: fd:96:be:7e:43:42:c4:65:f2:c2:ef:2c:0a:3a:f5:3e:2f:11: b9:b8:ef:f1:57:1e:dd:a5:d0:bc:09:b9:e4:a2:d7:2b:cf:19: 9a:4f:1f:d2:65:7d:69:c1:2f:19:89:d9:f7:f5:96:be:b1:73: 59:e6:92:7d:3d:0b:b3:f7:11:20:c5:05:01:09:01:f4:88:bc: d1:2a:0d:27:02:2d:8b:74:11:50:c1:a5:a4:4c:a6:95:97:68: 5d:8e:5b:b2:36:2a:4a:68:db:8e:6b:76:2a:cc:84:f9:a2:51: 77:9f:17:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDN0ExMTAvBgNVBAUTKDA5MTExMTZGQzM4RTk1REY1OTE2MzdEOEM2NjRCNDVG QjE2RjRCREEwHhcNMjYxMDAzMDY1NjIzWhcNMjYxMDEwMDY1NjIzWjAYMRYwFAYD VQQDEw02YWMwYTcxOC0yNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1M6xcjYdxKi8EYCDvBc/vYbmz4a185rxX7yByWWRHaqmi4dLLJbP2xRbFTJ pTKzG49AhIRpQKjNRxlrbs6x1i6r53jzzgRLRdcMGK7sewoB4pCpgK/g/JFZIerT 189Sy0Hw/satLgI6sCqmgCpKOqH3nHJn/ET38nnoMwdEW56pRFEWKvXfHRDWL/p6 tckbvkIvBH3IMZsNW7gBfmVbn2a0mvYPktf0E4ucWxg3FaZrVGmEy9SOnn4YxfAB fgz46pZysf/SVW5Vpigxow+JA3O6pqlzQAT3c2FS5zZWt8A0b+QXEpujcbbsR2QW 6Xl9aMewZaLmO2E9oOCh6USoKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4fik8D 4vlU5vsfD93r9Aeygmk+MB8GA1UdIwQYMBaAFAkREW/DjpXfWRY32MZktF+xb0va MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80REYxNkREMDQw NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9DUkVSYjhPT2xkOVpGamZZeG1TMFg3RnZT OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM3QS80REYxNkREMDQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9DUkVSYjhPT2xk OVpGamZZeG1TMFg3RnZTOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFvKiq3Kt5blKRpOtrpB/4yQYCMIWEznx0qCMt5ZGXRZlVs3ToW03L1BO3hC vSHUy/O/BruUBX0dq7icH8AgTXI7fQ9XYhc64980RNzFy4xNAKyC8AWN+46ahLuW qLFyuG+u5gIvH+ANzeKfcHiyc4EX02iWctqry6FHQWhlmU+e5MTmpFL2HmHzl0Nw ewu//Za+fkNCxGXywu8sCjr1Pi8Rubjv8Vce3aXQvAm55KLXK88Zmk8f0mV9acEv GYnZ9/WWvrFzWeaSfT0Ls/cRIMUFAQkB9Ii80SoNJwIti3QRUMGlpEymlZdoXY5b sjYqSmjbjmt2KsyE+aJRd58XyQ== -----END CERTIFICATE-----Generated at Sun Oct 4 16:54:14 2026 by rpki-client