$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: arhobGPejTbztb0HAmUby+G4SLfk6YvF0Kfu8xuATi4= Subject key identifier: E8:BC:E1:FB:93:5B:3D:DA:12:B1:6B:EB:44:3A:72:A9:76:E8:27:AF Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 0531 Signing time: Fri 02 Oct 2026 23:51:27 +0000 Manifest this update: Fri 02 Oct 2026 23:51:26 +0000 Manifest next update: Fri 09 Oct 2026 23:51:26 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: RvrQMbG0COBPr9mAOrU5hjIUaAdrDgU/qB6VrhC4v3o=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Oct 2 23:51:26 2026 GMT Not After : Oct 9 23:51:26 2026 GMT Subject: CN=6ac0437f-6503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:4c:1a:98:6e:7f:13:34:08:27:17:45:d0: c1:98:93:21:a7:41:0c:27:d6:23:56:0a:db:68:be: 22:8e:ea:14:26:49:e1:62:0e:e0:0a:dd:41:91:4a: ff:0c:62:37:77:85:03:58:54:87:77:b4:5c:54:72: 90:ef:9f:87:20:86:8c:d0:20:d0:34:ba:ca:d2:47: 96:80:25:43:a1:9a:c1:a5:e1:8e:1c:ad:d8:05:7e: 32:1f:7a:a8:d9:f6:31:18:78:d5:78:6d:d6:1e:83: 28:6b:c6:98:9f:45:88:df:33:4d:06:f1:e8:fb:16: 29:9a:45:24:c4:b8:b8:61:b4:10:7d:7c:72:fc:b7: 04:bf:c9:ae:17:e4:cd:b7:06:f3:b8:d5:47:50:d0: b3:32:b6:b6:d4:45:c5:31:9a:f0:87:9c:79:db:a7: 13:71:12:59:af:ca:85:51:1e:d2:02:eb:b3:1a:a5: 4b:86:46:dd:48:e6:39:26:5f:15:82:67:0e:95:57: ff:fe:b0:2a:ae:ff:4c:1a:b9:79:15:1e:7a:42:c6: 47:fc:b0:30:20:fd:2f:da:1c:f0:f7:14:65:f3:0e: bf:29:ce:7e:1e:a1:17:0e:74:d3:ca:2e:c1:2a:7a: a5:6a:e1:28:dd:59:0b:94:5a:17:6e:8f:ca:31:c1: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:E1:FB:93:5B:3D:DA:12:B1:6B:EB:44:3A:72:A9:76:E8:27:AF X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b9:31:e4:90:34:00:30:53:21:03:35:e1:42:69:37:b6:16: b8:3e:55:15:3e:d3:c7:38:f5:e0:6e:74:a6:41:72:eb:a6:05: de:70:c8:9d:9e:fc:de:a4:7a:91:57:01:db:86:9f:99:9f:36: d9:bd:d2:04:34:21:80:ac:d5:e5:51:e9:ad:05:c2:4e:f8:54: c8:b3:c5:fd:2a:d4:1f:1b:6f:d3:d9:4b:b2:15:2c:72:90:36: 60:6e:89:41:43:b5:f8:fd:ce:16:be:c7:59:e9:2f:0d:e2:8f: a3:60:cc:e1:43:1f:8a:60:e1:30:ba:6c:50:24:45:27:b9:cd: 4a:f8:bc:88:a3:54:05:86:e3:de:e4:d0:41:6e:66:50:44:fd: 37:5c:e9:d3:24:23:0d:c4:3a:aa:31:58:07:3d:c0:03:7d:d0: f2:02:18:75:0a:5f:ee:71:9c:c7:b9:80:f1:66:dd:7b:d8:57: 45:b3:ac:a0:a3:d0:f2:d5:52:d3:5c:a7:ae:c2:c4:c4:68:c5: 4d:4b:8a:01:ef:85:b5:87:d6:5a:d9:9f:12:c2:6e:6d:f1:42: 6f:fd:33:41:17:58:60:08:e0:58:64:5b:bd:33:29:62:ca:9b: 06:95:51:95:31:4b:8e:61:ab:47:77:7a:7d:33:9f:72:c4:51: 16:28:ea:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjYxMDAyMjM1MTI2WhcNMjYxMDA5MjM1MTI2WjAYMRYwFAYD VQQDEw02YWMwNDM3Zi02NTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXlMGphufxM0CCcXRdDBmJMhp0EMJ9YjVgrbaL4ijuoUJknhYg7gCt1BkUr/ DGI3d4UDWFSHd7RcVHKQ75+HIIaM0CDQNLrK0keWgCVDoZrBpeGOHK3YBX4yH3qo 2fYxGHjVeG3WHoMoa8aYn0WI3zNNBvHo+xYpmkUkxLi4YbQQfXxy/LcEv8muF+TN twbzuNVHUNCzMra21EXFMZrwh5x526cTcRJZr8qFUR7SAuuzGqVLhkbdSOY5Jl8V gmcOlVf//rAqrv9MGrl5FR56QsZH/LAwIP0v2hzw9xRl8w6/Kc5+HqEXDnTTyi7B KnqlauEo3VkLlFoXbo/KMcEDHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOi84fuT Wz3aErFr60Q6cql26CevMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbkx5JA0ADBTIQM14UJpN7YWuD5VFT7Txzj14G50pkFy66YF3nDInZ783qR6 kVcB24afmZ822b3SBDQhgKzV5VHprQXCTvhUyLPF/SrUHxtv09lLshUscpA2YG6J QUO1+P3OFr7HWekvDeKPo2DM4UMfimDhMLpsUCRFJ7nNSvi8iKNUBYbj3uTQQW5m UET9N1zp0yQjDcQ6qjFYBz3AA33Q8gIYdQpf7nGcx7mA8Wbde9hXRbOsoKPQ8tVS 01ynrsLExGjFTUuKAe+FtYfWWtmfEsJubfFCb/0zQRdYYAjgWGRbvTMpYsqbBpVR lTFLjmGrR3d6fTOfcsRRFijqpw== -----END CERTIFICATE-----Generated at Sun Oct 4 13:11:01 2026 by rpki-client