$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: AwouoY9LSsX13CVLbMS8AZAIVup3scNhWJjZtBHAMok= Subject key identifier: 5B:37:53:11:DD:41:87:AF:73:B5:FE:2E:3F:03:56:4B:C1:6D:61:FB Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 090D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 08FC Signing time: Sat 10 Oct 2026 20:25:04 +0000 Manifest this update: Sat 10 Oct 2026 20:25:03 +0000 Manifest next update: Sat 17 Oct 2026 20:25:03 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: HD8TDoen2W6zuCWTc9dC5QIKVbRhOYUt5BHLYhQeDFU=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: MUOkb6HBrIcJHM8GhoD7uMpA/Mn234hOvyhOtrfNkiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Oct 10 20:25:03 2026 GMT Not After : Oct 17 20:25:03 2026 GMT Subject: CN=6aca9f20-b260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:e4:18:68:45:ca:6c:08:f2:49:9c:54:6f: e5:8e:25:32:e5:19:76:b2:4d:f8:8f:20:00:ce:e8: 80:be:2b:e4:44:0a:21:63:89:d8:78:0a:b1:ff:92: 64:bb:b4:64:7b:2a:aa:9c:65:5c:b0:17:54:28:1f: ff:b4:26:d7:2e:01:27:25:99:6c:33:11:c6:51:2b: 81:d3:a4:0f:79:e9:08:d1:25:9a:04:a4:6d:99:17: a2:59:1f:6d:8a:63:15:29:30:0b:24:44:34:87:0e: 5f:f8:cb:65:86:cc:ba:0e:5b:58:8f:fc:23:a3:45: b5:2b:22:3e:88:a8:ed:e0:09:26:f3:3e:54:aa:5e: 06:86:54:24:51:85:1e:cd:8f:ca:1c:a7:da:cf:40: 0a:be:40:fe:6f:d4:ea:1c:e7:fa:96:3b:67:c2:5c: 4d:7f:c3:d1:1d:f2:17:70:54:13:b4:0c:88:ba:e7: 52:ca:c7:29:f0:b1:1b:50:56:4f:a7:49:40:ee:d1: 4c:83:9d:ca:91:3e:76:5c:5f:18:01:90:cd:14:3a: d3:f5:85:d3:17:25:9f:c2:cb:6f:3a:a5:ea:29:0a: 85:54:7a:10:35:5b:c7:f6:19:ee:f7:b1:a0:f0:90: fe:18:c3:9f:ab:c4:bb:4e:7b:ea:a1:59:0e:58:0f: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:37:53:11:DD:41:87:AF:73:B5:FE:2E:3F:03:56:4B:C1:6D:61:FB X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:5d:50:62:d0:6e:54:75:53:9f:92:25:ba:f1:5a:5d:f2:24: 21:52:3d:4e:e0:ae:8f:52:92:40:f9:9b:47:48:ae:3f:e9:95: 69:fc:83:39:fb:1a:16:3b:c7:12:b0:48:50:fe:12:df:9d:03: b0:dc:4e:aa:3b:5c:dd:ec:d9:b1:9e:2f:ba:16:c2:c8:d5:5d: 18:b9:c9:54:08:c4:4e:25:57:93:c8:06:02:d1:5c:9a:e6:93: f6:9e:22:2a:ce:ec:cb:90:2e:16:71:07:55:bd:b7:c9:16:45: dc:52:74:f2:ca:be:95:da:ad:c1:a1:b2:d9:cc:cb:b0:33:00: 21:0e:78:c6:03:c9:78:4b:23:2e:9a:44:08:81:3c:05:73:00: 8d:28:50:a9:1b:c1:e1:40:de:46:be:ee:b7:26:b3:a7:2c:50: ae:1f:c1:73:6b:08:d0:dc:f0:42:6b:83:0e:f7:c1:95:56:e7: f8:aa:5d:ca:75:9e:67:cd:de:92:fb:4c:a3:d1:6d:ba:03:03: 3d:bd:29:bf:bc:64:76:a5:66:67:8a:b7:19:b9:dd:33:86:19: fc:cf:96:ec:e2:79:58:51:99:11:6f:bb:ed:9b:bc:d6:9a:99: 4c:8d:8d:31:19:b9:64:80:ff:de:57:82:d4:4b:06:42:89:74: e6:1e:af:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjYxMDEwMjAyNTAzWhcNMjYxMDE3MjAyNTAzWjAYMRYwFAYD VQQDEw02YWNhOWYyMC1iMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlEfkGGhFymwI8kmcVG/ljiUy5Rl2sk34jyAAzuiAvivkRAohY4nYeAqx/5Jk u7RkeyqqnGVcsBdUKB//tCbXLgEnJZlsMxHGUSuB06QPeekI0SWaBKRtmReiWR9t imMVKTALJEQ0hw5f+Mtlhsy6DltYj/wjo0W1KyI+iKjt4Akm8z5Uql4GhlQkUYUe zY/KHKfaz0AKvkD+b9TqHOf6ljtnwlxNf8PRHfIXcFQTtAyIuudSyscp8LEbUFZP p0lA7tFMg53KkT52XF8YAZDNFDrT9YXTFyWfwstvOqXqKQqFVHoQNVvH9hnu97Gg 8JD+GMOfq8S7TnvqoVkOWA88PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFs3UxHd QYevc7X+Lj8DVkvBbWH7MB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwF1QYtBuVHVTn5IluvFaXfIkIVI9TuCuj1KSQPmbR0iuP+mVafyDOfsaFjvH ErBIUP4S350DsNxOqjtc3ezZsZ4vuhbCyNVdGLnJVAjETiVXk8gGAtFcmuaT9p4i Ks7sy5AuFnEHVb23yRZF3FJ08sq+ldqtwaGy2czLsDMAIQ54xgPJeEsjLppECIE8 BXMAjShQqRvB4UDeRr7utyazpyxQrh/Bc2sI0NzwQmuDDvfBlVbn+KpdynWeZ83e kvtMo9FtugMDPb0pv7xkdqVmZ4q3GbndM4YZ/M+W7OJ5WFGZEW+77Zu81pqZTI2N MRm5ZID/3leC1EsGQol05h6vYg== -----END CERTIFICATE-----Generated at Sun Oct 11 13:42:50 2026 by rpki-client