$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json) Hash identifier: sXAoSShkJ/vZUxsh5tEFBMhIF9aKVkz/a895TZRY1FU= Subject key identifier: CC:A2:F1:B5:71:DA:1F:00:B7:2A:A6:20:9A:39:B0:AB:4D:46:5F:5D Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft Manifest number: 05D1 Signing time: Fri 09 Oct 2026 00:00:02 +0000 Manifest this update: Fri 09 Oct 2026 00:00:02 +0000 Manifest next update: Fri 16 Oct 2026 00:00:02 +0000 Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: M7YI30eD1RBQwTDMvEEj0MpZRB01CD8EFZ8j602b9VQ=) 2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: gqAeGfAkf2SGnQQT/ywRAWWQeut8pK7ZNuz86Otabts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Validity Not Before: Oct 9 00:00:02 2026 GMT Not After : Oct 16 00:00:02 2026 GMT Subject: CN=6ac82e82-7902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:1c:50:d9:0b:0e:fe:29:fd:88:be:19:89: 4f:f8:2f:7b:c1:79:3b:ef:6d:e3:7d:6a:7f:a2:7a: e7:51:77:bb:2d:09:34:5a:f9:25:67:94:39:1a:2f: 73:bc:24:43:e4:b5:97:9f:23:35:cb:cf:4e:c6:64: 4d:42:bf:76:b3:58:97:37:4a:7b:4c:1e:0e:6a:01: 4c:de:39:75:31:0c:c8:c4:d5:15:c0:23:7c:33:98: 30:cc:77:6b:57:d7:5a:18:12:df:95:cb:39:80:c3: 1e:8b:d1:42:09:da:26:25:8f:cb:5c:99:24:bc:fe: e4:0d:e2:ca:20:67:8a:26:60:3f:e8:49:e1:87:f4: f8:19:4b:d8:6e:fa:d4:97:cf:d7:ab:fd:65:b1:ad: 7b:8e:91:f2:7f:a5:96:d8:24:6c:f5:15:c0:0e:0e: 1c:cd:fa:f6:9d:98:d7:5f:7d:56:6a:6f:f1:bd:51: db:6b:10:7d:0e:e2:42:3d:9f:aa:0c:93:38:df:46: 50:20:48:78:d2:3f:cb:05:8d:75:4a:9e:83:dd:8a: 0b:6f:cb:29:5e:d3:d8:55:4a:6a:77:53:f0:1a:c4: 23:9d:d2:ef:f5:b5:06:83:83:2f:ab:b5:3d:24:c8: 95:8d:c6:80:88:6d:38:d5:88:f5:67:7a:70:76:94: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A2:F1:B5:71:DA:1F:00:B7:2A:A6:20:9A:39:B0:AB:4D:46:5F:5D X509v3 Authority Key Identifier: keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:da:6a:7a:1e:8b:b5:33:44:21:34:10:03:51:e8:e0:39:6f: c8:b2:b8:43:91:9e:f7:43:ed:04:a6:bb:17:c2:67:15:95:9c: 6a:1c:79:2e:b6:8f:2d:09:ea:cd:f7:19:4d:a2:50:96:7d:89: 86:db:e1:98:1e:59:04:2b:9a:a2:22:12:f0:cb:1b:40:2b:3a: 5a:71:24:a9:6d:48:52:50:44:34:82:12:2a:c0:48:6e:20:69: ac:b4:ea:38:f9:d3:f0:9a:92:17:eb:fa:55:e1:38:17:4f:be: 68:ca:df:b3:eb:44:3e:65:c7:44:31:84:2d:96:6b:d5:d6:f5: c6:c1:37:79:0c:18:92:22:f4:ba:00:06:20:7f:b6:72:7f:74: d8:14:ae:5d:40:2f:73:f5:73:fb:c2:3e:e7:56:92:5c:9c:42: e2:cf:f2:12:5c:4c:e5:84:58:1a:8c:46:de:fd:39:98:ba:28: 7d:c1:92:15:71:35:39:69:5d:f4:ca:62:af:82:c0:87:64:4a: 84:f5:3d:f0:ba:67:73:c2:b8:a7:34:02:03:00:1a:8f:7a:6e: ce:1b:4e:a8:0b:9e:c1:63:5b:50:99:38:d9:11:17:71:13:52: 0f:cc:a8:31:59:73:06:ba:86:f3:3e:e5:eb:a6:13:2c:8f:8f: 02:87:a7:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlBOUYxMTAvBgNVBAUTKENGQjA3QUU1REQwMEE5MjcxNERCMzVBNzIxMDQ1RDlE MkVCOEUzMTcwHhcNMjYxMDA5MDAwMDAyWhcNMjYxMDE2MDAwMDAyWjAYMRYwFAYD VQQDEw02YWM4MmU4Mi03OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLQcUNkLDv4p/Yi+GYlP+C97wXk7723jfWp/onrnUXe7LQk0WvklZ5Q5Gi9z vCRD5LWXnyM1y89OxmRNQr92s1iXN0p7TB4OagFM3jl1MQzIxNUVwCN8M5gwzHdr V9daGBLflcs5gMMei9FCCdomJY/LXJkkvP7kDeLKIGeKJmA/6Enhh/T4GUvYbvrU l8/Xq/1lsa17jpHyf6WW2CRs9RXADg4czfr2nZjXX31Wam/xvVHbaxB9DuJCPZ+q DJM430ZQIEh40j/LBY11Sp6D3YoLb8spXtPYVUpqd1PwGsQjndLv9bUGg4Mvq7U9 JMiVjcaAiG041Yj1Z3pwdpQ9OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyi8bVx 2h8AtyqmIJo5sKtNRl9dMB8GA1UdIwQYMBaAFM+weuXdAKknFNs1pyEEXZ0uuOMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi96N0I2NWQwQXFTY1UyelduSVFSZG5TNjQ0 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUE5Ri84MDU2QkE1NjhBOTAxMUVDOEMxQjBEMjJDNEY5QUUwMi96N0I2NWQwQXFT Y1UyelduSVFSZG5TNjQ0eGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhtpqeh6LtTNEITQQA1Ho4DlvyLK4Q5Ge90PtBKa7F8JnFZWcahx5LraPLQnq zfcZTaJQln2JhtvhmB5ZBCuaoiIS8MsbQCs6WnEkqW1IUlBENIISKsBIbiBprLTq OPnT8JqSF+v6VeE4F0++aMrfs+tEPmXHRDGELZZr1db1xsE3eQwYkiL0ugAGIH+2 cn902BSuXUAvc/Vz+8I+51aSXJxC4s/yElxM5YRYGoxG3v05mLoofcGSFXE1OWld 9Mpir4LAh2RKhPU98Lpnc8K4pzQCAwAaj3puzhtOqAuewWNbUJk42REXcRNSD8yo MVlzBrqG8z7l66YTLI+PAoenQw== -----END CERTIFICATE-----Generated at Fri Oct 9 17:43:10 2026 by rpki-client