$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json) Hash identifier: 9WHE7MawicovB33VMUtUfwS6Ihsv8V8CgrfsW85pHHE= Subject key identifier: 67:15:3B:59:44:58:99:08:09:FF:74:37:95:88:9F:FB:8C:DA:4D:49 Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft Manifest number: 0195 Signing time: Mon 19 Oct 2026 04:59:22 +0000 Manifest this update: Mon 19 Oct 2026 04:59:21 +0000 Manifest next update: Mon 26 Oct 2026 04:59:21 +0000 Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: jNJSVLKQv8vvhINMLTOzjgyvr7reWgFSRkdBjo4vHv4=) 2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: 8DprNqSctLRq9Um1DBwsXYIm/hC+xtUbZc0GLoio6ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 04:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Validity Not Before: Oct 19 04:59:21 2026 GMT Not After : Oct 26 04:59:21 2026 GMT Subject: CN=6ad5a3aa-1f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:13:97:07:ce:69:8e:99:98:e0:bf:df:3e: 30:4f:81:92:c2:05:2e:7f:43:74:be:85:e3:9e:01: 4b:0a:48:f3:bd:b9:ea:8c:cf:e5:91:b1:11:fd:f6: 10:51:9a:de:2b:9d:8f:bc:e3:3a:f9:82:c2:da:e8: 79:ed:55:e2:6c:9b:d4:66:e3:c5:79:b9:b9:da:a7: 18:c3:07:78:8e:54:a9:77:5f:cf:28:ad:04:29:30: 9c:8b:e6:86:a2:0e:04:55:2b:ba:0a:88:9f:29:58: 08:19:b2:cb:c1:10:d0:b6:19:d5:98:10:f0:0c:e6: 75:2b:75:2f:87:8a:33:6f:df:52:b5:51:07:5a:ba: ea:a5:c1:9d:47:80:6f:11:e8:a3:aa:11:d2:e6:6d: 89:c3:aa:07:17:89:b2:da:92:8e:ee:f4:c5:bf:d9: 74:e0:52:e9:f5:51:18:fe:3e:a0:72:a0:64:38:52: ca:ae:49:3b:b8:69:a7:da:6e:d5:82:ce:ba:03:c1: 3f:58:9e:05:dd:6b:3f:e7:31:45:8a:67:c1:df:53: 15:15:e2:e4:59:72:51:25:a6:4d:0c:e3:fc:2e:41: d9:12:cf:43:f5:52:74:e2:e8:28:e6:a1:be:2a:ac: 9b:d4:11:6c:3a:a5:cb:3d:b0:f4:5b:c5:5f:65:56: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:15:3B:59:44:58:99:08:09:FF:74:37:95:88:9F:FB:8C:DA:4D:49 X509v3 Authority Key Identifier: keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ca:e2:f7:e0:77:dd:c5:a5:b3:42:9b:84:ad:35:05:55:1c: 97:b5:ec:4b:9d:39:04:ed:fd:09:82:75:10:9f:8b:27:6d:df: 67:0a:95:bd:e4:07:b4:d2:53:8e:06:da:3a:62:1e:13:f1:a2: 36:73:3a:17:0d:6e:56:c1:ca:48:c0:9a:45:87:b3:38:6b:66: 74:4d:68:aa:3d:da:1e:fc:ea:41:12:93:e2:50:97:5e:ac:13: 02:61:1a:96:46:12:27:d1:e0:65:e6:5d:92:e3:1d:9b:c1:1e: e4:56:00:f2:12:92:6b:a9:43:18:14:ec:a8:d4:b1:f6:d3:9e: 6f:b4:7e:d7:3a:d9:72:a2:e0:02:2f:b9:11:88:ea:7b:98:a2: d2:b9:da:b5:5f:78:21:b8:75:4c:3b:36:3b:b4:9a:fe:4a:52: ae:9c:6a:10:e2:c7:e5:72:47:0a:c1:26:47:f1:02:33:ee:1b: 68:d6:18:80:5e:2f:0e:69:92:60:92:36:1d:e7:11:a5:e7:a1: 3a:87:de:70:7b:17:77:8b:ac:2c:2b:b0:a3:e9:02:38:86:bf: 5b:cc:42:36:25:30:11:18:be:54:58:6a:c6:29:ad:95:cb:06: 40:c1:49:28:48:22:2c:b8:42:43:a0:45:01:c3:61:99:88:22: a1:b4:13:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKEE2RTlDQkE1MjlDMDVBOTYyNENBNjAzNTQ4QTNFMzE0 OTE3NThGMkIwHhcNMjYxMDE5MDQ1OTIxWhcNMjYxMDI2MDQ1OTIxWjAYMRYwFAYD VQQDEw02YWQ1YTNhYS0xZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cYTlwfOaY6ZmOC/3z4wT4GSwgUuf0N0voXjngFLCkjzvbnqjM/lkbER/fYQ UZreK52PvOM6+YLC2uh57VXibJvUZuPFebm52qcYwwd4jlSpd1/PKK0EKTCci+aG og4EVSu6CoifKVgIGbLLwRDQthnVmBDwDOZ1K3Uvh4ozb99StVEHWrrqpcGdR4Bv EeijqhHS5m2Jw6oHF4my2pKO7vTFv9l04FLp9VEY/j6gcqBkOFLKrkk7uGmn2m7V gs66A8E/WJ4F3Ws/5zFFimfB31MVFeLkWXJRJaZNDOP8LkHZEs9D9VJ04ugo5qG+ Kqyb1BFsOqXLPbD0W8VfZVZHiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcVO1lE WJkICf90N5WIn/uM2k1JMB8GA1UdIwQYMBaAFKbpy6UpwFqWJMpgNUij4xSRdY8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS82OUI3Njk4RTYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdwWWt5bUExU0tQakZKRjFq eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3B1bkxwU25BV3BZa3ltQTFTS1BqRkpGMWp5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS82OUI3Njk4RTYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdw WWt5bUExU0tQakZKRjFqeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcri9+B33cWls0KbhK01BVUcl7XsS505BO39CYJ1EJ+LJ23fZwqVveQHtNJT jgbaOmIeE/GiNnM6Fw1uVsHKSMCaRYezOGtmdE1oqj3aHvzqQRKT4lCXXqwTAmEa lkYSJ9HgZeZdkuMdm8Ee5FYA8hKSa6lDGBTsqNSx9tOeb7R+1zrZcqLgAi+5EYjq e5ii0rnatV94Ibh1TDs2O7Sa/kpSrpxqEOLH5XJHCsEmR/ECM+4baNYYgF4vDmmS YJI2HecRpeehOofecHsXd4usLCuwo+kCOIa/W8xCNiUwERi+VFhqximtlcsGQMFJ KEgiLLhCQ6BFAcNhmYgiobQTyg== -----END CERTIFICATE-----Generated at Mon Oct 19 20:10:18 2026 by rpki-client