$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: SqX9s3MYWdP9MSyt4n0YDr9o8JRzqcZBwi5g0Ked9hY= Subject key identifier: 47:D6:D1:D9:3F:2D:7A:B8:FA:98:EE:BA:F0:95:E4:88:96:EA:60:5E Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 0294 Signing time: Thu 22 Oct 2026 22:38:40 +0000 Manifest this update: Thu 22 Oct 2026 22:38:39 +0000 Manifest next update: Thu 29 Oct 2026 22:38:39 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: nynoqG7dNg55ZvqnaMbev04V0baMTwte+Eh3KWUwiMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Oct 22 22:38:39 2026 GMT Not After : Oct 29 22:38:39 2026 GMT Subject: CN=6ada906f-b431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:e5:b3:25:a9:23:78:c0:dd:40:5c:d8:5c: 15:18:4b:74:62:72:cb:c6:25:35:93:42:db:7a:05: bb:79:0e:79:66:e3:01:cb:69:d7:9a:73:35:73:ef: ea:6d:7f:6d:7b:55:8b:d5:bf:b1:59:72:b8:f1:21: 79:e3:29:9e:0a:af:c7:4e:82:e2:95:5b:e6:b7:2c: a6:51:30:53:cd:57:68:56:1b:a6:0c:37:f6:29:c2: 2f:55:9f:95:73:20:b6:d9:9f:d5:70:ba:b0:4e:12: 80:7f:4c:11:0d:b5:cb:97:b3:32:bb:00:c6:51:b1: 7e:11:1b:d5:e6:cf:6c:1e:1e:de:6d:a5:6e:6b:70: c4:b1:51:fd:88:47:48:81:b1:72:e1:e8:a3:86:6f: 15:09:89:42:2c:33:25:db:0b:93:51:8e:07:50:f8: 18:85:81:c0:f6:69:67:67:8c:55:5d:79:d0:40:2f: 3d:db:a7:41:5e:c1:cf:ad:4b:7d:ea:52:3a:a6:bb: 5a:be:ac:bf:ea:56:db:eb:28:cb:59:6d:0f:98:f6: db:d8:87:b3:90:7c:54:98:a6:91:6b:cb:96:dc:35: ef:f1:a3:0f:54:e3:2e:a5:c9:78:32:85:88:9f:58: 2d:83:dc:c0:cd:f0:c1:15:0f:fa:e8:c0:a5:17:d8: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D6:D1:D9:3F:2D:7A:B8:FA:98:EE:BA:F0:95:E4:88:96:EA:60:5E X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f8:bb:7a:fb:ab:8c:37:45:d8:3d:d5:1a:d9:49:3b:33:a6: 3b:e9:1f:cf:0d:0d:6d:10:ac:89:ac:0f:00:ec:44:cc:e7:e2: b4:9d:5c:a7:0a:cc:81:1f:19:de:9b:0a:e2:d7:dc:ef:bf:26: 0e:f4:77:8d:b6:78:f4:83:7e:df:70:6c:74:83:a9:dd:f8:69: ab:6b:2d:66:d9:65:70:57:fc:8b:e8:35:06:29:0e:d1:f8:f8: 7a:21:1d:79:b8:b3:cd:ab:95:d5:67:93:62:d9:fb:7f:de:d1: bd:53:49:b4:34:63:2a:b4:a1:95:87:8e:71:80:a4:7e:22:cf: 28:85:0a:03:1e:7e:76:00:bd:29:ae:fe:6f:ac:3b:6e:e6:65: 89:8d:1e:a5:f5:83:be:49:81:51:69:97:53:ad:d4:ee:ab:fb: 5f:57:34:28:d6:bf:c2:a2:18:fb:39:e9:da:f1:45:4c:da:8e: 52:dc:50:1c:af:00:de:d0:46:80:fc:d8:85:39:1f:48:76:4f: 87:f9:ba:a8:28:fb:a5:91:1b:c1:40:80:52:ef:12:9a:8d:f4: be:17:86:0b:d6:77:7a:3c:39:04:a8:95:40:aa:82:3c:da:b4: d5:34:5f:d6:ff:a8:04:6b:4e:ec:01:ac:5a:b2:99:cc:06:35: 1d:67:1c:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjYxMDIyMjIzODM5WhcNMjYxMDI5MjIzODM5WjAYMRYwFAYD VQQDEw02YWRhOTA2Zi1iNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iHlsyWpI3jA3UBc2FwVGEt0YnLLxiU1k0LbegW7eQ55ZuMBy2nXmnM1c+/q bX9te1WL1b+xWXK48SF54ymeCq/HToLilVvmtyymUTBTzVdoVhumDDf2KcIvVZ+V cyC22Z/VcLqwThKAf0wRDbXLl7MyuwDGUbF+ERvV5s9sHh7ebaVua3DEsVH9iEdI gbFy4eijhm8VCYlCLDMl2wuTUY4HUPgYhYHA9mlnZ4xVXXnQQC8926dBXsHPrUt9 6lI6prtavqy/6lbb6yjLWW0PmPbb2IezkHxUmKaRa8uW3DXv8aMPVOMupcl4MoWI n1gtg9zAzfDBFQ/66MClF9i8uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfW0dk/ LXq4+pjuuvCV5IiW6mBeMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAevi7evurjDdF2D3VGtlJOzOmO+kfzw0NbRCsiawPAOxEzOfitJ1cpwrMgR8Z 3psK4tfc778mDvR3jbZ49IN+33BsdIOp3fhpq2stZtllcFf8i+g1BikO0fj4eiEd ebizzauV1WeTYtn7f97RvVNJtDRjKrShlYeOcYCkfiLPKIUKAx5+dgC9Ka7+b6w7 buZliY0epfWDvkmBUWmXU63U7qv7X1c0KNa/wqIY+znp2vFFTNqOUtxQHK8A3tBG gPzYhTkfSHZPh/m6qCj7pZEbwUCAUu8Smo30vheGC9Z3ejw5BKiVQKqCPNq01TRf 1v+oBGtO7AGsWrKZzAY1HWcc/A== -----END CERTIFICATE-----Generated at Sat Oct 24 15:46:58 2026 by rpki-client