$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: 6ycFuv3+W0uF63HtQQcLU1skRePmcHPBDaigUKllg0g= Subject key identifier: 94:57:85:97:DA:C0:92:39:F1:37:85:4D:FC:F5:82:BE:AB:C7:7B:A7 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 0134 Signing time: Sat 03 Oct 2026 06:18:12 +0000 Manifest this update: Sat 03 Oct 2026 06:18:11 +0000 Manifest next update: Sat 10 Oct 2026 06:18:11 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 0iFx0zmg3eT4/wB5jo3z78Dwq7uQ8HwLJiMBaOD+Xgw=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Oct 3 06:18:11 2026 GMT Not After : Oct 10 06:18:11 2026 GMT Subject: CN=6ac09e24-7051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:aa:0e:81:9b:12:c5:9f:6e:79:3b:c8:e1: 79:04:97:ee:e1:ad:26:3c:ee:00:78:6f:52:73:ac: 0b:7b:2e:7b:80:e7:41:4c:5f:33:59:06:35:70:ec: 64:c3:6e:53:2b:71:8b:f8:5f:63:65:79:41:4d:9e: 1b:36:ba:8f:ae:9d:d1:af:4f:a2:4c:d5:b9:ec:a1: 0f:43:f1:27:3f:a1:aa:ad:54:bc:ec:81:26:29:5f: 92:a5:77:dd:42:3d:9e:d2:ac:b6:b5:e6:02:76:27: 28:f1:5c:cb:cc:3b:3c:14:03:8c:5c:95:5e:ca:99: 1f:55:81:95:e2:36:ac:e4:83:8d:fc:f6:15:3e:d8: 76:73:5f:15:d2:0b:1c:95:84:91:42:71:07:a1:05: 8f:53:0b:e4:8e:f0:1a:aa:8a:b8:1f:c6:bc:57:b4: 06:3c:d9:ad:df:ae:0e:25:fd:33:9f:c7:17:b2:b1: 7e:da:e5:57:ea:68:90:79:0c:02:71:0f:67:5f:9d: 31:eb:30:d6:24:85:49:e8:d4:04:47:bf:e5:65:29: f7:07:00:83:97:63:3e:01:7c:04:0d:89:df:d5:fa: 47:e5:40:ee:2e:8e:99:8f:3a:5b:e6:59:c6:15:10: a6:93:0c:a8:a1:55:c9:83:f7:42:ab:eb:2d:02:56: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:85:97:DA:C0:92:39:F1:37:85:4D:FC:F5:82:BE:AB:C7:7B:A7 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:50:e2:4e:04:cc:90:91:7a:b1:b3:83:d7:92:7f:cd:82:89: 11:64:6b:31:ce:bf:b3:47:a5:c1:7e:e5:8e:b3:0c:a9:94:6c: a2:36:7b:17:51:fc:da:1c:94:88:03:15:4f:fa:6e:38:15:10: 3b:7f:59:b3:6a:d2:4d:49:b1:eb:0f:74:6f:b9:65:c9:9b:67: 95:b6:75:d5:7f:71:64:2d:87:fd:25:c4:fd:7e:ff:d7:92:09: 3c:09:1b:b4:5d:c6:d9:0e:f9:be:ab:e1:79:07:e4:c0:c7:18: 96:94:4c:23:4f:4c:b6:ce:2e:77:59:c2:8d:5f:50:2b:61:b9: 9a:05:84:38:fa:ad:5c:d9:30:30:9d:fe:49:1b:f8:4a:4b:a5: 87:c7:aa:dc:50:e0:27:db:c2:a6:4d:83:ef:ba:81:99:88:c1: 40:f1:56:41:2e:ca:41:14:ec:fb:0c:aa:36:41:e0:18:da:35: c7:a8:99:58:41:9f:48:12:3a:18:a9:76:02:15:25:73:01:79: 7f:8b:89:40:4a:88:35:fa:72:3d:65:e1:5f:91:aa:db:8b:15: c3:2e:fd:c0:27:0c:73:1e:ff:08:2a:62:aa:87:7f:f3:06:c6: fb:2d:9f:83:a4:ff:2e:81:d3:47:75:da:e1:25:4c:3a:64:63: ea:6d:2b:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI3NTkxMTAvBgNVBAUTKEZCNEI2ODNGQkE0REI2QUMxQTVBQzUwODgwN0ZDN0VB NDk2QzVFQzUwHhcNMjYxMDAzMDYxODExWhcNMjYxMDEwMDYxODExWjAYMRYwFAYD VQQDEw02YWMwOWUyNC03MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzuqDoGbEsWfbnk7yOF5BJfu4a0mPO4AeG9Sc6wLey57gOdBTF8zWQY1cOxk w25TK3GL+F9jZXlBTZ4bNrqPrp3Rr0+iTNW57KEPQ/EnP6GqrVS87IEmKV+SpXfd Qj2e0qy2teYCdico8VzLzDs8FAOMXJVeypkfVYGV4jas5ION/PYVPth2c18V0gsc lYSRQnEHoQWPUwvkjvAaqoq4H8a8V7QGPNmt364OJf0zn8cXsrF+2uVX6miQeQwC cQ9nX50x6zDWJIVJ6NQER7/lZSn3BwCDl2M+AXwEDYnf1fpH5UDuLo6Zjzpb5lnG FRCmkwyooVXJg/dCq+stAlZgtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRXhZfa wJI58TeFTfz1gr6rx3unMB8GA1UdIwQYMBaAFPtLaD+6TbasGlrFCIB/x+pJbF7F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qjc1OS82OUMzQkVFNkVC NjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRxd2FXc1VJZ0hfSDZrbHNY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qjc1OS82OUMzQkVFNkVCNjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRx d2FXc1VJZ0hfSDZrbHNYc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALFDiTgTMkJF6sbOD15J/zYKJEWRrMc6/s0elwX7ljrMMqZRsojZ7F1H82hyU iAMVT/puOBUQO39Zs2rSTUmx6w90b7llyZtnlbZ11X9xZC2H/SXE/X7/15IJPAkb tF3G2Q75vqvheQfkwMcYlpRMI09Mts4ud1nCjV9QK2G5mgWEOPqtXNkwMJ3+SRv4 Skulh8eq3FDgJ9vCpk2D77qBmYjBQPFWQS7KQRTs+wyqNkHgGNo1x6iZWEGfSBI6 GKl2AhUlcwF5f4uJQEqINfpyPWXhX5Gq24sVwy79wCcMcx7/CCpiqod/8wbG+y2f g6T/LoHTR3Xa4SVMOmRj6m0reA== -----END CERTIFICATE-----Generated at Sun Oct 4 11:43:58 2026 by rpki-client