$ rpki-client -vvvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: Sqbi3ZoEjW6OzMXMLIO9U8VhJmq5mDBj7qhITd8+DPg= Subject key identifier: 5C:72:BF:3E:C0:58:F4:1E:5A:A2:6C:8C:1E:F4:D8:A9:32:36:E0:40 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 03DA Signing time: Wed 07 Oct 2026 00:41:07 +0000 Manifest this update: Wed 07 Oct 2026 00:41:06 +0000 Manifest next update: Wed 14 Oct 2026 00:41:06 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: O/Mtx/oI39ALjnvKdc5eHjnG3dlYrOcoOoaoFaRtHNI=) 2: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: NsJNeFTUhmJMJKgEFryykVvl22QsFpHn8M9X6CVnN4A=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 7b6vVIdZ0iAg7cHVnmso62PIpM5bGjmmeaRAwNPxKXE=) 4: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: kkOIjg6qoxuJ/Gjbd4gRj2XMV0e9Ga/KOtQLAeVKLPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Oct 7 00:41:06 2026 GMT Not After : Oct 14 00:41:06 2026 GMT Subject: CN=6ac59522-e811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:34:0d:95:01:97:e4:76:04:0e:25:1d:52: 37:de:f8:d5:d6:7c:7c:bf:ab:ab:9d:c5:86:74:cc: 49:fa:08:83:df:8d:ae:42:7a:9a:93:44:53:52:bb: da:ad:de:66:0e:09:10:77:86:42:1f:8d:a5:ef:ca: 8b:09:3d:a5:b0:60:ef:2e:ca:1f:b0:55:54:a6:51: fb:d8:5b:e4:71:8c:67:53:14:25:44:5e:12:c0:a8: 11:8d:69:7d:51:9b:b0:ab:8d:4b:5c:fb:0b:ee:2d: 07:df:dd:f1:c7:b8:7e:62:74:73:8b:65:d3:b4:f6: 56:12:f2:5f:8b:df:58:e7:7d:f7:53:de:ff:eb:36: c1:9c:88:ea:20:95:d8:c6:d5:e8:10:68:a2:a8:9f: 9f:be:ae:5b:e9:01:35:0d:0f:8a:e5:ee:f6:53:10: 69:0e:31:0f:aa:a4:bd:ea:3a:87:bd:c9:63:b4:f3: e1:01:25:58:5c:1e:67:0f:41:80:77:3d:1b:9b:3b: 19:4e:61:dc:8d:d6:c6:d2:ae:c1:10:d9:ae:23:6b: 10:fb:3b:72:9f:b8:9e:47:02:60:a9:41:7d:06:44: 63:14:41:b0:6f:de:64:85:2f:f3:bd:01:26:bf:9c: 8e:8b:23:54:83:b8:ee:5b:8c:95:15:9c:a3:ce:ae: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:BF:3E:C0:58:F4:1E:5A:A2:6C:8C:1E:F4:D8:A9:32:36:E0:40 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:33:53:20:5b:3c:62:2a:18:6b:c2:f1:b5:cf:35:68:1a: 34:0c:c6:b5:00:44:e0:44:25:46:7f:c9:f5:6e:20:f5:a9:ba: 1b:1a:e6:fa:cb:f7:b4:44:40:d6:68:cd:1e:87:d1:0c:3b:36: 0a:45:87:f6:cb:e6:0e:42:3f:2f:0d:7e:6d:d5:e5:67:ed:84: f7:42:02:73:d0:52:f5:3c:4a:98:08:e2:ea:9e:90:52:44:bc: 07:2b:8f:ab:10:02:21:f3:0d:c0:41:82:4f:e5:5e:ff:cb:45: ab:62:7f:14:99:99:c8:39:a3:36:bc:9b:80:d3:96:af:6d:78: 90:33:fa:a7:67:fb:a6:94:0d:82:5d:d2:fc:2e:23:8d:03:f9: 96:f2:ba:31:31:1e:65:e3:80:b2:cd:09:f3:44:83:ff:e4:53: e2:05:82:24:f0:66:b4:18:a9:d8:0f:c8:17:14:99:12:91:06: 10:90:ac:7c:8d:ee:2a:d0:6a:85:a8:21:41:72:8f:7f:2b:47: 73:04:ab:3b:33:64:eb:5f:cc:32:00:0b:28:73:4f:c1:8a:a3: 7b:e9:c5:45:80:b9:7b:40:38:45:78:49:16:c4:b5:e4:05:8d: 61:77:fc:e8:a4:bb:1d:d2:8e:86:52:e5:43:5a:1d:59:a5:21: fb:dd:03:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjYxMDA3MDA0MTA2WhcNMjYxMDE0MDA0MTA2WjAYMRYwFAYD VQQDEw02YWM1OTUyMi1lODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dk0DZUBl+R2BA4lHVI33vjV1nx8v6urncWGdMxJ+giD342uQnqak0RTUrva rd5mDgkQd4ZCH42l78qLCT2lsGDvLsofsFVUplH72FvkcYxnUxQlRF4SwKgRjWl9 UZuwq41LXPsL7i0H393xx7h+YnRzi2XTtPZWEvJfi99Y5333U97/6zbBnIjqIJXY xtXoEGiiqJ+fvq5b6QE1DQ+K5e72UxBpDjEPqqS96jqHvcljtPPhASVYXB5nD0GA dz0bmzsZTmHcjdbG0q7BENmuI2sQ+ztyn7ieRwJgqUF9BkRjFEGwb95khS/zvQEm v5yOiyNUg7juW4yVFZyjzq6f8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxyvz7A WPQeWqJsjB702KkyNuBAMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMHYzUyBbPGIqGGvC8bXPNWgaNAzGtQBE4EQlRn/J9W4g9am6Gxrm+sv3tERA 1mjNHofRDDs2CkWH9svmDkI/Lw1+bdXlZ+2E90ICc9BS9TxKmAji6p6QUkS8ByuP qxACIfMNwEGCT+Ve/8tFq2J/FJmZyDmjNrybgNOWr214kDP6p2f7ppQNgl3S/C4j jQP5lvK6MTEeZeOAss0J80SD/+RT4gWCJPBmtBip2A/IFxSZEpEGEJCsfI3uKtBq haghQXKPfytHcwSrOzNk61/MMgALKHNPwYqje+nFRYC5e0A4RXhJFsS15AWNYXf8 6KS7HdKOhlLlQ1odWaUh+90D8Q== -----END CERTIFICATE-----Generated at Thu Oct 8 17:04:12 2026 by rpki-client