$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.mft File: aC3NvPW7hkTB-15n4_S8o0WzsPQ.mft (raw, json) Hash identifier: Ndml7l4sJORXeBNBqu8c1Zvw2dvXqRplrnMWlfaK6ZA= Subject key identifier: 73:B5:5F:2B:81:54:FD:A1:C3:F3:79:81:91:CD:6F:25:00:CB:F1:3B Authority key identifier: 68:2D:CD:BC:F5:BB:86:44:C1:FB:5E:67:E3:F4:BC:A3:45:B3:B0:F4 Certificate issuer: /CN=A9192DB4/serialNumber=682DCDBCF5BB8644C1FB5E67E3F4BCA345B3B0F4 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aC3NvPW7hkTB-15n4_S8o0WzsPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.mft Manifest number: 12 Signing time: Sat 17 Oct 2026 09:54:35 +0000 Manifest this update: Sat 17 Oct 2026 09:54:35 +0000 Manifest next update: Sat 24 Oct 2026 09:54:35 +0000 Files and hashes: 1: aC3NvPW7hkTB-15n4_S8o0WzsPQ.crl (hash: wbEfl83gOsQinklZvkyh/toUo9lxyJuW5zoEHIIgzs4=) 2: 2DC99380C58211F1BAD397785D11F970.roa (hash: 2/foxtcEKA4yJHioeZ2mg/7XILvHj26AvHttGK/h28M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.crl rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aC3NvPW7hkTB-15n4_S8o0WzsPQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192DB4, serialNumber=682DCDBCF5BB8644C1FB5E67E3F4BCA345B3B0F4 Validity Not Before: Oct 17 09:54:35 2026 GMT Not After : Oct 24 09:54:35 2026 GMT Subject: CN=6ad345db-8ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:b8:58:ba:da:3b:08:39:e8:31:21:34:17: 67:61:42:00:ea:8d:02:93:b1:41:53:24:27:ff:b6: f7:90:97:fc:96:fb:20:73:7e:5d:58:40:bf:1c:d2: 9b:ed:92:61:14:dd:eb:68:d8:dc:65:43:fa:52:25: 04:d3:c7:10:ab:b9:ca:d5:8e:df:48:36:af:d3:0c: 3f:61:79:ee:78:4d:a0:2f:a5:30:0f:16:19:70:62: fd:6d:9e:37:7b:4a:a7:ad:f1:f7:7f:44:d4:b5:87: 0f:fb:56:47:74:02:86:b6:bb:29:d9:68:68:29:9d: b8:f8:4a:f2:91:07:41:f6:a7:7b:d6:fa:26:e6:32: 4e:61:87:af:ce:11:bf:3a:bf:e8:03:49:43:8d:c1: 7b:7b:0e:39:9e:28:20:ef:76:dc:b5:56:1d:5d:55: 12:f0:73:f2:85:36:20:70:21:1f:08:db:8f:fd:df: a6:91:f9:b4:c7:a6:04:b8:15:60:0c:cb:56:2e:0a: 50:9b:a4:a4:89:eb:d0:f7:fd:f8:52:3a:56:99:68: 86:8f:50:2d:ad:53:d1:39:e5:2a:fe:38:b3:05:f8: 31:05:ee:c6:8c:b6:6f:f5:2d:7d:a7:7f:c9:e5:c5: 54:ff:ad:f6:73:03:6a:0c:e0:01:0b:df:6b:35:5c: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B5:5F:2B:81:54:FD:A1:C3:F3:79:81:91:CD:6F:25:00:CB:F1:3B X509v3 Authority Key Identifier: keyid:68:2D:CD:BC:F5:BB:86:44:C1:FB:5E:67:E3:F4:BC:A3:45:B3:B0:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aC3NvPW7hkTB-15n4_S8o0WzsPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:dc:a6:38:69:af:d0:49:f4:eb:8e:d9:9b:35:6f:41:b2: 94:da:9d:2c:4e:3e:56:60:58:c9:31:32:98:cc:86:ec:df:90: 01:bc:b5:20:7e:e5:46:3a:28:cc:0f:a5:2b:67:64:5a:77:54: 76:50:a6:bb:70:10:d3:5c:19:be:36:4e:07:6a:ad:42:f9:7b: fc:fd:c1:ad:10:82:e2:52:60:f3:50:3f:ae:75:5c:5d:aa:de: 67:fd:f2:68:3f:92:a1:eb:70:ad:98:1b:7a:51:da:d0:85:a0: a2:f5:a6:ad:90:70:dd:9d:1b:1a:3d:b1:d8:58:37:ea:80:c3: 73:ce:95:9f:24:8e:14:f2:d5:0f:a0:48:f2:7d:f6:c0:1c:37: 5c:75:a3:61:82:07:00:23:e6:56:96:cd:29:46:3f:fc:11:95: 44:d9:53:55:f2:6e:33:f9:a4:a7:0f:9a:f4:59:f7:47:2b:2a: f4:fc:60:bd:23:5e:1a:d9:a5:aa:e0:cf:28:be:77:82:a4:e1: 6e:cb:89:ca:a2:ea:96:37:85:05:8d:4b:6b:6d:f7:b1:16:90: d0:6c:8e:ee:ba:7b:ef:ef:0e:61:16:44:17:f9:b7:30:30:21: 31:9e:f6:b6:4b:1f:a2:ca:40:d6:47:d7:3a:b9:f7:af:21:3b: 2e:c8:10:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkRCNDExMC8GA1UEBRMoNjgyRENEQkNGNUJCODY0NEMxRkI1RTY3RTNGNEJDQTM0 NUIzQjBGNDAeFw0yNjEwMTcwOTU0MzVaFw0yNjEwMjQwOTU0MzVaMBgxFjAUBgNV BAMTDTZhZDM0NWRiLThlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAtrhYuto7CDnoMSE0F2dhQgDqjQKTsUFTJCf/tveQl/yW+yBzfl1YQL8c0pvt kmEU3eto2NxlQ/pSJQTTxxCrucrVjt9INq/TDD9hee54TaAvpTAPFhlwYv1tnjd7 Sqet8fd/RNS1hw/7Vkd0Aoa2uynZaGgpnbj4SvKRB0H2p3vW+ibmMk5hh6/OEb86 v+gDSUONwXt7DjmeKCDvdty1Vh1dVRLwc/KFNiBwIR8I24/936aR+bTHpgS4FWAM y1YuClCbpKSJ69D3/fhSOlaZaIaPUC2tU9E55Sr+OLMF+DEF7saMtm/1LX2nf8nl xVT/rfZzA2oM4AEL32s1XNnxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc7VfK4FU /aHD83mBkc1vJQDL8TswHwYDVR0jBBgwFoAUaC3NvPW7hkTB+15n4/S8o0WzsPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyREI0Lzg1NzZBOTA2Qjcy NzExRjE4QjMwM0NBNDcwMTFGOTcwL2FDM052UFc3aGtUQi0xNW40X1M4bzBXenNQ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUMzTnZQVzdoa1RCLTE1bjRfUzhvMFd6c1BRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky REI0Lzg1NzZBOTA2QjcyNzExRjE4QjMwM0NBNDcwMTFGOTcwL2FDM052UFc3aGtU Qi0xNW40X1M4bzBXenNQUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmeNymOGmv0En0647ZmzVvQbKU2p0sTj5WYFjJMTKYzIbs35ABvLUgfuVGOijM D6UrZ2Rad1R2UKa7cBDTXBm+Nk4Haq1C+Xv8/cGtEILiUmDzUD+udVxdqt5n/fJo P5Kh63CtmBt6UdrQhaCi9aatkHDdnRsaPbHYWDfqgMNzzpWfJI4U8tUPoEjyffbA HDdcdaNhggcAI+ZWls0pRj/8EZVE2VNV8m4z+aSnD5r0WfdHKyr0/GC9I14a2aWq 4M8ovneCpOFuy4nKouqWN4UFjUtrbfexFpDQbI7uunvv7w5hFkQX+bcwMCExnva2 Sx+iykDWR9c6ufevITsuyBAy -----END CERTIFICATE-----Generated at Sun Oct 18 07:29:36 2026 by rpki-client