$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json) Hash identifier: nK7rvrD1JDr9etQmAq9axiyLeAgByhLpM/8DKlXilA0= Subject key identifier: 4E:81:B0:DA:F2:B4:54:A6:DC:99:DA:47:8A:BD:00:4A:A5:AE:D0:12 Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft Manifest number: D3 Signing time: Mon 05 Oct 2026 07:04:41 +0000 Manifest this update: Mon 05 Oct 2026 07:04:40 +0000 Manifest next update: Mon 12 Oct 2026 07:04:40 +0000 Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: Wb/pXcp8qr6wXGNfsPYBvHHwfZY7h6wqScFpD2gSzMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Validity Not Before: Oct 5 07:04:40 2026 GMT Not After : Oct 12 07:04:40 2026 GMT Subject: CN=6ac34c09-9750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:ad:63:3b:38:97:bc:f5:24:ff:f2:08:b4: b0:86:30:52:a5:e8:f7:be:c1:6d:b7:aa:97:4d:51: ba:58:74:bd:eb:4f:df:ea:3a:11:9e:9d:cb:1a:ab: b8:fb:52:9a:c6:b4:0e:ce:64:03:59:77:a9:72:c7: 2a:da:68:5e:80:4a:d1:77:34:f5:91:92:51:bc:56: 96:ee:ac:99:92:70:ce:0d:bc:03:d5:4c:c0:0e:c6: 34:da:a9:81:2d:9c:f8:33:25:82:89:7f:fd:dc:8b: d5:47:49:01:79:97:71:a1:d8:bc:f3:22:f5:96:b5: 92:a4:b4:8e:7f:2a:18:3a:57:43:4d:bb:7a:9c:b6: 44:58:98:20:60:ab:5c:bf:e5:a9:5f:9c:e3:1c:3d: 49:16:e2:16:e6:87:2b:85:df:a6:d0:01:99:47:21: 3a:a5:7b:70:fd:49:80:b2:39:19:d4:75:bf:9b:05: 75:15:07:7b:fd:7a:15:66:70:50:14:c9:de:c0:91: 55:65:b8:20:8c:e3:7a:13:7c:2e:08:a1:f9:80:5c: 30:9c:08:a5:66:33:35:b1:38:83:1e:8f:ec:78:fe: ac:2b:10:82:23:47:f1:21:63:28:6a:8a:12:56:e7: a6:f9:a1:d4:97:96:f2:c3:91:f2:6e:8b:ed:5a:a2: dc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:B0:DA:F2:B4:54:A6:DC:99:DA:47:8A:BD:00:4A:A5:AE:D0:12 X509v3 Authority Key Identifier: keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f4:50:83:b3:aa:f0:7b:e7:a4:d1:62:3a:b8:96:58:30:84: 08:d9:78:ae:4e:02:dc:a5:1a:53:1d:d3:c8:ad:bf:9e:8c:33: 4f:7b:dd:b8:eb:db:12:3a:8a:7d:36:3a:7c:9c:27:2e:0f:72: 4e:4e:9a:ff:bc:f3:68:64:9f:bb:7f:cf:64:18:9a:ac:59:17: c8:cf:d2:2e:a7:2e:ff:30:3e:dd:d0:10:25:a5:ac:ac:55:60: ab:16:d1:5b:1c:17:a1:d0:19:8b:dd:ac:5d:cb:74:89:e3:c1: af:6d:15:39:ff:62:cd:b4:08:65:98:b2:9e:b8:54:87:05:cc: c5:e2:92:76:6b:b5:3c:0c:e4:7c:ea:49:4c:22:e8:76:08:6a: ca:87:da:aa:12:16:3d:72:b9:07:08:4b:6e:16:05:c3:d4:38: 80:f0:e9:d4:50:b0:13:02:66:26:c7:e1:68:db:0e:51:76:19: 30:1f:e2:f4:70:fa:35:6c:98:11:1f:ff:9c:23:a1:b2:5d:e4: a4:72:3b:2f:b4:ad:67:11:d6:0d:bc:1d:3b:bf:e2:68:02:47: c6:ba:b8:5c:0e:a1:ce:2d:eb:a5:d5:19:d8:62:c4:27:e6:aa: dd:91:5c:f9:c4:54:db:6a:af:bc:3c:74:1d:6b:26:79:75:2f: 70:48:8a:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCN0ExMTAvBgNVBAUTKDQ4ODcwN0UzNzYzMTRBREQ1NDVDQzY2MEFERUNFMjI5 ODY0QzEzRTAwHhcNMjYxMDA1MDcwNDQwWhcNMjYxMDEyMDcwNDQwWjAYMRYwFAYD VQQDEw02YWMzNGMwOS05NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxL6tYzs4l7z1JP/yCLSwhjBSpej3vsFtt6qXTVG6WHS960/f6joRnp3LGqu4 +1KaxrQOzmQDWXepcscq2mhegErRdzT1kZJRvFaW7qyZknDODbwD1UzADsY02qmB LZz4MyWCiX/93IvVR0kBeZdxodi88yL1lrWSpLSOfyoYOldDTbt6nLZEWJggYKtc v+WpX5zjHD1JFuIW5ocrhd+m0AGZRyE6pXtw/UmAsjkZ1HW/mwV1FQd7/XoVZnBQ FMnewJFVZbggjON6E3wuCKH5gFwwnAilZjM1sTiDHo/seP6sKxCCI0fxIWMoaooS Vuem+aHUl5byw5HybovtWqLcBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6BsNry tFSm3JnaR4q9AEqlrtASMB8GA1UdIwQYMBaAFEiHB+N2MUrdVFzGYK3s4imGTBPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I3QS9DOThENTVGQTdE QkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9TSWNINDNZeFN0MVVYTVpncmV6aUtZWk1F LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NJY0g0M1l4U3QxVVhNWmdyZXppS1laTUUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0I3QS9DOThENTVGQTdEQkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9TSWNINDNZeFN0 MVVYTVpncmV6aUtZWk1FLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGPRQg7Oq8HvnpNFiOriWWDCECNl4rk4C3KUaUx3TyK2/nowzT3vduOvbEjqK fTY6fJwnLg9yTk6a/7zzaGSfu3/PZBiarFkXyM/SLqcu/zA+3dAQJaWsrFVgqxbR WxwXodAZi92sXct0iePBr20VOf9izbQIZZiynrhUhwXMxeKSdmu1PAzkfOpJTCLo dghqyofaqhIWPXK5BwhLbhYFw9Q4gPDp1FCwEwJmJsfhaNsOUXYZMB/i9HD6NWyY ER//nCOhsl3kpHI7L7StZxHWDbwdO7/iaAJHxrq4XA6hzi3rpdUZ2GLEJ+aq3ZFc +cRU22qvvDx0HWsmeXUvcEiK5g== -----END CERTIFICATE-----Generated at Mon Oct 5 10:44:07 2026 by rpki-client