$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: 2Kmn6AWulqV0RfM7LIKdshC6M7R0grYxrXvWp5QA+ZQ= Subject key identifier: 62:07:0F:DF:1F:53:8C:75:1E:72:25:AA:0C:49:3B:D5:E5:E2:AA:97 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 028B Signing time: Mon 05 Oct 2026 02:07:02 +0000 Manifest this update: Mon 05 Oct 2026 02:07:02 +0000 Manifest next update: Mon 12 Oct 2026 02:07:02 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: td6kguUsqVUyJW4cB4bKClGVXyjR4WcpkDIGfqmdjFg=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: svMZS7DV5TwUD82GBLvLWWlNJprDspcc73VDjKYI3GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Oct 5 02:07:02 2026 GMT Not After : Oct 12 02:07:02 2026 GMT Subject: CN=6ac30646-6010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:91:b5:df:c5:de:f9:75:3a:a0:77:67:45: b2:0c:42:92:c8:10:b5:43:81:88:d5:9e:c6:79:29: 0a:9b:d7:02:f5:0b:d8:bd:36:4d:12:41:08:d3:eb: cc:71:68:64:2b:f7:9c:04:78:54:68:e3:64:8e:53: 96:a5:4f:2b:c4:93:42:f7:57:0e:9e:83:bf:04:22: 6c:59:dd:7f:38:45:bd:e5:73:eb:08:1d:84:4e:a5: 49:95:12:e1:f3:6d:b8:2e:8f:18:80:6a:b3:30:72: aa:d4:65:d3:76:22:50:79:20:6d:d0:7f:9f:61:b3: 29:33:6f:30:64:60:20:93:65:3b:98:75:d0:fd:7f: b9:28:8c:28:a1:a5:9e:9a:53:6f:aa:05:32:0d:05: 74:2e:98:67:25:41:23:42:2f:7a:d7:4b:09:3d:a0: cd:34:67:b0:d1:fd:cb:64:7c:d0:5e:4d:a8:46:7e: c9:c0:fe:5b:d7:f1:ac:74:c1:24:20:72:5a:d1:ea: 58:02:19:b8:7a:b1:3b:f2:e2:cc:44:38:eb:83:45: 48:6a:f5:df:a6:c2:72:9f:3f:0f:0c:ac:73:9f:08: 89:72:3f:f8:e9:ea:d4:ad:44:c6:7d:bc:32:cc:7d: d8:4e:40:31:4d:22:8c:41:e4:1e:99:9b:28:6c:7b: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:0F:DF:1F:53:8C:75:1E:72:25:AA:0C:49:3B:D5:E5:E2:AA:97 X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:59:67:88:eb:a0:ba:c5:7d:cd:c2:ea:51:11:0a:24:14:08: 95:e7:fe:8a:2f:28:c3:47:01:69:90:c9:6b:a9:a4:50:e1:9f: 01:b4:d3:47:ad:55:4b:fd:4e:0a:8d:67:b4:32:f1:bb:8a:16: 77:38:0c:09:35:23:d5:b9:2e:b3:1d:c1:00:43:06:5d:3a:a3: e8:74:cf:40:fd:14:ca:c9:ac:c4:8a:b7:c3:2c:5e:4f:a3:21: 38:25:50:a7:a3:06:3f:5b:85:52:9d:9c:44:ee:dc:ca:c9:c6: db:2e:21:f6:84:20:f0:68:b2:0a:a5:da:cf:4d:92:d8:54:16: 44:40:c2:92:01:e4:9b:07:25:23:65:7f:5b:53:b7:8c:21:2c: 85:6e:c5:4e:ec:4d:f2:30:cb:7d:73:5f:82:bd:b2:ba:2c:2e: 82:2f:2f:3e:e3:76:f2:26:50:43:74:7a:9a:0b:56:21:a9:0c: 19:c9:3c:63:bd:d9:ac:5c:11:6d:5b:f1:50:78:a0:ee:a4:5d: d8:e6:c8:03:a9:36:c1:d0:e8:10:54:b7:e7:9c:cf:4e:eb:ab: f2:1b:92:76:b4:7e:bf:b4:74:43:2b:5b:08:dc:34:03:f5:43: 11:8b:20:84:7f:67:15:8f:da:a8:bf:4c:f5:b1:7c:18:c5:81: 83:75:da:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjYxMDA1MDIwNzAyWhcNMjYxMDEyMDIwNzAyWjAYMRYwFAYD VQQDEw02YWMzMDY0Ni02MDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hiRtd/F3vl1OqB3Z0WyDEKSyBC1Q4GI1Z7GeSkKm9cC9QvYvTZNEkEI0+vM cWhkK/ecBHhUaONkjlOWpU8rxJNC91cOnoO/BCJsWd1/OEW95XPrCB2ETqVJlRLh 8224Lo8YgGqzMHKq1GXTdiJQeSBt0H+fYbMpM28wZGAgk2U7mHXQ/X+5KIwooaWe mlNvqgUyDQV0LphnJUEjQi9610sJPaDNNGew0f3LZHzQXk2oRn7JwP5b1/GsdMEk IHJa0epYAhm4erE78uLMRDjrg0VIavXfpsJynz8PDKxznwiJcj/46erUrUTGfbwy zH3YTkAxTSKMQeQemZsobHty+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIHD98f U4x1HnIlqgxJO9Xl4qqXMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfVlniOugusV9zcLqUREKJBQIlef+ii8ow0cBaZDJa6mkUOGfAbTTR61VS/1O Co1ntDLxu4oWdzgMCTUj1bkusx3BAEMGXTqj6HTPQP0UysmsxIq3wyxeT6MhOCVQ p6MGP1uFUp2cRO7cysnG2y4h9oQg8GiyCqXaz02S2FQWREDCkgHkmwclI2V/W1O3 jCEshW7FTuxN8jDLfXNfgr2yuiwugi8vPuN28iZQQ3R6mgtWIakMGck8Y73ZrFwR bVvxUHig7qRd2ObIA6k2wdDoEFS355zPTuur8huSdrR+v7R0QytbCNw0A/VDEYsg hH9nFY/aqL9M9bF8GMWBg3Xaxg== -----END CERTIFICATE-----Generated at Tue Oct 6 20:25:32 2026 by rpki-client