$ rpki-client -vvvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: WKFou2Yh3Jn+mVtjlAzH6bcWZhX7OC9pZ3k3e9QEuh0= Subject key identifier: 77:44:C9:4E:C3:FC:34:33:D7:E1:C7:E5:42:8C:5B:FE:C8:92:AD:AE Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1CD3 Signing time: Sun 04 Oct 2026 16:10:59 +0000 Manifest this update: Sun 04 Oct 2026 16:10:59 +0000 Manifest next update: Sun 11 Oct 2026 16:10:59 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: 4UC/4f3RDyTD8VWXIyeuWgv4lvAe/bZVvGrgTMe2MCg=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7416 (0x1cf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Oct 4 16:10:59 2026 GMT Not After : Oct 11 16:10:59 2026 GMT Subject: CN=6ac27a93-6be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:30:ae:fb:88:e5:3d:9a:4a:1e:f9:fd:33: 2a:07:33:ae:db:3f:21:ad:73:87:bf:6f:dc:ba:c6: 6b:31:ee:13:b9:15:93:a1:14:4c:6e:22:05:ff:c2: 57:d4:d7:07:26:59:5a:80:c1:af:52:90:c0:ed:93: 44:5d:1b:77:7e:f0:83:ba:82:bb:3f:15:9f:a9:c8: 6f:a8:ac:26:c1:63:6b:73:81:36:a2:6a:8b:2c:f8: bb:be:21:c4:19:aa:58:c6:67:a8:8e:33:95:e4:a7: 29:c1:69:9d:17:83:61:43:8d:b6:4e:72:9c:1b:d0: 95:ea:b7:6a:92:28:9a:e1:cc:78:f2:62:1b:2d:90: 97:0b:9b:e0:fb:8b:1d:6c:5c:f7:7b:35:05:80:e6: dd:0a:df:15:c9:a2:57:ad:b6:85:fd:68:0a:1f:91: 5d:23:50:5f:5e:cb:d1:06:65:58:13:34:9a:65:a0: dd:b8:cd:d3:50:e0:a8:a8:69:5f:48:b9:86:24:d4: 29:00:5e:10:2c:8f:97:fb:84:65:1e:15:2e:b4:94: e2:04:cd:9a:e3:81:e8:a2:5f:2d:06:ff:4c:4e:36: 07:2a:df:08:a5:46:7c:c7:a2:62:b7:c1:14:d9:60: 00:5b:0b:b6:91:a2:db:43:d2:cc:fe:dc:b3:3d:f4: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:C9:4E:C3:FC:34:33:D7:E1:C7:E5:42:8C:5B:FE:C8:92:AD:AE X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:06:a1:ec:78:7c:5a:85:41:2a:54:75:fd:13:c8:e0:24: b6:80:44:8b:86:25:0d:45:b4:e9:80:19:fa:e2:f6:9f:6b:e8: ce:f0:64:f9:2d:55:35:3f:41:15:5e:e9:f8:51:40:1a:7e:d0: eb:f3:03:bb:49:e3:ed:10:93:94:e3:bf:2e:99:7b:a8:1f:ce: 7d:16:54:e9:9e:7a:7b:34:e3:f3:b3:66:de:fd:df:06:5e:20: 1f:86:93:60:54:c4:b8:ef:d9:2b:bc:81:a8:d5:51:17:1b:4f: 45:00:02:31:f1:05:76:67:d4:74:70:8e:29:e9:47:b8:0b:b3: fe:6e:e0:d7:b9:87:9e:50:3b:1e:65:3b:21:d3:47:d0:6d:34: d1:93:a8:86:b2:88:2e:5b:7f:44:94:e6:7d:a5:6b:37:2f:cc: 4b:37:ea:dc:af:79:73:6d:5e:87:46:56:0b:61:72:27:2c:22: a8:ae:ed:df:f8:1f:68:56:e4:90:2f:2a:98:92:3b:35:bd:0d: f4:2b:eb:fb:84:8f:f1:c6:34:99:88:9a:a2:5a:ca:32:c3:c9: ae:be:9d:9d:42:82:a1:20:92:b2:b1:f2:94:14:f0:56:1d:e6: 60:47:47:50:c1:85:fd:9e:23:7d:4c:b6:71:b5:9c:d0:4d:43: d0:d3:c6:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjYxMDA0MTYxMDU5WhcNMjYxMDExMTYxMDU5WjAYMRYwFAYD VQQDEw02YWMyN2E5My02YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjvswrvuI5T2aSh75/TMqBzOu2z8hrXOHv2/cusZrMe4TuRWToRRMbiIF/8JX 1NcHJllagMGvUpDA7ZNEXRt3fvCDuoK7PxWfqchvqKwmwWNrc4E2omqLLPi7viHE GapYxmeojjOV5KcpwWmdF4NhQ422TnKcG9CV6rdqkiia4cx48mIbLZCXC5vg+4sd bFz3ezUFgObdCt8VyaJXrbaF/WgKH5FdI1BfXsvRBmVYEzSaZaDduM3TUOCoqGlf SLmGJNQpAF4QLI+X+4RlHhUutJTiBM2a44Hool8tBv9MTjYHKt8IpUZ8x6Jit8EU 2WAAWwu2kaLbQ9LM/tyzPfTT6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdEyU7D /DQz1+HH5UKMW/7Ikq2uMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9QGoex4fFqFQSpUdf0TyOAktoBEi4YlDUW06YAZ+uL2n2vozvBk+S1VNT9B FV7p+FFAGn7Q6/MDu0nj7RCTlOO/Lpl7qB/OfRZU6Z56ezTj87Nm3v3fBl4gH4aT YFTEuO/ZK7yBqNVRFxtPRQACMfEFdmfUdHCOKelHuAuz/m7g17mHnlA7HmU7IdNH 0G000ZOohrKILlt/RJTmfaVrNy/MSzfq3K95c21eh0ZWC2FyJywiqK7t3/gfaFbk kC8qmJI7Nb0N9Cvr+4SP8cY0mYiaolrKMsPJrr6dnUKCoSCSsrHylBTwVh3mYEdH UMGF/Z4jfUy2cbWc0E1D0NPGfg== -----END CERTIFICATE-----Generated at Tue Oct 6 14:05:10 2026 by rpki-client