$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: E4IhZxK/ZZ+ZdmYQu6pH2G1rtC/Cq1s4UuUe+3mEhFI= Subject key identifier: FF:5E:44:BC:CE:6E:C1:D8:13:F8:67:3C:33:0F:BB:D0:B2:68:A2:F3 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0629 Signing time: Sun 04 Oct 2026 22:54:26 +0000 Manifest this update: Sun 04 Oct 2026 22:54:26 +0000 Manifest next update: Sun 11 Oct 2026 22:54:26 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: ZrJ0Kl7lT9+2QCuewho24lz7Jus1gTX7V1cM4qzKFK4=) 2: A486779E6FED11F1B401E8288CA30FBC.roa (hash: UpK9c8N8ZSB4zwZRHjceSr8yRtw/Sm4QRpoWWyjkIM4=) 3: 6DD2A340714011F191B402BC77A30FBC.roa (hash: 5RQLeH5JGG0f7y+AD5RK8Ky61/BnNlB61yy95K8JePU=) 4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ebf0Pq1ZcQTFqHtlNPjAU0kHXeHT/rPIgCSm2nzK2Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 22:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Oct 4 22:54:26 2026 GMT Not After : Oct 11 22:54:26 2026 GMT Subject: CN=6ac2d922-627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:bd:be:84:b1:fe:ef:6a:19:5a:6e:d8:b6: 7c:50:7d:09:32:e2:db:47:0d:59:d2:04:03:79:83: 28:30:70:7f:87:cb:e1:13:16:94:11:89:47:aa:93: ac:fa:75:1a:c5:46:7d:60:9e:46:20:c1:08:20:b7: 9c:a5:c3:42:ff:42:15:17:af:46:a7:ef:49:8a:b4: d6:ab:d1:03:d1:10:62:91:9a:8a:92:e1:10:85:2e: c7:26:01:9a:fa:9c:5d:a7:d1:fe:18:3f:ce:f7:59: 78:aa:aa:46:ca:e2:74:85:fc:aa:51:5a:09:48:f4: 2b:af:0d:80:d5:f6:25:14:b2:3a:c4:c1:37:f6:63: 64:ac:ca:6f:e6:b6:e1:2c:18:23:e1:9d:1c:21:90: 92:d5:bd:44:4b:5a:77:a1:0d:15:7f:69:ec:dc:fd: 31:f6:e6:71:11:2f:e9:8f:27:fa:01:2a:26:1c:d2: be:49:0d:df:f1:64:a8:0b:c9:77:2e:2e:e1:b9:2c: 20:42:60:e4:c9:80:8a:17:f2:3e:54:d0:84:f9:6d: b5:84:25:45:0f:cd:ea:28:de:5e:29:7e:96:9c:6c: 28:e0:11:f0:a3:c4:2c:30:b5:46:82:1a:db:b2:57: 8a:1f:ad:db:94:b7:5d:89:7e:84:88:61:da:53:fb: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5E:44:BC:CE:6E:C1:D8:13:F8:67:3C:33:0F:BB:D0:B2:68:A2:F3 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:30:2f:23:6e:0c:fb:6a:91:13:ba:93:19:0f:0b:5f:7d:2b: 1e:53:0e:8e:8b:39:8c:97:64:75:94:32:d7:d9:b3:ab:91:47: 8d:80:db:25:0b:9b:99:26:c2:e8:19:c5:2b:0d:6c:d8:c2:a7: a8:59:ed:6f:b1:e8:6c:09:ee:e6:25:c8:22:b4:f8:b5:74:51: be:a8:03:b3:ec:69:a8:18:c9:d1:1f:e9:bd:7a:07:2c:66:46: c2:2a:64:3a:07:2b:ad:20:b0:2f:56:30:7a:22:39:04:2b:22: 89:58:ef:3d:c0:73:2b:c4:fd:c6:80:dd:18:ba:eb:67:60:6f: 3a:59:51:08:36:cb:5e:72:4e:06:32:4b:8e:94:63:96:16:f8: 9a:72:4d:61:ec:6b:42:83:47:4e:1a:7e:02:94:e6:71:05:81: 06:cd:94:3f:93:50:61:e8:c2:48:75:d4:91:44:82:12:ff:b2: 52:9a:5d:df:19:2d:73:48:89:ee:63:ff:2e:1c:ea:b5:2a:d0: 16:2d:c4:c8:5f:31:55:d9:59:1a:c7:ec:b7:11:b0:c4:0e:03: b3:a9:63:ab:c2:1f:d0:19:4d:7f:75:d9:29:80:33:3b:42:94: 31:83:67:08:46:5a:d4:a1:a1:11:39:9b:74:45:86:a2:01:ba: 81:36:73:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYxMDA0MjI1NDI2WhcNMjYxMDExMjI1NDI2WjAYMRYwFAYD VQQDEw02YWMyZDkyMi02MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jC9voSx/u9qGVpu2LZ8UH0JMuLbRw1Z0gQDeYMoMHB/h8vhExaUEYlHqpOs +nUaxUZ9YJ5GIMEIILecpcNC/0IVF69Gp+9JirTWq9ED0RBikZqKkuEQhS7HJgGa +pxdp9H+GD/O91l4qqpGyuJ0hfyqUVoJSPQrrw2A1fYlFLI6xME39mNkrMpv5rbh LBgj4Z0cIZCS1b1ES1p3oQ0Vf2ns3P0x9uZxES/pjyf6ASomHNK+SQ3f8WSoC8l3 Li7huSwgQmDkyYCKF/I+VNCE+W21hCVFD83qKN5eKX6WnGwo4BHwo8QsMLVGghrb sleKH63blLddiX6EiGHaU/vmQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9eRLzO bsHYE/hnPDMPu9CyaKLzMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAETAvI24M+2qRE7qTGQ8LX30rHlMOjos5jJdkdZQy19mzq5FHjYDbJQubmSbC 6BnFKw1s2MKnqFntb7HobAnu5iXIIrT4tXRRvqgDs+xpqBjJ0R/pvXoHLGZGwipk OgcrrSCwL1YweiI5BCsiiVjvPcBzK8T9xoDdGLrrZ2BvOllRCDbLXnJOBjJLjpRj lhb4mnJNYexrQoNHThp+ApTmcQWBBs2UP5NQYejCSHXUkUSCEv+yUppd3xktc0iJ 7mP/LhzqtSrQFi3EyF8xVdlZGsfstxGwxA4Ds6ljq8If0BlNf3XZKYAzO0KUMYNn CEZa1KGhETmbdEWGogG6gTZzjw== -----END CERTIFICATE-----Generated at Tue Oct 6 14:21:06 2026 by rpki-client