$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json) Hash identifier: Rjox5E5abmBbzAjzS4rXgOZyEmEWl5vCNoxJfBLIhF4= Subject key identifier: A4:B3:05:B3:66:C9:AA:ED:BF:DA:B8:B6:5B:5E:18:CA:A8:38:F6:6A Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft Manifest number: A9 Signing time: Wed 07 Oct 2026 07:39:48 +0000 Manifest this update: Wed 07 Oct 2026 07:39:48 +0000 Manifest next update: Wed 14 Oct 2026 07:39:48 +0000 Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: cQB8Cc3Q508JWElCO84nrBbZHRtRhpxM1MqYK74BSkU=) 2: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: C7KmmWun2dX9H9haejMLucLDX6TZ17dC6V73S7CTAnw=) 3: 0853E998C45711F080167D38C4F9AE02.roa (hash: 9wGGSvONuRhyHPCYZAhrCUe7eBe9FnHcqTP8k+BasBo=) 4: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: WiAAcP0KH/A3PVdMf+WKZUcSOEY5/upnhbg6/b3N8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Validity Not Before: Oct 7 07:39:48 2026 GMT Not After : Oct 14 07:39:48 2026 GMT Subject: CN=6ac5f744-4492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:e6:d4:11:dd:54:50:e5:eb:c5:3d:0b:af: fe:42:0b:d3:d5:cf:30:2f:19:4a:bb:93:d2:c5:31: fc:4c:f9:8e:13:80:60:6a:91:e7:5a:4d:f6:5f:a4: e3:a4:cd:7b:42:48:59:17:c1:4d:b8:ba:a7:5c:9f: 12:45:d9:e5:d4:2e:37:78:17:e9:f4:d1:63:10:81: b0:a9:d8:1b:b1:87:04:4e:e6:e0:7d:bb:37:40:d7: 6f:81:8c:f5:5f:d8:f3:aa:a8:ef:61:ba:6a:d6:3b: 54:b0:fd:25:1f:5d:6a:ab:42:15:64:e3:c2:e6:2a: 88:eb:dc:80:64:7e:ce:18:de:ab:43:a4:6d:c8:22: 81:68:46:55:ab:cd:4c:93:a7:d0:69:be:12:fc:48: 35:6d:40:a6:e1:a3:67:b0:fb:8f:ca:9e:72:6a:2c: 31:15:76:b3:70:58:64:4a:0b:77:0b:62:72:c1:0a: f4:96:55:d8:a9:ff:ee:45:05:91:bc:d0:57:75:64: 65:29:ad:84:45:84:cf:0d:ed:72:f5:0e:da:82:a9: 0a:c8:37:dc:53:0a:ac:72:8e:f9:a3:58:4e:69:b5: f4:cb:4b:cf:a7:93:42:8b:db:61:04:02:6f:fe:a1: 8e:97:3f:b1:7e:f1:92:0e:52:7b:ff:98:1b:3c:35: d7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:05:B3:66:C9:AA:ED:BF:DA:B8:B6:5B:5E:18:CA:A8:38:F6:6A X509v3 Authority Key Identifier: keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8e:4a:95:d4:00:fc:24:3d:72:ee:ae:ef:38:b5:d1:79:88: 1b:d6:ab:df:ad:ea:27:4e:90:d7:de:c4:97:b8:0d:8c:1f:f2: 7f:02:2a:72:21:2c:2d:55:0b:52:f9:7b:6e:b0:73:19:f2:d8: 6a:d6:3d:fd:fd:b8:2e:e4:0d:4c:7c:3b:ba:0c:c1:01:42:09: 60:cb:5d:82:c0:26:ba:c0:f1:88:b2:69:c8:8b:a3:aa:78:62: 39:45:a8:9b:80:53:58:5f:69:b5:21:20:72:1d:ec:3c:aa:5c: ae:c0:6b:84:1c:83:e9:d4:a9:3d:bb:b5:b6:8a:c2:6f:4e:89: 4a:7d:17:40:1e:ea:16:84:93:62:d5:bf:1a:a4:42:35:d4:25: 68:ea:57:40:46:64:50:8c:bf:ee:79:71:0b:53:be:6b:20:b0: 96:ee:29:e7:b9:7a:22:0d:35:0c:fc:ec:02:c1:b4:3f:2d:af: 29:4f:ca:5f:39:79:8d:e5:46:82:c2:4e:20:e3:32:de:5d:14: 9c:7b:90:6d:a3:ba:f8:c8:f4:ea:06:57:dc:3f:6a:70:53:b2: 51:c4:83:30:9f:8d:f6:4e:6e:ab:e7:b5:63:2e:0e:50:e0:5f: e0:36:01:b9:b6:51:45:e9:21:85:5f:b6:82:6b:66:f5:2d:94: d7:44:3c:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFNzkxMTAvBgNVBAUTKDcxQTNEQkUyRjBGRkQwQjEwN0NBNkI1NzEzQjE1Qzk3 QThFM0UxRDEwHhcNMjYxMDA3MDczOTQ4WhcNMjYxMDE0MDczOTQ4WjAYMRYwFAYD VQQDEw02YWM1Zjc0NC00NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjRfm1BHdVFDl68U9C6/+QgvT1c8wLxlKu5PSxTH8TPmOE4BgapHnWk32X6Tj pM17QkhZF8FNuLqnXJ8SRdnl1C43eBfp9NFjEIGwqdgbsYcETubgfbs3QNdvgYz1 X9jzqqjvYbpq1jtUsP0lH11qq0IVZOPC5iqI69yAZH7OGN6rQ6RtyCKBaEZVq81M k6fQab4S/Eg1bUCm4aNnsPuPyp5yaiwxFXazcFhkSgt3C2JywQr0llXYqf/uRQWR vNBXdWRlKa2ERYTPDe1y9Q7agqkKyDfcUwqsco75o1hOabX0y0vPp5NCi9thBAJv /qGOlz+xfvGSDlJ7/5gbPDXX0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSzBbNm yartv9q4tlteGMqoOPZqMB8GA1UdIwQYMBaAFHGj2+Lw/9CxB8prVxOxXJeo4+HR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUU3OS85NTFFMjhGOEM0 NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi9jYVBiNHZEXzBMRUh5bXRYRTdGY2w2amo0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhUGI0dkRfMExFSHltdFhFN0ZjbDZqajRkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUU3OS85NTFFMjhGOEM0NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi9jYVBiNHZEXzBM RUh5bXRYRTdGY2w2amo0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACY5KldQA/CQ9cu6u7zi10XmIG9ar363qJ06Q197El7gNjB/yfwIqciEsLVUL Uvl7brBzGfLYatY9/f24LuQNTHw7ugzBAUIJYMtdgsAmusDxiLJpyIujqnhiOUWo m4BTWF9ptSEgch3sPKpcrsBrhByD6dSpPbu1torCb06JSn0XQB7qFoSTYtW/GqRC NdQlaOpXQEZkUIy/7nlxC1O+ayCwlu4p57l6Ig01DPzsAsG0Py2vKU/KXzl5jeVG gsJOIOMy3l0UnHuQbaO6+Mj06gZX3D9qcFOyUcSDMJ+N9k5uq+e1Yy4OUOBf4DYB ubZRRekhhV+2gmtm9S2U10Q8JQ== -----END CERTIFICATE-----Generated at Thu Oct 8 03:53:15 2026 by rpki-client