$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft File: 5ufJDHY2LUCc0cpsRLrINSTV8C4.mft (raw, json) Hash identifier: hzAJPUczL+NTcHyJPNqwNVX+p7XMHCqJGtSJT5pEC0k= Subject key identifier: 4D:69:54:D2:30:41:78:B1:F9:67:F0:E9:9B:5F:02:76:45:F4:B8:BC Authority key identifier: E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E Certificate issuer: /CN=A9111C7F/serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft Manifest number: 1C Signing time: Wed 23 Sep 2026 08:41:36 +0000 Manifest this update: Wed 23 Sep 2026 08:41:35 +0000 Manifest next update: Wed 30 Sep 2026 08:41:35 +0000 Files and hashes: 1: 5ufJDHY2LUCc0cpsRLrINSTV8C4.crl (hash: ROk8WrsJEkcfP7mw+zkk3OS8sok46fQ98ElX4xU3SDA=) 2: 17ECE94A90EE11F18648EF8E4A11F970.roa (hash: oJfoZuTJOnL94a9OsvOMa2PCtBJV8NSsIokiHbMr0uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C7F, serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E Validity Not Before: Sep 23 08:41:35 2026 GMT Not After : Sep 30 08:41:35 2026 GMT Subject: CN=6ab390c0-a3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:27:8b:46:58:bf:05:1b:68:88:fc:71:00: 6d:8d:ce:9b:39:13:e6:c1:40:ae:35:71:5d:36:01: 24:be:c2:a8:c3:72:0f:46:5b:a4:d9:20:c8:cb:69: c5:fe:bc:4b:8c:3a:82:72:7d:4f:53:c6:35:41:ad: 07:72:9c:cf:d7:11:c1:9f:16:d2:6b:28:13:0a:94: 2c:e8:8d:81:c1:b1:63:04:96:3a:17:ba:41:ff:96: 46:62:59:cb:5a:13:f5:59:83:86:a3:fc:c4:5f:88: f3:a7:31:f9:c5:43:ac:31:b9:09:58:93:6e:f2:4c: b0:90:e5:f6:40:9f:81:b1:d6:6b:b4:b3:b7:32:4e: c8:62:eb:46:46:fe:bc:88:e4:fd:fa:20:4e:0a:f5: 18:ab:04:93:e1:b6:fb:a4:58:d1:5c:d8:ea:e2:02: 56:f3:52:ca:5a:52:c7:c0:6f:d8:0d:05:ce:b4:b7: de:57:84:02:76:57:a4:04:cf:9a:f9:e9:6c:59:e4: 76:da:54:f1:f2:91:56:68:d9:17:83:6f:d5:82:34: 87:95:74:fc:06:38:74:8e:a6:1b:29:17:1c:f0:86: d3:68:ec:5c:55:63:76:86:bc:53:8c:76:8b:c5:2e: 29:78:0a:90:f6:30:77:3a:67:f2:9d:1b:dd:81:a6: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:54:D2:30:41:78:B1:F9:67:F0:E9:9B:5F:02:76:45:F4:B8:BC X509v3 Authority Key Identifier: keyid:E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c4:84:b5:cb:c0:6b:5e:ef:ba:f1:a6:6d:48:82:bc:eb:d5: 9e:98:75:1c:ae:e0:c2:a4:f2:5e:78:eb:7f:96:09:66:fd:ad: 91:7e:fc:e1:8b:83:37:2a:5f:f6:96:ed:9a:9a:54:0a:32:cf: fb:c3:9b:a3:44:1c:52:84:a4:29:26:b5:53:16:13:c9:6f:b3: 37:62:47:d9:26:dd:56:72:eb:02:3e:a7:b7:d8:8d:52:0d:1a: 2f:52:6a:83:ed:da:bf:2e:d0:be:93:a6:ab:c9:64:2a:ad:71: 52:d2:ba:b7:1f:31:78:a4:3c:13:ed:55:25:c8:76:f4:76:ff: 81:6a:4a:b5:09:8e:f3:8b:ec:75:dd:ed:14:5a:2e:a7:3f:55: 4a:1e:92:5c:04:1b:60:98:f3:63:81:5d:57:4e:ac:48:d1:9c: f2:fd:89:8e:74:84:30:1e:c3:64:92:9f:00:32:92:90:8a:63: 25:0b:7a:ff:d0:45:54:e9:33:44:70:06:33:06:2c:aa:8e:80: a7:07:53:6b:f2:0f:50:19:9e:77:78:4f:c6:98:8d:35:e3:e6: a1:38:cf:72:89:d1:af:a3:37:5e:04:b9:91:67:96:a2:d6:b9: cb:6d:63:52:ca:20:96:38:f3:aa:1c:60:ec:00:e8:b4:63:60: 16:ec:f8:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUM3RjExMC8GA1UEBRMoRTZFN0M5MEM3NjM2MkQ0MDlDRDFDQTZDNDRCQUM4MzUy NEQ1RjAyRTAeFw0yNjA5MjMwODQxMzVaFw0yNjA5MzAwODQxMzVaMBgxFjAUBgNV BAMTDTZhYjM5MGMwLWEzYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqjCeLRli/BRtoiPxxAG2Nzps5E+bBQK41cV02ASS+wqjDcg9GW6TZIMjLacX+ vEuMOoJyfU9TxjVBrQdynM/XEcGfFtJrKBMKlCzojYHBsWMEljoXukH/lkZiWcta E/VZg4aj/MRfiPOnMfnFQ6wxuQlYk27yTLCQ5fZAn4Gx1mu0s7cyTshi60ZG/ryI 5P36IE4K9RirBJPhtvukWNFc2OriAlbzUspaUsfAb9gNBc60t95XhAJ2V6QEz5r5 6WxZ5HbaVPHykVZo2ReDb9WCNIeVdPwGOHSOphspFxzwhtNo7FxVY3aGvFOMdovF Lil4CpD2MHc6Z/KdG92BprPDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTWlU0jBB eLH5Z/Dpm18CdkX0uLwwHwYDVR0jBBgwFoAU5ufJDHY2LUCc0cpsRLrINSTV8C4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExQzdGLzFDMzFGNUYwOTBF RDExRjE5MDMzNjM4NzRBMTFGOTcwLzV1ZkpESFkyTFVDYzBjcHNSTHJJTlNUVjhD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXVmSkRIWTJMVUNjMGNwc1JMcklOU1RWOEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx QzdGLzFDMzFGNUYwOTBFRDExRjE5MDMzNjM4NzRBMTFGOTcwLzV1ZkpESFkyTFVD YzBjcHNSTHJJTlNUVjhDNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdxIS1y8BrXu+68aZtSIK869WemHUcruDCpPJeeOt/lglm/a2Rfvzhi4M3Kl/2 lu2amlQKMs/7w5ujRBxShKQpJrVTFhPJb7M3YkfZJt1WcusCPqe32I1SDRovUmqD 7dq/LtC+k6aryWQqrXFS0rq3HzF4pDwT7VUlyHb0dv+Bakq1CY7zi+x13e0UWi6n P1VKHpJcBBtgmPNjgV1XTqxI0Zzy/YmOdIQwHsNkkp8AMpKQimMlC3r/0EVU6TNE cAYzBiyqjoCnB1Nr8g9QGZ53eE/GmI014+ahOM9yidGvozdeBLmRZ5ai1rnLbWNS yiCWOPOqHGDsAOi0Y2AW7PjL -----END CERTIFICATE-----Generated at Thu Sep 24 15:35:36 2026 by rpki-client