$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json) Hash identifier: QWoZU5xjjBIVNee0B1dCIEwuCfBTUangN54HFzw62/c= Subject key identifier: 85:32:10:48:8C:EC:35:99:85:75:96:14:95:95:BA:8E:C3:E4:BF:D7 Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft Manifest number: 8C Signing time: Sat 03 Oct 2026 08:17:17 +0000 Manifest this update: Sat 03 Oct 2026 08:17:17 +0000 Manifest next update: Sat 10 Oct 2026 08:17:17 +0000 Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: PJI8I9i0q1+mwBCRykrv1MHMyCUVXQuAMuWz6eKkoZQ=) 2: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=) 3: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Validity Not Before: Oct 3 08:17:17 2026 GMT Not After : Oct 10 08:17:17 2026 GMT Subject: CN=6ac0ba0d-02cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:e0:84:04:63:b4:69:53:4b:9f:17:d1:ec: aa:a8:a8:e5:d3:44:3f:04:ed:e1:0a:bd:75:5f:3a: a8:7d:3d:ab:20:f7:a2:2f:94:4d:14:3b:f4:e6:cf: c7:f3:cc:2a:b8:84:2d:a2:0b:b6:c1:c2:d3:1a:74: da:28:f5:c9:62:39:0a:23:79:1e:16:e0:c7:4e:db: 3f:f1:d4:87:1d:98:be:25:ea:3c:80:28:9f:2c:67: ed:f6:c8:7a:b3:0c:bd:d3:c8:bc:70:7f:b4:b4:87: 50:89:3a:39:9e:7d:2e:a8:fa:68:eb:7d:22:5e:6a: 46:26:3e:15:7a:a4:cf:e6:61:b0:6b:f0:96:e0:42: 1d:35:27:01:51:6a:e4:53:92:b5:94:08:bf:e2:66: e5:3c:fb:88:d0:82:06:53:83:a1:9f:20:d7:51:84: 39:ac:24:3f:b0:d7:1f:1c:4e:e1:4f:48:5c:45:c2: 5d:e4:fe:94:8f:1d:5a:1b:e8:8b:ec:cb:73:e7:0c: 81:5b:de:bc:b5:99:23:e3:1e:b4:c4:07:15:6e:c4: e4:b8:2f:46:62:02:07:e4:86:1c:bb:e2:d1:56:95: f3:bb:ee:f0:53:69:b1:37:10:b7:b3:d2:1d:22:bd: bc:c5:59:87:e3:b7:ec:b2:88:f2:73:5c:ac:66:d4: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:32:10:48:8C:EC:35:99:85:75:96:14:95:95:BA:8E:C3:E4:BF:D7 X509v3 Authority Key Identifier: keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d6:cb:5d:ad:fd:99:50:c9:7e:38:de:98:dd:9a:e8:8b:7b: ce:a1:36:43:1b:f0:b3:26:11:15:73:ba:c7:bd:e2:08:9b:7f: 1e:0b:7e:ef:3e:31:6f:1a:a9:f7:67:00:43:ba:fd:42:7b:c7: fe:c2:8b:92:7a:d4:94:06:99:65:ef:ad:16:97:fc:87:c3:07: 12:56:07:9e:41:51:08:cf:46:78:1a:cb:30:3e:f7:7d:55:f9: ff:c1:1b:28:e9:f0:8a:c4:0a:08:98:71:6e:d2:49:27:cd:b2: cb:53:0d:ed:80:04:64:7d:57:1e:ce:4e:66:84:e0:b1:bd:5d: 87:13:92:f1:77:da:e6:37:a2:da:8b:34:24:0c:6c:b2:d8:64: e2:f7:eb:01:98:6b:39:12:08:c8:34:7f:32:b5:f6:06:e1:48: dd:12:3c:aa:77:12:0a:90:70:30:25:29:0e:fd:46:9e:c0:37: 88:84:db:e7:2e:c2:23:e9:21:45:62:b9:56:c5:99:f2:34:40: 4c:8a:b1:6d:a3:a4:88:a3:5f:e7:93:ee:84:e4:bf:62:34:a4: a8:7f:a8:6f:4d:5f:0e:e4:26:29:e6:1f:ec:21:7b:39:1b:97: 72:97:95:92:df:12:6a:5f:9c:55:78:ac:56:c0:42:e2:34:a0: a9:ed:35:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCMEMxMTAvBgNVBAUTKEQ1QjE2NzY4OTE0QTgwQzkzMTI0NjI5NjEwQ0M0MDUw MkFBRUQwRTkwHhcNMjYxMDAzMDgxNzE3WhcNMjYxMDEwMDgxNzE3WjAYMRYwFAYD VQQDEw02YWMwYmEwZC0wMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaPghARjtGlTS58X0eyqqKjl00Q/BO3hCr11XzqofT2rIPeiL5RNFDv05s/H 88wquIQtogu2wcLTGnTaKPXJYjkKI3keFuDHTts/8dSHHZi+Jeo8gCifLGft9sh6 swy908i8cH+0tIdQiTo5nn0uqPpo630iXmpGJj4VeqTP5mGwa/CW4EIdNScBUWrk U5K1lAi/4mblPPuI0IIGU4OhnyDXUYQ5rCQ/sNcfHE7hT0hcRcJd5P6Ujx1aG+iL 7Mtz5wyBW968tZkj4x60xAcVbsTkuC9GYgIH5IYcu+LRVpXzu+7wU2mxNxC3s9Id Ir28xVmH47fssojyc1ysZtT8cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUyEEiM 7DWZhXWWFJWVuo7D5L/XMB8GA1UdIwQYMBaAFNWxZ2iRSoDJMSRilhDMQFAqrtDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkIwQy9CNjEzODZFNkYx MUMxMUYwQTM4RjI4NDc0RDZGNTZCQy8xYkZuYUpGS2dNa3hKR0tXRU14QVVDcXUw T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiRm5hSkZLZ01reEpHS1dFTXhBVUNxdTBPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkIwQy9CNjEzODZFNkYxMUMxMUYwQTM4RjI4NDc0RDZGNTZCQy8xYkZuYUpGS2dN a3hKR0tXRU14QVVDcXUwT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUtbLXa39mVDJfjjemN2a6It7zqE2QxvwsyYRFXO6x73iCJt/Hgt+7z4xbxqp 92cAQ7r9QnvH/sKLknrUlAaZZe+tFpf8h8MHElYHnkFRCM9GeBrLMD73fVX5/8Eb KOnwisQKCJhxbtJJJ82yy1MN7YAEZH1XHs5OZoTgsb1dhxOS8Xfa5jei2os0JAxs sthk4vfrAZhrORIIyDR/MrX2BuFI3RI8qncSCpBwMCUpDv1GnsA3iITb5y7CI+kh RWK5VsWZ8jRATIqxbaOkiKNf55PuhOS/YjSkqH+ob01fDuQmKeYf7CF7ORuXcpeV kt8Sal+cVXisVsBC4jSgqe01HA== -----END CERTIFICATE-----Generated at Sun Oct 4 17:20:34 2026 by rpki-client