$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft File: _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json) Hash identifier: 0FZTKlUlWZ4hS/COrUSWlivTPPakn7neu6Mi850HdGQ= Subject key identifier: 07:17:B9:09:96:B7:A4:CC:B2:92:E1:E8:AD:4B:4C:C6:50:53:F3:E0 Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft Manifest number: 64 Signing time: Fri 25 Sep 2026 08:13:08 +0000 Manifest this update: Fri 25 Sep 2026 08:13:08 +0000 Manifest next update: Fri 02 Oct 2026 08:13:08 +0000 Files and hashes: 1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: QGx9aqWgHR6w6J2kMiZHKJ58QJ/Ewn1qMn72/maVg00=) 2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: PQr+ebVrtCzdXKAWNzsRyzxT+aGxBF4TMLTLw4pn3Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B Validity Not Before: Sep 25 08:13:08 2026 GMT Not After : Oct 2 08:13:08 2026 GMT Subject: CN=6ab62d14-7220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:a2:25:da:5b:b3:51:26:3b:7c:b2:e9:74: a6:39:53:08:dc:26:55:d8:b4:3c:c9:72:86:f4:d6: dd:54:dc:6e:7f:a7:62:f4:cc:96:3f:d6:57:e9:f9: 5e:22:14:4d:fc:2b:5f:7e:29:d4:22:21:ad:28:04: 41:02:28:41:06:dd:3a:0f:6a:72:5a:8d:62:42:fb: 30:f3:4e:e0:4d:f8:37:6e:25:06:25:bc:e7:b3:ec: 04:dc:9f:6b:11:1a:f1:13:25:b1:8b:c8:d9:55:db: c0:27:75:01:b6:30:fe:06:c7:3e:5f:b0:ff:44:62: db:44:3f:58:9a:fe:2a:43:89:fa:96:86:3f:e9:cc: f5:5a:3f:81:ea:da:f3:b6:0b:94:1c:97:4e:07:dc: ee:ff:08:07:c7:63:1a:13:ba:35:3f:46:4c:95:00: 51:27:26:d3:66:d0:fb:05:46:df:dc:73:48:f8:e8: cd:10:54:38:45:d5:5a:4e:7e:bd:99:37:50:bc:69: 3c:8b:3e:24:1d:cf:25:d6:1e:73:23:79:ce:6c:58: 95:d2:93:a2:e3:5c:08:f4:72:91:b9:e0:51:e2:09: 78:5a:cf:e2:7a:d9:32:04:1c:bd:18:fe:d7:ed:11: 63:e1:8a:11:29:aa:08:2c:35:f6:d7:00:7f:a9:10: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:17:B9:09:96:B7:A4:CC:B2:92:E1:E8:AD:4B:4C:C6:50:53:F3:E0 X509v3 Authority Key Identifier: keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fd:a8:ef:4c:01:bb:6c:25:46:f8:c2:66:40:b6:cd:aa:77: e3:d2:b4:ba:4a:a1:da:d1:87:16:0a:78:b1:52:ab:37:c3:a5: 10:28:90:d7:df:00:1c:5b:de:c7:36:27:5b:7f:61:11:4a:37: 13:42:2a:05:8c:e3:ec:44:d0:bc:80:6a:90:61:52:5c:36:f4: e3:de:5d:45:08:c7:94:1a:97:6b:39:52:6d:8a:7a:dd:3f:70: e6:5d:29:26:05:cc:c2:b4:a7:06:06:0e:21:86:60:cf:64:5e: 0b:1c:7c:53:5b:f7:6a:ca:cf:d0:4f:20:b8:4a:60:de:85:dc: 44:0a:8e:09:92:bd:57:46:ba:b3:60:42:47:6b:0b:77:24:1b: 0f:e1:26:a9:da:14:c4:1c:64:b5:5f:20:92:7f:68:d7:04:37: 80:33:58:34:2c:99:68:59:89:dd:55:32:6b:48:d4:c6:52:b2: 7c:44:47:ad:d2:0e:c0:d1:31:d8:e4:ce:9d:ba:b8:c6:87:57: 44:88:c2:38:70:3a:ee:a4:ec:18:d6:21:75:b8:74:2d:49:42: 22:ee:51:e1:50:02:38:6d:73:a6:64:85:14:01:98:9d:73:b5: df:3d:9f:2e:96:4d:75:3f:cd:01:69:4a:0c:13:a5:00:81:90: d8:63:7f:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUEwMzExMC8GA1UEBRMoRkRERDMzNjcyM0U0RkYyODZERTk1NjIzNUY0Q0JCOUU1 QkM4QjQ3QjAeFw0yNjA5MjUwODEzMDhaFw0yNjEwMDIwODEzMDhaMBgxFjAUBgNV BAMTDTZhYjYyZDE0LTcyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsFqIl2luzUSY7fLLpdKY5UwjcJlXYtDzJcob01t1U3G5/p2L0zJY/1lfp+V4i FE38K19+KdQiIa0oBEECKEEG3ToPanJajWJC+zDzTuBN+DduJQYlvOez7ATcn2sR GvETJbGLyNlV28AndQG2MP4Gxz5fsP9EYttEP1ia/ipDifqWhj/pzPVaP4Hq2vO2 C5Qcl04H3O7/CAfHYxoTujU/RkyVAFEnJtNm0PsFRt/cc0j46M0QVDhF1VpOfr2Z N1C8aTyLPiQdzyXWHnMjec5sWJXSk6LjXAj0cpG54FHiCXhaz+J62TIEHL0Y/tft EWPhihEpqggsNfbXAH+pEHEHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBxe5CZa3 pMyykuHorUtMxlBT8+AwHwYDVR0jBBgwFoAU/d0zZyPk/yht6VYjX0y7nlvItHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0NCREZGNkFBMjRE QzExRjFBQUY1QjM0QUFEODMzNzczL19kMHpaeVBrX3lodDZWWWpYMHk3bmx2SXRI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvX2Qwelp5UGtfeWh0NlZZalgweTdubHZJdEhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF QTAzL0NCREZGNkFBMjREQzExRjFBQUY1QjM0QUFEODMzNzczL19kMHpaeVBrX3lo dDZWWWpYMHk3bmx2SXRIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCg/ajvTAG7bCVG+MJmQLbNqnfj0rS6SqHa0YcWCnixUqs3w6UQKJDX3wAcW97H Nidbf2ERSjcTQioFjOPsRNC8gGqQYVJcNvTj3l1FCMeUGpdrOVJtinrdP3DmXSkm BczCtKcGBg4hhmDPZF4LHHxTW/dqys/QTyC4SmDehdxECo4Jkr1XRrqzYEJHawt3 JBsP4Sap2hTEHGS1XyCSf2jXBDeAM1g0LJloWYndVTJrSNTGUrJ8REet0g7A0THY 5M6durjGh1dEiMI4cDrupOwY1iF1uHQtSUIi7lHhUAI4bXOmZIUUAZidc7XfPZ8u lk11P80BaUoME6UAgZDYY3+y -----END CERTIFICATE-----Generated at Sat Sep 26 09:33:44 2026 by rpki-client