$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: AfPc++nR9pHJYhqiekGqLfZgt3PENotG/N8A1ExR/2s= Subject key identifier: C9:73:1A:3D:71:AD:17:CC:43:11:77:B8:77:41:3F:0C:16:A8:69:EA Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0CA5 Signing time: Mon 12 Oct 2026 18:43:57 +0000 Manifest this update: Mon 12 Oct 2026 18:43:56 +0000 Manifest next update: Mon 19 Oct 2026 18:43:56 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: 43RsnCmtqPll57SPsT1lQDS8EZAP6rkpi3JCJ3ZmS5g=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: BtTQvQkkCMyORN0/OniWB7TxZ5Yt0iEdn/t0KB8XF1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Oct 12 18:43:56 2026 GMT Not After : Oct 19 18:43:56 2026 GMT Subject: CN=6acd2a6d-ab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:83:88:41:88:f3:d0:04:92:ef:60:c8:3f:5a: d6:8d:e1:2d:51:69:c1:0e:5f:c9:ee:50:6b:90:5c: ea:51:ee:4b:3d:2a:1b:9f:e0:44:8e:3d:a2:1e:da: ef:91:72:b3:c9:9a:31:68:27:31:8c:ce:6b:17:3d: de:c6:7c:b2:73:28:47:ee:42:32:31:06:3b:69:28: b5:d7:26:be:a8:85:ea:94:fe:00:5d:36:ba:c1:16: 32:80:d4:28:65:d4:42:95:59:d9:e4:f0:c7:ca:5d: df:ba:2a:cd:61:b0:bb:d3:ce:8a:43:49:5e:a6:71: 65:29:97:90:7a:47:b2:7d:43:6f:af:7b:e1:2f:f9: 2a:54:c2:e9:aa:a8:69:c7:cc:a3:ee:ac:2f:45:25: 8c:3e:6f:c3:ed:4b:af:28:90:8f:cd:6b:39:89:d5: f4:bb:00:f5:61:6b:b2:b8:cb:28:12:b8:35:8f:fc: 34:ee:8c:ac:5e:c5:c4:f8:4a:68:cb:af:c6:25:17: e7:e2:66:6b:52:3f:f4:6b:04:71:e5:4c:34:e1:82: 48:63:4d:5b:4a:18:1d:b4:74:e5:32:54:20:7a:d9: 8a:7c:c5:1c:28:8f:56:7a:06:8f:4f:ef:73:40:bc: df:16:ec:75:48:e7:d3:be:6a:54:fc:15:f2:cd:34: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:1A:3D:71:AD:17:CC:43:11:77:B8:77:41:3F:0C:16:A8:69:EA X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e7:ea:8c:1f:4f:8d:53:d9:81:8c:de:fa:14:b6:27:5c:ed: b0:bc:e3:74:c6:21:3b:8d:f9:f2:0d:f4:05:3e:b6:c7:00:69: 65:b0:4f:5a:2f:fb:b5:9a:88:00:87:21:aa:fb:70:87:3e:88: 37:89:54:58:ac:92:02:d4:1a:56:b9:81:2c:03:e1:0c:e6:20: 35:ca:f7:e6:47:03:7b:32:ea:34:78:84:6f:8c:f3:45:e7:53: 0f:a9:21:49:19:53:34:c3:37:90:56:61:70:fa:da:f4:55:3f: 36:e1:1d:e0:92:39:83:f6:64:e7:ed:c1:83:97:db:14:c5:b2: bf:ca:6b:89:27:03:74:20:c7:9c:fe:77:78:18:6b:3d:95:62: 10:c0:96:29:d3:6a:e2:18:12:42:35:4d:f9:5d:30:29:52:53: 48:74:a1:c4:74:48:e5:a4:a1:9a:5d:24:af:56:41:ff:08:e2: dc:f9:61:7b:ce:98:c4:06:b3:f1:f0:94:4f:95:ca:e5:38:89: 4c:2b:2e:a8:b7:61:ca:0d:bb:54:28:e0:c1:ec:80:7b:ca:2f: 02:d8:d9:f1:33:c7:c6:26:69:92:95:1f:5f:67:48:2f:05:da: da:39:4b:97:44:01:1d:35:52:20:d2:39:da:15:fd:f5:bf:5b: 28:2f:b7:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjYxMDEyMTg0MzU2WhcNMjYxMDE5MTg0MzU2WjAYMRYwFAYD VQQDEw02YWNkMmE2ZC1hYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YOIQYjz0ASS72DIP1rWjeEtUWnBDl/J7lBrkFzqUe5LPSobn+BEjj2iHtrv kXKzyZoxaCcxjM5rFz3exnyycyhH7kIyMQY7aSi11ya+qIXqlP4AXTa6wRYygNQo ZdRClVnZ5PDHyl3fuirNYbC7086KQ0lepnFlKZeQekeyfUNvr3vhL/kqVMLpqqhp x8yj7qwvRSWMPm/D7UuvKJCPzWs5idX0uwD1YWuyuMsoErg1j/w07oysXsXE+Epo y6/GJRfn4mZrUj/0awRx5Uw04YJIY01bShgdtHTlMlQgetmKfMUcKI9WegaPT+9z QLzfFux1SOfTvmpU/BXyzTT0lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlzGj1x rRfMQxF3uHdBPwwWqGnqMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaefqjB9PjVPZgYze+hS2J1ztsLzjdMYhO4358g30BT62xwBpZbBPWi/7tZqI AIchqvtwhz6IN4lUWKySAtQaVrmBLAPhDOYgNcr35kcDezLqNHiEb4zzRedTD6kh SRlTNMM3kFZhcPra9FU/NuEd4JI5g/Zk5+3Bg5fbFMWyv8priScDdCDHnP53eBhr PZViEMCWKdNq4hgSQjVN+V0wKVJTSHShxHRI5aShml0kr1ZB/wji3Plhe86YxAaz 8fCUT5XK5TiJTCsuqLdhyg27VCjgweyAe8ovAtjZ8TPHxiZpkpUfX2dILwXa2jlL l0QBHTVSINI52hX99b9bKC+3VA== -----END CERTIFICATE-----Generated at Tue Oct 13 00:06:36 2026 by rpki-client