$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft File: v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft (raw, json) Hash identifier: jR/VM5FB4t8iCfAsPpbTHmX8MVlCEWbgD7q1DcthDGU= Subject key identifier: 2A:98:AC:80:CC:E0:DC:42:63:D5:D7:9A:AC:26:F5:4D:D8:B8:23:48 Authority key identifier: BF:53:5A:8B:D6:62:04:B8:8A:80:4E:13:FF:D3:F6:38:7E:43:4D:68 Certificate issuer: /CN=A9128478/serialNumber=BF535A8BD66204B88A804E13FFD3F6387E434D68 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft Manifest number: 0E Signing time: Sun 11 Oct 2026 09:50:39 +0000 Manifest this update: Sun 11 Oct 2026 09:50:38 +0000 Manifest next update: Sun 18 Oct 2026 09:50:38 +0000 Files and hashes: 1: v1Nai9ZiBLiKgE4T_9P2OH5DTWg.crl (hash: a1q4UjS9jE4FK3UKb4IDyAE2S2v3pYoD4Xt0Z7bmCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.crl rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 07:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128478, serialNumber=BF535A8BD66204B88A804E13FFD3F6387E434D68 Validity Not Before: Oct 11 09:50:38 2026 GMT Not After : Oct 18 09:50:38 2026 GMT Subject: CN=6acb5bee-7dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:e3:02:3e:12:2c:d6:22:8d:c7:85:53:2c: cd:f3:79:20:76:66:06:10:a8:c4:74:2d:a4:9e:47: f6:35:86:c3:88:71:72:9b:a2:c7:be:47:21:bf:3e: e6:bb:19:8a:84:25:19:71:fd:40:39:ae:7a:cf:a2: 97:89:5a:17:d9:c8:e2:a5:15:61:45:b7:4e:45:91: 14:79:3e:4d:50:ee:cf:d6:ed:bc:b7:69:0d:8f:d4: b0:72:49:94:4f:76:4e:95:92:01:bd:0b:c0:36:f1: 6b:13:57:40:ad:08:1e:c8:24:61:13:56:73:fa:04: 7e:de:d8:3e:44:e1:39:a4:4c:76:36:d0:86:34:98: 38:c8:f9:c6:be:5a:a3:d5:54:09:9a:ad:e9:0c:ec: 3a:b4:94:0c:ee:83:34:e6:46:55:b8:5e:35:7e:0b: eb:81:14:d0:31:53:6f:e3:66:57:c5:95:2f:4c:0a: d4:de:2a:69:07:61:b0:73:c1:3c:03:d8:b4:6e:f9: 77:4c:83:bd:62:50:f2:fb:e3:5e:7f:55:35:2b:3b: bb:b2:cd:d0:3c:e8:cc:f5:48:76:76:47:d1:5d:ff: a3:fe:86:6c:46:ed:81:8b:21:08:06:a8:b1:26:64: c5:b5:30:9d:46:76:c9:f6:59:be:1c:a6:3e:dc:77: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:AC:80:CC:E0:DC:42:63:D5:D7:9A:AC:26:F5:4D:D8:B8:23:48 X509v3 Authority Key Identifier: keyid:BF:53:5A:8B:D6:62:04:B8:8A:80:4E:13:FF:D3:F6:38:7E:43:4D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:e6:fc:60:7c:c7:ba:ab:2c:b3:f4:37:02:58:56:c4:90: 0a:ef:b9:9b:98:f1:e3:b3:03:7c:6b:17:0e:5e:01:c1:66:c5: 2b:87:e0:01:7b:6a:09:f9:3f:68:6d:3a:70:9d:18:e2:74:41: 8b:0b:9b:73:5d:e2:ba:b1:3f:cb:63:5f:44:f3:61:11:83:ef: 07:3e:e1:63:73:65:03:4c:67:5a:6d:82:fd:85:f9:ef:cb:6b: 50:3a:32:02:2b:63:04:6d:73:ef:14:d7:43:58:64:7a:d1:65: b4:c5:08:fe:77:81:68:53:85:c6:5a:14:cb:d3:3a:5b:29:02: 7f:63:ce:60:d7:87:49:b3:33:16:1a:e5:d8:1d:46:a4:2c:65: 6e:ca:4b:85:96:99:bb:55:0b:5f:83:65:32:e0:57:4c:9c:03: 5f:10:41:3f:8c:59:7f:b2:07:12:4e:8a:12:ff:3f:89:6a:97: d3:39:54:8f:29:78:b5:48:3d:f8:0a:e2:e8:df:26:ec:00:c2: c5:ff:bd:c2:0b:76:65:dd:a9:ae:87:96:79:d6:3d:55:dd:4a: c6:62:4f:03:86:82:e6:0b:9f:57:cb:03:e2:e1:02:9c:41:bb: c6:48:83:3d:b6:14:01:e3:cc:49:74:e5:7e:79:34:1a:13:92: e4:33:1e:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODQ3ODExMC8GA1UEBRMoQkY1MzVBOEJENjYyMDRCODhBODA0RTEzRkZEM0Y2Mzg3 RTQzNEQ2ODAeFw0yNjEwMTEwOTUwMzhaFw0yNjEwMTgwOTUwMzhaMBgxFjAUBgNV BAMTDTZhY2I1YmVlLTdkYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCEAuMCPhIs1iKNx4VTLM3zeSB2ZgYQqMR0LaSeR/Y1hsOIcXKbose+RyG/Pua7 GYqEJRlx/UA5rnrPopeJWhfZyOKlFWFFt05FkRR5Pk1Q7s/W7by3aQ2P1LBySZRP dk6VkgG9C8A28WsTV0CtCB7IJGETVnP6BH7e2D5E4TmkTHY20IY0mDjI+ca+WqPV VAmarekM7Dq0lAzugzTmRlW4XjV+C+uBFNAxU2/jZlfFlS9MCtTeKmkHYbBzwTwD 2LRu+XdMg71iUPL7415/VTUrO7uyzdA86Mz1SHZ2R9Fd/6P+hmxG7YGLIQgGqLEm ZMW1MJ1Gdsn2Wb4cpj7cd/SNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKpisgMzg 3EJj1dearCb1Tdi4I0gwHwYDVR0jBBgwFoAUv1Nai9ZiBLiKgE4T/9P2OH5DTWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NDc4LzUxOTM2QTI4QjI5 QzExRjE5MzM5RUEzMTQwMTFGOTcwL3YxTmFpOVppQkxpS2dFNFRfOVAyT0g1RFRX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjFOYWk5WmlCTGlLZ0U0VF85UDJPSDVEVFdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NDc4LzUxOTM2QTI4QjI5QzExRjE5MzM5RUEzMTQwMTFGOTcwL3YxTmFpOVppQkxp S2dFNFRfOVAyT0g1RFRXZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPMOb8YHzHuqsss/Q3AlhWxJAK77mbmPHjswN8axcOXgHBZsUrh+ABe2oJ+T9o bTpwnRjidEGLC5tzXeK6sT/LY19E82ERg+8HPuFjc2UDTGdabYL9hfnvy2tQOjIC K2MEbXPvFNdDWGR60WW0xQj+d4FoU4XGWhTL0zpbKQJ/Y85g14dJszMWGuXYHUak LGVuykuFlpm7VQtfg2Uy4FdMnANfEEE/jFl/sgcSTooS/z+JapfTOVSPKXi1SD34 CuLo3ybsAMLF/73CC3Zl3amuh5Z51j1V3UrGYk8DhoLmC59XywPi4QKcQbvGSIM9 thQB48xJdOV+eTQaE5LkMx5o -----END CERTIFICATE-----Generated at Sun Oct 11 15:08:34 2026 by rpki-client