$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft File: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json) Hash identifier: z16gcTazBmD4AtX3tMpa/v9KaFbV/p4wdnN/tr9eaSk= Subject key identifier: 5E:5E:21:1E:00:12:AB:EB:04:44:39:F9:91:41:48:A7:15:13:7A:8E Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5 Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5 Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft Manifest number: 03A1 Signing time: Sun 19 Oct 2025 02:46:58 +0000 Manifest this update: Sun 19 Oct 2025 02:46:57 +0000 Manifest next update: Sun 26 Oct 2025 02:46:57 +0000 Files and hashes: 1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: x49tz60NdcEzAKC1YlvzrDBqfuVl3exF8miEIYSSc6k=) 2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: EwarSE7FdSsWxJK/6fA7laQx/m5iykaPdE8HA2hirxU=) 3: 422287F0D30511EE8753D541C4F9AE02.roa (hash: bJTC0uNpCv3Td2qGJj2W7jYKPuVi7cZig3G6jfTfNJs=) 4: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: Xtx2mhfHixey8LLZfgW1KcyW2Mk8jnrUzWyvxzziIro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5 Validity Not Before: Oct 19 02:46:57 2025 GMT Not After : Oct 26 02:46:57 2025 GMT Subject: CN=68f45122-8b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:84:6b:a7:3a:3d:57:dc:aa:fc:27:14:0a: 8b:6f:e9:41:77:c6:21:b2:82:a2:af:25:01:fe:fc: dd:35:c1:f2:b0:51:ca:82:77:a5:cc:b5:ef:d5:ef: 62:1b:56:7d:c8:a0:94:25:69:32:46:a0:97:40:58: 2d:d3:1a:92:18:43:d5:0d:55:45:a9:47:f1:7e:4e: d3:ed:f6:2e:c7:52:0a:50:d7:ae:29:84:99:c8:b0: ae:4d:21:fc:d5:1e:d4:26:f4:5e:33:24:44:d9:82: bb:58:88:f5:43:1d:03:3a:0d:e5:80:ac:ee:50:58: 18:f2:53:43:d8:90:94:bd:cf:c4:fa:7a:5f:64:0a: 40:ec:50:24:dc:20:e9:97:58:b8:a8:04:1a:5f:32: 3a:68:0e:5c:cb:04:65:b7:7f:2c:74:e7:23:0c:0a: 06:be:9f:36:e0:22:86:66:f6:2b:56:1c:3b:23:d2: 56:3c:7b:a3:a8:fc:55:6d:69:35:c9:21:69:a5:98: 20:c7:bd:21:78:d1:69:21:0e:0c:2b:60:e7:b5:18: 77:3f:33:f0:ea:dd:59:96:c9:a4:8a:f6:66:d2:ba: 3f:c4:07:13:55:b2:50:45:23:c8:45:ac:2d:71:c0: 70:85:11:92:fd:c0:6c:e2:48:ac:e1:23:d4:0d:a2: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5E:21:1E:00:12:AB:EB:04:44:39:F9:91:41:48:A7:15:13:7A:8E X509v3 Authority Key Identifier: keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0a:54:08:a2:bc:81:2b:a3:4c:3b:16:74:fd:3a:7a:be:44: f6:a8:e1:ef:bf:a3:70:cc:c1:11:e8:48:27:3f:35:6f:55:30: d1:97:5f:53:00:25:6e:75:51:de:8f:b2:64:f9:a7:b8:9b:39: e5:96:2b:66:ba:d4:82:23:3c:a2:c6:69:84:13:e0:2a:f7:74: 66:7f:a1:56:68:78:ba:2c:84:e4:f6:28:a3:a7:74:43:53:4c: 74:1b:70:80:f0:7c:ef:ee:4a:f6:c6:2a:6e:fc:eb:9d:d3:dc: 29:cc:3d:82:77:a2:40:1d:bc:08:2d:b5:45:4c:bc:37:ca:81: ad:81:1d:7e:0b:ae:ba:4b:9f:3e:7f:6a:f6:55:d0:22:73:2f: 5e:fa:03:66:eb:a3:e9:9c:fd:b3:c1:f2:88:49:11:ba:b7:28: 23:55:21:50:0d:46:fd:33:42:99:2c:4a:9e:68:77:42:b1:17: de:c5:4a:74:b4:c3:2c:e6:48:7a:af:cd:7a:ff:12:6f:d0:76: 6b:26:7f:80:76:70:3d:d6:e6:11:89:85:08:f3:0e:1e:41:4b: f0:b0:f2:1d:69:8d:be:e5:66:87:b8:6f:85:1d:44:f2:fa:24: 5d:41:18:0d:0d:de:e5:4e:d1:59:1a:ac:4b:64:ff:b0:7c:bd: c6:85:45:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGNDIxMTAvBgNVBAUTKERCQUZGQzBDMDAyRDQzREM0NzM0NkJDNEUxOUZFQjNF QkYzQkI0RDUwHhcNMjUxMDE5MDI0NjU3WhcNMjUxMDI2MDI0NjU3WjAYMRYwFAYD VQQDEw02OGY0NTEyMi04YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztWEa6c6PVfcqvwnFAqLb+lBd8YhsoKiryUB/vzdNcHysFHKgnelzLXv1e9i G1Z9yKCUJWkyRqCXQFgt0xqSGEPVDVVFqUfxfk7T7fYux1IKUNeuKYSZyLCuTSH8 1R7UJvReMyRE2YK7WIj1Qx0DOg3lgKzuUFgY8lND2JCUvc/E+npfZApA7FAk3CDp l1i4qAQaXzI6aA5cywRlt38sdOcjDAoGvp824CKGZvYrVhw7I9JWPHujqPxVbWk1 ySFppZggx70heNFpIQ4MK2DntRh3PzPw6t1ZlsmkivZm0ro/xAcTVbJQRSPIRawt ccBwhRGS/cBs4kis4SPUDaK08QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5eIR4A EqvrBEQ5+ZFBSKcVE3qOMB8GA1UdIwQYMBaAFNuv/AwALUPcRzRrxOGf6z6/O7TV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUY0Mi82MUY2MDFGQ0JB MjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5eEhOR3ZFNFpfclByODd0 TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI2XzhEQUF0UTl4SE5HdkU0Wl9yUHI4N3ROVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUY0Mi82MUY2MDFGQ0JBMjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5 eEhOR3ZFNFpfclByODd0TlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWClQIoryBK6NMOxZ0/Tp6vkT2qOHvv6NwzMER6EgnPzVvVTDRl19T ACVudVHej7Jk+ae4mznllitmutSCIzyixmmEE+Aq93Rmf6FWaHi6LITk9iijp3RD U0x0G3CA8Hzv7kr2xipu/Oud09wpzD2Cd6JAHbwILbVFTLw3yoGtgR1+C666S58+ f2r2VdAicy9e+gNm66PpnP2zwfKISRG6tygjVSFQDUb9M0KZLEqeaHdCsRfexUp0 tMMs5kh6r816/xJv0HZrJn+AdnA91uYRiYUI8w4eQUvwsPIdaY2+5WaHuG+FHUTy +iRdQRgNDd7lTtFZGqxLZP+wfL3GhUWg -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:23 2025 by rpki-client