$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json) Hash identifier: NTuJYhxEz0WOfdqXFEkMqWDKnnNaQeRg2ICkXziXpgs= Subject key identifier: 69:FB:33:5B:9A:2C:8F:D1:6A:37:75:BB:B2:5D:4A:F4:F2:2F:4C:F9 Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft Manifest number: 4C Signing time: Fri 25 Sep 2026 08:30:18 +0000 Manifest this update: Fri 25 Sep 2026 08:30:18 +0000 Manifest next update: Fri 02 Oct 2026 08:30:18 +0000 Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: hd1LZklMWGIgHOtRo4iMpci7RZX9XLyVhRDdl+kL5y4=) 2: A66886B4491F11F193C776FB9E833773.roa (hash: xXcNcDHlNzFBW5kniWXaJCDFIU93zgQzDwb/xuMFxAc=) 3: A6F2C5C2491F11F193C776FB9E833773.roa (hash: TIPSpd8GDTa/HiS4PdTYKDX+P5DkBR89f8e9l36/XBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: Sep 25 08:30:18 2026 GMT Not After : Oct 2 08:30:18 2026 GMT Subject: CN=6ab6311a-084d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:23:69:8d:42:ff:af:04:0b:f2:ee:77:6b: e7:fe:10:13:8d:0a:85:ef:14:3d:9c:33:80:31:18: 03:05:e2:6c:40:ad:24:41:fb:13:80:8a:1e:01:23: 63:03:d9:1a:50:77:7b:d5:0f:7b:19:b4:7a:79:60: b3:f4:0e:9f:54:94:9a:5e:da:1d:35:04:45:54:6e: fa:c8:ef:2d:4e:2a:f2:f0:eb:2f:63:05:44:ec:72: 89:8c:d2:62:86:7f:26:32:2d:1f:62:37:a3:ee:26: a2:0a:56:3a:07:62:3f:a1:c1:84:23:34:55:ad:36: 34:f1:3e:fd:1a:85:67:a3:b3:14:43:5b:59:47:e0: d1:35:47:54:43:a8:0d:99:75:2d:ca:3e:48:27:35: ad:e7:24:c4:b2:85:88:25:40:f6:f1:8e:47:10:07: 97:e3:6b:b4:0e:0f:3f:20:e1:43:22:ad:0f:6a:32: 05:ad:ba:4e:b8:30:9e:09:e3:01:4b:86:07:e8:97: f4:89:7d:72:d1:c6:bf:c8:f6:ea:62:36:eb:90:34: 02:d8:ff:1e:95:88:7d:5b:08:36:d9:46:1c:33:60: 20:78:c9:a0:d1:c6:06:14:31:6c:b1:02:b4:36:41: 1f:da:cc:1a:8d:60:d0:ef:05:b2:f3:74:40:23:78: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:33:5B:9A:2C:8F:D1:6A:37:75:BB:B2:5D:4A:F4:F2:2F:4C:F9 X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2b:ac:07:10:54:f3:13:62:74:02:3c:cc:38:4e:53:78:30: f4:4f:ca:4e:1d:98:09:35:d9:5d:c0:d8:f3:49:64:52:55:ab: 78:fc:f8:94:a6:0b:96:b7:cc:17:e0:1a:c8:84:c5:9e:ff:49: 4d:0a:1b:81:22:a6:e0:2a:bb:bb:25:39:ae:0c:79:81:24:fa: 22:3c:58:82:24:31:dc:fe:7f:b7:71:11:80:9d:62:fc:06:fc: 60:14:1e:99:a7:8d:df:be:12:c6:49:93:ab:15:38:24:ed:82: d8:48:e8:18:dc:54:33:b7:c5:cf:8a:e9:9e:b3:67:95:76:37: c9:bc:b4:54:73:f0:f0:1c:ac:d6:73:94:e9:cd:f3:ef:67:fe: d7:6f:03:77:60:81:98:5a:5d:f9:2f:ef:96:0d:f4:69:3e:d2: 87:b3:61:f1:b2:dc:9b:88:dd:62:af:73:3b:8b:86:7a:a9:2c: e3:aa:8d:d4:19:99:2e:08:89:90:5a:1a:8a:15:19:8a:05:10: bb:33:fb:a9:13:42:03:ac:37:a9:0d:95:3d:34:0c:e5:de:32: 28:13:b8:b8:dd:cc:10:4f:ca:46:fd:00:26:cf:66:93:49:8e: ea:df:02:e4:6c:09:c3:6d:ec:9d:75:d7:b8:47:2a:d5:c9:32: 2d:f5:c9:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjA5MjUwODMwMThaFw0yNjEwMDIwODMwMThaMBgxFjAUBgNV BAMTDTZhYjYzMTFhLTA4NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCU6SNpjUL/rwQL8u53a+f+EBONCoXvFD2cM4AxGAMF4mxArSRB+xOAih4BI2MD 2RpQd3vVD3sZtHp5YLP0Dp9UlJpe2h01BEVUbvrI7y1OKvLw6y9jBUTscomM0mKG fyYyLR9iN6PuJqIKVjoHYj+hwYQjNFWtNjTxPv0ahWejsxRDW1lH4NE1R1RDqA2Z dS3KPkgnNa3nJMSyhYglQPbxjkcQB5fja7QODz8g4UMirQ9qMgWtuk64MJ4J4wFL hgfol/SJfXLRxr/I9upiNuuQNALY/x6ViH1bCDbZRhwzYCB4yaDRxgYUMWyxArQ2 QR/azBqNYNDvBbLzdEAjeGjbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUafszW5os j9FqN3W7sl1K9PIvTPkwHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE RTA2LzY2OURCNTcyNDkxRjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhU WHZmT2s1NWs4Q1lFcnJQdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2K6wHEFTzE2J0AjzMOE5TeDD0T8pOHZgJNdldwNjzSWRSVat4/PiUpguWt8wX 4BrIhMWe/0lNChuBIqbgKru7JTmuDHmBJPoiPFiCJDHc/n+3cRGAnWL8BvxgFB6Z p43fvhLGSZOrFTgk7YLYSOgY3FQzt8XPiumes2eVdjfJvLRUc/DwHKzWc5TpzfPv Z/7XbwN3YIGYWl35L++WDfRpPtKHs2HxstybiN1ir3M7i4Z6qSzjqo3UGZkuCImQ WhqKFRmKBRC7M/upE0IDrDepDZU9NAzl3jIoE7i43cwQT8pG/QAmz2aTSY7q3wLk bAnDbeyddde4RyrVyTIt9clS -----END CERTIFICATE-----Generated at Sat Sep 26 01:51:52 2026 by rpki-client