$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft File: mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json) Hash identifier: YiGezZZ4jxTHP/ztGaID3Fk21CZvDRGbUbHUSna+yn0= Subject key identifier: 02:CA:81:A7:CA:74:F7:7F:A0:54:7C:D6:CE:A2:81:04:3D:7F:7A:A8 Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Certificate serial: 1155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft Manifest number: 1110 Signing time: Sun 04 Oct 2026 17:22:00 +0000 Manifest this update: Sun 04 Oct 2026 17:21:59 +0000 Manifest next update: Sun 11 Oct 2026 17:21:59 +0000 Files and hashes: 1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: +UyhH+IORJdsN1G8/G4K7nj+d3iFwOiJuclKH9Izy2k=) 2: mKPQBXH61YZ-aXWXRBvkP2QM7xw.asa (hash: i+Xzz4/pjjPTXpwn4PpHSHOD48b0E1VC1Rlyg+hKBSo=) 3: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (hash: Q/eCF0AzmK8tNl3R3SFQuYN54I5IONWrSmL4B/NCtck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4437 (0x1155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Validity Not Before: Oct 4 17:21:59 2026 GMT Not After : Oct 11 17:21:59 2026 GMT Subject: CN=6ac28b38-bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:ec:55:92:13:8e:9e:0f:74:f7:82:93:3a: 5c:41:83:40:fd:f6:ef:73:4d:9f:03:9e:a3:61:77: 4e:05:4d:14:a9:49:c9:d0:6d:5f:86:9c:20:e8:04: cd:40:e0:ba:05:40:86:6f:9a:ba:19:94:40:1e:ee: 57:41:93:44:f4:b1:15:3e:6c:29:c2:0b:8d:61:27: 58:a0:40:b4:17:7a:56:f0:95:41:17:a5:c9:58:f0: 59:7d:c5:3a:1c:73:bf:af:9e:ee:a6:c1:bc:18:bd: 22:e3:de:f9:bd:42:ef:f1:56:17:0b:a0:22:b8:1a: 6c:c9:98:5b:35:7b:ca:6f:19:c6:3e:4e:36:e1:fa: d2:0e:c2:3d:03:cd:fa:46:cf:4b:6f:ee:b9:5f:1c: fd:b3:b1:55:bc:83:6a:d7:6e:3d:d2:d2:db:10:f7: c0:87:d0:4a:52:ee:93:1f:79:2c:0c:0a:6a:8a:50: e6:01:6b:f9:f7:df:e0:01:c9:02:10:43:5d:28:b0: ac:d2:e3:6f:54:59:8b:54:b1:5a:6c:13:0d:f0:28: 83:1c:0d:64:dd:89:85:f0:7f:5e:a5:a8:3e:5c:3a: ea:fd:5e:e4:94:9e:00:9f:02:ef:ae:df:e3:3e:9a: 8f:66:24:6b:04:5b:be:3a:35:c9:c2:8f:7a:bd:20: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:81:A7:CA:74:F7:7F:A0:54:7C:D6:CE:A2:81:04:3D:7F:7A:A8 X509v3 Authority Key Identifier: keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3b:a4:c6:a0:a3:ee:c7:15:06:96:dc:d2:ae:a2:16:d4:73: b6:60:a5:41:74:18:22:49:b7:47:b2:db:22:34:a6:62:c9:00: 79:cc:40:0d:a8:45:21:4e:38:d8:89:27:75:18:94:ff:3b:8d: f3:52:68:65:2c:2c:0e:6d:c8:e0:ce:81:6f:d3:f5:50:38:cb: 6b:ea:29:9f:57:17:08:61:70:b5:bc:ce:b7:3c:1a:9f:fb:3e: 99:18:89:01:e2:b4:02:d2:5a:55:dc:9e:19:2f:98:a8:31:73: 5a:04:a5:12:6f:fc:1a:52:38:a4:61:a7:af:ae:94:83:82:14: 1b:a4:81:e6:0f:68:05:71:7d:f7:a9:3a:cf:bb:36:b3:3a:8f: dc:c4:f1:5a:72:cf:a2:70:da:00:41:12:46:48:e4:72:16:2e: 06:2a:01:fb:e3:79:2a:ae:3b:86:96:60:39:4a:a7:9b:e0:18: 85:19:dd:76:cc:bc:42:69:4b:0e:8b:05:fa:87:18:b3:15:f2: 00:29:01:17:bd:39:52:27:9a:da:b6:4f:d8:8e:c1:e5:e6:37: d2:14:3e:97:d3:47:39:2b:5a:20:53:52:ce:de:08:65:ea:ed: 2f:cc:06:2a:b5:34:a7:18:13:13:9f:f7:43:6e:5e:7a:f4:fa: a4:35:79:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy MzNGQzVCNTAwHhcNMjYxMDA0MTcyMTU5WhcNMjYxMDExMTcyMTU5WjAYMRYwFAYD VQQDEw02YWMyOGIzOC1iYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eTsVZITjp4PdPeCkzpcQYNA/fbvc02fA56jYXdOBU0UqUnJ0G1fhpwg6ATN QOC6BUCGb5q6GZRAHu5XQZNE9LEVPmwpwguNYSdYoEC0F3pW8JVBF6XJWPBZfcU6 HHO/r57upsG8GL0i4975vULv8VYXC6AiuBpsyZhbNXvKbxnGPk424frSDsI9A836 Rs9Lb+65Xxz9s7FVvINq12490tLbEPfAh9BKUu6TH3ksDApqilDmAWv599/gAckC EENdKLCs0uNvVFmLVLFabBMN8CiDHA1k3YmF8H9epag+XDrq/V7klJ4AnwLvrt/j PpqPZiRrBFu+OjXJwo96vSBLdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALKgafK dPd/oFR81s6igQQ9f3qoMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0 RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY0Qi81NzcyQUEzMDU0RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3 RzA2T3ROczhDR1lqUDhXMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYjukxqCj7scVBpbc0q6iFtRztmClQXQYIkm3R7LbIjSmYskAecxADahFIU44 2IkndRiU/zuN81JoZSwsDm3I4M6Bb9P1UDjLa+opn1cXCGFwtbzOtzwan/s+mRiJ AeK0AtJaVdyeGS+YqDFzWgSlEm/8GlI4pGGnr66Ug4IUG6SB5g9oBXF996k6z7s2 szqP3MTxWnLPonDaAEESRkjkchYuBioB++N5Kq47hpZgOUqnm+AYhRnddsy8QmlL DosF+ocYsxXyACkBF705Uiea2rZP2I7B5eY30hQ+l9NHOStaIFNSzt4IZertL8wG KrU0pxgTE5/3Q25eevT6pDV5gA== -----END CERTIFICATE-----Generated at Mon Oct 5 22:33:29 2026 by rpki-client