$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft File: -D5VvcZ7iLBYj5Yplze0oce1u3o.mft (raw, json) Hash identifier: fICnD5leG7xFom9FJ0CWY2/abhTbke4qRGUCDT/RuT8= Subject key identifier: A5:E1:3A:5A:52:59:AA:D4:A8:FB:76:F1:3E:84:9A:C5:B0:90:D0:6E Authority key identifier: F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A Certificate issuer: /CN=A9134ACE/serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft Manifest number: 36 Signing time: Fri 25 Sep 2026 08:38:57 +0000 Manifest this update: Fri 25 Sep 2026 08:38:57 +0000 Manifest next update: Fri 02 Oct 2026 08:38:57 +0000 Files and hashes: 1: -D5VvcZ7iLBYj5Yplze0oce1u3o.crl (hash: fvRtdCsYO/Tm3OByM8cNMiBqBAOcucwNe5ohhysaeWg=) 2: 29CA3D926EC111F198F60F1C67A30FBC.roa (hash: PgVXYKG5QBRfwHOvukm3uo5F96YGB/Dd8aZakX2oSl8=) 3: 289627426EC111F198F60F1C67A30FBC.roa (hash: uxG9NYEWiWnvCGI2UhFJaVgVq808jt/a6Bx2/OzeOec=) 4: 55C241CA6F6511F1B4C954875DA30FBC.roa (hash: 5dBmRYYWI0L5PUh0/9O11W0jeEUK5EK4hYrRoUKe5IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.crl rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134ACE, serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A Validity Not Before: Sep 25 08:38:57 2026 GMT Not After : Oct 2 08:38:57 2026 GMT Subject: CN=6ab63321-fc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:08:c7:48:17:64:a7:bd:cd:27:0a:be:3e:40: 0a:37:5c:33:5b:95:0d:bc:94:40:e3:36:e4:60:6b: 7d:41:19:92:16:53:27:ef:cc:e2:3a:d7:52:40:0e: 51:20:d3:64:49:af:74:62:c8:c4:c7:b8:b5:7c:30: fe:a1:66:a8:dd:6f:71:2e:ed:76:b6:3f:d5:a9:2b: 4d:36:c1:59:ce:00:ee:eb:e2:88:67:77:e0:b5:0e: bf:2b:31:a0:be:ab:db:89:e8:7f:1d:3b:df:cf:12: 48:64:00:7c:c9:06:a8:1e:76:19:7a:20:79:40:85: 72:a5:fc:3e:11:7f:58:54:cb:6d:8a:0e:1b:c3:99: 43:c4:d2:a8:86:62:60:dc:e5:0d:f0:30:88:14:b2: 1e:33:5e:83:72:94:4b:90:51:a5:2b:74:9a:e9:f1: 99:0d:15:ca:aa:d2:a3:2a:d2:2d:da:67:cb:13:e2: 92:8a:4c:9b:8e:49:67:18:66:80:bd:1c:a6:6f:c9: 80:ca:0f:5f:1c:21:85:77:75:9b:d2:26:42:04:c7: dc:e9:9a:54:fa:39:6f:77:6d:92:09:9b:e8:4e:c0: 21:4d:16:30:ea:5d:78:84:ce:4c:8d:16:1d:50:51: 73:dc:e3:46:6d:04:ba:31:cb:b1:98:f8:24:cc:4c: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:3A:5A:52:59:AA:D4:A8:FB:76:F1:3E:84:9A:C5:B0:90:D0:6E X509v3 Authority Key Identifier: keyid:F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:38:a0:6e:c7:3f:be:a8:59:77:02:b7:e1:46:e8:80:3e:ba: 62:f6:03:f3:8a:32:68:69:77:4a:4a:ef:da:c7:4c:31:df:be: a1:98:22:31:38:f5:f6:0c:22:b2:49:5a:09:5d:21:38:06:eb: 64:90:8d:02:9c:0f:0e:ea:fb:7e:21:b2:a3:43:4e:b2:69:9d: b7:4a:8f:23:1f:76:22:dd:6b:4b:77:ca:33:1f:7c:ff:c9:39: 7f:03:0f:94:37:63:d2:66:b4:2c:7d:28:21:25:c4:37:1b:d4: 92:e5:3f:bb:3f:5d:d2:b5:db:29:83:65:e1:b2:8a:4c:54:38: c2:0f:58:95:de:1f:c5:fa:df:6d:06:df:83:09:71:30:b1:8d: ad:77:9e:b1:78:69:12:33:a5:52:54:77:eb:2c:6d:03:e6:6c: ec:7a:4d:35:d1:c6:dc:8f:5d:a5:a3:0a:12:38:a7:b5:2c:73: b9:b1:e4:72:8f:8e:4e:46:f8:88:a2:6e:eb:22:fa:fe:37:94: 3b:c1:bc:b8:ac:3a:a4:c8:c2:5c:c2:af:ba:cd:3e:ae:52:c2: d4:21:e8:bd:9f:8a:ef:6d:ec:13:f2:f8:84:b1:47:fb:f2:d6: cb:bb:d1:32:6f:a0:9a:64:82:ad:25:a9:f5:aa:3d:c3:a1:3e: 15:68:46:b4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEFDRTExMC8GA1UEBRMoRjgzRTU1QkRDNjdCODhCMDU4OEY5NjI5OTczN0I0QTFD N0I1QkI3QTAeFw0yNjA5MjUwODM4NTdaFw0yNjEwMDIwODM4NTdaMBgxFjAUBgNV BAMTDTZhYjYzMzIxLWZjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzCMdIF2Snvc0nCr4+QAo3XDNblQ28lEDjNuRga31BGZIWUyfvzOI611JADlEg 02RJr3RiyMTHuLV8MP6hZqjdb3Eu7Xa2P9WpK002wVnOAO7r4ohnd+C1Dr8rMaC+ q9uJ6H8dO9/PEkhkAHzJBqgedhl6IHlAhXKl/D4Rf1hUy22KDhvDmUPE0qiGYmDc 5Q3wMIgUsh4zXoNylEuQUaUrdJrp8ZkNFcqq0qMq0i3aZ8sT4pKKTJuOSWcYZoC9 HKZvyYDKD18cIYV3dZvSJkIEx9zpmlT6OW93bZIJm+hOwCFNFjDqXXiEzkyNFh1Q UXPc40ZtBLoxy7GY+CTMTKjXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpeE6WlJZ qtSo+3bxPoSaxbCQ0G4wHwYDVR0jBBgwFoAU+D5VvcZ7iLBYj5Yplze0oce1u3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QUNFLzJGNDg0ODNFNkJB MzExRjE4NURCNDg1QzcwNDdBODg4Ly1ENVZ2Y1o3aUxCWWo1WXBsemUwb2NlMXUz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUQ1VnZjWjdpTEJZajVZcGx6ZTBvY2UxdTNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 QUNFLzJGNDg0ODNFNkJBMzExRjE4NURCNDg1QzcwNDdBODg4Ly1ENVZ2Y1o3aUxC WWo1WXBsemUwb2NlMXUzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnOKBuxz++qFl3ArfhRuiAPrpi9gPzijJoaXdKSu/ax0wx376hmCIxOPX2DCKy SVoJXSE4ButkkI0CnA8O6vt+IbKjQ06yaZ23So8jH3Yi3WtLd8ozH3z/yTl/Aw+U N2PSZrQsfSghJcQ3G9SS5T+7P13Stdspg2XhsopMVDjCD1iV3h/F+t9tBt+DCXEw sY2td56xeGkSM6VSVHfrLG0D5mzsek010cbcj12lowoSOKe1LHO5seRyj45ORviI om7rIvr+N5Q7wby4rDqkyMJcwq+6zT6uUsLUIei9n4rvbewT8viEsUf78tbLu9Ey b6CaZIKtJan1qj3DoT4VaEa0 -----END CERTIFICATE-----Generated at Sat Sep 26 08:56:27 2026 by rpki-client