$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft File: COwCa3IBEF3wGNr4ULcZELpYAwY.mft (raw, json) Hash identifier: eG5w+/RS7SJ/hMOvQhDlbnOKEijvmeW1nmEID9F/exw= Subject key identifier: 51:79:6F:97:84:B6:7D:A3:EC:36:DF:8D:C5:25:41:87:C6:A2:24:69 Authority key identifier: 08:EC:02:6B:72:01:10:5D:F0:18:DA:F8:50:B7:19:10:BA:58:03:06 Certificate issuer: /CN=A9134CD9/serialNumber=08EC026B7201105DF018DAF850B71910BA580306 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft Manifest number: 13 Signing time: Mon 21 Sep 2026 09:04:44 +0000 Manifest this update: Mon 21 Sep 2026 09:04:43 +0000 Manifest next update: Mon 28 Sep 2026 09:04:43 +0000 Files and hashes: 1: COwCa3IBEF3wGNr4ULcZELpYAwY.crl (hash: fu+4xkrzFv4/RZ/nWCUQisHbcTR1SRNxFuYv7f9U6tU=) 2: 346015149FAA11F18A4BD64D4911F970.roa (hash: xMDQ0XhWAWaoanvZWQtN3I67/HGwd3Ohi7M3HcKd728=) 3: 493783609FA911F1B2ACC7364911F970.roa (hash: lO9x2oeRHMKI3wOMQDLPu/lHsoPi+cw5eRdb+A72Kqk=) 4: 0YuCPb2TW_3Nq6dJ1ZDnoLovBLw.asa (hash: KAYwvPMcGr7oM0tvftAF7gZaGAm623uX2PgfoGx/NOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.crl rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CD9, serialNumber=08EC026B7201105DF018DAF850B71910BA580306 Validity Not Before: Sep 21 09:04:43 2026 GMT Not After : Sep 28 09:04:43 2026 GMT Subject: CN=6ab0f32c-5788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ec:db:7f:d7:94:bf:f9:bc:a6:af:d1:88:95: 7e:9c:12:45:3b:71:b9:b8:36:de:4a:e3:b0:aa:4d: 77:c3:af:82:55:b6:b9:61:34:1d:12:8f:7e:01:b9: 13:e3:03:94:d4:c6:01:16:3f:85:4f:e6:c7:55:f7: c2:a1:83:9a:b1:ef:a9:ac:a8:44:ef:58:a3:c8:cc: db:f8:8c:98:28:f3:2d:e8:ae:86:5f:bb:1b:14:41: 05:f4:e6:7c:03:1f:c3:77:f5:af:25:8a:91:fb:ba: 53:50:92:18:19:a5:41:78:c9:f9:37:a4:a5:d5:df: 14:92:ea:aa:7e:ea:dc:68:07:d7:eb:11:1b:7a:65: a4:39:41:ef:65:ec:97:82:ac:c4:c2:ca:fb:db:4e: 54:08:1f:e0:9d:1e:9a:7f:1e:25:a4:c4:39:72:4e: 63:f5:2d:0a:c9:9e:a2:73:b2:df:a2:86:f5:5b:1b: f4:46:79:d5:fc:9f:93:f2:6a:78:23:a9:08:b2:05: 26:35:52:3f:62:ff:11:a9:0f:2f:c4:83:8c:01:88: 59:cf:89:f0:4f:5b:4f:8b:d2:09:47:48:67:6c:bd: 21:bd:67:94:8d:ef:fd:de:3a:16:4f:88:5b:4b:36: 0c:a1:af:09:39:d1:8f:6b:4f:05:4e:75:75:be:2b: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:6F:97:84:B6:7D:A3:EC:36:DF:8D:C5:25:41:87:C6:A2:24:69 X509v3 Authority Key Identifier: keyid:08:EC:02:6B:72:01:10:5D:F0:18:DA:F8:50:B7:19:10:BA:58:03:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:63:d9:ea:16:10:a9:dd:a4:13:17:fc:fe:e6:f4:f6:62: 79:e4:9b:3c:62:27:36:b7:5f:13:4a:d6:82:b6:9e:bc:54:7c: b5:4b:00:e1:0e:1b:10:8d:ef:11:9f:58:ad:a8:f7:3e:a1:e7: c4:6a:22:16:73:8b:e6:7e:03:96:b0:94:96:77:d8:61:b1:f1: 3c:14:5f:d8:ce:70:a3:0e:6d:81:e5:02:78:f5:fd:57:ed:78: 0c:5e:a3:b5:5e:69:1e:fb:10:9a:f3:3f:90:99:d0:92:50:94: ca:fd:6b:52:f3:11:ff:25:25:25:bf:05:ab:b0:64:97:55:6d: a7:d9:20:b4:fa:94:bd:d8:70:5a:16:c6:e9:5f:3c:43:6e:f5: 88:d4:fa:65:fb:f1:ec:ca:7c:f1:d6:93:7b:01:3c:c3:84:16: dc:92:a4:4f:0e:ff:98:e3:f1:58:9e:4b:45:76:a6:a0:3d:c6: 65:55:68:bd:40:48:bd:af:cb:24:dd:b1:8a:16:65:6e:78:13: 3a:74:cb:86:02:14:29:76:38:2e:37:93:91:6d:a3:74:09:25: aa:f1:5b:47:dd:ea:b4:b1:0f:ba:25:51:0b:96:8c:9e:cc:6f: 2d:a8:7a:5d:01:b2:04:73:91:44:fd:8a:17:a8:e4:6a:00:c8: 40:f8:d5:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NENEOTExMC8GA1UEBRMoMDhFQzAyNkI3MjAxMTA1REYwMThEQUY4NTBCNzE5MTBC QTU4MDMwNjAeFw0yNjA5MjEwOTA0NDNaFw0yNjA5MjgwOTA0NDNaMBgxFjAUBgNV BAMTDTZhYjBmMzJjLTU3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDq7Nt/15S/+bymr9GIlX6cEkU7cbm4Nt5K47CqTXfDr4JVtrlhNB0Sj34BuRPj A5TUxgEWP4VP5sdV98Khg5qx76msqETvWKPIzNv4jJgo8y3oroZfuxsUQQX05nwD H8N39a8lipH7ulNQkhgZpUF4yfk3pKXV3xSS6qp+6txoB9frERt6ZaQ5Qe9l7JeC rMTCyvvbTlQIH+CdHpp/HiWkxDlyTmP1LQrJnqJzst+ihvVbG/RGedX8n5Pyangj qQiyBSY1Uj9i/xGpDy/Eg4wBiFnPifBPW0+L0glHSGdsvSG9Z5SN7/3eOhZPiFtL Ngyhrwk50Y9rTwVOdXW+K/TdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUXlvl4S2 faPsNt+NxSVBh8aiJGkwHwYDVR0jBBgwFoAUCOwCa3IBEF3wGNr4ULcZELpYAwYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Q0Q5L0U3ODQ5NTkwOUZB ODExRjE4NjQzOEMxOTQ5MTFGOTcwL0NPd0NhM0lCRUYzd0dOcjRVTGNaRUxwWUF3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ093Q2EzSUJFRjN3R05yNFVMY1pFTHBZQXdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 Q0Q5L0U3ODQ5NTkwOUZBODExRjE4NjQzOEMxOTQ5MTFGOTcwL0NPd0NhM0lCRUYz d0dOcjRVTGNaRUxwWUF3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNuGPZ6hYQqd2kExf8/ub09mJ55Js8Yic2t18TStaCtp68VHy1SwDhDhsQje8R n1itqPc+oefEaiIWc4vmfgOWsJSWd9hhsfE8FF/YznCjDm2B5QJ49f1X7XgMXqO1 Xmke+xCa8z+QmdCSUJTK/WtS8xH/JSUlvwWrsGSXVW2n2SC0+pS92HBaFsbpXzxD bvWI1Ppl+/Hsynzx1pN7ATzDhBbckqRPDv+Y4/FYnktFdqagPcZlVWi9QEi9r8sk 3bGKFmVueBM6dMuGAhQpdjguN5ORbaN0CSWq8VtH3eq0sQ+6JVELloyezG8tqHpd AbIEc5FE/YoXqORqAMhA+NUu -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:28 2026 by rpki-client