$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: LFVYUCMqxNKjd3denL3vdKIOsfggrUsHrblinNLQpq0= Subject key identifier: 14:39:68:B2:51:FB:7F:17:12:88:73:FF:43:D0:22:FE:B2:B8:72:E0 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 01A3 Signing time: Wed 23 Sep 2026 04:00:58 +0000 Manifest this update: Wed 23 Sep 2026 04:00:57 +0000 Manifest next update: Wed 30 Sep 2026 04:00:57 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: o8Stx4btL1AkL/cq0A0mWI2Yr1Nkun61pfYIsbJV95g=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: r4s86w8kUPh2Ayt425Fs7qlK2WFWesJZiNchbJioMHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Sep 23 04:00:57 2026 GMT Not After : Sep 30 04:00:57 2026 GMT Subject: CN=6ab34efa-5332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:24:20:df:c1:d2:80:0f:36:51:5e:9f:66: f2:ee:ba:b5:02:3b:46:e8:96:04:6d:d5:44:04:db: 7f:4c:36:4d:52:cb:2e:0b:de:09:e6:24:05:72:e0: b8:dd:1f:c7:16:a8:77:1a:0c:b6:05:d3:22:b6:eb: 85:c5:20:59:b9:3c:8e:ff:dd:96:ab:98:eb:c9:99: 56:39:25:2a:09:1f:64:7b:3d:20:f6:8a:7a:4c:a9: 72:87:e4:71:ca:64:ac:02:df:9c:7e:60:61:12:71: 61:bf:42:b6:d5:3b:17:1d:c3:2d:c5:7d:13:9c:75: ff:cd:2c:32:3d:f1:f8:81:b0:24:49:e6:f6:b8:c0: d1:77:a4:c8:e5:60:62:a7:96:0f:7b:1c:5d:9c:1b: 96:f0:1f:29:20:51:de:11:9e:64:98:54:ab:e9:fa: 46:06:5f:a3:03:54:7d:3f:99:06:c8:90:7c:5c:c1: 2f:2b:65:e6:86:35:dd:ad:02:89:a7:df:eb:f7:6b: 52:09:3a:6e:e9:81:b3:0b:a4:74:85:1e:07:ba:17: c7:08:b3:95:41:12:be:aa:15:f8:64:d1:ae:b3:50: f1:c0:6a:68:32:bc:0a:4d:1b:cd:7c:c1:3d:c6:54: 83:f8:0f:48:06:c6:a5:2c:45:44:14:1e:5e:77:38: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:39:68:B2:51:FB:7F:17:12:88:73:FF:43:D0:22:FE:B2:B8:72:E0 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:91:64:2a:91:4f:90:e6:9f:57:64:b1:8d:11:64:31:aa:b5: 3a:49:65:55:77:91:4d:fd:9d:a4:e4:bb:78:36:2e:55:f8:c3: 84:75:3e:3b:0f:e5:33:ea:e1:6d:6f:44:79:7e:cc:f8:52:8d: 62:2e:6c:5b:c1:d7:e0:6a:1e:c0:1a:2e:64:bd:9e:75:45:78: 78:55:ba:5f:b7:e4:19:77:65:66:f0:14:3a:f3:df:6d:b1:55: fb:dd:6f:b3:64:3c:c0:76:1e:54:5a:71:92:e0:9e:3a:6d:b6: 28:c5:25:4e:a0:5b:06:e5:2d:4d:dd:8f:0a:77:a2:73:b0:50: b8:38:f6:c4:6c:97:d7:50:70:e9:a5:77:62:3e:4a:22:f7:60: a7:fa:ed:b0:4a:65:d3:42:e0:f2:12:d5:7f:02:eb:70:b9:37: 17:a1:e8:5c:06:9b:a7:cc:75:97:15:aa:ac:e3:18:44:db:23: 7c:b3:dc:73:f3:29:43:f6:55:ee:67:dc:86:4b:5c:9e:3f:23: f6:01:ab:d9:16:ac:09:90:ed:3b:05:37:af:55:04:b3:fe:bc: 61:46:66:14:80:a5:a5:d5:85:22:00:54:be:21:13:68:86:17: 62:fa:8c:f9:c0:56:ab:e3:28:40:ca:63:b5:e1:52:7e:9b:c0: 7c:f4:6c:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjYwOTIzMDQwMDU3WhcNMjYwOTMwMDQwMDU3WjAYMRYwFAYD VQQDEw02YWIzNGVmYS01MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXUkIN/B0oAPNlFen2by7rq1AjtG6JYEbdVEBNt/TDZNUssuC94J5iQFcuC4 3R/HFqh3Ggy2BdMituuFxSBZuTyO/92Wq5jryZlWOSUqCR9kez0g9op6TKlyh+Rx ymSsAt+cfmBhEnFhv0K21TsXHcMtxX0TnHX/zSwyPfH4gbAkSeb2uMDRd6TI5WBi p5YPexxdnBuW8B8pIFHeEZ5kmFSr6fpGBl+jA1R9P5kGyJB8XMEvK2XmhjXdrQKJ p9/r92tSCTpu6YGzC6R0hR4HuhfHCLOVQRK+qhX4ZNGus1DxwGpoMrwKTRvNfME9 xlSD+A9IBsalLEVEFB5edzhynQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQ5aLJR +38XEohz/0PQIv6yuHLgMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZJFkKpFPkOafV2SxjRFkMaq1OkllVXeRTf2dpOS7eDYuVfjDhHU+Ow/lM+rh bW9EeX7M+FKNYi5sW8HX4GoewBouZL2edUV4eFW6X7fkGXdlZvAUOvPfbbFV+91v s2Q8wHYeVFpxkuCeOm22KMUlTqBbBuUtTd2PCneic7BQuDj2xGyX11Bw6aV3Yj5K Ivdgp/rtsEpl00Lg8hLVfwLrcLk3F6HoXAabp8x1lxWqrOMYRNsjfLPcc/MpQ/ZV 7mfchktcnj8j9gGr2RasCZDtOwU3r1UEs/68YUZmFIClpdWFIgBUviETaIYXYvqM +cBWq+MoQMpjteFSfpvAfPRsSQ== -----END CERTIFICATE-----Generated at Wed Sep 23 20:21:46 2026 by rpki-client