$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json) Hash identifier: Cd20oxx6VEPnmSRXA7CjKY91JamZwn6gF+8RFiv8SOI= Subject key identifier: AB:01:29:9B:0F:D4:D4:80:BD:32:98:A6:1F:D0:D7:B7:B5:22:8F:E5 Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft Manifest number: 6A Signing time: Sat 03 Oct 2026 08:41:07 +0000 Manifest this update: Sat 03 Oct 2026 08:41:06 +0000 Manifest next update: Sat 10 Oct 2026 08:41:06 +0000 Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: RWoHxkS+67pWEiC7UI1gUDYMkbd28Nh6MULA1jumpig=) 2: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=) 3: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Validity Not Before: Oct 3 08:41:06 2026 GMT Not After : Oct 10 08:41:06 2026 GMT Subject: CN=6ac0bfa2-82a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:e7:da:69:7a:88:aa:13:af:9a:74:1d:bc: 38:25:10:c8:85:8d:5c:1b:33:d2:5f:0b:13:e9:f3: 31:44:1a:1e:11:2d:58:7b:3f:89:8c:b3:b7:8d:85: 20:9a:d7:f9:e5:d6:f3:39:61:b4:12:3e:45:8a:55: fa:4f:1e:ac:cb:c1:4e:bf:1f:76:41:33:19:d0:f8: cc:88:e2:cb:91:28:c4:3c:35:ae:4e:ae:5e:2c:c6: 26:81:f1:56:7b:5b:e1:8f:63:11:41:56:6b:d1:7d: 4a:ce:d6:50:32:b5:ac:64:fb:b4:2a:97:9f:60:ca: a3:35:00:2d:3a:bf:fb:d1:9a:35:ec:5b:25:12:6a: 28:67:4f:34:69:0b:29:dc:31:74:50:3a:ec:cf:05: 3f:51:2e:e2:32:d4:07:99:53:e3:1d:06:09:58:e7: b4:24:11:ef:ba:62:b1:39:3b:2b:80:75:ca:44:3f: 0d:41:2b:5a:62:d3:a1:93:67:56:72:2f:35:04:ff: 0f:29:e8:db:c9:29:0d:1d:49:d5:2a:a8:7d:f5:82: 6a:d8:77:83:e9:dc:55:d3:2a:bd:f9:59:24:2f:4a: 6e:8f:8a:22:d6:c8:ac:d4:3f:52:77:ec:af:3e:4d: f1:71:83:b2:fc:8b:1e:94:6e:52:f9:bf:d5:6a:ca: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:29:9B:0F:D4:D4:80:BD:32:98:A6:1F:D0:D7:B7:B5:22:8F:E5 X509v3 Authority Key Identifier: keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:01:8f:05:90:f7:33:9f:b3:37:01:53:a0:c7:49:58:52:7b: 4a:53:0b:97:bd:48:44:71:ae:df:f4:f6:33:b5:88:ae:67:63: f5:e2:c6:a6:15:13:48:7c:d7:69:dc:3a:cd:98:0f:b9:34:ed: 32:0b:c1:29:c4:fa:32:24:c7:61:b1:e1:a6:ed:31:78:ef:e2: d7:16:7a:c8:85:42:30:4f:a8:1c:a7:1b:2a:c9:59:71:5b:e6: cd:d8:79:52:29:71:de:53:51:3a:5e:02:c0:0e:f8:4a:4f:da: de:dc:fb:6a:89:83:76:0c:75:30:8f:00:03:9c:f7:3e:44:73: dd:8f:43:fa:c2:35:c3:8a:ca:76:67:99:39:c3:72:f5:7b:43: 9a:67:d3:41:17:d6:fe:8c:09:25:7c:11:b6:6d:37:9d:13:19: b9:98:40:09:72:30:c5:71:dd:a6:8a:6c:b8:0a:8c:4f:59:4d: 6e:d8:00:6c:2b:a2:41:ce:10:a9:1e:57:a2:31:88:50:33:78: 73:2e:f4:3c:51:d0:ec:0b:40:3e:a6:69:0a:25:90:d6:fb:c4: ea:42:c5:7d:60:7f:1a:98:a9:bb:06:bb:78:51:8f:e6:9c:38: eb:2f:29:e2:3c:6c:1f:4f:47:05:e4:81:f1:b4:52:bb:3a:b0: e5:45:ec:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUMwNTExMC8GA1UEBRMoMDA4RDRGOUY1ODY4RUMyMkE3QTkxRUNBQURDRDdFMEQz QjMxMTE3RjAeFw0yNjEwMDMwODQxMDZaFw0yNjEwMTAwODQxMDZaMBgxFjAUBgNV BAMTDTZhYzBiZmEyLTgyYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAROfaaXqIqhOvmnQdvDglEMiFjVwbM9JfCxPp8zFEGh4RLVh7P4mMs7eNhSCa 1/nl1vM5YbQSPkWKVfpPHqzLwU6/H3ZBMxnQ+MyI4suRKMQ8Na5Orl4sxiaB8VZ7 W+GPYxFBVmvRfUrO1lAytaxk+7Qql59gyqM1AC06v/vRmjXsWyUSaihnTzRpCync MXRQOuzPBT9RLuIy1AeZU+MdBglY57QkEe+6YrE5OyuAdcpEPw1BK1pi06GTZ1Zy LzUE/w8p6NvJKQ0dSdUqqH31gmrYd4Pp3FXTKr35WSQvSm6PiiLWyKzUP1J37K8+ TfFxg7L8ix6UblL5v9VqyuEdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqwEpmw/U 1IC9MpimH9DXt7Uij+UwHwYDVR0jBBgwFoAUAI1Pn1ho7CKnqR7Krc1+DTsxEX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzA1Lzc3QkFDNDMwMUQw MDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NLbnFSN0tyYzEtRFRzeEVY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUkxUG4xaG83Q0tucVI3S3JjMS1EVHN4RVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzA1Lzc3QkFDNDMwMUQwMDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NL bnFSN0tyYzEtRFRzeEVYOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaAY8FkPczn7M3AVOgx0lYUntKUwuXvUhEca7f9PYztYiuZ2P14samFRNIfNdp 3DrNmA+5NO0yC8EpxPoyJMdhseGm7TF47+LXFnrIhUIwT6gcpxsqyVlxW+bN2HlS KXHeU1E6XgLADvhKT9re3PtqiYN2DHUwjwADnPc+RHPdj0P6wjXDisp2Z5k5w3L1 e0OaZ9NBF9b+jAklfBG2bTedExm5mEAJcjDFcd2mimy4CoxPWU1u2ABsK6JBzhCp HleiMYhQM3hzLvQ8UdDsC0A+pmkKJZDW+8TqQsV9YH8amKm7Brt4UY/mnDjrLyni PGwfT0cF5IHxtFK7OrDlRexD -----END CERTIFICATE-----Generated at Sun Oct 4 07:37:46 2026 by rpki-client