$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: 0mEPTH/JQFc/WpXNNMj69KeJ0BZm+HNKMJR4Xm81MR8= Subject key identifier: C9:CE:15:45:C1:CC:A2:20:5B:9E:86:3C:84:A8:60:52:8E:08:8A:17 Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 94 Signing time: Wed 23 Sep 2026 07:17:24 +0000 Manifest this update: Wed 23 Sep 2026 07:17:24 +0000 Manifest next update: Wed 30 Sep 2026 07:17:24 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: Kq1g7k9F+dJ4cVLSgvKn2NwjtHXb4NZBngkidTRLmwM=) 2: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: 8ItpkqdzM33resyCZEvC0U2BYb/s9fpul/z5VeC5Beg=) 3: E611D250118111F1BD19AAF2323D8C67.roa (hash: z55nxPlhbtL11SvF70H5TAGI4+4Xj3SBtnkVzyIbwx4=) 4: 8056379A118511F1AFA21CD3333D8C67.roa (hash: r0nhmRJaSDXSef48LtcxhtRBJQYN9tKah1odz5vET/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Sep 23 07:17:24 2026 GMT Not After : Sep 30 07:17:24 2026 GMT Subject: CN=6ab37d04-a782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:4e:d4:af:e4:db:4c:50:3e:bf:2f:28:84: cb:1f:8c:e2:9d:17:df:48:da:7b:81:71:7b:70:8d: 59:0a:ef:74:66:2b:aa:0e:50:c7:b8:0e:04:8d:95: 0c:fc:d1:34:c7:ae:71:98:63:43:43:0b:06:b7:77: 94:a9:1e:5e:14:4f:45:29:e9:0e:2e:99:db:e6:16: bf:e8:e0:2b:21:0c:34:65:e0:6b:71:c7:fb:9d:11: d3:f1:4f:b2:31:94:28:a0:a0:36:b1:de:b4:4e:0c: 03:18:d8:f5:54:de:35:00:c5:de:73:e3:9e:91:42: 56:9f:5d:53:5c:e1:f8:4c:c0:db:23:00:9e:d5:6d: 75:e8:5e:19:01:27:6d:14:28:4d:05:31:3a:ed:97: 07:c3:3a:65:aa:94:db:8b:06:df:40:0a:ef:2f:28: fa:58:ac:0a:a6:42:0b:9e:87:95:71:65:68:cd:2e: bc:e8:5a:af:2c:7f:e7:cf:e2:cb:27:ef:06:97:c5: 86:30:f2:28:a7:47:21:14:07:3d:01:0e:da:16:41: 3d:b1:99:5d:d1:2c:93:20:17:48:79:5b:58:dc:99: 8b:c1:9f:d8:ab:08:0d:e8:09:05:7e:e0:cb:7d:72: e9:87:9e:55:55:6f:9f:ee:7d:9a:b6:af:9f:07:1b: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CE:15:45:C1:CC:A2:20:5B:9E:86:3C:84:A8:60:52:8E:08:8A:17 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:97:bf:12:ac:0b:73:47:c4:6b:89:5d:2f:0f:b1:3e:95:10: 79:fe:a0:a2:35:fe:4d:a4:bc:76:f1:87:f9:ea:65:1a:08:7c: 81:3d:6d:94:3d:4e:b7:96:7b:d7:fe:f0:1c:ea:4a:c0:ba:b1: 6b:86:6e:7d:57:67:38:fe:20:2c:76:ae:24:89:0d:10:87:fe: 17:b9:d5:fc:41:6a:99:b2:f7:52:5f:73:1a:04:fb:1d:8d:ee: 5a:67:03:e2:b9:dc:11:9d:b3:1e:33:ac:6f:dd:70:75:c5:95: 03:13:e4:29:88:3e:60:8e:72:96:2f:59:ad:30:79:07:df:70: 7a:20:56:da:ad:54:be:a2:6a:55:73:32:8a:28:cb:65:1b:7c: f2:27:55:ca:2b:d6:01:20:d4:41:80:6a:b6:f5:f2:a5:9d:5c: 59:f1:4e:79:d8:f9:d0:10:6e:f6:67:c9:77:b1:e0:43:68:80: c7:31:71:b5:e2:6c:6d:b0:bd:1a:4c:dc:01:f4:b6:8c:97:90: 09:a1:18:26:a0:67:92:4d:5d:83:8a:19:6d:ec:00:f7:a3:12: 17:67:3a:9e:c6:99:81:49:92:e3:a6:e4:8e:1e:36:60:57:fd: dd:52:83:eb:ca:63:99:f7:4e:2a:fa:64:05:9f:53:60:eb:cf: 46:94:8d:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDRDQxMTAvBgNVBAUTKENDMzc2QTY4RkNBM0UwOUYwQ0VCNUMyQ0I5MUIzNERC MTRDM0VCQzkwHhcNMjYwOTIzMDcxNzI0WhcNMjYwOTMwMDcxNzI0WjAYMRYwFAYD VQQDEw02YWIzN2QwNC1hNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1RO1K/k20xQPr8vKITLH4zinRffSNp7gXF7cI1ZCu90ZiuqDlDHuA4EjZUM /NE0x65xmGNDQwsGt3eUqR5eFE9FKekOLpnb5ha/6OArIQw0ZeBrccf7nRHT8U+y MZQooKA2sd60TgwDGNj1VN41AMXec+OekUJWn11TXOH4TMDbIwCe1W116F4ZASdt FChNBTE67ZcHwzplqpTbiwbfQArvLyj6WKwKpkILnoeVcWVozS686FqvLH/nz+LL J+8Gl8WGMPIop0chFAc9AQ7aFkE9sZld0SyTIBdIeVtY3JmLwZ/YqwgN6AkFfuDL fXLph55VVW+f7n2atq+fBxuq2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnOFUXB zKIgW56GPISoYFKOCIoXMB8GA1UdIwQYMBaAFMw3amj8o+CfDOtcLLkbNNsUw+vJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RENENC9CMTcxREI1MEUx QUExMUYwQUZDRTg0Qjg0QTZGNTZCQy96RGRxYVB5ajRKOE02MXdzdVJzMDJ4VEQ2 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RENENC9CMTcxREI1MEUxQUExMUYwQUZDRTg0Qjg0QTZGNTZCQy96RGRxYVB5ajRK OE02MXdzdVJzMDJ4VEQ2OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbpe/EqwLc0fEa4ldLw+xPpUQef6gojX+TaS8dvGH+eplGgh8gT1tlD1Ot5Z7 1/7wHOpKwLqxa4ZufVdnOP4gLHauJIkNEIf+F7nV/EFqmbL3Ul9zGgT7HY3uWmcD 4rncEZ2zHjOsb91wdcWVAxPkKYg+YI5yli9ZrTB5B99weiBW2q1UvqJqVXMyiijL ZRt88idVyivWASDUQYBqtvXypZ1cWfFOedj50BBu9mfJd7HgQ2iAxzFxteJsbbC9 GkzcAfS2jJeQCaEYJqBnkk1dg4oZbewA96MSF2c6nsaZgUmS46bkjh42YFf93VKD 68pjmfdOKvpkBZ9TYOvPRpSNLQ== -----END CERTIFICATE-----Generated at Thu Sep 24 10:42:19 2026 by rpki-client