$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft File: EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft (raw, json) Hash identifier: Tp5IyZHgR6aHepjlBUB3ZBdc4N5dRmcI1dfV6Lvlsfg= Subject key identifier: E1:4C:68:BB:21:14:0E:6A:04:42:38:42:B2:AA:BB:06:98:CB:C6:CF Authority key identifier: 12:C2:12:E5:52:A7:BE:11:25:E6:88:4C:6E:94:E3:EF:FE:A2:EE:2C Certificate issuer: /CN=A915F1EE/serialNumber=12C212E552A7BE1125E6884C6E94E3EFFEA2EE2C Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EsIS5VKnvhEl5ohMbpTj7_6i7iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft Manifest number: 43 Signing time: Sun 11 Oct 2026 09:05:50 +0000 Manifest this update: Sun 11 Oct 2026 09:05:49 +0000 Manifest next update: Sun 18 Oct 2026 09:05:49 +0000 Files and hashes: 1: EsIS5VKnvhEl5ohMbpTj7_6i7iw.crl (hash: cOo1VoDymGJNnIG6hk0mr6i9c3ub5xnm0on6rCOu0+c=) 2: 017A767E601E11F1B4F202588C47A888.roa (hash: ywZ3cV8jnJU9gAqeAM8d0zTaMvaA0tktd/xBWII4jEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.crl rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EsIS5VKnvhEl5ohMbpTj7_6i7iw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F1EE, serialNumber=12C212E552A7BE1125E6884C6E94E3EFFEA2EE2C Validity Not Before: Oct 11 09:05:49 2026 GMT Not After : Oct 18 09:05:49 2026 GMT Subject: CN=6acb516e-3e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:ba:47:39:06:27:9a:2a:dd:88:e4:30:11: ee:65:41:bf:8f:e6:a8:31:7c:1b:d7:7c:32:f8:a6: 28:f1:55:e0:cc:73:6d:5f:a5:ba:57:45:e2:77:bc: 74:03:f1:77:e9:c2:8a:f9:f7:87:2b:77:dc:bb:a9: 8c:ed:e1:16:da:88:dd:f1:b7:38:38:56:d2:70:83: 71:1c:4d:fc:75:38:24:cf:92:69:3a:43:50:f3:79: 8d:ac:db:12:6f:bf:77:65:7a:2c:e9:11:0a:93:4b: 4c:8e:5c:a4:3c:64:51:48:44:d6:be:2c:6e:a4:81: 02:9f:a5:bd:ef:2a:c8:67:ce:84:54:b3:a1:f9:75: d1:54:c5:58:e8:3f:1f:c1:47:18:c6:e0:30:b5:d9: 2f:cc:a3:19:f2:42:37:4b:54:9b:2d:30:d0:84:df: 5b:ba:68:53:da:af:c3:81:81:99:24:8d:71:b9:a9: d9:d4:25:91:a1:75:ca:9d:49:b6:99:a3:e5:ed:6b: 5f:26:19:ec:cc:d8:2a:b0:fc:47:4f:4f:79:7f:4d: 57:82:31:50:ef:85:c2:f9:ef:9a:86:11:23:5c:5d: 2b:1d:f1:27:d7:45:e5:0b:93:6d:6d:18:c3:b1:c7: 63:87:a4:26:b8:c6:02:7a:04:79:80:80:ab:e9:2c: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:68:BB:21:14:0E:6A:04:42:38:42:B2:AA:BB:06:98:CB:C6:CF X509v3 Authority Key Identifier: keyid:12:C2:12:E5:52:A7:BE:11:25:E6:88:4C:6E:94:E3:EF:FE:A2:EE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EsIS5VKnvhEl5ohMbpTj7_6i7iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/967B3A7A601D11F1AD70A0368C47A888/EsIS5VKnvhEl5ohMbpTj7_6i7iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:37:8d:cd:9c:7f:24:23:ce:95:4f:55:ef:52:54:a7:ef:02: bf:cb:dc:84:7f:3e:45:81:13:0a:1e:cf:ab:10:61:23:df:0f: ba:99:ae:d0:b5:52:4b:28:46:19:7e:de:2b:55:fc:ab:4a:f8: 2d:9f:f3:1a:4f:24:5f:05:74:6d:16:31:64:0c:a1:3b:bf:de: 4b:75:2c:1b:2d:c5:df:9a:8d:07:5f:cc:dc:8f:b1:2d:09:cb: 2e:07:d6:87:67:22:ae:a4:fe:79:4e:31:21:df:23:82:de:a4: b0:63:d4:c6:b1:48:22:f3:4c:98:71:ba:41:ce:e8:5e:fa:74: 2a:b2:78:59:71:5f:34:19:98:4e:dd:a8:cf:31:20:ab:4f:f4: f1:00:18:4e:eb:1d:e3:ca:74:64:06:68:a5:7d:03:9c:9f:9b: b3:93:21:93:4c:73:51:6f:8d:e7:a8:ad:8f:1b:91:27:9a:4b: e7:c2:36:5d:35:09:52:17:f3:b3:41:cd:cf:cb:ea:a2:25:7b: 5c:c4:43:14:27:78:83:2a:63:48:98:01:99:24:5f:2b:ed:96: f6:36:bb:2f:4d:78:9b:cf:02:a7:77:e8:ea:ed:cf:04:af:07: 8d:99:5a:14:82:0b:69:13:ab:c0:7a:b6:50:f1:31:6e:e5:c2: d4:c0:2a:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RjFFRTExMC8GA1UEBRMoMTJDMjEyRTU1MkE3QkUxMTI1RTY4ODRDNkU5NEUzRUZG RUEyRUUyQzAeFw0yNjEwMTEwOTA1NDlaFw0yNjEwMTgwOTA1NDlaMBgxFjAUBgNV BAMTDTZhY2I1MTZlLTNlMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLRbpHOQYnmirdiOQwEe5lQb+P5qgxfBvXfDL4pijxVeDMc21fpbpXReJ3vHQD 8Xfpwor594crd9y7qYzt4RbaiN3xtzg4VtJwg3EcTfx1OCTPkmk6Q1DzeY2s2xJv v3dleizpEQqTS0yOXKQ8ZFFIRNa+LG6kgQKfpb3vKshnzoRUs6H5ddFUxVjoPx/B RxjG4DC12S/MoxnyQjdLVJstMNCE31u6aFPar8OBgZkkjXG5qdnUJZGhdcqdSbaZ o+Xta18mGezM2Cqw/EdPT3l/TVeCMVDvhcL575qGESNcXSsd8SfXReULk21tGMOx x2OHpCa4xgJ6BHmAgKvpLEoXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4UxouyEU DmoEQjhCsqq7BpjLxs8wHwYDVR0jBBgwFoAUEsIS5VKnvhEl5ohMbpTj7/6i7iww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGMUVFLzk2N0IzQTdBNjAx RDExRjFBRDcwQTAzNjhDNDdBODg4L0VzSVM1VktudmhFbDVvaE1icFRqN182aTdp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRXNJUzVWS252aEVsNW9oTWJwVGo3XzZpN2l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG MUVFLzk2N0IzQTdBNjAxRDExRjFBRDcwQTAzNjhDNDdBODg4L0VzSVM1VktudmhF bDVvaE1icFRqN182aTdpdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCnN43NnH8kI86VT1XvUlSn7wK/y9yEfz5FgRMKHs+rEGEj3w+6ma7QtVJLKEYZ ft4rVfyrSvgtn/MaTyRfBXRtFjFkDKE7v95LdSwbLcXfmo0HX8zcj7EtCcsuB9aH ZyKupP55TjEh3yOC3qSwY9TGsUgi80yYcbpBzuhe+nQqsnhZcV80GZhO3ajPMSCr T/TxABhO6x3jynRkBmilfQOcn5uzkyGTTHNRb43nqK2PG5EnmkvnwjZdNQlSF/Oz Qc3Py+qiJXtcxEMUJ3iDKmNImAGZJF8r7Zb2NrsvTXibzwKnd+jq7c8ErweNmVoU ggtpE6vAerZQ8TFu5cLUwCoz -----END CERTIFICATE-----Generated at Sun Oct 11 18:23:22 2026 by rpki-client