$ rpki-client -vvvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: VZFCUobw50qdcdXnTPGzesXYwQN8sbQ7ewj+LtkkDC0= Subject key identifier: A7:FD:26:72:EA:88:2D:EC:15:94:CD:1E:69:D1:62:60:67:91:84:54 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0C8F Signing time: Tue 22 Sep 2026 18:30:27 +0000 Manifest this update: Tue 22 Sep 2026 18:30:27 +0000 Manifest next update: Tue 29 Sep 2026 18:30:27 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: nueoy5Dy6127mJh6iX7c93zrbIzWRICINvX4SlIRzec=) 2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=) 3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Sep 22 18:30:27 2026 GMT Not After : Sep 29 18:30:27 2026 GMT Subject: CN=6ab2c943-87bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:f7:1b:c3:9f:ad:32:92:e4:2d:53:21:3c: 29:bc:33:45:ac:7e:62:ec:13:b1:3f:51:7b:58:01: 6d:f4:b4:83:b2:14:80:c0:f0:e3:a5:36:91:9f:3c: 24:99:03:f0:28:af:be:b9:6f:df:0d:0f:f5:5a:38: cb:b6:ea:9e:be:7a:75:5b:80:af:71:ed:78:66:62: 69:a6:45:a8:cf:bb:0f:ac:3b:31:98:df:5d:f5:e8: 87:d2:83:c8:27:be:01:be:0b:75:c9:a6:9a:53:dc: f1:31:ea:41:0a:85:6e:6b:dc:33:37:08:61:e2:19: 29:0b:58:b0:6f:6e:e4:12:92:d4:c4:4c:0e:f0:e1: 5b:99:fc:50:46:f4:86:7b:cb:ec:75:68:d0:e2:2b: d2:81:07:2a:9c:26:0b:28:bf:a1:ef:ed:4b:e7:4c: f8:10:3a:68:39:f6:fb:a6:9e:65:42:b8:57:71:e9: e3:ca:0f:e8:70:21:a6:d3:27:46:ff:67:55:a0:27: 9d:d2:7e:0f:4e:e5:2b:7e:12:51:4d:08:e5:a9:17: 5c:b8:a4:4d:8f:8b:99:cb:5e:82:4d:f5:a0:2a:7f: f2:e3:a0:bc:5f:5d:09:ad:95:6e:d6:9d:47:93:3e: a6:c2:19:59:04:b9:ae:68:cc:5b:7e:4b:bd:da:40: 58:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:26:72:EA:88:2D:EC:15:94:CD:1E:69:D1:62:60:67:91:84:54 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:6d:65:84:0e:fe:c2:bd:ad:1d:ab:a0:79:35:17:e5:92:0a: 9a:5f:49:f8:9f:61:73:ca:f6:2c:60:da:ea:bc:81:4d:6a:15: 36:dd:bd:38:86:94:3d:05:1c:e8:72:da:af:f7:85:a2:13:12: 8f:39:dc:ce:5e:d4:18:7c:89:0d:0a:4a:02:fc:07:12:c8:9d: 3a:ca:23:da:dd:9f:1b:ac:64:50:29:4f:44:db:b2:56:d6:0e: 70:ba:4c:90:82:65:40:a6:3a:7b:dd:dd:a5:f3:b4:25:1c:8e: 20:39:c8:e0:f3:70:55:54:18:fa:c5:30:5a:cb:93:a6:9c:e4: 0b:9c:35:39:ac:b9:0a:28:ac:a4:ea:12:75:00:02:c9:af:c8: a1:4b:0b:77:de:1f:60:9d:49:21:7b:7e:1c:54:7a:6d:3b:81: 89:2e:9a:94:92:8c:26:31:7f:51:97:a4:9d:3b:66:e5:00:6c: 2f:d2:60:a7:57:b2:4a:21:14:5a:db:4c:43:d2:8e:d5:8c:c0: b0:c2:1a:9b:b7:2c:ff:d0:f1:4a:3a:41:b1:93:b8:cc:1a:3e: bb:a1:ce:de:36:d3:fd:cf:f9:0e:9b:13:93:06:76:9f:e6:d3: 90:7f:e8:05:70:81:aa:43:1d:5f:b6:cc:fb:5f:c0:7b:49:9a: 48:01:1c:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjYwOTIyMTgzMDI3WhcNMjYwOTI5MTgzMDI3WjAYMRYwFAYD VQQDEw02YWIyYzk0My04N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZP3G8OfrTKS5C1TITwpvDNFrH5i7BOxP1F7WAFt9LSDshSAwPDjpTaRnzwk mQPwKK++uW/fDQ/1WjjLtuqevnp1W4Cvce14ZmJppkWoz7sPrDsxmN9d9eiH0oPI J74Bvgt1yaaaU9zxMepBCoVua9wzNwhh4hkpC1iwb27kEpLUxEwO8OFbmfxQRvSG e8vsdWjQ4ivSgQcqnCYLKL+h7+1L50z4EDpoOfb7pp5lQrhXcenjyg/ocCGm0ydG /2dVoCed0n4PTuUrfhJRTQjlqRdcuKRNj4uZy16CTfWgKn/y46C8X10JrZVu1p1H kz6mwhlZBLmuaMxbfku92kBYtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKf9JnLq iC3sFZTNHmnRYmBnkYRUMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwW1lhA7+wr2tHaugeTUX5ZIKml9J+J9hc8r2LGDa6ryBTWoVNt29OIaUPQUc 6HLar/eFohMSjznczl7UGHyJDQpKAvwHEsidOsoj2t2fG6xkUClPRNuyVtYOcLpM kIJlQKY6e93dpfO0JRyOIDnI4PNwVVQY+sUwWsuTppzkC5w1Oay5CiispOoSdQAC ya/IoUsLd94fYJ1JIXt+HFR6bTuBiS6alJKMJjF/UZeknTtm5QBsL9Jgp1eySiEU WttMQ9KO1YzAsMIam7cs/9DxSjpBsZO4zBo+u6HO3jbT/c/5DpsTkwZ2n+bTkH/o BXCBqkMdX7bM+1/Ae0maSAEcqA== -----END CERTIFICATE-----Generated at Thu Sep 24 14:25:30 2026 by rpki-client