$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json) Hash identifier: vH4UnnGlT3qlKzttAzvyJaKnQLrLCYKi/iZjpQGqL6Q= Subject key identifier: FC:C4:90:AD:E8:FF:95:64:DF:1A:48:CA:E9:8B:AD:44:A7:42:7E:66 Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft Manifest number: 027D Signing time: Fri 25 Sep 2026 02:03:45 +0000 Manifest this update: Fri 25 Sep 2026 02:03:44 +0000 Manifest next update: Fri 02 Oct 2026 02:03:44 +0000 Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: /jAvcBfnyoiwfb866X0NDDjaNWhsHuj0xXrTaLS2lfg=) 2: D91C7DD6B7BF11F18286FEA15E11F970.roa (hash: +1VV6DN4ESBcwJus+3vUWYfHCZpEb8gf7Dch8Lwy0U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Sep 25 02:03:44 2026 GMT Not After : Oct 2 02:03:44 2026 GMT Subject: CN=6ab5d681-ec2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:85:69:7e:7d:e9:f6:5c:86:9b:c0:ce:32: d4:43:41:92:89:f9:33:58:bf:d8:5f:6f:83:56:c3: 65:b6:21:27:04:4d:71:a3:89:4f:e2:7f:1b:f2:24: 38:84:4c:f3:77:94:e0:c4:4f:ce:6c:5d:34:e5:82: 30:e5:aa:92:85:82:e2:0a:c4:e0:57:98:d1:da:0a: 7b:08:c2:e9:36:bd:c6:fc:80:3c:9a:90:c5:e5:e4: a4:c5:1f:65:3c:85:ef:98:0e:44:88:7a:09:dc:13: d5:91:22:44:c1:ca:af:b7:da:8f:ca:cd:cb:ce:fd: a4:24:5c:ff:41:20:9f:a6:04:34:97:cb:69:8d:23: c6:01:a1:a3:7c:2c:ef:7e:33:6b:58:78:c3:26:6f: 78:55:8f:74:37:af:49:76:f9:95:c1:ff:31:4f:0b: a0:9d:be:d5:9f:7b:b6:d3:ce:2d:90:d3:01:ec:fc: f5:29:1e:92:f6:c7:80:27:0f:0e:31:cd:8b:cf:d6: d7:06:9e:e2:b9:a1:6a:7a:d3:4b:79:6b:d0:69:3a: cf:19:4d:0d:a9:6d:8e:a7:a0:c9:c2:70:1b:a9:ba: b9:1c:a0:53:c2:03:6c:4b:6d:b4:3d:15:d7:b6:97: 25:41:01:c4:80:ce:38:c5:38:67:ac:9b:56:70:73: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:90:AD:E8:FF:95:64:DF:1A:48:CA:E9:8B:AD:44:A7:42:7E:66 X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:72:a8:4c:9c:05:da:9b:6e:c5:2b:27:22:21:6f:46:dd:fd: d0:24:1d:af:0b:f7:fa:28:bd:34:d3:0a:8b:1b:14:ec:3f:a5: fe:bb:b4:34:0d:4e:39:20:91:85:b9:42:24:69:d0:de:92:5e: ce:0f:bf:a3:54:1c:25:3d:d5:5a:f3:70:df:d5:2d:a8:74:64: 52:d4:85:b2:42:14:6b:c5:35:94:18:95:6a:8d:07:4f:24:60: 27:4c:81:de:f4:4e:2b:5e:5d:e1:5b:45:ed:87:2b:0b:78:e7: f2:53:38:2d:11:f2:55:3f:d6:5c:3f:73:53:bb:28:f3:59:79: 90:b1:73:7d:82:9b:b5:36:8f:da:a4:e5:57:2f:d2:68:19:e8: c3:8b:d9:bf:2d:ea:ed:e6:3c:0b:42:1b:d6:46:ec:7b:8f:b0: 19:e2:a7:3c:5c:3c:f1:9e:d5:4f:10:92:f0:cd:a0:0a:f7:ad: 02:57:59:40:d4:7f:69:c6:56:31:2a:9d:6f:b6:ab:f4:a2:e6: ea:9e:32:1e:75:2c:2b:23:ff:71:31:b2:00:50:a0:0a:25:49: 93:b8:ca:8b:fa:a6:45:32:a6:22:32:40:5d:7e:23:a5:d0:04: c9:1e:9c:43:32:80:48:33:70:fd:f7:f1:8e:d2:81:7f:8b:e8: a8:b3:ad:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjYwOTI1MDIwMzQ0WhcNMjYxMDAyMDIwMzQ0WjAYMRYwFAYD VQQDEw02YWI1ZDY4MS1lYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopaFaX596fZchpvAzjLUQ0GSifkzWL/YX2+DVsNltiEnBE1xo4lP4n8b8iQ4 hEzzd5TgxE/ObF005YIw5aqShYLiCsTgV5jR2gp7CMLpNr3G/IA8mpDF5eSkxR9l PIXvmA5EiHoJ3BPVkSJEwcqvt9qPys3Lzv2kJFz/QSCfpgQ0l8tpjSPGAaGjfCzv fjNrWHjDJm94VY90N69JdvmVwf8xTwugnb7Vn3u2084tkNMB7Pz1KR6S9seAJw8O Mc2Lz9bXBp7iuaFqetNLeWvQaTrPGU0NqW2Op6DJwnAbqbq5HKBTwgNsS220PRXX tpclQQHEgM44xThnrJtWcHNpCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzEkK3o /5Vk3xpIyumLrUSnQn5mMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk ME9kNWk4Nkx5N09XWXFKXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3KoTJwF2ptuxSsnIiFvRt390CQdrwv3+ii9NNMKixsU7D+l/ru0NA1OOSCR hblCJGnQ3pJezg+/o1QcJT3VWvNw39UtqHRkUtSFskIUa8U1lBiVao0HTyRgJ0yB 3vROK15d4VtF7YcrC3jn8lM4LRHyVT/WXD9zU7so81l5kLFzfYKbtTaP2qTlVy/S aBnow4vZvy3q7eY8C0Ib1kbse4+wGeKnPFw88Z7VTxCS8M2gCvetAldZQNR/acZW MSqdb7ar9KLm6p4yHnUsKyP/cTGyAFCgCiVJk7jKi/qmRTKmIjJAXX4jpdAEyR6c QzKASDNw/ffxjtKBf4voqLOt9g== -----END CERTIFICATE-----Generated at Sat Sep 26 07:44:09 2026 by rpki-client