$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: Zrf7zyW5znx6ppXP6xpR56yUYkQqB9yWhNxPg1LeJZI= Subject key identifier: 38:1F:54:82:3E:94:58:2C:6C:EC:0B:47:25:F3:D8:AD:8F:B9:8A:8B Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1840 Signing time: Fri 25 Sep 2026 16:57:33 +0000 Manifest this update: Fri 25 Sep 2026 16:57:32 +0000 Manifest next update: Fri 02 Oct 2026 16:57:32 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: xN86r8is/I6n81D/sU8JoIibNm1AJYjj9G5Bs3G452g=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: AjuChnART3ISDBvzklladAYGqLiagodKkP77AQzP1jg=) 3: 07142A76AC2C11F18A7EA7F93811F970.roa (hash: vzOPvaOjGaiit3UvNe68FB9N51nic8N5t+BB3UznUgU=) 4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: 88karHuZHn9NVBaZGr8GAqmmBxfDq19Aww01VbIu2gM=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: +B/cYcsSzsw7yQo6HYp5CEsauNY3ej5R1D+A17Ni44Q=) 6: 4E804E6C49EE11F1815E1723B9833773.roa (hash: Fi7wssEaguNlep3iUKVf5ArOCMA1OikVpkYobBb+wf8=) 7: 309C7686B90211F18AB080104211F970.roa (hash: aJrb3F5xvyBhiEWCx7najd5VEtTU2x7VVj/eyuuOU5k=) 8: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: dZG6es6tOCIPazsxJ8KTxDzO3mGqMFOCDjB+9iL/OjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 16:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7107 (0x1bc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Sep 25 16:57:32 2026 GMT Not After : Oct 2 16:57:32 2026 GMT Subject: CN=6ab6a7fc-a591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:74:3a:9a:9e:2a:95:fc:2c:54:70:9a:c4: 3d:71:d4:fb:29:74:8a:98:e1:8d:54:78:7c:dc:ea: ab:f1:25:3a:a3:b3:c3:86:1d:cd:00:a2:1a:fb:f2: 26:78:21:42:8a:f2:82:99:fb:36:16:ba:6d:1d:79: 15:a1:e1:9f:7d:53:fe:3d:3f:93:d4:00:e8:7b:4c: d9:0b:2c:66:f1:27:f7:14:36:63:c9:65:28:c9:51: 15:82:dc:31:04:ce:dc:9c:ad:05:53:28:a4:7e:81: c1:7c:a4:90:44:58:35:b1:e7:8c:9d:bc:ed:88:c1: 62:7c:79:55:28:e4:73:ec:ad:b9:3c:dd:1c:60:24: 80:e5:0b:59:db:e2:4f:df:eb:0e:3c:5d:f4:fc:d5: 27:4b:3a:f2:3c:97:09:e8:d7:2a:2e:2f:23:13:fe: 37:5f:ff:ef:2c:40:8d:32:2d:77:c8:0d:e1:b3:94: 02:4f:cb:b2:fc:08:76:87:da:ee:41:13:da:33:85: 2d:91:f7:a5:71:78:b4:6f:53:7b:2c:b0:b7:36:85: c2:a5:ec:5c:88:b1:d9:83:6e:54:d1:02:13:28:4f: cd:75:82:8c:6f:71:45:fb:5e:7d:f2:b8:ff:00:f2: f2:43:44:f3:57:1f:aa:cc:d1:03:b1:34:6a:7b:3e: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1F:54:82:3E:94:58:2C:6C:EC:0B:47:25:F3:D8:AD:8F:B9:8A:8B X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e7:da:57:32:16:74:b3:cd:84:de:96:7f:6f:72:bb:e5:07: 36:cf:83:e7:1a:0a:05:b0:03:cc:46:c6:b5:c6:e1:fe:3d:7f: 05:60:83:37:d4:36:a3:26:97:94:96:5e:7a:8b:73:31:a2:a1: 0e:03:b2:d7:d9:0a:86:d2:54:d1:61:f8:f6:36:3f:93:c8:54: 64:0f:d4:cb:02:d6:1c:29:94:01:4d:c0:d4:ec:ae:97:7e:8d: c6:df:81:5c:69:12:76:86:07:53:99:b5:83:06:5e:2d:cf:c8: fe:92:80:16:51:d3:b6:17:e2:6f:4e:d7:6c:56:80:4a:67:25: 77:88:58:58:ec:f8:e6:cc:9f:ef:1a:df:d4:6e:e1:f6:0c:db: da:34:3d:5d:74:60:09:ba:05:70:31:a9:55:e6:66:ed:61:1d: 2d:da:f7:b1:2c:f2:f0:4e:0f:52:37:09:c0:4e:86:29:60:75: 54:37:45:47:d2:b1:f4:a3:f2:ed:69:d8:0b:a2:2a:11:14:19: 3e:4d:05:6b:58:9c:fc:c5:a8:3e:29:cb:b3:68:e7:50:8c:c2: 2b:3c:6e:b2:70:a3:8c:b5:de:3f:80:e9:35:f1:2d:84:72:9b: d2:ab:e1:43:ac:64:54:71:fb:8d:fd:1d:59:4f:78:74:71:ee: 12:87:3f:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwOTI1MTY1NzMyWhcNMjYxMDAyMTY1NzMyWjAYMRYwFAYD VQQDEw02YWI2YTdmYy1hNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh2V0OpqeKpX8LFRwmsQ9cdT7KXSKmOGNVHh83Oqr8SU6o7PDhh3NAKIa+/Im eCFCivKCmfs2FrptHXkVoeGffVP+PT+T1ADoe0zZCyxm8Sf3FDZjyWUoyVEVgtwx BM7cnK0FUyikfoHBfKSQRFg1seeMnbztiMFifHlVKORz7K25PN0cYCSA5QtZ2+JP 3+sOPF30/NUnSzryPJcJ6NcqLi8jE/43X//vLECNMi13yA3hs5QCT8uy/Ah2h9ru QRPaM4UtkfelcXi0b1N7LLC3NoXCpexciLHZg25U0QITKE/NdYKMb3FF+1598rj/ APLyQ0TzVx+qzNEDsTRqez4e7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgfVII+ lFgsbOwLRyXz2K2PuYqLMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArefaVzIWdLPNhN6Wf29yu+UHNs+D5xoKBbADzEbGtcbh/j1/BWCDN9Q2oyaX lJZeeotzMaKhDgOy19kKhtJU0WH49jY/k8hUZA/UywLWHCmUAU3A1Oyul36Nxt+B XGkSdoYHU5m1gwZeLc/I/pKAFlHTthfib07XbFaASmcld4hYWOz45syf7xrf1G7h 9gzb2jQ9XXRgCboFcDGpVeZm7WEdLdr3sSzy8E4PUjcJwE6GKWB1VDdFR9Kx9KPy 7WnYC6IqERQZPk0Fa1ic/MWoPinLs2jnUIzCKzxusnCjjLXeP4DpNfEthHKb0qvh Q6xkVHH7jf0dWU94dHHuEoc/RQ== -----END CERTIFICATE-----Generated at Sat Sep 26 20:49:10 2026 by rpki-client