$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: 30eX/rYoErEBUTlAVQiHZ7ANf6zVaa/IBlVo9K/wLk4= Subject key identifier: 1B:F6:75:4A:3A:C2:8A:AA:C0:1E:62:A4:C3:97:98:73:39:C1:E2:38 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 086A Signing time: Thu 24 Sep 2026 21:05:12 +0000 Manifest this update: Thu 24 Sep 2026 21:05:12 +0000 Manifest next update: Thu 01 Oct 2026 21:05:12 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: 8558UOv1cGpQfKa44ZVNSybw+NyqyagXTm811WnAG64=) 2: 113EFAA01CD311F183095B1A353D8C67.roa (hash: hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=) 3: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: ixSD//VPVA20+49srKzUc+mMjY0KkEX52xrhudvtNos=) 4: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: 8QmsBUY2s//20xxLVI3hPEMb0s2pQxbXtkVnYbraTKQ=) 5: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tDdAfUG8eCP0TQX57qdH9o5o3LcfwqBq8wJ4yE3QIyI=) 6: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 86TlHawEYIJrsKG9qDpQKaZUIOg/AkQSTyCR37y06KQ=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: WKTJAf1xc2gCKAnmp9H0dtuF8DSxcxsaPieQCnG+VvQ=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 2zP/u/XPb4lS5YQU45AQ3bnL/iCqP8TtJ7qEosRQcfQ=) 9: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: XlJ4FUowQX/Y/4cD7WUgyXsW7hmXlclzkcofs1Q8ApU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Sep 24 21:05:12 2026 GMT Not After : Oct 1 21:05:12 2026 GMT Subject: CN=6ab59088-486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:e0:f0:a1:47:f8:3a:24:12:d5:6c:e6:2f: 47:54:f0:60:0b:a1:4c:38:93:d2:cc:53:fc:0b:3a: 53:04:2c:97:c7:d0:b5:46:f7:48:46:8c:1f:c8:a4: 1e:85:71:20:b9:24:4e:07:87:78:72:bd:86:05:ba: c6:3b:b2:71:f2:3e:64:cc:e9:7d:23:8c:15:11:83: 24:4f:61:33:66:4f:89:83:d7:c1:56:08:5d:4d:a0: da:1b:99:6b:d3:33:73:c4:e3:5d:e8:20:a5:ad:4c: d0:58:c3:f5:8b:03:01:ac:4a:db:3d:6a:94:20:b1: 60:e3:34:91:c3:bc:91:f9:4d:d6:02:3a:e3:18:8b: 1b:1e:4f:b3:0b:83:e7:7d:14:5f:12:5f:2b:f0:a7: 46:13:90:48:ee:0b:34:0d:b1:dd:23:29:3d:aa:e4: 54:1a:3b:14:61:50:b0:b0:6e:e8:55:14:46:02:f5: 47:5e:b4:77:e9:d6:0e:cb:80:9d:58:a0:58:28:19: e5:f2:24:99:18:07:c0:73:1d:ec:6f:5e:a4:44:7d: 3c:7e:3e:18:36:35:2a:ec:bb:e3:a6:65:bb:40:bb: 54:57:cf:c7:05:03:cd:b0:3c:2a:a1:41:fd:04:c3: 79:2e:8f:77:e7:70:11:3f:e8:4b:e0:f6:d7:7e:74: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F6:75:4A:3A:C2:8A:AA:C0:1E:62:A4:C3:97:98:73:39:C1:E2:38 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b4:83:70:61:77:b1:ee:2f:df:72:24:69:42:03:e6:8a:de: e6:4d:ca:ea:f3:ab:e2:a5:40:6e:32:85:27:fc:a0:fe:d9:44: bf:14:37:f6:4f:82:4e:b9:ad:12:44:3b:aa:a8:5c:d5:d6:69: b7:16:e4:41:48:ee:09:86:67:f8:df:e0:61:f1:26:ef:e1:51: 1b:24:a0:59:41:5b:8c:40:ee:a1:02:87:aa:7d:c0:15:23:85: 4c:b6:6d:ce:e0:16:63:12:22:5d:88:50:ad:73:7a:30:bd:7c: 9f:ea:69:54:b4:a5:9e:20:b4:25:ac:23:b2:fb:d3:bb:38:d0: 6e:07:fa:f2:92:ed:58:a6:4c:71:f5:8e:95:0d:dd:35:6e:03: 1d:a5:3d:35:97:d0:96:c4:35:b6:c5:25:da:22:dc:ca:f7:e3: 3e:ae:47:fe:f4:1e:f8:a9:a5:06:fa:06:d6:d3:55:59:f0:cf: 53:af:2d:ef:55:1c:0b:dc:18:c5:e8:34:00:c8:a1:41:42:ee: 62:4b:61:c0:05:26:bf:0e:eb:77:6e:9c:bd:79:0a:27:2a:49: f7:bb:89:8e:88:db:b9:bf:3b:57:52:9b:ed:d0:e9:86:eb:03: 00:25:c8:92:bd:8d:f2:b5:2a:a6:9e:62:61:6a:7d:c9:a9:c3: 0b:34:69:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjYwOTI0MjEwNTEyWhcNMjYxMDAxMjEwNTEyWjAYMRYwFAYD VQQDEw02YWI1OTA4OC00ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO/g8KFH+DokEtVs5i9HVPBgC6FMOJPSzFP8CzpTBCyXx9C1RvdIRowfyKQe hXEguSROB4d4cr2GBbrGO7Jx8j5kzOl9I4wVEYMkT2EzZk+Jg9fBVghdTaDaG5lr 0zNzxONd6CClrUzQWMP1iwMBrErbPWqUILFg4zSRw7yR+U3WAjrjGIsbHk+zC4Pn fRRfEl8r8KdGE5BI7gs0DbHdIyk9quRUGjsUYVCwsG7oVRRGAvVHXrR36dYOy4Cd WKBYKBnl8iSZGAfAcx3sb16kRH08fj4YNjUq7LvjpmW7QLtUV8/HBQPNsDwqoUH9 BMN5Lo9353ARP+hL4PbXfnSrmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv2dUo6 woqqwB5ipMOXmHM5weI4MB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLSDcGF3se4v33IkaUID5ore5k3K6vOr4qVAbjKFJ/yg/tlEvxQ39k+CTrmt EkQ7qqhc1dZptxbkQUjuCYZn+N/gYfEm7+FRGySgWUFbjEDuoQKHqn3AFSOFTLZt zuAWYxIiXYhQrXN6ML18n+ppVLSlniC0JawjsvvTuzjQbgf68pLtWKZMcfWOlQ3d NW4DHaU9NZfQlsQ1tsUl2iLcyvfjPq5H/vQe+KmlBvoG1tNVWfDPU68t71UcC9wY xeg0AMihQULuYkthwAUmvw7rd26cvXkKJypJ97uJjojbub87V1Kb7dDphusDACXI kr2N8rUqpp5iYWp9yanDCzRpEA== -----END CERTIFICATE-----Generated at Sun Sep 27 00:33:34 2026 by rpki-client