$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: 4Omq7Y0+jjqU8tquMQ7vgZnOKTU0sF3TmokVsMRccAg= Subject key identifier: 27:17:3A:38:2B:A5:4F:9C:0C:99:4B:9A:F4:71:77:1D:DB:49:90:35 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 088E Signing time: Sun 04 Oct 2026 20:50:17 +0000 Manifest this update: Sun 04 Oct 2026 20:50:17 +0000 Manifest next update: Sun 11 Oct 2026 20:50:17 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: PI0iJCtyyS+2E/5DXhhLFC/xjzGQLLYjs2RWLyZ4PAg=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) 3: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Oct 4 20:50:17 2026 GMT Not After : Oct 11 20:50:17 2026 GMT Subject: CN=6ac2bc09-d06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:a9:ee:d3:23:c8:29:27:0c:f6:a1:4a:98: 15:58:2f:d4:45:ae:0d:30:81:14:e1:eb:af:05:d3: 03:d3:a2:f5:0c:73:82:d6:0d:59:de:86:42:0e:24: 38:63:0a:e4:a7:31:2a:8c:47:e6:0d:3e:16:79:c0: 84:41:81:71:77:56:c8:5e:fc:4f:af:24:86:66:f5: 31:e6:c3:e7:ca:04:0a:48:90:66:b5:1a:d0:6c:2e: 4c:89:a6:eb:7e:4a:46:c7:c1:d9:f7:96:f1:8d:a1: 85:03:52:3c:2c:54:e9:32:9c:6d:4c:5b:f5:5a:02: 99:f1:36:aa:43:08:24:25:90:89:bd:48:19:99:46: 03:17:b5:a7:18:45:d2:7e:aa:0c:0d:f4:f0:78:4d: 69:e3:1d:a2:8c:1a:b6:e0:c2:8f:ac:da:59:44:97: 27:c3:51:66:39:e9:67:36:9e:eb:4d:80:b8:c5:f3: 24:27:52:66:34:d5:80:db:67:f9:eb:a5:93:b9:2f: fd:a1:f7:a6:ae:4e:91:2b:f2:cb:95:7f:ab:f9:e0: 6c:10:ed:c0:58:c2:52:e1:50:71:bd:2a:f2:f4:4e: 58:a7:1c:4b:b0:c0:ca:b2:73:b2:cb:55:25:98:ca: 71:4c:75:29:03:58:1b:70:1b:dd:ba:62:a2:88:96: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:17:3A:38:2B:A5:4F:9C:0C:99:4B:9A:F4:71:77:1D:DB:49:90:35 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:62:ad:9d:b4:e6:6d:14:cf:ca:f7:36:ba:53:84:c0:25:62: 49:12:94:e9:13:5d:b1:7a:cc:7f:b7:b7:25:2a:20:ed:e2:60: 78:fe:7d:2d:28:98:18:85:51:4c:d1:6d:41:c1:7f:bd:60:31: 61:83:ae:6b:90:a0:81:25:81:7b:60:f1:52:ab:7a:38:a1:c9: c9:48:9c:20:b6:04:b0:a3:10:70:79:42:0b:52:01:25:14:60: 88:b8:94:34:37:d4:e6:a0:51:39:81:6f:cc:92:a8:ad:37:0f: 8d:3b:44:82:ce:e0:3b:5e:12:3b:1a:8a:cd:31:92:d0:86:be: ec:35:0b:88:e1:2a:a7:9e:ec:54:1d:93:fe:c5:46:7f:a5:86: b4:ae:2b:95:1a:4d:26:14:87:64:a6:14:10:92:d1:32:d3:4a: 25:a4:1a:66:6b:ed:02:13:67:b9:fa:a4:bf:43:57:47:b4:72: 29:b3:d7:36:ea:3e:be:11:23:f0:3d:83:bb:a6:f6:c4:c1:36: 9d:42:5c:81:58:e6:49:8d:c5:14:4b:12:fd:0c:d4:0b:60:2d: 7d:22:4c:1a:09:af:66:16:cf:8a:2b:5d:fb:ae:76:32:00:23: 23:e1:14:84:bd:27:bd:8b:24:3e:48:12:55:bd:54:b9:49:4f: a9:04:a1:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYxMDA0MjA1MDE3WhcNMjYxMDExMjA1MDE3WjAYMRYwFAYD VQQDEw02YWMyYmMwOS1kMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqOp7tMjyCknDPahSpgVWC/URa4NMIEU4euvBdMD06L1DHOC1g1Z3oZCDiQ4 YwrkpzEqjEfmDT4WecCEQYFxd1bIXvxPrySGZvUx5sPnygQKSJBmtRrQbC5Miabr fkpGx8HZ95bxjaGFA1I8LFTpMpxtTFv1WgKZ8TaqQwgkJZCJvUgZmUYDF7WnGEXS fqoMDfTweE1p4x2ijBq24MKPrNpZRJcnw1FmOelnNp7rTYC4xfMkJ1JmNNWA22f5 66WTuS/9ofemrk6RK/LLlX+r+eBsEO3AWMJS4VBxvSry9E5YpxxLsMDKsnOyy1Ul mMpxTHUpA1gbcBvdumKiiJbDIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcXOjgr pU+cDJlLmvRxdx3bSZA1MB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWKtnbTmbRTPyvc2ulOEwCViSRKU6RNdsXrMf7e3JSog7eJgeP59LSiYGIVR TNFtQcF/vWAxYYOua5CggSWBe2DxUqt6OKHJyUicILYEsKMQcHlCC1IBJRRgiLiU NDfU5qBROYFvzJKorTcPjTtEgs7gO14SOxqKzTGS0Ia+7DULiOEqp57sVB2T/sVG f6WGtK4rlRpNJhSHZKYUEJLRMtNKJaQaZmvtAhNnufqkv0NXR7RyKbPXNuo+vhEj 8D2Du6b2xME2nUJcgVjmSY3FFEsS/QzUC2AtfSJMGgmvZhbPiitd+652MgAjI+EU hL0nvYskPkgSVb1UuUlPqQShzQ== -----END CERTIFICATE-----Generated at Tue Oct 6 17:55:35 2026 by rpki-client