$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: cuXfdEOc08qXW12jeb7Mu+coe6TmAClJ6wVWooTiJQE= Subject key identifier: 56:0A:C0:08:F2:CF:9F:AF:33:2D:70:6C:AD:D3:BD:C9:EA:E0:9A:70 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 088A Signing time: Sat 26 Sep 2026 20:52:58 +0000 Manifest this update: Sat 26 Sep 2026 20:52:57 +0000 Manifest next update: Sat 03 Oct 2026 20:52:57 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: njVhBGf5TDXDZMYT8RcjCR1bQ/DSNPHT8m2iYdpFGb4=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) 3: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Sep 26 20:52:57 2026 GMT Not After : Oct 3 20:52:57 2026 GMT Subject: CN=6ab830aa-2ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:81:96:fa:e9:23:1f:45:1b:ad:e8:25:e6: 31:5c:19:d3:7b:01:24:2b:4a:63:41:d0:f4:7c:b0: 02:f8:e1:a1:00:fa:d2:ac:a0:22:80:2e:ed:9f:c5: 08:05:02:d0:bc:89:a2:45:2a:fe:c1:2c:03:ea:fd: 56:07:98:f7:e2:a6:18:83:e1:c4:75:f3:95:55:57: 8d:98:6f:cc:38:e3:dd:52:c3:40:63:05:c0:eb:ae: 78:53:51:33:13:08:8f:42:c8:a0:07:78:a8:8d:fe: 8c:14:7e:e9:36:53:ee:53:9e:e4:ad:ab:02:ff:f2: ba:4f:98:b0:c0:2b:a6:f7:24:ce:7d:a0:08:3d:d4: 17:17:02:2e:3c:f6:5d:ae:e8:3f:c4:45:75:df:b3: e7:88:31:64:75:9d:5a:fd:38:5a:8c:20:a1:73:7b: 67:29:1f:74:8e:94:77:76:87:90:d3:fb:39:08:01: ed:80:e0:a4:c3:f9:2f:9a:ac:7f:a3:45:76:fc:1d: e9:bf:6e:6d:14:ed:32:4c:28:22:8e:7a:d3:13:ba: 1e:8a:52:e5:76:b3:85:e1:fa:59:ba:4e:23:ea:db: 38:95:f4:08:0a:ba:30:4e:4c:40:88:6c:e6:ca:0f: 7a:16:5c:51:c8:88:83:82:28:0d:18:dc:0a:3b:3d: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0A:C0:08:F2:CF:9F:AF:33:2D:70:6C:AD:D3:BD:C9:EA:E0:9A:70 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e6:ff:69:ac:49:d7:ad:2d:64:dd:11:b7:51:0a:b5:83:55: 2b:fc:c2:74:dc:e4:5b:a8:46:8c:12:95:61:81:29:95:cc:11: c0:ed:1f:fb:ef:b9:ce:51:57:f3:ca:b9:11:63:f1:3b:5a:60: e7:c2:bc:bb:b9:65:e6:7b:02:db:64:a8:60:51:32:2a:ce:38: aa:15:c1:aa:20:e2:f8:5f:d4:52:ae:65:23:58:9f:ab:35:e7: 01:15:5f:56:7e:6e:ed:3a:19:31:c1:6e:ab:47:04:68:cb:6a: 88:9e:bb:7e:9a:73:7a:f2:02:62:63:44:4c:87:dd:15:02:a4: 65:0b:a9:56:9c:de:f5:c0:87:bd:33:63:5d:f9:22:11:c4:a5: c7:19:9d:b8:35:4b:85:9a:de:62:7f:67:7b:4d:20:08:3f:a3: 9f:34:da:b8:6c:43:3b:40:c4:c5:bb:10:11:08:73:37:25:bd: 5c:c9:bc:d1:47:42:85:a4:a6:0f:03:7f:00:04:60:5b:5c:9c: 90:92:ae:7b:67:09:c9:bf:12:01:71:7c:b9:5d:21:37:91:48: 60:ff:6e:66:19:05:ce:c8:a6:38:b8:d0:11:93:29:d7:0f:55: 85:61:90:5b:0f:1f:0e:9b:a9:b5:d7:6e:84:08:33:97:cc:3e: f3:7d:70:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwOTI2MjA1MjU3WhcNMjYxMDAzMjA1MjU3WjAYMRYwFAYD VQQDEw02YWI4MzBhYS0yZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypOBlvrpIx9FG63oJeYxXBnTewEkK0pjQdD0fLAC+OGhAPrSrKAigC7tn8UI BQLQvImiRSr+wSwD6v1WB5j34qYYg+HEdfOVVVeNmG/MOOPdUsNAYwXA6654U1Ez EwiPQsigB3iojf6MFH7pNlPuU57krasC//K6T5iwwCum9yTOfaAIPdQXFwIuPPZd rug/xEV137PniDFkdZ1a/ThajCChc3tnKR90jpR3doeQ0/s5CAHtgOCkw/kvmqx/ o0V2/B3pv25tFO0yTCgijnrTE7oeilLldrOF4fpZuk4j6ts4lfQICrowTkxAiGzm yg96FlxRyIiDgigNGNwKOz1OMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYKwAjy z5+vMy1wbK3Tvcnq4JpwMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+b/aaxJ160tZN0Rt1EKtYNVK/zCdNzkW6hGjBKVYYEplcwRwO0f+++5zlFX 88q5EWPxO1pg58K8u7ll5nsC22SoYFEyKs44qhXBqiDi+F/UUq5lI1ifqzXnARVf Vn5u7ToZMcFuq0cEaMtqiJ67fppzevICYmNETIfdFQKkZQupVpze9cCHvTNjXfki EcSlxxmduDVLhZreYn9ne00gCD+jnzTauGxDO0DExbsQEQhzNyW9XMm80UdChaSm DwN/AARgW1yckJKue2cJyb8SAXF8uV0hN5FIYP9uZhkFzsimOLjQEZMp1w9VhWGQ Ww8fDpuptdduhAgzl8w+831wcw== -----END CERTIFICATE-----Generated at Mon Sep 28 02:19:04 2026 by rpki-client