$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: yhBYDQ5arpmPs/KW+mimcDXLdmmT6zH+m7RpqhX8QE0= Subject key identifier: D7:6F:A1:E1:C9:AC:C4:4D:E6:64:BC:1F:BC:E4:09:86:47:60:A4:E9 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 04C3 Signing time: Sat 03 Oct 2026 00:10:09 +0000 Manifest this update: Sat 03 Oct 2026 00:10:09 +0000 Manifest next update: Sat 10 Oct 2026 00:10:09 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: afzDV95uUXKsvIqRwsSg++wxr7lkSGD5d7PiNYdcU7w=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Oct 3 00:10:09 2026 GMT Not After : Oct 10 00:10:09 2026 GMT Subject: CN=6ac047e1-665d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:9d:a1:8e:88:10:39:b4:a3:e5:07:73:cb: 7c:02:a5:40:b1:8a:d5:93:a8:6e:fc:07:ed:63:0b: 0b:e0:a1:02:10:81:07:f4:6c:41:f9:8e:bf:16:df: f2:1f:ff:75:09:48:0a:be:6e:1b:c8:c3:8d:18:78: fd:29:80:2a:93:8f:dc:4c:a0:52:a5:16:bc:0d:b7: 2f:b9:c5:6d:67:4f:d8:ed:28:25:e6:e4:53:e3:1e: 1f:a1:2e:7a:95:15:06:b4:17:01:6e:b0:68:e6:76: 68:17:98:60:3d:5b:7b:24:06:92:f0:67:3b:58:76: 78:cd:10:54:b3:93:3f:2c:bb:4c:03:15:27:42:02: 71:90:42:e7:56:f9:db:f5:e8:a9:5d:01:6b:23:c4: b1:e9:fb:39:6c:d8:a4:25:a8:e3:20:89:41:ad:18: c7:ae:ea:6f:42:25:c8:a6:22:c4:d8:c9:57:d3:d5: c6:9f:c7:f3:b1:56:1c:00:66:e4:9f:e1:a3:02:5b: 70:e1:e7:96:87:3a:77:84:2e:55:3a:9b:40:e7:94: 83:06:ca:a4:19:6e:c7:3b:5a:ca:08:7e:6c:5f:77: 47:29:42:83:4d:c0:95:cd:e6:20:91:de:df:96:71: ee:96:74:52:f6:90:a1:86:d4:ba:f3:3a:97:57:55: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6F:A1:E1:C9:AC:C4:4D:E6:64:BC:1F:BC:E4:09:86:47:60:A4:E9 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:80:35:e4:20:9a:ae:4f:ed:0c:3e:0b:54:e3:c7:81:d3:c6: b3:2c:f8:03:8d:be:26:22:67:8c:db:be:84:3d:50:4a:de:c0: ab:fb:9b:e0:2c:95:8c:08:29:f1:5b:03:23:4e:b0:8f:58:86: d2:13:ae:b7:3a:b2:e9:73:69:36:39:82:fb:c0:1a:5c:d5:4e: 3b:d5:e7:e8:b6:58:0c:b2:58:81:45:cd:df:de:b1:5b:db:40: 40:04:f8:9b:56:0f:17:eb:dd:97:ea:27:9e:f9:56:5a:23:11: e8:34:73:fe:bb:72:f4:f4:69:71:a2:2f:0c:0f:ee:38:b1:db: 1b:44:ff:e8:18:04:76:ab:2d:5d:1b:85:19:07:96:5c:1b:0b: 71:92:d7:2c:7c:ca:4f:57:bb:9b:c0:e6:39:31:92:0f:a1:fe: 9c:d7:83:7a:04:28:47:39:0c:e7:72:36:0b:43:db:0b:f2:15: f0:10:87:47:74:37:9d:12:c8:97:46:57:38:c4:db:41:69:81: d5:b3:e6:42:48:d3:40:2e:3c:f9:c9:b9:31:93:06:f1:13:74: f4:70:09:a9:7a:e1:1b:2e:63:84:fd:bf:0d:67:3b:6c:55:32: 7e:e8:aa:b6:13:e7:25:87:20:b8:16:0e:ad:5e:2d:90:39:b5: 4f:ba:df:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjYxMDAzMDAxMDA5WhcNMjYxMDEwMDAxMDA5WjAYMRYwFAYD VQQDEw02YWMwNDdlMS02NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1WdoY6IEDm0o+UHc8t8AqVAsYrVk6hu/AftYwsL4KECEIEH9GxB+Y6/Ft/y H/91CUgKvm4byMONGHj9KYAqk4/cTKBSpRa8DbcvucVtZ0/Y7Sgl5uRT4x4foS56 lRUGtBcBbrBo5nZoF5hgPVt7JAaS8Gc7WHZ4zRBUs5M/LLtMAxUnQgJxkELnVvnb 9eipXQFrI8Sx6fs5bNikJajjIIlBrRjHrupvQiXIpiLE2MlX09XGn8fzsVYcAGbk n+GjAltw4eeWhzp3hC5VOptA55SDBsqkGW7HO1rKCH5sX3dHKUKDTcCVzeYgkd7f lnHulnRS9pChhtS68zqXV1X1KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdvoeHJ rMRN5mS8H7zkCYZHYKTpMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABIA15CCark/tDD4LVOPHgdPGsyz4A42+JiJnjNu+hD1QSt7Aq/ub4CyVjAgp 8VsDI06wj1iG0hOutzqy6XNpNjmC+8AaXNVOO9Xn6LZYDLJYgUXN396xW9tAQAT4 m1YPF+vdl+onnvlWWiMR6DRz/rty9PRpcaIvDA/uOLHbG0T/6BgEdqstXRuFGQeW XBsLcZLXLHzKT1e7m8DmOTGSD6H+nNeDegQoRzkM53I2C0PbC/IV8BCHR3Q3nRLI l0ZXOMTbQWmB1bPmQkjTQC48+cm5MZMG8RN09HAJqXrhGy5jhP2/DWc7bFUyfuiq thPnJYcguBYOrV4tkDm1T7rfTg== -----END CERTIFICATE-----Generated at Sun Oct 4 10:38:58 2026 by rpki-client