$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft File: 32d9hpNHe5Kh6f58IEImls6oYJ0.mft (raw, json) Hash identifier: 5wR1u5B6sooh0HWWuVRN5zbpqwHhP7TAUIXTVY4qces= Subject key identifier: EE:83:92:24:F7:9C:BA:E8:C3:7E:7F:5D:B4:D2:86:1A:AA:50:89:47 Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft Manifest number: 0411 Signing time: Fri 25 Sep 2026 00:12:35 +0000 Manifest this update: Fri 25 Sep 2026 00:12:35 +0000 Manifest next update: Fri 02 Oct 2026 00:12:35 +0000 Files and hashes: 1: 32d9hpNHe5Kh6f58IEImls6oYJ0.crl (hash: 6zWm7RxhB+UWekoC+KHkaQNKcMk541qBnxqbe13TnJ4=) 2: 4BBDE05299B011F0B174EC14C4F9AE02.roa (hash: l281WaGzYU7dCqEFuYzIN6MgvSUnWoKB+RqON01Yd2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDA2, serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D Validity Not Before: Sep 25 00:12:35 2026 GMT Not After : Oct 2 00:12:35 2026 GMT Subject: CN=6ab5bc73-3302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:cd:65:83:39:ca:ce:0f:ae:fc:45:40:74: 3e:46:6d:a6:49:72:1c:11:81:56:e4:82:3f:f7:56: da:c6:e2:ed:1d:f7:a0:3c:4c:55:cb:6d:52:da:43: 13:11:d7:d9:ec:be:9a:38:64:d5:b9:57:8d:cf:f6: a0:97:aa:58:f2:fb:ca:54:06:87:02:25:9c:9b:7a: a6:db:f3:ca:e9:46:cd:4b:3c:49:5d:7d:a2:ea:46: 97:a1:f1:b3:e2:40:48:42:53:c8:67:f8:ca:fa:2a: 94:01:00:89:b8:c2:9d:ea:18:3d:8e:7a:c1:0c:e4: f5:33:ea:f0:d4:9a:d6:96:a9:46:77:96:cf:14:2c: 5c:09:45:88:db:00:74:0c:a4:a5:56:49:b8:a7:3a: 50:b3:79:e3:3d:ba:22:9b:21:16:93:da:d4:c0:2b: 48:8a:fc:05:a7:c1:99:54:77:c1:0d:f8:7e:f6:b0: 32:b3:da:ff:80:9d:d4:22:9f:71:c7:00:fc:5d:d5: 08:ba:e5:30:69:22:c1:dc:21:9c:f6:01:79:43:28: cb:f7:ea:5c:e9:69:29:34:7f:12:f5:18:cc:b7:cc: fd:b8:3f:be:83:cd:2c:ca:c5:47:47:a2:58:07:fd: f8:6d:bf:2c:00:58:54:c0:cc:ee:cb:5c:a2:ab:15: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:92:24:F7:9C:BA:E8:C3:7E:7F:5D:B4:D2:86:1A:AA:50:89:47 X509v3 Authority Key Identifier: keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9d:43:f7:5e:84:ef:d7:b3:a3:49:72:fb:f2:30:de:02:60: c6:44:68:93:38:c4:43:b5:cd:6c:87:91:fc:53:d0:7d:d4:4f: d0:08:75:db:a5:e7:2d:2b:97:95:54:55:5e:c8:0c:24:8c:d6: 39:9c:eb:fb:dc:bb:9d:a3:fc:1a:57:7e:59:68:2e:27:85:1e: 2b:65:1e:12:c5:95:0e:dd:4f:e5:77:57:92:60:7e:3f:09:e3: e6:51:6f:67:9a:c9:19:2c:27:ac:7a:1c:50:72:0c:09:47:00: b4:56:6b:ec:ea:8d:1e:a9:fe:43:b7:2f:92:0c:9c:b6:d4:fe: 56:1e:9d:ef:88:a0:b4:6c:ef:b4:96:53:d7:0e:ef:d0:9c:86: 24:45:6c:b9:67:a8:af:c3:66:36:f9:5b:f6:f9:0d:16:f5:d6: 43:95:a6:8e:97:01:ff:0b:13:0f:fc:1f:65:42:8e:40:56:d5: ea:2f:e3:0c:db:83:cc:77:7a:07:70:2e:ce:f7:3d:41:b2:86: f8:3a:a2:08:9b:aa:ce:61:86:8e:f4:95:83:b7:b2:b3:f5:6f: 45:66:ac:c6:69:97:44:3c:4d:61:d1:82:49:7e:46:2b:fd:2f: e4:b6:4d:bd:0a:31:9a:b3:57:c0:5c:df:f4:54:3a:58:e8:08: f7:b9:83:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEQTIxMTAvBgNVBAUTKERGNjc3RDg2OTM0NzdCOTJBMUU5RkU3QzIwNDIyNjk2 Q0VBODYwOUQwHhcNMjYwOTI1MDAxMjM1WhcNMjYxMDAyMDAxMjM1WjAYMRYwFAYD VQQDEw02YWI1YmM3My0zMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDjNZYM5ys4PrvxFQHQ+Rm2mSXIcEYFW5II/91baxuLtHfegPExVy21S2kMT EdfZ7L6aOGTVuVeNz/agl6pY8vvKVAaHAiWcm3qm2/PK6UbNSzxJXX2i6kaXofGz 4kBIQlPIZ/jK+iqUAQCJuMKd6hg9jnrBDOT1M+rw1JrWlqlGd5bPFCxcCUWI2wB0 DKSlVkm4pzpQs3njPboimyEWk9rUwCtIivwFp8GZVHfBDfh+9rAys9r/gJ3UIp9x xwD8XdUIuuUwaSLB3CGc9gF5QyjL9+pc6WkpNH8S9RjMt8z9uD++g80sysVHR6JY B/34bb8sAFhUwMzuy1yiqxXKrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6DkiT3 nLrow35/XbTShhqqUIlHMB8GA1UdIwQYMBaAFN9nfYaTR3uSoen+fCBCJpbOqGCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRBMi83MEU2OUMxOEQw RUUxMUVDQkM1QzQ5NzNDNEY5QUUwMi8zMmQ5aHBOSGU1S2g2ZjU4SUVJbWxzNm9Z SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyZDlocE5IZTVLaDZmNThJRUltbHM2b1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRBMi83MEU2OUMxOEQwRUUxMUVDQkM1QzQ5NzNDNEY5QUUwMi8zMmQ5aHBOSGU1 S2g2ZjU4SUVJbWxzNm9ZSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA51D916E79ezo0ly+/Iw3gJgxkRokzjEQ7XNbIeR/FPQfdRP0Ah126XnLSuX lVRVXsgMJIzWOZzr+9y7naP8Gld+WWguJ4UeK2UeEsWVDt1P5XdXkmB+Pwnj5lFv Z5rJGSwnrHocUHIMCUcAtFZr7OqNHqn+Q7cvkgycttT+Vh6d74igtGzvtJZT1w7v 0JyGJEVsuWeor8NmNvlb9vkNFvXWQ5WmjpcB/wsTD/wfZUKOQFbV6i/jDNuDzHd6 B3Auzvc9QbKG+DqiCJuqzmGGjvSVg7eys/VvRWasxmmXRDxNYdGCSX5GK/0v5LZN vQoxmrNXwFzf9FQ6WOgI97mDag== -----END CERTIFICATE-----Generated at Fri Sep 25 18:22:39 2026 by rpki-client