$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: qq1kepbjgUhWzmlwNI6Uat9+isD07VQywv216e6zOJQ= Subject key identifier: 03:D0:AA:99:C1:CE:6A:85:4F:62:41:39:88:07:51:98:AB:AF:91:25 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0C26 Signing time: Tue 22 Sep 2026 18:41:12 +0000 Manifest this update: Tue 22 Sep 2026 18:41:12 +0000 Manifest next update: Tue 29 Sep 2026 18:41:12 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: kJlLQjx5nj4fTeri3EcYCr6G/Tn6urJV/QqpQWh+leY=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=) 3: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Sep 22 18:41:12 2026 GMT Not After : Sep 29 18:41:12 2026 GMT Subject: CN=6ab2cbc8-ee1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:26:c4:58:86:cb:0f:fc:52:91:1c:e7:d6: 05:74:57:54:89:5e:18:78:d8:ac:e3:bb:8d:02:b9: dd:d9:6d:08:70:b9:2a:7a:ba:44:49:3f:02:d7:0e: c7:04:fd:ae:ac:b5:19:69:f7:5f:10:5b:3d:72:b9: 22:91:b9:d0:3a:e3:67:d2:f2:64:35:2a:7d:c0:e6: 52:ac:5e:c2:c4:fc:0a:15:f5:ce:67:cf:a1:d9:26: dc:00:17:54:10:1a:41:22:e9:d6:02:4d:f6:30:90: 09:c5:e9:08:02:c5:5a:2d:2a:34:17:5c:3f:30:ad: fa:9b:94:05:fd:d7:31:16:73:e6:36:03:11:29:6d: 12:dd:1d:3d:f3:18:a5:6e:59:55:c2:93:a6:ef:dc: 42:82:4b:a8:25:97:2a:68:db:bc:90:e7:e4:74:37: cc:2c:f4:4f:31:6f:a7:4a:3d:f6:96:74:03:07:7d: 2d:1d:b8:27:72:da:dc:47:2f:d4:4d:2a:13:74:60: 88:83:43:fa:83:17:61:70:a9:7e:c6:9a:8b:30:4e: fe:54:22:f0:b8:e6:73:a9:77:bf:c0:a9:24:cb:eb: 91:56:9c:9e:64:96:40:22:52:4f:a6:26:5e:51:23: 93:2c:75:2b:d0:f0:f9:0a:73:8d:f0:1a:30:15:88: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D0:AA:99:C1:CE:6A:85:4F:62:41:39:88:07:51:98:AB:AF:91:25 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:99:9c:8a:eb:24:35:7a:9d:51:71:83:9a:63:32:aa:9f:27: 51:88:98:96:8a:05:78:03:9b:48:29:1a:dc:6d:eb:d2:7c:20: b2:09:46:de:7e:44:b9:2f:03:43:06:cb:31:05:b5:8c:72:ab: 6b:f7:86:ab:d3:7e:83:37:07:de:fb:f3:94:43:47:8c:84:02: de:a4:35:1b:4c:fc:96:f0:c2:11:ab:0c:e8:ea:65:7e:25:be: a0:d2:60:0a:5f:56:db:36:76:8b:80:68:81:93:15:cc:14:50: d7:23:a4:ee:76:80:53:1d:93:98:d0:b7:e7:a4:55:ba:cc:01: 75:d2:e5:89:18:4f:e1:26:6c:73:49:e2:f9:7c:22:0e:91:1a: 73:c9:c2:c4:5b:1b:56:2b:d1:45:be:2c:c5:c0:51:cb:c7:be: e3:e7:85:59:04:62:eb:81:2b:a0:a8:55:f9:ba:43:b6:d5:db: c6:d7:b1:10:f9:e1:51:d9:1a:1e:a8:a4:3c:10:1e:df:45:10: 83:23:97:20:a1:fb:1e:6c:cd:86:cb:9d:e2:b4:d8:71:df:2f: 2a:b9:c1:97:5d:22:5a:5e:ad:fc:2f:f1:a8:fc:27:b4:f5:bd: b7:8d:96:e7:27:bd:3c:33:c3:ce:24:5e:55:5d:5e:e2:94:75: 0a:60:ea:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjYwOTIyMTg0MTEyWhcNMjYwOTI5MTg0MTEyWjAYMRYwFAYD VQQDEw02YWIyY2JjOC1lZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/smxFiGyw/8UpEc59YFdFdUiV4YeNis47uNArnd2W0IcLkqerpEST8C1w7H BP2urLUZafdfEFs9crkikbnQOuNn0vJkNSp9wOZSrF7CxPwKFfXOZ8+h2SbcABdU EBpBIunWAk32MJAJxekIAsVaLSo0F1w/MK36m5QF/dcxFnPmNgMRKW0S3R098xil bllVwpOm79xCgkuoJZcqaNu8kOfkdDfMLPRPMW+nSj32lnQDB30tHbgnctrcRy/U TSoTdGCIg0P6gxdhcKl+xpqLME7+VCLwuOZzqXe/wKkky+uRVpyeZJZAIlJPpiZe USOTLHUr0PD5CnON8BowFYgMcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPQqpnB zmqFT2JBOYgHUZirr5ElMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlJmciuskNXqdUXGDmmMyqp8nUYiYlooFeAObSCka3G3r0nwgsglG3n5EuS8D QwbLMQW1jHKra/eGq9N+gzcH3vvzlENHjIQC3qQ1G0z8lvDCEasM6OplfiW+oNJg Cl9W2zZ2i4BogZMVzBRQ1yOk7naAUx2TmNC356RVuswBddLliRhP4SZsc0ni+Xwi DpEac8nCxFsbVivRRb4sxcBRy8e+4+eFWQRi64EroKhV+bpDttXbxtexEPnhUdka HqikPBAe30UQgyOXIKH7HmzNhsud4rTYcd8vKrnBl10iWl6t/C/xqPwntPW9t42W 5ye9PDPDziReVV1e4pR1CmDqBw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:47:36 2026 by rpki-client