$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: E/NjrjXqMhYNrB4byIR6UNuqO15ohv8sqf/viVk0SZ8= Subject key identifier: FB:57:6B:71:B0:66:9A:E9:61:D3:B4:97:5B:98:C4:F5:76:07:0D:D6 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 0288 Signing time: Tue 29 Sep 2026 02:15:35 +0000 Manifest this update: Tue 29 Sep 2026 02:15:34 +0000 Manifest next update: Tue 06 Oct 2026 02:15:34 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: izFbx9g0+pmV89gfPlhyMHzSLzdx/6jRthx5s1dj1o8=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: svMZS7DV5TwUD82GBLvLWWlNJprDspcc73VDjKYI3GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 01:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Sep 29 02:15:34 2026 GMT Not After : Oct 6 02:15:34 2026 GMT Subject: CN=6abb1f47-dd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:f1:5b:3a:c9:db:ad:43:25:96:9e:82:37: b9:40:87:71:35:2d:a0:4b:59:10:69:6b:8b:d8:78: 83:2c:0e:1d:34:91:bc:05:12:be:13:57:5b:5d:8c: b1:dc:b2:93:56:12:11:c2:ea:b6:3f:7a:ec:d9:ae: 58:f8:27:8b:b1:9b:55:db:8f:69:ad:af:e7:6e:d5: 35:45:6f:f3:a4:33:76:ee:c7:73:05:be:8b:9b:eb: bf:62:cc:df:24:3a:a1:15:bb:28:3e:1c:71:2b:0a: 65:ec:bf:2e:b6:f6:35:bc:2b:02:9c:cf:e7:4d:72: 20:5d:b6:3c:1a:8f:39:32:02:d6:8a:09:c4:83:69: 38:61:96:b4:37:07:bb:93:a3:27:82:03:f0:7d:26: 77:01:38:91:36:95:37:c1:bc:3e:b1:4f:f8:3d:75: fb:47:e6:28:5f:7a:9d:ae:c5:1f:08:6e:21:b0:87: b8:43:9f:51:07:5e:17:ee:75:25:35:51:a5:01:8f: 20:05:52:4c:8f:1d:38:2b:8c:91:21:ca:73:81:11: fa:6f:2a:17:f5:52:88:5d:81:e3:e9:b9:bc:b5:27: a4:aa:26:d8:f9:28:9a:87:d4:af:57:72:81:1a:8a: 85:99:01:65:19:15:5e:01:f6:7c:3f:c9:7e:92:30: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:6B:71:B0:66:9A:E9:61:D3:B4:97:5B:98:C4:F5:76:07:0D:D6 X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ad:ee:ad:28:1a:8d:96:25:ac:9f:f9:c9:1f:5b:30:c0:16: 1e:f5:43:f8:22:c5:66:f7:79:8d:0d:22:20:bc:cc:3f:25:bb: 11:9c:08:32:90:31:75:72:fa:6a:56:40:b0:b4:60:ca:13:c7: bf:4f:92:f4:9c:fd:f5:b8:2d:d9:04:f8:9e:62:54:4a:f1:88: 9a:11:a9:20:2e:0c:dc:cf:d5:c0:e9:9c:04:c9:e9:bc:cf:84: 9e:b2:93:17:3b:76:12:b8:e4:f3:c2:35:ec:68:ed:38:aa:0a: ec:1a:4c:45:1d:7d:0b:f9:35:3a:94:08:c3:32:7e:9a:a3:f7: 4c:80:15:35:0e:1c:65:a5:46:1f:02:77:84:7b:1a:44:cc:3f: 6b:8a:70:21:f1:a4:3f:da:dc:f7:b3:6d:12:02:a7:41:34:5c: a5:c1:12:13:ea:da:8b:66:92:87:71:2b:7f:0f:c4:14:e8:ed: 28:89:60:8a:ef:1c:12:80:2b:3a:e5:4b:a1:48:a5:a4:3e:20: d3:a8:f7:d9:4f:6d:a2:7b:28:52:4f:32:d9:e1:f2:d0:1b:c7: cf:26:62:ae:50:26:fe:01:db:03:fb:ac:5a:1f:83:b4:07:34: cf:e9:c5:59:c6:69:da:46:73:28:3c:e0:bf:70:7f:a9:08:87: e3:2b:ab:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjYwOTI5MDIxNTM0WhcNMjYxMDA2MDIxNTM0WjAYMRYwFAYD VQQDEw02YWJiMWY0Ny1kZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGvxWzrJ261DJZaegje5QIdxNS2gS1kQaWuL2HiDLA4dNJG8BRK+E1dbXYyx 3LKTVhIRwuq2P3rs2a5Y+CeLsZtV249pra/nbtU1RW/zpDN27sdzBb6Lm+u/Yszf JDqhFbsoPhxxKwpl7L8utvY1vCsCnM/nTXIgXbY8Go85MgLWignEg2k4YZa0Nwe7 k6MnggPwfSZ3ATiRNpU3wbw+sU/4PXX7R+YoX3qdrsUfCG4hsIe4Q59RB14X7nUl NVGlAY8gBVJMjx04K4yRIcpzgRH6byoX9VKIXYHj6bm8tSekqibY+Siah9SvV3KB GoqFmQFlGRVeAfZ8P8l+kjAuZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtXa3Gw ZprpYdO0l1uYxPV2Bw3WMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAha3urSgajZYlrJ/5yR9bMMAWHvVD+CLFZvd5jQ0iILzMPyW7EZwIMpAxdXL6 alZAsLRgyhPHv0+S9Jz99bgt2QT4nmJUSvGImhGpIC4M3M/VwOmcBMnpvM+EnrKT Fzt2Erjk88I17GjtOKoK7BpMRR19C/k1OpQIwzJ+mqP3TIAVNQ4cZaVGHwJ3hHsa RMw/a4pwIfGkP9rc97NtEgKnQTRcpcESE+rai2aSh3Erfw/EFOjtKIlgiu8cEoAr OuVLoUilpD4g06j32U9tonsoUk8y2eHy0BvHzyZirlAm/gHbA/usWh+DtAc0z+nF WcZp2kZzKDzgv3B/qQiH4yuriQ== -----END CERTIFICATE-----Generated at Tue Sep 29 05:30:55 2026 by rpki-client