$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: SkWiUy7DWS4vBpaUpIXKPduPNolyosVMEkFGd+yPFdI= Subject key identifier: EE:72:79:87:46:4C:5A:2C:21:D7:50:B1:4E:73:39:C7:CF:60:07:31 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 0104 Signing time: Wed 23 Sep 2026 05:58:01 +0000 Manifest this update: Wed 23 Sep 2026 05:58:01 +0000 Manifest next update: Wed 30 Sep 2026 05:58:01 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: eR8Lk9He8S8rBYv32ZOHJPM2nUWAap4Q4f4GR9ZUkcU=) 2: CA5B991430E111F09B76D311C4F9AE02.roa (hash: eRx8bbJu6in61S4okIsK48ZlBXinhwSR62SelJS9cC8=) 3: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: is4OaleIvjgTfkRN81esClK4/HDDPHdtSZTyTH+9VPs=) 4: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: sY7EBkThUecrfKfG+kSCpuHCSj6wPtVy9PUYEZdqikI=) 5: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: juMHvZUG78CclBXRyslR4dpbF0KFYZrW0WvDaAAud4k=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: 4VQy2uTuYmBTt5p4bl4BylIiGQ88q1IjeeXSwehmuI0=) 7: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: iU6Wj2L6dhe3grsmDUQsEWobs2LTk0gYMSSAmstcjt8=) 8: 570B12E0562611F09F085F44C4F9AE02.roa (hash: /sJ2zjbBJwvHhohFygkIyei7pdLWS58sUBWjkvmnlA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Sep 23 05:58:01 2026 GMT Not After : Sep 30 05:58:01 2026 GMT Subject: CN=6ab36a69-9b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:ad:b4:8b:e6:1f:2f:10:1e:b7:e3:e1:b1: d9:15:83:66:14:46:f4:2e:a7:4d:71:6a:72:dc:83: ae:2d:64:bf:3e:22:53:20:e0:f1:fc:44:a1:fd:62: 1c:00:71:15:b1:ed:f9:46:72:56:78:fa:3e:5f:c3: 72:90:16:01:af:ae:ca:eb:56:e1:93:60:55:ee:ca: e2:bb:2f:d7:c2:c0:45:27:2e:13:ca:0d:af:cd:32: af:67:30:32:5d:f2:62:56:fb:3f:bf:18:21:c0:2a: 05:6a:37:73:82:0d:3d:0b:02:09:6f:18:79:ef:a1: 62:ba:f0:7d:86:44:a6:eb:ff:68:50:42:f4:61:64: 0d:41:c0:b8:c5:a0:0f:e4:b2:e1:30:df:8d:1b:03: 93:5a:c4:7c:a0:4d:22:24:d0:1c:cd:39:70:57:e3: 47:ee:3e:ef:c1:35:c6:5c:14:29:9b:4c:57:05:57: b2:f2:f2:ca:68:a6:a0:d7:59:9e:e5:95:e2:58:95: 9a:36:c7:f2:e9:e0:91:6d:95:03:49:c9:12:05:2a: 08:8a:7d:d7:bd:30:e5:0d:f9:a0:b0:25:a9:15:07: 14:78:fc:f1:77:b5:f2:49:74:6a:c5:f0:e0:af:2e: e6:3d:a6:f6:c8:e4:8b:41:c9:71:ba:2f:5b:b1:21: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:79:87:46:4C:5A:2C:21:D7:50:B1:4E:73:39:C7:CF:60:07:31 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f3:54:3f:ff:70:2d:64:48:a2:05:96:fc:5b:81:2b:47:8a: 87:fb:ab:3c:ba:17:bb:9d:f9:b6:87:f8:4c:04:fb:00:5e:14: b6:54:4c:ff:6a:65:6f:3d:fc:b8:68:9f:21:9a:d6:32:96:31: b2:ed:47:27:e2:91:33:fd:d4:43:d9:19:0e:67:72:1b:7a:19: 23:aa:cb:91:ee:33:95:77:63:48:cf:be:af:7d:40:6a:09:16: 8c:c1:c5:a5:22:8f:29:a7:65:01:73:b7:0c:3a:a0:d7:a8:4d: 5f:1c:ed:e5:72:cd:81:ee:ae:ea:66:8c:27:7f:f2:b8:a2:a2: 39:1c:d7:fc:c7:ba:20:4c:ef:7e:5f:5f:33:84:e8:8b:6c:80: ff:9d:4a:4d:91:81:d9:d5:c1:bd:d2:93:6e:41:3e:81:e3:7d: c5:f9:77:e0:08:3d:7d:5e:cc:bb:24:7c:a0:83:02:d4:78:82: 2b:aa:65:ea:24:db:13:51:26:2a:2e:cd:21:f3:d0:f0:fb:74: 84:8c:1d:b1:d6:65:40:c4:b8:66:04:53:d2:68:53:fc:97:f3: 7d:9b:0c:60:8b:4c:45:44:79:02:a4:53:d3:c5:20:34:01:b2: 65:eb:0d:f0:be:7f:7d:80:c1:b9:b2:74:c0:e4:89:59:00:e4: 13:01:5e:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwOTIzMDU1ODAxWhcNMjYwOTMwMDU1ODAxWjAYMRYwFAYD VQQDEw02YWIzNmE2OS05YjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygattIvmHy8QHrfj4bHZFYNmFEb0LqdNcWpy3IOuLWS/PiJTIODx/ESh/WIc AHEVse35RnJWePo+X8NykBYBr67K61bhk2BV7sriuy/XwsBFJy4Tyg2vzTKvZzAy XfJiVvs/vxghwCoFajdzgg09CwIJbxh576FiuvB9hkSm6/9oUEL0YWQNQcC4xaAP 5LLhMN+NGwOTWsR8oE0iJNAczTlwV+NH7j7vwTXGXBQpm0xXBVey8vLKaKag11me 5ZXiWJWaNsfy6eCRbZUDSckSBSoIin3XvTDlDfmgsCWpFQcUePzxd7XySXRqxfDg ry7mPab2yOSLQclxui9bsSE+vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5yeYdG TFosIddQsU5zOcfPYAcxMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANPNUP/9wLWRIogWW/FuBK0eKh/urPLoXu535tof4TAT7AF4UtlRM/2plbz38 uGifIZrWMpYxsu1HJ+KRM/3UQ9kZDmdyG3oZI6rLke4zlXdjSM++r31AagkWjMHF pSKPKadlAXO3DDqg16hNXxzt5XLNge6u6maMJ3/yuKKiORzX/Me6IEzvfl9fM4To i2yA/51KTZGB2dXBvdKTbkE+geN9xfl34Ag9fV7MuyR8oIMC1HiCK6pl6iTbE1Em Ki7NIfPQ8Pt0hIwdsdZlQMS4ZgRT0mhT/JfzfZsMYItMRUR5AqRT08UgNAGyZesN 8L5/fYDBubJ0wOSJWQDkEwFe3A== -----END CERTIFICATE-----Generated at Wed Sep 23 21:09:26 2026 by rpki-client