$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft File: drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json) Hash identifier: DLQlz+oaSWhd9swArlXqiFPlTmSntmXXUcXMg3kri9U= Subject key identifier: 66:6D:AD:CB:52:5C:6C:8C:CB:C6:35:76:12:A9:48:D8:40:E4:5C:1D Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft Manifest number: 0BD6 Signing time: Mon 12 Oct 2026 19:08:38 +0000 Manifest this update: Mon 12 Oct 2026 19:08:37 +0000 Manifest next update: Mon 19 Oct 2026 19:08:37 +0000 Files and hashes: 1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: oNAnbTz1T9uMIuF2eWJBh8TQ5Zc12ABug107lWs49rg=) 2: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: nvrbL4K8UTuSHUzb0sameKGMaeUHHtqeYardPlMzhKY=) 3: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: NYJZvZPzyDgeHzpdsKVjfnf0vb6jVGfn+iXWogNI5w0=) 4: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: bw6V3e8uxgz/w4mVGTTnR4lCFXMSeabuBZrROz8xFwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: Oct 12 19:08:37 2026 GMT Not After : Oct 19 19:08:37 2026 GMT Subject: CN=6acd3036-caba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:12:fa:64:96:3b:ad:0a:be:63:7b:ad:65: 72:a7:00:3b:15:c8:cc:7e:d0:53:5d:f8:5e:99:62: d9:da:5d:f8:42:22:13:27:b4:8b:58:64:f8:29:6f: ea:98:2c:8f:8b:25:e3:b6:ad:b5:c6:aa:54:bc:74: 86:fe:eb:69:10:52:70:9c:c8:78:34:1c:4a:8b:08: b5:70:92:e3:44:31:03:c0:ed:54:ad:df:c9:57:ef: 2b:c4:3b:5f:bf:d8:b4:e8:89:3b:f2:d4:81:50:08: 2f:3f:f6:34:65:c2:e5:f3:95:05:29:d0:91:bd:1a: 48:ac:44:fb:78:e8:97:b8:7c:42:f2:b3:13:cb:76: 70:91:c1:5c:cb:88:1c:d6:f8:89:ab:06:d2:fd:68: 05:17:72:ea:8e:d1:65:c1:ab:4e:50:39:f4:98:3e: f7:27:96:b8:b3:3e:0a:68:b3:eb:d2:d8:a0:fb:d6: 79:4b:d4:50:79:34:72:f8:61:cc:22:30:af:fa:12: b6:ce:be:5c:ce:35:4d:08:a9:9c:57:c0:cc:8d:b0: ce:04:a5:50:98:89:d6:6d:6a:b9:a3:40:58:9b:6d: cc:0c:ab:5c:86:ad:88:6f:06:a5:ce:9b:8e:e4:65: 9c:de:62:e4:9f:fc:98:77:a7:0c:2e:6c:d6:5d:a9: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6D:AD:CB:52:5C:6C:8C:CB:C6:35:76:12:A9:48:D8:40:E4:5C:1D X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c3:7e:13:9a:33:ef:1f:7d:77:b4:df:5e:c2:7a:8e:f4:0f: 3d:fd:f9:7f:3a:6a:f7:b3:a5:9b:5a:82:3a:38:1c:ae:6c:07: 8e:f7:02:d2:4c:44:9f:5c:54:78:f6:97:37:7a:c5:8a:e6:cd: f9:ea:09:e5:9a:be:83:f2:9f:bd:41:ef:07:ee:3e:2d:1d:65: cb:85:25:d7:97:f8:3e:e7:92:dd:67:a6:e6:f6:43:1d:ea:e6: 5e:a1:e7:47:ef:25:6a:ba:1e:3a:51:82:26:5b:cf:db:ee:8f: 14:ab:a9:8d:92:14:18:0b:50:26:44:c0:ae:0d:63:7b:60:75: 50:f6:6e:3d:74:8f:a0:76:20:49:62:ce:68:24:74:77:42:60: 32:fa:3e:bc:fa:08:f5:a8:ec:0a:59:21:f5:95:13:80:b1:71: 6f:5e:73:1d:5a:37:ce:9e:b6:16:32:9e:bc:cd:6d:63:8c:46: 31:92:fa:99:56:fa:77:a7:71:a5:14:18:b3:c3:b8:28:e1:60: 7d:ca:08:85:d7:22:b0:bf:ae:9d:f6:53:bc:98:21:96:16:62: 2d:c1:bb:d4:97:61:ae:53:d0:7f:0a:fa:d2:e6:37:e2:11:1b: a0:1b:1a:43:11:20:7a:13:8b:cf:3c:1c:2e:f6:6d:84:c3:84: 75:cc:93:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjYxMDEyMTkwODM3WhcNMjYxMDE5MTkwODM3WjAYMRYwFAYD VQQDEw02YWNkMzAzNi1jYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IwS+mSWO60KvmN7rWVypwA7FcjMftBTXfhemWLZ2l34QiITJ7SLWGT4KW/q mCyPiyXjtq21xqpUvHSG/utpEFJwnMh4NBxKiwi1cJLjRDEDwO1Urd/JV+8rxDtf v9i06Ik78tSBUAgvP/Y0ZcLl85UFKdCRvRpIrET7eOiXuHxC8rMTy3ZwkcFcy4gc 1viJqwbS/WgFF3LqjtFlwatOUDn0mD73J5a4sz4KaLPr0tig+9Z5S9RQeTRy+GHM IjCv+hK2zr5czjVNCKmcV8DMjbDOBKVQmInWbWq5o0BYm23MDKtchq2IbwalzpuO 5GWc3mLkn/yYd6cMLmzWXamlrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZtrctS XGyMy8Y1dhKpSNhA5FwdMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTZDQS83NDA5QjQ3QTRGQzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTlly Ui1rLWlJVGVoUU9XMjg3N1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjMN+E5oz7x99d7TfXsJ6jvQPPf35fzpq97Olm1qCOjgcrmwHjvcC0kxEn1xU ePaXN3rFiubN+eoJ5Zq+g/KfvUHvB+4+LR1ly4Ul15f4PueS3Wem5vZDHermXqHn R+8laroeOlGCJlvP2+6PFKupjZIUGAtQJkTArg1je2B1UPZuPXSPoHYgSWLOaCR0 d0JgMvo+vPoI9ajsClkh9ZUTgLFxb15zHVo3zp62FjKevM1tY4xGMZL6mVb6d6dx pRQYs8O4KOFgfcoIhdcisL+unfZTvJghlhZiLcG71JdhrlPQfwr60uY34hEboBsa QxEgehOLzzwcLvZthMOEdcyT4Q== -----END CERTIFICATE-----Generated at Wed Oct 14 20:08:36 2026 by rpki-client