$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: m63vHB6urdGv32JUtBzPpXbmI3BenRiPxRdNUVK5Lh0= Subject key identifier: 49:15:7E:17:A7:9D:7B:C4:0F:0D:A3:1D:D0:DD:76:17:FA:E7:6E:F2 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 0873 Signing time: Sat 26 Sep 2026 15:57:13 +0000 Manifest this update: Sat 26 Sep 2026 15:57:12 +0000 Manifest next update: Sat 03 Oct 2026 15:57:12 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: h0UNEr5QdWOswo6yQWVLCM+R3b61t793710g5j6hWv4=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 15:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Sep 26 15:57:12 2026 GMT Not After : Oct 3 15:57:12 2026 GMT Subject: CN=6ab7eb59-2b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:1f:bb:a1:f1:fd:99:da:ed:dd:78:da:02: 21:02:cf:ee:7a:a2:9a:7c:af:92:87:de:27:98:25: c9:13:fc:fe:93:7c:56:49:61:9b:72:41:72:58:cb: 46:2d:93:dc:c3:15:3a:c5:ad:f0:80:23:91:09:3a: 6d:bd:0b:ef:2e:11:44:5f:ef:da:be:61:c4:0d:e5: 4c:f6:1a:c8:47:ed:62:af:0a:ea:e7:9c:ef:fa:55: 0b:17:96:07:dd:e1:59:78:2a:fe:be:5a:80:77:76: 4b:88:fc:4d:7d:5e:f8:5f:dd:c5:3c:7e:7d:d6:0b: 62:09:38:c8:70:c9:03:68:ef:71:97:1a:ec:f8:6e: 62:3a:72:28:fa:3b:b6:fd:19:02:62:44:fd:39:62: fd:a0:3e:97:d0:d1:a1:90:35:a7:e8:f2:bc:fb:0b: 44:57:3b:85:aa:4b:ed:ce:12:9f:89:d0:b2:36:5b: 52:6f:0c:2b:9b:d0:6f:90:86:e9:bc:d0:0f:4e:c7: 32:70:3c:ea:fe:c0:58:27:9e:6a:e9:d3:f4:bd:ec: 77:dd:68:97:cb:a0:36:eb:b7:ef:57:d9:bc:8c:1c: 1c:5b:8d:07:4d:5f:fe:56:0a:14:d0:d6:e0:61:fc: 61:9d:71:4b:e6:a6:d9:62:02:b8:e9:6c:a8:53:3f: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:15:7E:17:A7:9D:7B:C4:0F:0D:A3:1D:D0:DD:76:17:FA:E7:6E:F2 X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:80:a4:42:ad:ae:66:2f:8e:05:a5:11:19:23:75:52:0a:40: 55:ee:75:8c:6f:29:46:98:02:96:b4:a5:e8:16:c0:87:e1:99: 08:e0:49:21:c6:9e:9a:e5:e5:a6:03:0d:20:0f:5a:69:04:ac: 02:81:d7:b0:91:56:1a:64:ee:89:30:c2:12:40:f5:45:5b:9f: cf:4d:e6:7e:e1:e9:c8:46:a7:93:67:f9:21:91:29:71:78:93: e8:f6:30:b2:21:53:d1:c1:40:0e:c1:04:d0:10:49:1c:95:a0: 55:f6:84:7c:df:f4:48:99:50:1d:e1:14:f4:d0:ba:b6:88:5a: 55:2e:06:c0:fa:3d:35:1e:56:7d:fe:d5:cc:9d:35:4f:9e:42: 13:38:a0:ef:c1:b3:c5:8a:53:fc:89:37:4e:75:12:5c:9f:3c: e5:b8:2f:a7:91:d0:09:4f:c7:34:73:74:86:65:9e:e4:03:9a: f9:5a:33:45:a4:6d:7c:d6:9c:b1:70:dc:13:d8:b1:de:29:a1: e9:af:92:8d:ab:3b:80:a6:36:66:0f:b1:7c:f5:a1:7d:d2:34: 6f:02:02:d8:ea:f9:c0:09:1f:5b:9a:9b:3b:9a:cd:de:76:d9: 0e:64:ec:25:5a:ce:8e:05:e7:24:48:85:e0:03:c5:0e:4d:dd: 6b:91:5e:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjYwOTI2MTU1NzEyWhcNMjYxMDAzMTU1NzEyWjAYMRYwFAYD VQQDEw02YWI3ZWI1OS0yYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Efu6Hx/Zna7d142gIhAs/ueqKafK+Sh94nmCXJE/z+k3xWSWGbckFyWMtG LZPcwxU6xa3wgCORCTptvQvvLhFEX+/avmHEDeVM9hrIR+1irwrq55zv+lULF5YH 3eFZeCr+vlqAd3ZLiPxNfV74X93FPH591gtiCTjIcMkDaO9xlxrs+G5iOnIo+ju2 /RkCYkT9OWL9oD6X0NGhkDWn6PK8+wtEVzuFqkvtzhKfidCyNltSbwwrm9BvkIbp vNAPTscycDzq/sBYJ55q6dP0vex33WiXy6A267fvV9m8jBwcW40HTV/+VgoU0Nbg YfxhnXFL5qbZYgK46WyoUz+xLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkVfhen nXvEDw2jHdDddhf6527yMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAICkQq2uZi+OBaURGSN1UgpAVe51jG8pRpgClrSl6BbAh+GZCOBJIcaemuXl pgMNIA9aaQSsAoHXsJFWGmTuiTDCEkD1RVufz03mfuHpyEank2f5IZEpcXiT6PYw siFT0cFADsEE0BBJHJWgVfaEfN/0SJlQHeEU9NC6tohaVS4GwPo9NR5Wff7VzJ01 T55CEzig78GzxYpT/Ik3TnUSXJ885bgvp5HQCU/HNHN0hmWe5AOa+VozRaRtfNac sXDcE9ix3imh6a+Sjas7gKY2Zg+xfPWhfdI0bwIC2Or5wAkfW5qbO5rN3nbZDmTs JVrOjgXnJEiF4APFDk3da5FeyQ== -----END CERTIFICATE-----Generated at Mon Sep 28 10:54:23 2026 by rpki-client