$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: QDuBIkZk3mXZuk57Hk9C10DDmLcJba4X65ZetxcAfh4= Subject key identifier: 58:8C:CF:60:70:56:5E:D3:7E:EB:45:76:2E:2A:2D:2C:56:62:89:F3 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0EA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0E88 Signing time: Sat 26 Sep 2026 17:47:34 +0000 Manifest this update: Sat 26 Sep 2026 17:47:34 +0000 Manifest next update: Sat 03 Oct 2026 17:47:34 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: FV8puJNXVr7KxP8/sIT/acbgdZuodOYAd72BnS3UUjc=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3747 (0xea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Sep 26 17:47:34 2026 GMT Not After : Oct 3 17:47:34 2026 GMT Subject: CN=6ab80536-da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:db:9a:c2:d8:b0:30:0c:0d:2b:c5:55:cc: ca:0a:3d:57:2b:f4:b4:71:06:8f:c7:4d:0b:92:f9: c2:1c:31:1b:61:6e:6f:d4:88:2a:f2:db:7e:74:68: 4f:08:36:a4:85:f6:86:94:84:19:65:58:a5:38:19: e7:59:08:d0:f7:f1:4a:a4:42:f3:a1:31:b0:c2:9c: 82:b1:13:57:2c:14:9a:10:71:d5:d7:4c:aa:58:2c: 1a:b2:96:13:12:62:a2:88:5e:79:2b:c3:6c:fc:ca: 07:a2:ca:55:88:82:69:36:48:dc:31:e2:1c:f7:8d: c0:51:19:c3:94:b0:29:04:23:a9:31:1b:a5:5f:27: 88:1a:da:cb:ad:94:a6:4d:2f:9a:11:b9:7d:a9:fc: 3a:96:0b:07:b4:8f:2a:f6:68:03:69:36:e7:8f:d7: 00:a5:90:82:de:a6:c3:14:fb:3c:8d:c2:7c:ae:84: af:b2:88:c7:67:95:4a:ec:5d:df:63:ed:54:9f:f3: 1f:59:97:40:a9:5f:79:37:7f:31:36:41:ae:02:3c: 8f:db:76:c5:d3:ea:a2:22:e8:8b:e6:48:68:40:12: 86:13:84:1f:03:ff:fd:f6:59:d4:19:16:54:5b:25: 26:a3:47:51:04:71:13:db:cd:52:f7:68:dd:c2:c6: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:CF:60:70:56:5E:D3:7E:EB:45:76:2E:2A:2D:2C:56:62:89:F3 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b5:4e:cc:a1:c7:90:2e:f4:ac:0e:72:fe:cd:c6:e1:6e:8a: f2:27:65:c6:51:d9:e4:81:3a:86:63:af:74:84:9d:ee:b4:c8: 9f:e8:e6:c0:59:25:90:f2:93:96:82:86:13:53:9e:dc:42:59: 21:6c:20:86:a3:1f:a9:ba:ee:16:2c:62:22:d2:7c:5e:72:f7: 1f:9a:c4:c8:74:79:f8:40:7e:a2:6a:6c:1b:cb:35:3d:e9:5c: 10:71:68:fb:91:3e:30:73:e5:4d:06:85:40:e9:1c:da:d6:05: 8e:50:d1:05:fe:75:fc:e2:aa:48:f5:cc:d1:df:ec:95:86:4e: 74:ff:cc:23:93:ae:4f:6b:55:a8:3a:cc:32:9c:1f:bf:6e:89: 56:06:45:c2:6e:48:1b:6f:9d:09:bc:53:8a:56:1f:53:a3:57: 67:f3:1f:84:7a:4b:56:ae:ee:c8:22:08:7a:08:7a:70:4b:5f: 8a:3d:08:1d:ee:36:5a:43:f9:ed:48:02:28:34:3b:93:f6:f4: 96:c4:3f:b8:02:e5:2c:f7:c9:33:10:a2:cb:27:0a:a4:83:84: 62:c4:cb:bb:2c:b4:f7:4a:97:a3:4b:6f:89:e7:36:f4:60:3b: 97:08:93:f2:6c:c9:c4:91:9c:53:eb:d7:f7:74:0d:89:ab:f0: 5f:8d:b7:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjYwOTI2MTc0NzM0WhcNMjYxMDAzMTc0NzM0WjAYMRYwFAYD VQQDEw02YWI4MDUzNi1kYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQXbmsLYsDAMDSvFVczKCj1XK/S0cQaPx00LkvnCHDEbYW5v1Igq8tt+dGhP CDakhfaGlIQZZVilOBnnWQjQ9/FKpELzoTGwwpyCsRNXLBSaEHHV10yqWCwaspYT EmKiiF55K8Ns/MoHospViIJpNkjcMeIc943AURnDlLApBCOpMRulXyeIGtrLrZSm TS+aEbl9qfw6lgsHtI8q9mgDaTbnj9cApZCC3qbDFPs8jcJ8roSvsojHZ5VK7F3f Y+1Un/MfWZdAqV95N38xNkGuAjyP23bF0+qiIuiL5khoQBKGE4QfA//99lnUGRZU WyUmo0dRBHET281S92jdwsZuvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiMz2Bw Vl7TfutFdi4qLSxWYonzMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiLVOzKHHkC70rA5y/s3G4W6K8idlxlHZ5IE6hmOvdISd7rTIn+jmwFklkPKT loKGE1Oe3EJZIWwghqMfqbruFixiItJ8XnL3H5rEyHR5+EB+ompsG8s1PelcEHFo +5E+MHPlTQaFQOkc2tYFjlDRBf51/OKqSPXM0d/slYZOdP/MI5OuT2tVqDrMMpwf v26JVgZFwm5IG2+dCbxTilYfU6NXZ/MfhHpLVq7uyCIIegh6cEtfij0IHe42WkP5 7UgCKDQ7k/b0lsQ/uALlLPfJMxCiyycKpIOEYsTLuyy090qXo0tviec29GA7lwiT 8mzJxJGcU+vX93QNiavwX423xg== -----END CERTIFICATE-----Generated at Sun Sep 27 12:04:05 2026 by rpki-client