$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft File: imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft (raw, json) Hash identifier: ZQHKvFgGjpuu+Z5OPCfXcB4Id7tZflXVjNtT8WuRpok= Subject key identifier: 52:2D:DC:22:15:E9:C5:D1:89:DB:4B:99:D8:F2:1B:7C:5E:C2:5B:F6 Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft Manifest number: 2E32 Signing time: Wed 14 Oct 2026 15:30:45 +0000 Manifest this update: Wed 14 Oct 2026 15:30:45 +0000 Manifest next update: Wed 21 Oct 2026 15:30:45 +0000 Files and hashes: 1: imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl (hash: t2dYMh2f46eo2XdRnaFZ3IIzlwkZda+FhgTenqIddNo=) 2: 4221CE240EC211EB9F6B1914C4F9AE02.roa (hash: CpHAAkqB1wNBvhbq3EYTPjBYpKmeFz1ZtAWsV7UQbEU=) 3: EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (hash: 3Kf0HbTrEj7/jWo4wAe5ManP2yeiLnNOYjEerE/jexE=) 4: 3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (hash: +3lZRj5cQoC2f80Jdz3PedzGlyd7zDkVmgDK6wStnBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 15:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11961 (0x2eb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Oct 14 15:30:45 2026 GMT Not After : Oct 21 15:30:45 2026 GMT Subject: CN=6acfa025-8edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:b1:c3:9f:06:62:2d:11:5a:b1:49:6d:31: 4b:6f:fa:cd:9a:8a:60:18:05:d6:46:ee:e2:67:2f: f1:7a:a8:e0:8d:d9:1b:68:15:76:43:77:f1:da:d3: 1b:a2:b3:26:38:09:43:ab:79:5a:67:7d:fa:55:c6: ee:84:29:df:14:df:18:35:55:58:4d:9b:51:f0:e3: 6b:a1:df:3a:4f:0b:83:20:f0:5f:4b:a6:10:b5:0a: 0f:9e:ec:70:78:e5:3d:af:4c:db:97:f8:02:cb:d1: 60:85:3f:35:95:8b:9a:ed:0d:89:dd:9b:68:2c:2f: 19:e0:50:f6:d4:e0:9a:18:4c:8a:7a:86:af:42:85: 68:9e:16:2c:9d:58:f2:01:1b:e7:ab:d4:3f:d9:2d: 59:be:a4:aa:00:c6:69:31:eb:d2:cf:59:59:f4:36: f8:54:5d:cd:5f:42:ea:b9:f6:a9:2b:4c:b9:1b:5e: b6:46:dd:60:8f:d5:b9:87:90:87:ac:2b:9f:4b:7a: 8e:95:f5:d6:b9:6d:e1:34:fb:f9:77:31:f2:0d:9f: 13:de:54:02:31:c9:3d:6c:7d:b9:e8:f2:47:9c:79: 5b:c3:5e:6c:77:a4:ec:49:a2:2a:87:68:78:36:0f: 4e:68:b2:13:d8:2c:b6:6b:e9:70:d5:4c:43:5b:ff: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:DC:22:15:E9:C5:D1:89:DB:4B:99:D8:F2:1B:7C:5E:C2:5B:F6 X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:3a:8f:34:8b:1a:e1:6e:df:85:d5:fc:ba:51:9c:9f:34:e6: 2d:d8:29:9a:13:81:00:ab:b2:16:3a:f5:3d:50:da:15:fc:65: c4:0d:cf:6d:3d:17:68:9c:da:f7:59:3f:17:e5:f1:de:65:c5: 3c:32:b8:64:b2:4f:61:85:8c:f3:9b:b8:36:c4:2e:0f:18:fa: 3b:77:34:a8:5d:b0:bb:77:bb:65:3b:ad:47:c3:84:c9:8c:0d: 0b:21:96:a4:86:15:cd:b5:ab:a8:8a:2c:77:3d:8c:94:87:88: 1d:e3:dc:04:09:a9:7b:aa:02:a8:24:35:95:f6:c9:8f:cc:f9: 71:b0:90:ad:86:01:9a:84:a1:87:0a:72:03:e9:da:9e:3c:d2: 99:9a:e3:96:1f:30:4f:de:6b:9f:9d:03:d3:0b:4e:0c:ed:46: 83:7d:d3:ae:90:3a:52:57:7e:f0:9d:f3:de:4b:10:54:2a:25: b9:51:a4:b4:95:d9:bc:7c:90:21:48:fd:26:35:fc:17:89:cd: 44:b5:1c:44:71:e1:f5:ed:b2:52:23:df:eb:28:77:21:e2:17: 03:c8:e2:23:13:53:2a:fa:7f:d5:c8:64:8f:c5:a9:73:86:58: 86:46:6c:3c:41:c2:30:1c:03:b5:01:b0:e1:9a:5e:eb:7f:16: d3:99:45:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjYxMDE0MTUzMDQ1WhcNMjYxMDIxMTUzMDQ1WjAYMRYwFAYD VQQDEw02YWNmYTAyNS04ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb2xw58GYi0RWrFJbTFLb/rNmopgGAXWRu7iZy/xeqjgjdkbaBV2Q3fx2tMb orMmOAlDq3laZ336VcbuhCnfFN8YNVVYTZtR8ONrod86TwuDIPBfS6YQtQoPnuxw eOU9r0zbl/gCy9FghT81lYua7Q2J3ZtoLC8Z4FD21OCaGEyKeoavQoVonhYsnVjy ARvnq9Q/2S1ZvqSqAMZpMevSz1lZ9Db4VF3NX0LqufapK0y5G162Rt1gj9W5h5CH rCufS3qOlfXWuW3hNPv5dzHyDZ8T3lQCMck9bH256PJHnHlbw15sd6TsSaIqh2h4 Ng9OaLIT2Cy2a+lw1UxDW/+6rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIt3CIV 6cXRidtLmdjyG3xewlv2MB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzUyMy8xMkI5OTdFODlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01k RDBkanBOdmRYVXpBSDlaTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQzqPNIsa4W7fhdX8ulGcnzTmLdgpmhOBAKuyFjr1PVDaFfxlxA3PbT0XaJza 91k/F+Xx3mXFPDK4ZLJPYYWM85u4NsQuDxj6O3c0qF2wu3e7ZTutR8OEyYwNCyGW pIYVzbWrqIosdz2MlIeIHePcBAmpe6oCqCQ1lfbJj8z5cbCQrYYBmoShhwpyA+na njzSmZrjlh8wT95rn50D0wtODO1Gg33TrpA6Uld+8J3z3ksQVColuVGktJXZvHyQ IUj9JjX8F4nNRLUcRHHh9e2yUiPf6yh3IeIXA8jiIxNTKvp/1chkj8Wpc4ZYhkZs PEHCMBwDtQGw4Zpe638W05lFGQ== -----END CERTIFICATE-----Generated at Thu Oct 15 10:04:18 2026 by rpki-client