$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft File: YmQpIWRWytXkhBRODGZqKZO5bck.mft (raw, json) Hash identifier: G99XQFULXcM6BDl9Rxh3aFjiv+8T1bwjhoKY1DWidPc= Subject key identifier: D1:EF:D2:49:B7:58:CF:58:89:40:BB:31:30:61:F1:FE:A0:0B:AA:D7 Authority key identifier: 62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9 Certificate issuer: /CN=A9128478/serialNumber=626429216456CAD5E484144E0C666A2993B96DC9 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft Manifest number: 09 Signing time: Thu 01 Oct 2026 10:40:38 +0000 Manifest this update: Thu 01 Oct 2026 10:40:38 +0000 Manifest next update: Thu 08 Oct 2026 10:40:38 +0000 Files and hashes: 1: YmQpIWRWytXkhBRODGZqKZO5bck.crl (hash: WEfX4HAqHYpYDqXxOap8I5Pd+GICIDeTXTdOrNDaqFw=) 2: 352C6794B29D11F1A4273C704011F970.roa (hash: al3KXuExaaHNnj+0UoiIH+aSoilqvKVflzH0TtjjoRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.crl rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128478, serialNumber=626429216456CAD5E484144E0C666A2993B96DC9 Validity Not Before: Oct 1 10:40:38 2026 GMT Not After : Oct 8 10:40:38 2026 GMT Subject: CN=6abe38a6-1638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:d3:25:80:2b:ad:11:9c:d7:37:7c:02:b4: bf:70:61:f3:43:62:62:8b:29:6b:77:8a:91:cd:2b: 83:40:fe:0f:ef:4c:e9:5c:98:52:c6:d5:65:df:c9: 29:b3:e1:d9:a0:f5:28:ca:96:08:1b:9a:ad:aa:b9: e0:24:41:8f:b9:f9:71:5d:dd:0f:78:93:29:4a:76: a7:b0:5c:39:06:57:86:df:f4:d0:da:22:5b:cd:9e: 00:b0:21:0c:1a:25:79:97:77:f5:2d:af:75:21:49: 85:3d:be:2e:dd:4c:74:d0:71:1b:68:d5:79:c6:da: a6:14:44:47:87:01:cf:ce:23:b9:24:f5:83:ae:1d: 21:04:66:c5:77:5b:bd:ed:5f:a5:83:46:3c:3d:9a: 63:3e:39:7e:6e:94:5d:bf:5b:3e:5e:54:e1:01:bb: 67:52:d8:0a:cc:15:99:2b:f9:e6:e1:04:2e:e7:31: e1:9c:4f:f4:17:e0:20:c2:2b:0f:66:46:a3:10:3c: e5:e3:58:7a:e3:6b:f4:a1:46:90:53:96:15:99:d1: 3e:fa:37:03:72:7d:00:5c:dd:88:5c:a5:35:6c:26: e7:51:5c:7f:1a:28:40:7d:f0:47:47:ee:09:79:06: ff:b3:c3:83:44:1d:ba:d7:23:d3:5f:b2:03:2c:ee: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EF:D2:49:B7:58:CF:58:89:40:BB:31:30:61:F1:FE:A0:0B:AA:D7 X509v3 Authority Key Identifier: keyid:62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:96:a3:1a:bc:2a:4a:5e:95:90:a0:0d:12:32:b2:68:c4:38: d0:09:5f:ac:5f:88:00:34:82:0f:4a:53:51:ae:6f:dc:bb:2b: 8b:11:49:6c:9c:d7:55:60:7a:a7:ec:d3:6d:6e:ec:ab:db:58: 88:87:33:f3:e4:8d:bf:d4:b0:a2:90:38:d4:72:3c:a6:b3:4a: 4c:c9:94:f4:56:7c:43:c7:46:f8:63:b7:78:15:66:b4:c5:7d: 12:ae:77:a1:d8:b6:65:5f:d5:6a:7d:7e:33:3e:68:98:a9:27: 4a:c3:43:2e:55:8b:19:81:40:0a:fc:6a:59:18:58:1a:0e:4a: 0d:35:f2:07:aa:0c:a5:84:96:46:6b:c0:92:1b:ff:11:5b:7b: 4a:e4:26:7a:8b:cb:5e:a8:6a:b5:88:d6:8f:d1:82:7d:ef:fb: 16:e9:25:c6:b0:39:04:90:fc:92:13:18:91:c0:00:b9:c6:bb: c1:c4:01:a8:26:04:da:c4:84:69:e7:80:e7:08:c9:8c:9e:94: 6f:04:e2:79:74:13:19:78:43:47:51:ad:ad:ba:3c:19:02:d4: dd:d1:53:65:23:48:10:1b:77:3b:ce:d2:c9:5c:64:6a:ca:bc: 95:ef:e3:41:fd:21:9c:5f:01:df:15:d8:2b:e6:50:3d:c9:1d: 30:3e:0a:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODQ3ODExMC8GA1UEBRMoNjI2NDI5MjE2NDU2Q0FENUU0ODQxNDRFMEM2NjZBMjk5 M0I5NkRDOTAeFw0yNjEwMDExMDQwMzhaFw0yNjEwMDgxMDQwMzhaMBgxFjAUBgNV BAMTDTZhYmUzOGE2LTE2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRM9MlgCutEZzXN3wCtL9wYfNDYmKLKWt3ipHNK4NA/g/vTOlcmFLG1WXfySmz 4dmg9SjKlggbmq2queAkQY+5+XFd3Q94kylKdqewXDkGV4bf9NDaIlvNngCwIQwa JXmXd/Utr3UhSYU9vi7dTHTQcRto1XnG2qYUREeHAc/OI7kk9YOuHSEEZsV3W73t X6WDRjw9mmM+OX5ulF2/Wz5eVOEBu2dS2ArMFZkr+ebhBC7nMeGcT/QX4CDCKw9m RqMQPOXjWHrja/ShRpBTlhWZ0T76NwNyfQBc3YhcpTVsJudRXH8aKEB98EdH7gl5 Bv+zw4NEHbrXI9NfsgMs7l6rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0e/SSbdY z1iJQLsxMGHx/qALqtcwHwYDVR0jBBgwFoAUYmQpIWRWytXkhBRODGZqKZO5bckw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NDc4LzQ3RUE5NDFBQjI5 QzExRjE5MzM5RUEzMTQwMTFGOTcwL1ltUXBJV1JXeXRYa2hCUk9ER1pxS1pPNWJj ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWW1RcElXUld5dFhraEJST0RHWnFLWk81YmNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NDc4LzQ3RUE5NDFBQjI5QzExRjE5MzM5RUEzMTQwMTFGOTcwL1ltUXBJV1JXeXRY a2hCUk9ER1pxS1pPNWJjay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzlqMavCpKXpWQoA0SMrJoxDjQCV+sX4gANIIPSlNRrm/cuyuLEUlsnNdVYHqn 7NNtbuyr21iIhzPz5I2/1LCikDjUcjyms0pMyZT0VnxDx0b4Y7d4FWa0xX0Srneh 2LZlX9VqfX4zPmiYqSdKw0MuVYsZgUAK/GpZGFgaDkoNNfIHqgylhJZGa8CSG/8R W3tK5CZ6i8teqGq1iNaP0YJ97/sW6SXGsDkEkPySExiRwAC5xrvBxAGoJgTaxIRp 54DnCMmMnpRvBOJ5dBMZeENHUa2tujwZAtTd0VNlI0gQG3c7ztLJXGRqyryV7+NB /SGcXwHfFdgr5lA9yR0wPgpU -----END CERTIFICATE-----Generated at Sat Oct 3 12:12:25 2026 by rpki-client