$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: FjCPBuzZugO2UyluIAjIQpiKZMFPU3ntUeKc44cX1u8= Subject key identifier: 67:97:1B:17:42:7B:4F:15:10:5A:69:A6:F7:23:29:95:1F:BC:FE:3E Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 021A Signing time: Tue 13 Oct 2026 03:29:28 +0000 Manifest this update: Tue 13 Oct 2026 03:29:27 +0000 Manifest next update: Tue 20 Oct 2026 03:29:27 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: JM/gfez1Jp+lUE1MtgkGyC296TkWW7ZwVD3EmMFBH5M=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 03:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Oct 13 03:29:27 2026 GMT Not After : Oct 20 03:29:27 2026 GMT Subject: CN=6acda597-a71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c7:cc:2a:dd:b8:39:a1:9b:73:c9:54:5b:9e: 0b:5b:66:84:e3:9b:83:63:ca:5b:c0:0f:a4:d1:9c: 3d:58:f6:f8:47:79:f1:d0:84:28:25:ad:4e:84:3e: 6f:fe:cc:91:73:f6:d7:80:92:b2:79:14:62:b0:bd: a2:e6:80:66:69:d5:f6:c4:b1:2d:d0:a0:90:44:1b: f6:ec:70:15:c2:c1:d1:ea:be:25:07:50:8e:a3:97: 9d:c0:60:3d:9b:b3:87:c8:22:a8:1b:0b:47:17:83: 1b:f5:01:b0:78:62:74:8f:44:78:70:f9:09:84:86: 3f:6c:51:47:98:23:ac:7d:f2:32:3b:af:3c:19:1a: 8d:ce:af:f0:7a:cf:cb:f0:28:e0:4b:df:80:0d:de: 69:00:84:dd:50:6e:ac:91:60:ec:c6:6b:9a:26:4c: 33:c7:a6:aa:8e:1e:17:82:07:a7:8e:c6:1e:6b:c5: 56:aa:67:ed:5d:21:64:ea:6f:07:b4:7a:76:b4:3d: df:bd:25:4a:0a:14:49:e4:be:50:df:a9:7a:38:c8: 0b:b4:78:b5:80:49:1e:e3:d7:7a:d2:64:81:4d:da: 70:63:f2:c2:db:aa:19:d8:6f:fb:dd:ed:7a:2f:e9: 5d:ae:f3:af:99:17:6b:c3:69:96:e5:9b:92:6a:fb: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:97:1B:17:42:7B:4F:15:10:5A:69:A6:F7:23:29:95:1F:BC:FE:3E X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:37:4a:f8:f3:0f:66:99:37:65:af:40:0f:18:7e:2d:bb:3a: 7f:5e:08:19:6a:5e:a4:54:da:49:5d:01:b3:c8:aa:dc:7a:f2: 08:0b:06:93:82:b4:65:a7:14:81:94:b3:d2:55:78:b1:68:62: 64:12:af:86:d0:13:a3:69:7f:06:74:b6:a7:2b:fb:d0:da:8d: 93:37:ae:53:f3:a9:e9:dd:c0:a8:e8:99:18:f8:6f:8c:2f:ef: ee:3d:ab:03:ac:99:48:a9:98:e5:2d:65:4b:19:a1:e5:b5:e0: 8d:3b:e2:c0:34:30:83:7c:8e:1b:94:de:15:45:e3:11:af:84: 5f:d8:11:75:4f:0d:be:f8:69:39:9d:54:11:6c:75:e8:7d:9d: 61:72:0d:9f:8e:e8:76:68:1c:7a:f5:38:5f:9e:11:62:74:bc: 47:99:4d:4f:f8:46:af:27:4a:ec:07:ab:09:5e:13:47:1c:0b: 9c:11:00:79:fa:51:17:98:fb:fd:33:80:9e:15:83:f6:94:2e: 63:de:4b:bd:8e:51:31:4e:08:d0:76:8a:13:50:eb:b3:35:44: 79:07:3b:23:26:2d:be:42:3f:19:b3:2f:32:67:71:fc:c3:17: 7f:68:d9:cb:13:a2:32:87:a0:7e:79:4b:54:6c:ce:10:c8:54: 48:0f:c5:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjYxMDEzMDMyOTI3WhcNMjYxMDIwMDMyOTI3WjAYMRYwFAYD VQQDEw02YWNkYTU5Ny1hNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cfMKt24OaGbc8lUW54LW2aE45uDY8pbwA+k0Zw9WPb4R3nx0IQoJa1OhD5v /syRc/bXgJKyeRRisL2i5oBmadX2xLEt0KCQRBv27HAVwsHR6r4lB1COo5edwGA9 m7OHyCKoGwtHF4Mb9QGweGJ0j0R4cPkJhIY/bFFHmCOsffIyO688GRqNzq/wes/L 8CjgS9+ADd5pAITdUG6skWDsxmuaJkwzx6aqjh4XggenjsYea8VWqmftXSFk6m8H tHp2tD3fvSVKChRJ5L5Q36l6OMgLtHi1gEke49d60mSBTdpwY/LC26oZ2G/73e16 L+ldrvOvmRdrw2mW5ZuSavvOewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeXGxdC e08VEFpppvcjKZUfvP4+MB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVjdK+PMPZpk3Za9ADxh+Lbs6f14IGWpepFTaSV0Bs8iq3HryCAsGk4K0ZacU gZSz0lV4sWhiZBKvhtATo2l/BnS2pyv70NqNkzeuU/Op6d3AqOiZGPhvjC/v7j2r A6yZSKmY5S1lSxmh5bXgjTviwDQwg3yOG5TeFUXjEa+EX9gRdU8NvvhpOZ1UEWx1 6H2dYXINn47odmgcevU4X54RYnS8R5lNT/hGrydK7AerCV4TRxwLnBEAefpRF5j7 /TOAnhWD9pQuY95LvY5RMU4I0HaKE1DrszVEeQc7IyYtvkI/GbMvMmdx/MMXf2jZ yxOiMoegfnlLVGzOEMhUSA/F3g== -----END CERTIFICATE-----Generated at Tue Oct 13 19:33:01 2026 by rpki-client