$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: H/4+pTTgeICZyUy9vCrokZubANxINVUn9Vh8S450knY= Subject key identifier: 3E:BB:82:A1:A2:A3:F9:F3:3D:3F:18:17:75:F9:29:60:19:A0:17:4A Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 019B Signing time: Fri 09 Oct 2026 04:52:53 +0000 Manifest this update: Fri 09 Oct 2026 04:52:53 +0000 Manifest next update: Fri 16 Oct 2026 04:52:53 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: QCVVXIec+vDNfYLgjsI2Y6whDKMsXpxgIeyeb8hXrns=) 2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: lb4f6pkMdcTPEqYM1+BXl7mtR/jYv2gwIvq8S6K5s0I=) 3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: UOhVUzMyutllELZUTkuXz1te3g3ze7S2hTTddgZueoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Oct 9 04:52:53 2026 GMT Not After : Oct 16 04:52:53 2026 GMT Subject: CN=6ac87325-cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:48:cf:27:8f:36:d1:d1:b9:c7:fc:03:a3:f2: ed:ef:fa:89:b7:68:3e:27:66:1e:c9:8a:b5:40:54: 9a:96:07:58:47:48:0e:e8:05:6b:a3:37:5c:d1:d3: 74:b6:43:fe:2c:74:40:28:70:57:2c:a7:81:85:83: 36:f0:dc:7d:83:63:5f:58:ad:e8:c9:d5:c8:36:48: 9f:e6:c8:e2:8d:cb:31:35:f9:33:11:b8:c3:0e:98: 4a:0b:af:71:c0:f6:38:ba:fe:bf:99:31:21:80:2d: ae:56:15:16:39:ad:91:02:49:3c:3a:31:b1:78:6e: 00:34:bc:31:49:1e:5c:db:0c:fe:42:aa:fb:e1:4f: c9:1c:77:79:8a:1e:2e:53:31:0c:cf:51:67:ed:11: 25:3d:09:59:97:56:f2:bf:70:4f:31:64:36:06:2b: ee:7d:21:56:f7:e3:30:59:8a:95:38:85:f8:1c:c9: 1e:12:ea:29:ac:9d:dd:87:78:59:2b:62:b6:c3:92: 91:84:e4:75:96:fd:4a:0f:f4:a0:a9:7d:40:5d:33: d9:f1:ec:3c:2c:35:03:af:5c:41:69:07:80:bf:bf: 5e:2e:6e:0d:d7:e3:8e:a0:14:29:d3:be:f0:f1:a6: e0:b2:06:a8:bb:ba:48:ec:b5:1a:6b:70:fd:3e:b4: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BB:82:A1:A2:A3:F9:F3:3D:3F:18:17:75:F9:29:60:19:A0:17:4A X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:72:0b:92:fd:87:7b:6d:19:24:42:38:29:3c:a2:2c:ce: 2a:d6:11:81:66:6d:d6:e0:4b:43:e0:9f:3c:b8:c1:55:9b:4b: cc:03:bf:3f:a0:e5:6f:a4:33:b2:1c:d1:cf:04:51:e1:2a:62: 65:e6:02:69:b8:c8:4b:32:a8:69:28:2c:82:25:c0:3d:13:99: ab:77:9a:8c:6c:9e:2e:c8:37:71:81:0b:2f:b5:cf:66:9f:f6: 0c:ab:1b:7b:50:36:66:87:9a:81:bd:8a:5c:31:62:f6:2f:aa: d8:c6:fb:26:62:af:66:f5:d0:af:e4:43:2d:fd:ff:7a:52:eb: 5d:a6:eb:2b:d6:66:08:5b:85:52:ba:89:c4:e5:69:2f:a0:07: a9:40:ca:0b:b4:e7:f3:cd:15:3e:b8:a8:e2:fa:8d:94:52:41: 48:71:d2:22:c0:92:1e:43:0f:b8:91:43:df:cd:12:73:b8:25: 14:ab:b5:05:6b:ca:61:50:7c:f9:15:76:0c:3c:42:e0:aa:11: 22:6b:68:a2:cf:67:5c:f8:2f:70:f5:df:03:11:7e:bb:30:83: 4d:75:6a:9f:fe:7e:00:ed:53:dc:79:5c:89:d4:c9:e6:51:45: 5e:91:5d:26:a7:aa:ea:83:83:be:2a:2f:73:9c:48:e5:b6:1b: 80:8d:04:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjYxMDA5MDQ1MjUzWhcNMjYxMDE2MDQ1MjUzWjAYMRYwFAYD VQQDEw02YWM4NzMyNS1jZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8kjPJ4820dG5x/wDo/Lt7/qJt2g+J2YeyYq1QFSalgdYR0gO6AVrozdc0dN0 tkP+LHRAKHBXLKeBhYM28Nx9g2NfWK3oydXINkif5sjijcsxNfkzEbjDDphKC69x wPY4uv6/mTEhgC2uVhUWOa2RAkk8OjGxeG4ANLwxSR5c2wz+Qqr74U/JHHd5ih4u UzEMz1Fn7RElPQlZl1byv3BPMWQ2BivufSFW9+MwWYqVOIX4HMkeEuoprJ3dh3hZ K2K2w5KRhOR1lv1KD/SgqX1AXTPZ8ew8LDUDr1xBaQeAv79eLm4N1+OOoBQp077w 8abgsgaou7pI7LUaa3D9PrTmcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD67gqGi o/nzPT8YF3X5KWAZoBdKMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmM9yC5L9h3ttGSRCOCk8oizOKtYRgWZt1uBLQ+CfPLjBVZtLzAO/P6Dlb6Qz shzRzwRR4SpiZeYCabjISzKoaSgsgiXAPROZq3eajGyeLsg3cYELL7XPZp/2DKsb e1A2Zoeagb2KXDFi9i+q2Mb7JmKvZvXQr+RDLf3/elLrXabrK9ZmCFuFUrqJxOVp L6AHqUDKC7Tn880VPrio4vqNlFJBSHHSIsCSHkMPuJFD380Sc7glFKu1BWvKYVB8 +RV2DDxC4KoRImtoos9nXPgvcPXfAxF+uzCDTXVqn/5+AO1T3HlcidTJ5lFFXpFd Jqeq6oODviovc5xI5bYbgI0Ezg== -----END CERTIFICATE-----Generated at Sat Oct 10 13:35:27 2026 by rpki-client