$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: d6YgwVPMVlfoiRHLoHXXIxtuFo/uLp7oIl5vSR3k3dw= Subject key identifier: D1:F4:27:D1:AB:72:AD:BC:3D:FF:EF:BF:44:9B:B8:F2:71:83:F5:80 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 044D Signing time: Tue 13 Oct 2026 00:23:27 +0000 Manifest this update: Tue 13 Oct 2026 00:23:26 +0000 Manifest next update: Tue 20 Oct 2026 00:23:26 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: uRTGvb8hzOSr51ivL7My85gd5oTfdzUpiYWab2kexYc=) 2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: txemr+/aiWiylW2NMSpuJdNgO6ny7R4M/jIvXezVeHw=) 3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: 9Q3QJPd8i3UmG3NaIKu69p2zzUVJHcFuovuvNLo0Amg=) 4: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: RN/vw4EhhiGA2b5xq7QYgZp5qwRJ27nDeO7+pr9fwHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 00:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Oct 13 00:23:26 2026 GMT Not After : Oct 20 00:23:26 2026 GMT Subject: CN=6acd79fe-3c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:4c:82:1d:6d:99:7c:9e:6f:27:9f:1f:dd: eb:91:9e:d0:c0:63:ed:6c:ca:33:1f:8e:b1:51:1b: dc:97:9b:82:a9:5f:25:98:be:d1:15:d7:9f:e6:b8: dc:2f:bb:07:c0:31:63:c0:aa:20:24:d2:8a:56:a4: 29:7b:b8:d7:4e:86:65:0e:39:ab:b0:df:ce:7c:8c: c0:94:a3:88:de:24:5a:d5:0d:97:d4:73:0b:97:c0: 37:66:d0:b2:0f:07:ab:f8:a7:97:91:b3:c2:d8:35: 82:00:fa:5b:6d:72:23:28:55:bf:56:31:53:0e:1e: de:e7:96:c0:52:d3:2a:86:64:5d:83:e2:70:09:7e: 84:de:20:89:8d:0d:c0:47:82:e4:53:4a:44:f7:72: 3b:d0:ba:49:97:24:3f:10:d6:01:67:cd:38:d6:09: b6:10:f8:ef:d1:ca:bd:7a:6d:a5:6d:fd:2c:7d:30: c7:ba:f2:70:64:07:52:d4:ae:a3:68:cb:93:f6:70: 9e:60:14:cd:94:eb:1f:3c:17:95:34:a9:9c:9e:f8: 5a:06:3b:20:89:80:1d:24:fe:29:e6:11:81:8c:fa: e6:d0:57:74:70:cd:7e:46:cb:57:24:0f:d8:df:45: 5b:f8:23:2f:91:e0:f7:fc:e1:f2:b3:69:d7:77:4f: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F4:27:D1:AB:72:AD:BC:3D:FF:EF:BF:44:9B:B8:F2:71:83:F5:80 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:df:07:7b:a2:b6:95:c0:be:6b:7d:e6:bf:0f:5c:b6:ea:e9: 5b:45:d2:7b:51:d2:e2:bb:2a:41:35:2b:e9:b1:7c:15:2f:86: 1d:c9:a3:81:c7:47:d7:62:d0:b2:86:f7:8a:3a:0d:6a:67:f1: f4:08:18:37:a7:bb:41:6c:72:a1:78:e6:b4:61:4e:15:f4:3a: 5d:d9:20:62:c1:a3:40:ba:17:91:52:59:6d:d0:9f:61:62:48: 92:88:15:d0:a4:5a:e5:ae:74:c6:bb:78:39:75:45:4b:b7:34: 54:12:56:2e:cf:f1:fc:47:1e:7f:0d:06:37:36:fa:47:d8:94: 0b:e1:65:b2:a1:97:ba:b6:28:2d:39:3f:b2:ca:6c:de:f3:22: 4b:2c:d2:ce:62:a7:8c:64:b9:09:ad:a2:07:c3:ed:54:bf:28: 9b:f6:56:04:a5:4a:46:a7:37:dc:a7:6b:87:59:63:60:54:0f: e1:33:6f:5c:f4:32:62:fa:a1:60:49:c2:0c:cf:27:c1:13:ce: fc:20:82:50:d9:0f:4d:c1:69:b6:ce:7b:ad:35:b5:82:54:29: 93:0e:40:99:0a:f8:7d:a2:89:cf:44:9d:28:86:1e:7a:49:33: c6:8e:dd:eb:e1:aa:25:b5:cb:42:b8:3d:30:b8:f4:53:d6:39: fd:9b:8b:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYxMDEzMDAyMzI2WhcNMjYxMDIwMDAyMzI2WjAYMRYwFAYD VQQDEw02YWNkNzlmZS0zYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG9Mgh1tmXyebyefH93rkZ7QwGPtbMozH46xURvcl5uCqV8lmL7RFdef5rjc L7sHwDFjwKogJNKKVqQpe7jXToZlDjmrsN/OfIzAlKOI3iRa1Q2X1HMLl8A3ZtCy Dwer+KeXkbPC2DWCAPpbbXIjKFW/VjFTDh7e55bAUtMqhmRdg+JwCX6E3iCJjQ3A R4LkU0pE93I70LpJlyQ/ENYBZ8041gm2EPjv0cq9em2lbf0sfTDHuvJwZAdS1K6j aMuT9nCeYBTNlOsfPBeVNKmcnvhaBjsgiYAdJP4p5hGBjPrm0Fd0cM1+RstXJA/Y 30Vb+CMvkeD3/OHys2nXd0/IuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNH0J9Gr cq28Pf/vv0SbuPJxg/WAMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjN8He6K2lcC+a33mvw9cturpW0XSe1HS4rsqQTUr6bF8FS+GHcmjgcdH12LQ sob3ijoNamfx9AgYN6e7QWxyoXjmtGFOFfQ6XdkgYsGjQLoXkVJZbdCfYWJIkogV 0KRa5a50xrt4OXVFS7c0VBJWLs/x/Ecefw0GNzb6R9iUC+FlsqGXurYoLTk/ssps 3vMiSyzSzmKnjGS5Ca2iB8PtVL8om/ZWBKVKRqc33Kdrh1ljYFQP4TNvXPQyYvqh YEnCDM8nwRPO/CCCUNkPTcFpts57rTW1glQpkw5AmQr4faKJz0SdKIYeekkzxo7d 6+GqJbXLQrg9MLj0U9Y5/ZuLhQ== -----END CERTIFICATE-----Generated at Wed Oct 14 04:14:38 2026 by rpki-client