$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json) Hash identifier: vlPWt6r4WdaVbZXQC1ALXIMHWj5de0oy6YjnlC9GXec= Subject key identifier: 0D:FA:F1:37:2D:0C:9A:8B:54:C1:90:9C:CE:56:C9:53:B1:C0:F5:EC Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft Manifest number: 6A Signing time: Tue 13 Oct 2026 08:45:38 +0000 Manifest this update: Tue 13 Oct 2026 08:45:37 +0000 Manifest next update: Tue 20 Oct 2026 08:45:37 +0000 Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: Y19Tsc+OTLh3ilgUqe/YxKakxiiWOfx3Wn5WXXYi4xs=) 2: E86962E47E9A11F1BA87E1CE61A30FBC.roa (hash: r053k+9BngwOs8liZ7NrLuZJcmmTygGFd/pGOUQXUUY=) 3: 870077D67E9A11F1ACB132C361A30FBC.roa (hash: j/Veg91WVOxBOE2x+CFx84+oTH0wTF8HWi+UAwsfAcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Validity Not Before: Oct 13 08:45:37 2026 GMT Not After : Oct 20 08:45:37 2026 GMT Subject: CN=6acdefb2-6246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:9b:62:cd:7d:6e:c4:19:91:67:94:42:e4: 93:c3:7b:30:37:aa:f3:50:21:cf:a9:92:cf:ff:b2: ab:42:3c:aa:52:a3:c3:c9:8a:45:59:1a:6a:cd:8b: 02:5f:9d:b2:ac:d3:08:f4:bd:aa:9e:09:f5:0f:6f: 07:be:c3:30:da:dd:f3:26:c2:36:bf:ff:75:25:98: 43:64:ce:1e:fe:41:cb:f3:a8:0e:fb:3b:79:6c:4f: a3:42:d5:25:e9:be:b9:73:5a:b9:25:41:2f:f8:61: d9:d2:16:2f:c8:37:2b:63:fa:80:a2:b8:e8:b9:ee: 35:11:82:50:4a:77:80:c8:68:28:58:6a:ed:e3:85: eb:8b:e0:98:64:64:cd:9b:41:13:1f:86:e4:f7:fa: b5:b4:02:83:81:06:e9:be:86:66:57:13:a4:fa:eb: db:fb:ce:6f:6c:d8:22:23:c5:50:d7:8a:37:2c:92: c0:e0:9c:37:ad:08:e5:e4:ea:84:02:5f:5a:36:1f: 71:5c:60:9c:26:b6:cc:2a:89:c0:94:d4:95:3b:ce: 9d:d0:86:47:fa:7e:16:ab:1e:c6:94:f7:08:35:23: a7:3b:2a:62:31:76:36:c6:86:5c:ac:5b:f4:74:f9: 2e:23:3b:89:f0:ee:90:31:7e:10:44:85:7c:d5:24: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FA:F1:37:2D:0C:9A:8B:54:C1:90:9C:CE:56:C9:53:B1:C0:F5:EC X509v3 Authority Key Identifier: keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:60:20:3b:5d:40:18:35:10:c9:dd:c4:a2:a8:dd:b2:59:0e: 98:b9:53:18:bb:be:6b:c3:a4:44:a2:c7:fd:06:a0:b5:1d:58: 9f:56:b2:a8:61:c5:ba:6b:00:04:82:82:2b:2f:fd:0b:2a:d8: 2a:46:dd:bb:d3:82:2b:e6:bc:76:a3:8d:da:54:57:61:cf:b4: 37:f9:a8:83:ce:29:aa:e4:a7:e8:a9:6a:2c:0d:dc:ce:fb:fd: 42:29:b0:a8:c7:46:77:de:02:cf:d3:f8:7b:3b:fe:ad:24:a8: c6:3f:d7:4b:b9:b3:93:2f:90:4f:2c:7e:b1:30:b1:54:66:90: 75:bd:c4:73:65:e8:20:be:21:c9:6a:72:f8:c4:5e:24:5f:eb: a1:44:3d:db:52:84:bf:5e:11:7d:48:64:56:fe:90:42:94:40: 21:ce:90:d8:c6:da:9d:c9:1f:56:3c:83:bc:c8:d6:b5:24:b0: 1c:eb:da:eb:71:eb:e2:2e:94:18:f9:57:fe:08:6f:d7:82:9c: e5:fb:e5:42:34:41:31:77:ca:8b:e5:ce:b6:3e:6f:92:93:6e: ae:dd:58:72:aa:4b:33:b0:9d:ca:b8:3b:86:2a:12:91:dd:37: 27:65:c4:67:ec:a4:74:32:13:21:10:62:30:53:fe:e0:98:4c: af:9d:75:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2 QkVGQTM0MTAeFw0yNjEwMTMwODQ1MzdaFw0yNjEwMjAwODQ1MzdaMBgxFjAUBgNV BAMTDTZhY2RlZmIyLTYyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe15tizX1uxBmRZ5RC5JPDezA3qvNQIc+pks//sqtCPKpSo8PJikVZGmrNiwJf nbKs0wj0vaqeCfUPbwe+wzDa3fMmwja//3UlmENkzh7+QcvzqA77O3lsT6NC1SXp vrlzWrklQS/4YdnSFi/INytj+oCiuOi57jURglBKd4DIaChYau3jheuL4JhkZM2b QRMfhuT3+rW0AoOBBum+hmZXE6T669v7zm9s2CIjxVDXijcsksDgnDetCOXk6oQC X1o2H3FcYJwmtswqicCU1JU7zp3Qhkf6fharHsaU9wg1I6c7KmIxdjbGhlysW/R0 +S4jO4nw7pAxfhBEhXzVJCbvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDfrxNy0M motUwZCczlbJU7HA9ewwHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRYCA7XUAYNRDJ3cSiqN2yWQ6YuVMYu75rw6REosf9BqC1HVifVrKoYcW6awAE goIrL/0LKtgqRt2704Ir5rx2o43aVFdhz7Q3+aiDzimq5KfoqWosDdzO+/1CKbCo x0Z33gLP0/h7O/6tJKjGP9dLubOTL5BPLH6xMLFUZpB1vcRzZeggviHJanL4xF4k X+uhRD3bUoS/XhF9SGRW/pBClEAhzpDYxtqdyR9WPIO8yNa1JLAc69rrceviLpQY +Vf+CG/Xgpzl++VCNEExd8qL5c62Pm+Sk26u3VhyqkszsJ3KuDuGKhKR3TcnZcRn 7KR0MhMhEGIwU/7gmEyvnXWD -----END CERTIFICATE-----Generated at Wed Oct 14 21:24:41 2026 by rpki-client