$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: X1a4nxFnoV61FlWDV3aK0cRJ7E4P0Cr42z1H0L/vbDw= Subject key identifier: 02:76:C2:02:41:0C:76:89:CC:99:6A:49:CD:81:2F:B1:24:E3:B2:3B Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 01A2 Signing time: Mon 21 Sep 2026 04:11:13 +0000 Manifest this update: Mon 21 Sep 2026 04:11:13 +0000 Manifest next update: Mon 28 Sep 2026 04:11:13 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: ck/XKCE2D/q9WkehW4qs7prAJ3zBTnQ9XZp3OyJDWYw=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: r4s86w8kUPh2Ayt425Fs7qlK2WFWesJZiNchbJioMHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Sep 21 04:11:13 2026 GMT Not After : Sep 28 04:11:13 2026 GMT Subject: CN=6ab0ae61-e69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:da:93:e3:d3:c0:81:f2:45:d7:83:80:9d: c8:bc:f7:1b:21:74:1e:d6:a7:c6:e5:b5:f3:5b:80: e6:bb:60:9e:73:b9:76:19:56:f3:53:63:59:55:f8: 94:41:b9:4f:2a:df:ca:e0:ab:60:2a:3e:4c:8e:1c: 7b:c7:61:78:6c:8a:5a:f0:2d:75:ed:67:a6:26:29: e4:93:74:42:5e:86:d7:40:23:0f:b1:5d:44:88:ea: 00:09:4e:67:6a:98:5c:a3:ab:e2:22:b6:89:e1:99: 86:5f:96:95:a5:16:2d:cb:2a:ad:d0:1f:98:57:22: e5:2d:61:17:49:de:d8:87:61:d3:fa:8f:37:6d:dc: 79:5b:b8:cd:e3:84:4b:bd:f2:25:fc:7e:28:ce:45: 5e:e5:19:2f:fe:fa:47:82:9d:7a:a3:e1:93:62:b7: ad:f0:c6:7f:e9:d7:70:e4:5d:c9:52:7a:62:0e:1b: a2:fb:1e:f1:fc:e9:c1:32:1b:f6:ff:5a:50:d9:26: c0:c4:d4:83:c7:9f:88:7e:83:5e:18:c8:98:75:e4: 27:7f:bf:61:95:bc:ef:48:59:f6:ba:7c:a2:25:cb: 1a:35:5b:17:28:e7:8b:dc:f3:3c:d3:d8:c1:66:10: 3c:6d:75:25:b3:98:5c:52:dd:e4:7e:21:31:83:fc: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:76:C2:02:41:0C:76:89:CC:99:6A:49:CD:81:2F:B1:24:E3:B2:3B X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:12:4b:37:1b:23:5e:79:f3:3f:d0:7d:6b:bd:46:81:63:3c: 80:39:12:bc:7c:c7:ee:02:ce:7d:3f:d2:1a:d3:40:48:58:40: b1:c4:3e:d7:f2:09:b7:91:b7:22:6a:48:3c:04:e6:2d:76:5f: 55:34:b2:07:b2:ed:2c:9e:26:4b:89:bc:d3:23:23:ed:85:e5: c8:ad:26:f8:c7:7d:a9:ee:84:2b:f6:26:e2:06:fe:0f:2e:e1: 6f:e3:05:d0:49:4a:8d:44:8f:73:e6:88:69:ea:56:ea:da:af: 9e:67:3a:28:09:29:4d:b1:14:47:da:65:5d:4d:2b:61:76:b6: 2b:41:1d:c6:47:0a:48:5f:12:a0:cc:c2:6e:e9:25:6d:20:92: f4:af:58:7f:96:5e:3a:ab:c2:76:1e:4f:23:51:de:e4:0c:6b: 45:e6:82:39:86:c1:21:83:ae:00:20:3e:3c:1b:67:19:38:13: b9:0d:d2:96:eb:a3:c8:dc:90:6b:38:d3:e8:08:4b:fa:e2:03: 56:c3:18:ba:74:de:ab:43:f9:94:50:a1:2e:70:bc:cd:89:e3: 91:12:73:31:67:ba:d1:f2:b7:7b:77:a6:de:35:fc:f8:8a:8e: 6c:e1:fc:69:37:01:8e:26:43:31:04:24:b1:8f:da:dc:f2:fd: ef:aa:86:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjYwOTIxMDQxMTEzWhcNMjYwOTI4MDQxMTEzWjAYMRYwFAYD VQQDEw02YWIwYWU2MS1lNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5nak+PTwIHyRdeDgJ3IvPcbIXQe1qfG5bXzW4Dmu2Cec7l2GVbzU2NZVfiU QblPKt/K4KtgKj5Mjhx7x2F4bIpa8C117WemJinkk3RCXobXQCMPsV1EiOoACU5n aphco6viIraJ4ZmGX5aVpRYtyyqt0B+YVyLlLWEXSd7Yh2HT+o83bdx5W7jN44RL vfIl/H4ozkVe5Rkv/vpHgp16o+GTYret8MZ/6ddw5F3JUnpiDhui+x7x/OnBMhv2 /1pQ2SbAxNSDx5+IfoNeGMiYdeQnf79hlbzvSFn2unyiJcsaNVsXKOeL3PM809jB ZhA8bXUls5hcUt3kfiExg/yeiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJ2wgJB DHaJzJlqSc2BL7Ek47I7MB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJRJLNxsjXnnzP9B9a71GgWM8gDkSvHzH7gLOfT/SGtNASFhAscQ+1/IJt5G3 ImpIPATmLXZfVTSyB7LtLJ4mS4m80yMj7YXlyK0m+Md9qe6EK/Ym4gb+Dy7hb+MF 0ElKjUSPc+aIaepW6tqvnmc6KAkpTbEUR9plXU0rYXa2K0EdxkcKSF8SoMzCbukl bSCS9K9Yf5ZeOqvCdh5PI1He5AxrReaCOYbBIYOuACA+PBtnGTgTuQ3SluujyNyQ azjT6AhL+uIDVsMYunTeq0P5lFChLnC8zYnjkRJzMWe60fK3e3em3jX8+IqObOH8 aTcBjiZDMQQksY/a3PL976qGtA== -----END CERTIFICATE-----Generated at Mon Sep 21 11:02:47 2026 by rpki-client