$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json) Hash identifier: PThfktOqSEBfEEKAJLaiAGnHMDScxbwiL+rOk1ejG7E= Subject key identifier: 9A:ED:E6:CF:F7:DE:8B:22:79:0E:9F:B3:FC:E5:17:E4:3F:93:C2:F6 Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft Manifest number: 071E Signing time: Tue 22 Sep 2026 21:48:34 +0000 Manifest this update: Tue 22 Sep 2026 21:48:33 +0000 Manifest next update: Tue 29 Sep 2026 21:48:33 +0000 Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: ly0XZOisQ1VoIABmA31eQf1U4PCk6+jKLecejZqISFA=) 2: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=) 3: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=) 4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Validity Not Before: Sep 22 21:48:33 2026 GMT Not After : Sep 29 21:48:33 2026 GMT Subject: CN=6ab2f7b2-4449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:c0:e5:7c:2e:66:d3:6d:86:64:2c:ff:d9: 79:2d:82:4b:e9:d2:36:ca:34:46:cb:88:56:46:3a: 16:ca:87:3c:ab:1c:73:86:9d:f6:68:f9:1c:3b:c9: ed:e0:02:8e:d2:94:ff:40:da:ce:95:f1:24:d6:20: ac:df:52:ac:0c:2d:6b:eb:29:8b:83:ba:e0:a7:41: c8:9d:cc:cc:5e:4f:ee:dd:6c:70:8f:19:ba:4a:97: 9c:c7:e5:0e:ae:b3:24:01:7f:88:96:7d:30:80:81: a7:ac:b4:3b:23:08:33:28:23:e3:46:70:7c:b1:92: 33:e3:56:3a:e2:b9:02:74:39:55:38:f4:f3:8b:58: 8f:7b:23:24:9d:ff:f7:22:01:b6:cd:91:b6:d1:21: 4f:ff:c5:7e:c0:36:9f:b6:ef:34:56:ab:2f:c6:0a: 51:58:b1:aa:69:c6:97:42:31:c4:78:b7:a1:93:0e: 00:17:da:14:c2:d4:a9:46:83:61:06:dc:26:7d:40: c1:55:bf:4f:18:28:4e:a5:43:da:65:dd:c1:29:e6: 10:0d:a1:4c:a2:c6:0f:d3:b1:1b:2a:ac:dd:cc:e7: 73:af:bb:35:4e:94:3c:08:8b:2d:85:bc:33:9e:0f: 7d:5c:24:50:a1:f8:c3:95:57:cb:ff:a9:76:c2:01: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:E6:CF:F7:DE:8B:22:79:0E:9F:B3:FC:E5:17:E4:3F:93:C2:F6 X509v3 Authority Key Identifier: keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e7:8c:af:4f:ec:d4:af:3e:87:b9:8e:2b:13:2a:91:b8:ed: 1c:95:d2:82:b1:3d:93:86:ca:39:56:3a:c6:b8:cc:06:3e:36: 6e:98:9a:98:4b:67:2a:c3:a4:36:74:31:a0:b5:62:9e:9c:0d: c8:c7:f1:12:f2:e2:26:6b:ab:1e:72:ea:78:f0:88:1b:f5:5c: 07:c1:22:29:cc:32:32:5b:b5:59:c8:2c:fb:09:29:e6:82:04: d3:6e:11:f7:e0:18:e6:ec:34:08:13:87:1f:07:3b:80:27:56: bf:72:43:f2:9f:4d:53:19:26:41:c0:c1:f1:38:64:f4:12:9e: 79:d8:ea:1e:ca:99:39:7f:d0:c2:a0:03:02:64:e6:13:25:27: 0c:d3:73:05:57:28:a3:0f:64:41:94:e3:c7:04:4d:28:a4:c3: b7:41:0f:40:69:14:e7:56:d2:a8:78:8d:fd:29:0f:44:16:cc: 0a:d4:43:f9:2f:d0:ce:bc:b4:de:cd:7b:52:a3:9d:e9:63:b2: 6a:bd:64:af:c0:9b:8e:5c:09:af:77:d2:1b:b5:e0:c1:d7:7d: e3:a9:31:1a:b4:2e:5b:ee:64:3d:78:ed:a7:68:30:53:66:e7: 95:12:d6:a3:a6:8f:3e:08:e5:e0:69:48:48:b4:08:17:f4:f4: 7d:88:4d:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1 NjNBMkNFOTQwHhcNMjYwOTIyMjE0ODMzWhcNMjYwOTI5MjE0ODMzWjAYMRYwFAYD VQQDEw02YWIyZjdiMi00NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYbA5XwuZtNthmQs/9l5LYJL6dI2yjRGy4hWRjoWyoc8qxxzhp32aPkcO8nt 4AKO0pT/QNrOlfEk1iCs31KsDC1r6ymLg7rgp0HInczMXk/u3Wxwjxm6Specx+UO rrMkAX+Iln0wgIGnrLQ7IwgzKCPjRnB8sZIz41Y64rkCdDlVOPTzi1iPeyMknf/3 IgG2zZG20SFP/8V+wDaftu80VqsvxgpRWLGqacaXQjHEeLehkw4AF9oUwtSpRoNh BtwmfUDBVb9PGChOpUPaZd3BKeYQDaFMosYP07EbKqzdzOdzr7s1TpQ8CIsthbwz ng99XCRQofjDlVfL/6l2wgHN6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrt5s/3 3osieQ6fs/zlF+Q/k8L2MB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfueMr0/s1K8+h7mOKxMqkbjtHJXSgrE9k4bKOVY6xrjMBj42bpiamEtnKsOk NnQxoLVinpwNyMfxEvLiJmurHnLqePCIG/VcB8EiKcwyMlu1Wcgs+wkp5oIE024R 9+AY5uw0CBOHHwc7gCdWv3JD8p9NUxkmQcDB8Thk9BKeedjqHsqZOX/QwqADAmTm EyUnDNNzBVcoow9kQZTjxwRNKKTDt0EPQGkU51bSqHiN/SkPRBbMCtRD+S/Qzry0 3s17UqOd6WOyar1kr8CbjlwJr3fSG7Xgwdd946kxGrQuW+5kPXjtp2gwU2bnlRLW o6aPPgjl4GlISLQIF/T0fYhNtA== -----END CERTIFICATE-----Generated at Wed Sep 23 10:22:37 2026 by rpki-client