$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft File: Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft (raw, json) Hash identifier: 74XNzr8fb0wQudvpDy1nhACbiaiuaxpU770XKnYHbxc= Subject key identifier: 35:E3:0B:76:96:5D:D8:C9:2E:4B:BC:A6:D0:88:31:DF:7D:6D:92:64 Authority key identifier: 11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 Certificate issuer: /CN=A9142C40/serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft Manifest number: 26 Signing time: Mon 21 Sep 2026 08:46:26 +0000 Manifest this update: Mon 21 Sep 2026 08:46:25 +0000 Manifest next update: Mon 28 Sep 2026 08:46:25 +0000 Files and hashes: 1: Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl (hash: xJ2pfgyAwNzyLvd6i8pqXFor+y6rdOj7OPcSm0/1LgI=) 2: BA2F8ECC7F4811F1990DB98295A30FBC.roa (hash: B0ehoAhHlNvECD8MrwXSLG+T0N6cMbbYGRxsUCIbqxg=) 3: BAD07DD27F4811F1990DB98295A30FBC.roa (hash: VBBLrjGrqCd0Wu3hf1qDG8C18Uo1AAMHQGWoL8gJlLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142C40, serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Validity Not Before: Sep 21 08:46:25 2026 GMT Not After : Sep 28 08:46:25 2026 GMT Subject: CN=6ab0eee2-f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:50:ff:2a:61:49:51:b8:42:bb:ec:51:6b: 6f:3e:85:5c:fd:2f:37:ac:fb:90:2c:c4:c3:1a:60: 4b:7b:00:90:7d:6f:d2:5b:fd:b7:29:99:3d:74:06: 52:7c:ef:06:93:2f:f6:40:12:f1:65:ac:e7:1c:12: 14:af:fe:28:08:a4:10:7a:b6:e0:3d:90:3a:9e:aa: bc:aa:65:92:ae:43:98:46:bb:8d:2e:41:fa:0f:f4: 12:fd:c0:dd:08:29:b1:3f:b7:82:d5:4a:72:41:de: ea:bc:59:1f:e2:1b:b2:42:06:ea:9a:f9:dd:5c:a4: 04:f2:22:0f:2f:19:41:5e:8c:ff:41:4e:73:ac:8a: 79:31:46:8a:86:d8:22:5b:ab:ce:0e:78:d7:b3:cb: 30:d4:77:c0:78:5f:a3:0b:57:2f:e6:f4:7a:de:a5: be:6e:1c:3f:24:45:21:a1:71:24:0d:9f:2b:57:44: 3e:b0:ed:2c:d4:4f:aa:0c:dc:23:65:1c:d5:75:ff: f3:b8:81:e1:d8:3b:65:2a:94:9e:ab:0f:61:6e:e5: 46:97:52:62:77:37:6d:62:2e:6e:d0:82:15:80:f6: 5f:de:dd:09:a2:c0:b0:d7:4b:1f:53:14:67:78:f3: ab:00:aa:2a:12:77:f1:76:82:11:9b:4a:94:19:1c: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E3:0B:76:96:5D:D8:C9:2E:4B:BC:A6:D0:88:31:DF:7D:6D:92:64 X509v3 Authority Key Identifier: keyid:11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4a:c1:80:30:fe:96:38:f2:ef:af:94:06:5e:e6:51:80:37: a6:22:52:59:c9:e8:b6:a9:19:25:cb:22:f2:2b:6c:7c:63:f0: 03:de:81:de:3f:44:d4:17:56:8f:d3:d0:ab:2d:b3:5b:f5:2d: 7b:22:2e:8e:1a:a1:93:33:03:cc:64:d6:6f:a1:fd:c4:07:17: d1:9f:38:5c:30:6d:44:1c:dd:1e:e2:90:b0:e2:8b:9e:38:e0: c3:96:23:0b:01:32:7b:7e:e6:bc:ea:2e:cf:01:91:3f:7a:50: 7f:b3:ab:f8:99:50:53:9d:11:81:15:92:b6:f1:95:bf:77:f0: b4:6a:74:8b:9e:cb:ec:2c:c7:00:64:f5:24:f0:87:c6:62:9f: 6d:02:31:eb:51:30:36:f4:85:95:b9:89:4e:19:7b:08:46:32: 56:54:f5:45:33:a0:68:61:49:8d:f7:84:d7:62:ee:da:cb:35: ed:b7:a0:7a:79:cd:fc:56:17:21:a6:68:2b:17:ed:c2:5f:e9: 77:6c:c3:e3:89:c1:a4:1e:e6:8c:63:78:40:a4:69:ba:c9:4c: e5:6c:8c:ef:c4:26:ad:d6:3c:ac:fc:77:30:df:70:dd:63:80: f5:e7:c8:8a:ce:ec:66:50:e7:49:d2:d6:b0:bf:bf:04:68:35: e4:d4:98:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkM0MDExMC8GA1UEBRMoMTFDRTRFNUEyQzA4QTc3QzQyNzlFMDFDQ0I1QkFFOEM4 QTA5QzI5MzAeFw0yNjA5MjEwODQ2MjVaFw0yNjA5MjgwODQ2MjVaMBgxFjAUBgNV BAMTDTZhYjBlZWUyLWY3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4TVD/KmFJUbhCu+xRa28+hVz9Lzes+5AsxMMaYEt7AJB9b9Jb/bcpmT10BlJ8 7waTL/ZAEvFlrOccEhSv/igIpBB6tuA9kDqeqryqZZKuQ5hGu40uQfoP9BL9wN0I KbE/t4LVSnJB3uq8WR/iG7JCBuqa+d1cpATyIg8vGUFejP9BTnOsinkxRoqG2CJb q84OeNezyzDUd8B4X6MLVy/m9Hrepb5uHD8kRSGhcSQNnytXRD6w7SzUT6oM3CNl HNV1//O4geHYO2UqlJ6rD2Fu5UaXUmJ3N21iLm7QghWA9l/e3QmiwLDXSx9TFGd4 86sAqioSd/F2ghGbSpQZHGVfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNeMLdpZd 2MkuS7ym0Igx331tkmQwHwYDVR0jBBgwFoAUEc5OWiwIp3xCeeAcy1uujIoJwpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQzQwLzcwMUNFOEZBN0Y0 NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4Q2VlQWN5MXV1aklvSndw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWM1T1dpd0lwM3hDZWVBY3kxdXVqSW9Kd3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QzQwLzcwMUNFOEZBN0Y0NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4 Q2VlQWN5MXV1aklvSndwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwSsGAMP6WOPLvr5QGXuZRgDemIlJZyei2qRklyyLyK2x8Y/AD3oHeP0TUF1aP 09CrLbNb9S17Ii6OGqGTMwPMZNZvof3EBxfRnzhcMG1EHN0e4pCw4oueOODDliML ATJ7fua86i7PAZE/elB/s6v4mVBTnRGBFZK28ZW/d/C0anSLnsvsLMcAZPUk8IfG Yp9tAjHrUTA29IWVuYlOGXsIRjJWVPVFM6BoYUmN94TXYu7ayzXtt6B6ec38Vhch pmgrF+3CX+l3bMPjicGkHuaMY3hApGm6yUzlbIzvxCat1jys/Hcw33DdY4D158iK zuxmUOdJ0tawv78EaDXk1Jjr -----END CERTIFICATE-----Generated at Tue Sep 22 13:38:49 2026 by rpki-client