$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft File: Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft (raw, json) Hash identifier: 6nSG3E2DB5T+YqIMCNPvCXOL8u8miQhN27lO7u5SH9s= Subject key identifier: 7D:E3:87:AE:E6:66:85:F1:4E:A1:59:B5:28:8C:7F:D6:B5:78:8A:86 Authority key identifier: 11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 Certificate issuer: /CN=A9142C40/serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft Manifest number: 27 Signing time: Wed 23 Sep 2026 08:31:54 +0000 Manifest this update: Wed 23 Sep 2026 08:31:53 +0000 Manifest next update: Wed 30 Sep 2026 08:31:53 +0000 Files and hashes: 1: Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl (hash: J4l58tHxHIoImqoF1ptIML0NBXHYUK9sWsq81Ev92W0=) 2: BA2F8ECC7F4811F1990DB98295A30FBC.roa (hash: B0ehoAhHlNvECD8MrwXSLG+T0N6cMbbYGRxsUCIbqxg=) 3: BAD07DD27F4811F1990DB98295A30FBC.roa (hash: VBBLrjGrqCd0Wu3hf1qDG8C18Uo1AAMHQGWoL8gJlLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142C40, serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Validity Not Before: Sep 23 08:31:53 2026 GMT Not After : Sep 30 08:31:53 2026 GMT Subject: CN=6ab38e7a-3f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f5:7d:c4:c2:b0:35:b3:9a:5d:c4:37:1a:51: c0:a9:ae:ee:eb:45:d6:4f:9f:9d:3c:83:98:48:34: fb:37:ca:4e:d4:59:f1:6b:19:b4:71:55:5a:2f:08: b3:60:d5:a1:e7:65:ee:9f:11:9f:fc:31:56:0f:75: 04:8e:a4:d6:be:ec:34:fd:d2:b2:bd:f1:6e:59:1c: ed:ee:4c:73:78:da:51:61:9d:60:4c:53:ad:d3:98: cc:de:3f:ba:b6:11:9b:f7:f4:56:aa:0d:88:29:ac: 75:68:d5:f3:3d:da:42:25:f9:53:22:58:b3:a6:12: a3:e5:3f:81:7d:3b:f0:9e:19:57:1f:a7:70:db:51: 0d:e3:38:80:ed:56:d8:6f:93:53:a1:95:27:f7:7e: 5b:19:0c:62:bd:50:a8:0e:3c:a3:2a:b7:3a:e7:ad: 80:73:a4:84:6a:88:bb:27:72:8b:a7:73:b3:fd:3a: 73:03:e9:67:d3:1e:0f:da:3c:a7:87:60:be:94:84: b5:43:8b:89:b0:ef:0d:91:72:c6:6b:3d:c7:c0:16: df:38:9a:15:c3:4f:41:ba:13:0e:f9:f5:30:93:1a: e3:28:3d:5f:8e:dc:e2:33:61:7b:a7:96:7b:d6:5f: f2:a8:ff:69:f8:9f:4a:1d:33:02:12:bc:88:a5:ac: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:87:AE:E6:66:85:F1:4E:A1:59:B5:28:8C:7F:D6:B5:78:8A:86 X509v3 Authority Key Identifier: keyid:11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0c:22:e7:3b:1b:5f:c3:87:d6:2a:2e:21:46:ce:62:9f:e0: d4:99:f8:1a:a4:f6:51:74:42:4d:93:46:b7:ec:8d:13:da:37: 40:b2:5d:cd:8e:84:5c:62:7f:5e:97:d2:54:f1:f0:f4:9f:db: 4b:96:1b:a2:96:47:43:38:3a:eb:1f:f9:0f:86:ca:7e:03:02: 28:29:f7:b4:9b:79:b8:f4:aa:43:a3:e3:cc:74:01:eb:0b:4e: 7b:38:19:1b:1b:dc:cd:3e:43:63:6f:e9:29:c1:5f:71:99:8b: 00:89:25:2f:60:23:b9:91:53:2b:3c:5c:7f:46:ed:b2:20:08: 41:80:85:e7:94:8f:4a:55:5e:bd:19:7f:86:69:7e:04:10:d7: 98:2e:d9:07:e0:a5:84:44:56:67:e3:47:ad:c3:4c:86:70:b3: e3:5c:f0:72:88:c9:fb:39:03:19:64:27:34:f2:5e:03:5e:87: c2:42:9d:31:86:aa:6f:5d:b3:9b:4c:f1:b7:23:cd:2c:5e:b3: f3:13:ce:a8:1f:bc:84:7a:f9:c9:13:67:27:8f:b4:4f:1e:e6: 20:67:1d:f6:06:94:96:ac:e1:37:24:30:df:b3:03:45:51:38: 71:73:f5:2d:82:64:2e:ba:73:c7:a6:6b:34:cf:16:bd:2c:4c: 9b:54:cb:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkM0MDExMC8GA1UEBRMoMTFDRTRFNUEyQzA4QTc3QzQyNzlFMDFDQ0I1QkFFOEM4 QTA5QzI5MzAeFw0yNjA5MjMwODMxNTNaFw0yNjA5MzAwODMxNTNaMBgxFjAUBgNV BAMTDTZhYjM4ZTdhLTNmNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDt9X3EwrA1s5pdxDcaUcCpru7rRdZPn508g5hINPs3yk7UWfFrGbRxVVovCLNg 1aHnZe6fEZ/8MVYPdQSOpNa+7DT90rK98W5ZHO3uTHN42lFhnWBMU63TmMzeP7q2 EZv39FaqDYgprHVo1fM92kIl+VMiWLOmEqPlP4F9O/CeGVcfp3DbUQ3jOIDtVthv k1OhlSf3flsZDGK9UKgOPKMqtzrnrYBzpIRqiLsncounc7P9OnMD6WfTHg/aPKeH YL6UhLVDi4mw7w2RcsZrPcfAFt84mhXDT0G6Ew759TCTGuMoPV+O3OIzYXunlnvW X/Ko/2n4n0odMwISvIilrKMBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfeOHruZm hfFOoVm1KIx/1rV4ioYwHwYDVR0jBBgwFoAUEc5OWiwIp3xCeeAcy1uujIoJwpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQzQwLzcwMUNFOEZBN0Y0 NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4Q2VlQWN5MXV1aklvSndw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWM1T1dpd0lwM3hDZWVBY3kxdXVqSW9Kd3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QzQwLzcwMUNFOEZBN0Y0NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4 Q2VlQWN5MXV1aklvSndwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAjDCLnOxtfw4fWKi4hRs5in+DUmfgapPZRdEJNk0a37I0T2jdAsl3NjoRcYn9e l9JU8fD0n9tLlhuilkdDODrrH/kPhsp+AwIoKfe0m3m49KpDo+PMdAHrC057OBkb G9zNPkNjb+kpwV9xmYsAiSUvYCO5kVMrPFx/Ru2yIAhBgIXnlI9KVV69GX+GaX4E ENeYLtkH4KWERFZn40etw0yGcLPjXPByiMn7OQMZZCc08l4DXofCQp0xhqpvXbOb TPG3I80sXrPzE86oH7yEevnJE2cnj7RPHuYgZx32BpSWrOE3JDDfswNFUThxc/Ut gmQuunPHpms0zxa9LEybVMtH -----END CERTIFICATE-----Generated at Thu Sep 24 19:19:06 2026 by rpki-client