$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft File: 320AK7yrolDSrmtEVOPL_WfSx-o.mft (raw, json) Hash identifier: C+28rubJ2Ht8L6Lcon2C2p0+YlSM3fpISxayUu54pF0= Subject key identifier: EA:8A:13:7F:92:E5:18:C9:54:98:2D:27:ED:1C:65:31:34:77:79:9E Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Certificate serial: 0AA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft Manifest number: 0A90 Signing time: Mon 12 Oct 2026 19:42:38 +0000 Manifest this update: Mon 12 Oct 2026 19:42:38 +0000 Manifest next update: Mon 19 Oct 2026 19:42:38 +0000 Files and hashes: 1: 320AK7yrolDSrmtEVOPL_WfSx-o.crl (hash: qT9GDOHQ3xI/IesLhqrvORiCfWAelIWsRsmn8aK41+M=) 2: 7EF7457CACCD11F19F8398F66811F970.roa (hash: 05+3hZWGor2rz0Kju646oiaVDVscsIH6UNvSgbt/8ik=) 3: 7DE46976ACCD11F19F8398F66811F970.roa (hash: XT10HnbwUVbbFgnv8FA0dmR71IX7J1lqbdxu9hRhOx8=) 4: DB7F68169BC411F1A594B11D5711F970.roa (hash: MzOblxL2EO6eoY/hF+w+6TErc2kgqiCc+Od6pRCAPt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Validity Not Before: Oct 12 19:42:38 2026 GMT Not After : Oct 19 19:42:38 2026 GMT Subject: CN=6acd382e-22a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:bb:8e:a0:b4:15:96:b2:63:c2:e2:04:ca: 89:69:48:43:9a:8b:57:6b:7c:10:06:ad:63:03:3b: 0b:0e:c2:79:e8:ce:7e:3a:c9:1c:ba:48:f6:b1:0a: 61:9c:6b:65:12:c8:cc:c6:94:03:a0:6b:f5:94:ff: 63:bb:11:80:0d:44:a7:c2:fb:ce:61:49:f6:0a:6a: 50:87:ae:4e:70:f5:06:d8:ac:db:01:6e:63:e6:b7: 69:a0:fb:ff:59:0b:02:38:39:11:9e:76:df:bc:77: ce:5c:9d:cd:77:91:db:8c:4f:67:5c:50:a5:8d:49: 3a:0c:30:63:34:8a:1d:c9:2e:3d:27:86:e2:c0:87: 17:91:8f:7c:66:bb:3b:89:45:6f:61:44:86:14:78: 33:9f:6b:df:bc:5c:b1:8b:b1:46:ba:67:c7:6e:f6: 55:8b:36:c4:67:1e:81:88:bc:1e:95:55:3f:a9:94: 80:30:69:b2:62:23:b4:53:50:63:1b:9a:4d:da:47: 42:e7:c6:c3:09:c8:18:44:ce:6c:9f:1b:46:66:5d: 06:ee:a4:7f:b0:c3:c9:ad:ec:ea:ae:5f:77:ac:29: b2:2c:90:f2:3e:47:0f:69:3e:22:b8:90:0d:83:aa: 80:6b:f4:d2:f6:2d:00:39:34:93:87:60:84:a2:41: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:13:7F:92:E5:18:C9:54:98:2D:27:ED:1C:65:31:34:77:79:9E X509v3 Authority Key Identifier: keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:ca:78:cf:e5:40:2b:51:aa:fd:ad:df:99:4e:d3:07:9c: 4b:f0:c5:21:65:55:7e:86:e5:74:e2:23:3b:4a:82:b1:25:67: 76:0b:c4:7b:91:cf:c0:a5:66:56:df:80:4c:80:db:77:e3:b6: 4f:80:9d:d9:57:99:a4:4a:91:34:27:e3:a1:b7:21:13:3b:d3: 62:d6:95:29:c5:ad:b3:7f:d8:65:fa:87:27:60:ad:95:58:39: 01:d4:4c:96:cc:d0:90:ae:38:82:ab:79:77:cf:5a:69:9c:d6: 57:46:56:87:c4:a1:b8:5c:24:87:23:64:65:fb:e8:14:3b:77: cd:92:84:13:76:36:b2:ea:d0:e9:48:eb:bb:5c:ae:58:f9:3b: d9:e6:dc:54:79:1e:09:ec:5a:ba:61:39:aa:c6:74:67:01:26: b6:40:3c:44:b2:90:42:70:f8:8e:c6:ca:ed:f6:2c:20:05:67: 7f:08:ed:a5:a3:0a:cf:6e:67:e9:69:73:0b:91:93:e8:a6:3a: c2:2a:76:ee:c0:c9:32:53:17:46:f8:4a:c5:c4:25:48:b9:91: 79:c0:16:92:78:12:ae:f4:d7:3a:0d:c9:f3:29:4d:1b:26:25: aa:82:b5:3f:70:2e:ec:9a:c1:90:13:ac:5b:03:5c:d0:85:cf: 98:24:4b:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE NjdEMkM3RUEwHhcNMjYxMDEyMTk0MjM4WhcNMjYxMDE5MTk0MjM4WjAYMRYwFAYD VQQDEw02YWNkMzgyZS0yMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTi7jqC0FZayY8LiBMqJaUhDmotXa3wQBq1jAzsLDsJ56M5+Oskcukj2sQph nGtlEsjMxpQDoGv1lP9juxGADUSnwvvOYUn2CmpQh65OcPUG2KzbAW5j5rdpoPv/ WQsCODkRnnbfvHfOXJ3Nd5HbjE9nXFCljUk6DDBjNIodyS49J4biwIcXkY98Zrs7 iUVvYUSGFHgzn2vfvFyxi7FGumfHbvZVizbEZx6BiLwelVU/qZSAMGmyYiO0U1Bj G5pN2kdC58bDCcgYRM5snxtGZl0G7qR/sMPJrezqrl93rCmyLJDyPkcPaT4iuJAN g6qAa/TS9i0AOTSTh2CEokHYBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqKE3+S 5RjJVJgtJ+0cZTE0d3meMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RFMi9EMjE4REQ1MjhFOTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9s RFNybXRFVk9QTF9XZlN4LW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaQfKeM/lQCtRqv2t35lO0wecS/DFIWVVfobldOIjO0qCsSVndgvEe5HPwKVm Vt+ATIDbd+O2T4Cd2VeZpEqRNCfjobchEzvTYtaVKcWts3/YZfqHJ2CtlVg5AdRM lszQkK44gqt5d89aaZzWV0ZWh8ShuFwkhyNkZfvoFDt3zZKEE3Y2surQ6Ujru1yu WPk72ebcVHkeCexaumE5qsZ0ZwEmtkA8RLKQQnD4jsbK7fYsIAVnfwjtpaMKz25n 6WlzC5GT6KY6wip27sDJMlMXRvhKxcQlSLmRecAWkngSrvTXOg3J8ylNGyYlqoK1 P3Au7JrBkBOsWwNc0IXPmCRLkA== -----END CERTIFICATE-----Generated at Tue Oct 13 16:10:51 2026 by rpki-client